{"report_id":"e2fd1f5e-ec5f-40c0-918f-151515210f14","version":6,"status":"done","tags":[],"date":"2025-10-20T06:25:20Z","url":{"schema":"http","addr":"xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"172.67.200.188","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"title":"SONE-340 | [UNCENSORED] My classmate missed the last train and stayed over at my place. - xhdfriday"},"submit":{"url":{"schema":"http","addr":"xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"172.67.200.188","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-24T06:25:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":13}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"relishsubsequentlytank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"relishsubsequentlytank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"xhdfriday.sbs","ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-16","domain_rank":0,"first_seen":"2025-10-20T06:25:23.226482Z","last_seen":"2025-10-20T06:25:23.226482Z","alert_count":59,"request_count":30,"received_data":1044442,"sent_data":20727,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Draftpress HFCM","description":"Header Footer Code Manager by Draftpress is a easy interface to add snippets to the header or footer or above or below the content of your page.","website":"https://draftpress.com/products/header-footer-code-manager-pro/","common_platform_enumeration":"","icon":"Draftpress.png","categories":["WordPress plugins"]},{"name":"Yoast SEO:25.8","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]}]},{"fqdn":"stbhg.click","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-13","domain_rank":376060,"first_seen":"2024-12-13T22:04:19.166153Z","last_seen":"2025-10-13T15:55:58.427845Z","alert_count":0,"request_count":15,"received_data":1400772,"sent_data":6895,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-19T22:12:35.4735Z","alert_count":0,"request_count":1,"received_data":22234,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn001.imggle.net","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-17","domain_rank":1959944,"first_seen":"2024-01-21T13:18:08Z","last_seen":"2025-10-14T02:45:13.827049Z","alert_count":0,"request_count":1,"received_data":79251,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2025-10-15T05:47:09.33032Z","alert_count":3,"request_count":1,"received_data":85963,"sent_data":411,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pixoraa.cc","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-16","domain_rank":0,"first_seen":"2025-09-24T05:22:54.006271Z","last_seen":"2025-10-17T17:16:48.022958Z","alert_count":0,"request_count":2,"received_data":794,"sent_data":868,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"t0.gstatic.com","ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-06T20:22:05Z","last_seen":"2025-10-14T08:33:42.803666Z","alert_count":0,"request_count":1,"received_data":1022,"sent_data":535,"comment":"","tags":null,"fingerprints":null},{"fqdn":"memojav.com","ip":{"addr":"207.148.118.22","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"domain_registered":"2019-08-28","domain_rank":218179,"first_seen":"2020-11-04T17:09:25Z","last_seen":"2025-10-14T04:43:28.989953Z","alert_count":0,"request_count":1,"received_data":260683,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.29.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pics.dmm.co.jp","ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2006-07-10","domain_rank":409090,"first_seen":"2012-08-01T07:09:25Z","last_seen":"2025-10-13T06:53:20.27101Z","alert_count":0,"request_count":12,"received_data":1000338,"sent_data":5553,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"professionaltrafficmonitor.com","ip":{"addr":"3.125.32.186","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-01-23","domain_rank":16376,"first_seen":"2025-01-25T08:56:07.448138Z","last_seen":"2025-10-19T22:41:49.621416Z","alert_count":0,"request_count":1,"received_data":422,"sent_data":449,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-19T22:12:30.612025Z","alert_count":0,"request_count":4,"received_data":163852,"sent_data":2192,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s2.googleusercontent.com","ip":{"addr":"142.250.74.1","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":185201,"first_seen":"2012-07-08T11:51:25Z","last_seen":"2025-10-19T22:23:37.150504Z","alert_count":0,"request_count":2,"received_data":2454,"sent_data":976,"comment":"","tags":null,"fingerprints":null},{"fqdn":"p16-tiktok-ads-sg.tiktokcdn.com","ip":{"addr":"23.36.77.89","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2017-09-20","domain_rank":274094,"first_seen":"2024-10-30T11:51:31Z","last_seen":"2025-10-14T07:49:23.82588Z","alert_count":0,"request_count":2,"received_data":1901893,"sent_data":986,"comment":"","tags":null,"fingerprints":null},{"fqdn":"relishsubsequentlytank.com","ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2025-02-06","domain_rank":5445233,"first_seen":"2025-03-15T18:14:46.825163Z","last_seen":"2025-10-18T22:05:56.15637Z","alert_count":2,"request_count":1,"received_data":107419,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"wayfarerorthodox.com","ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-08-08T11:06:50.216151Z","last_seen":"2025-10-20T04:47:08.717122Z","alert_count":4,"request_count":2,"received_data":7945,"sent_data":950,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"image.tmdb.org","ip":{"addr":"138.199.37.225","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"2009-09-15","domain_rank":53077,"first_seen":"2021-01-09T06:43:03Z","last_seen":"2025-10-20T05:50:40.21321Z","alert_count":0,"request_count":2,"received_data":1264,"sent_data":858,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"t2.gstatic.com","ip":{"addr":"142.250.74.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-07T00:09:56Z","last_seen":"2025-10-14T09:41:29.101504Z","alert_count":0,"request_count":1,"received_data":1022,"sent_data":537,"comment":"","tags":null,"fingerprints":null},{"fqdn":"flushpersist.com","ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2025-10-15T01:24:42.348327Z","alert_count":2,"request_count":1,"received_data":530,"sent_data":764,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"weirdopt.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":37519,"first_seen":"2025-07-08T12:55:47.272157Z","last_seen":"2025-10-15T11:24:47.291649Z","alert_count":2,"request_count":1,"received_data":377,"sent_data":416,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"old.imb.hair","ip":{"addr":"104.21.25.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-26","domain_rank":0,"first_seen":"2025-07-11T23:08:07.969536Z","last_seen":"2025-10-13T18:57:46.227453Z","alert_count":0,"request_count":2,"received_data":41041,"sent_data":920,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-19T22:12:19.186805Z","alert_count":0,"request_count":3,"received_data":1275349,"sent_data":1298,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"imb.hair","ip":{"addr":"104.21.25.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-26","domain_rank":663676,"first_seen":"2025-07-11T23:08:07.958776Z","last_seen":"2025-10-13T18:57:46.287941Z","alert_count":0,"request_count":1,"received_data":59464,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-05-18T11:39:31.322165Z","times_seen":841311,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/isrepeater.js?ver=2.5.5","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ceeb6d8b500945a6aaea27f52f6f5e6","sha1":"4647a4865cb5ba5dce1057b3765044ec9559eec6","sha256":"477f24a8aa73997ef9d469763c99d51a9a0e94826db0525b45542d9d7219e214","sha512":"08bcacdd9fd2e1f2c30b50fd1f9d6ab57ca431a61c3d152e4b700537f264459ec76b31bba225752f00cd434d73f6f567aaadbaceb5865136eb6c9f551435758e","ssdeep":"192:OHLiBsVoJ1jrQN+U+PZeX8+eo3MmYXRHLHoZq3Ho7:NsO/jrQNjvleo3HCW6I7","tlshash":"8722a9997691b5229267b830117f010fb23b98d6f94d5804e2ce99e6bfbd80c4227f9d","size":10380,"data":"","first_seen":"2023-03-07T01:03:55Z","last_seen":"2026-05-18T09:10:02.944524Z","times_seen":1924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-includes/js/comment-reply.min.js?ver=6.8.3","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4a49df71f8b98c1d9f9d8fce74d89e8","sha1":"b95fcda0c8c26305ad94e80343d0cfca8a048a10","sha256":"9d4687a19cab8f7442a3bda40c45be4d10e42488e091ddd706c3caed83c3ee1f","sha512":"42cd5f854779886f24c43ed14617380110c946d1b430b454060c3b391de6fbae6d0ed8ab7cdd7cfdc9726b2d6142a4e01c4448e36088dfcee7fdd00b60909f89","ssdeep":"","tlshash":"5051a7d437c95d762a83b3395efe930271712709a50805608826c86931bcfea63b67fe","size":3026,"data":"","first_seen":"2024-11-13T06:33:24.856382Z","last_seen":"2026-05-18T11:43:58.686391Z","times_seen":74410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/e/kjkmndw1ruyf","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b26d6f86c4345f37c33c9b3b6dc9338b","sha1":"b92b66a7dadcc3acefe2c4cbd34f36c525ef4a24","sha256":"5b3474edb6863ae89e1cfe842fb92e8ffdb6d4084a837040d36d497c4a864216","sha512":"4a761629227e8640b5401c3d20d4c21820fde23b975ac94da139912a7a4ef592f86ae1117eaa52a510b7155e9ac3c1b8413c75d429e95ff473b0b9333946382e","ssdeep":"","tlshash":"1dc02b8c720a0cb041fb27408b3fbb00b002321495d56931494923048d30e03db54c14","size":153,"data":"","first_seen":"2023-05-25T01:59:38Z","last_seen":"2026-05-06T23:51:55.431225Z","times_seen":610,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/player/jw8/jwplayer.core.controls.js?v=42","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc91b5efc8f4bb2482c2d7d5d8d9b691","sha1":"5db922c4c6caf3a7d22f57a21670281d5c31994b","sha256":"f061c139ad68d7ed1360ab6a2c8842466d2913582468c48eb2d1ee2a651fb495","sha512":"f1e175f4658e4cb1c603875c81f3b96caaab74346c78d9b320e564f0a09a8518b11123509351bfa5229ac9d867d56c6afc1118ce7c368ff1ce729de877c7d694","ssdeep":"3072:+jY7nFuuslX/Na3u6NxIeLSJhy1yiSS64pOknRBb9Wsr9BbrC3YLrmYRJ:2Yx5U/Na3JpLSJhyJOaRBRtBHzLrmYRJ","tlshash":"e9640932214252359aea82da66514604b3398085f516cfacff2ceddd4c6e9c731fabb4","size":331116,"data":"","first_seen":"2024-12-01T14:07:01.698179Z","last_seen":"2026-05-17T22:16:11.716055Z","times_seen":678,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/owlcarousel.js?ver=2.5.5","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"56e770f95a9cb2ce06d6b044f93c24fa","sha1":"003bdb37bbd8cfd296bcffff38ce601b6b7df8dd","sha256":"ecc9ea285df7f95f79c647d1cfaca566239d68fcb183aa274fda98f33fce813e","sha512":"7e36ac1b0cbd3835d431fca68efd11fe05c7cb52a654cb9ef4bd3adb83f465ff890116c09b9ac1935308e0a1f94dd5d1ca12813a8af9ba67f4d39327e1053800","ssdeep":"384:7Ket0QK/Q52Cgwm0PQtiRX55DzNvYUyzLsxVxRbH:dK/Q4ptuXNQUyzLI5","tlshash":"12b2a54bb2202385469372b9419b110d713bfb78fc42855c70b6dadfaa4b84e9277b3d","size":23938,"data":"","first_seen":"2023-03-07T01:03:55Z","last_seen":"2026-05-18T02:42:17.710837Z","times_seen":1834,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85386,"data":"","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/e/kjkmndw1ruyf","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6208fb5aac4c01380964d44e8256af64","sha1":"8dcc2097d8d66d3bd8dc17f7caab1d68c0d24ab3","sha256":"5e60febeb4a8af117aa83c49f3c41e4f880a6aafcb411427738a3e50350e7ff1","sha512":"afe278487ce5f3577c4895cb3f999d8a9bdcef15d4d89049d04a51df6ae1f08929132b5e60eb9e054007f8e989dfc672a4c382326b2dbaedd0aee1ab1950c57c","ssdeep":"192:5Dpmm0A000F03gY78pWKMZHwpyE65kUh4XB47UO9Jrzo4gE0n11CW01XUqEXS1N+:5Dpr0A000F0wYdZHwgqnR5yrzo66xSPu","tlshash":"da221c3489904838c19917e8b8bba354a23b2d21f914f58dfd7fa55817786d3b8f3a81","size":9934,"data":"","first_seen":"2025-10-20T06:25:38.81415Z","last_seen":"2025-10-20T06:25:38.81415Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/e/kjkmndw1ruyf","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb3a2f747e90c553769c2155d20f3ebf","sha1":"d10496bb17cb31e6c493f1429655fd723dfa3cfb","sha256":"79ac617398535f8ab3b7a4ec458a94ef2156acd847ff57111afef826d82d3742","sha512":"a1bc1a88e5a27e3270f872097bde105a03e1f7c2281f4067f2c81dee984a6be21d5e207d3237314315b7153d39c9805701b3c0486ac74137ff83230fff68540d","ssdeep":"","tlshash":"8cc09b8c251e5cb195f72740db7fb604b4423214d4d56a314d5d63845d30f17db55954","size":153,"data":"","first_seen":"2025-05-19T10:11:33.51975Z","last_seen":"2026-05-06T23:51:55.431754Z","times_seen":373,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/player/jw8/vast.js?v=32","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b3eb53abc624a51f5e226d08758ddf3","sha1":"6cca061ec7c41313ec2027eaaca76fa9dfad750b","sha256":"73788e3233d5113578082f78869724925d3e4dd2c9d02fdc0bf84d6aed3a768e","sha512":"c6c7bbc31213d98134d98087ad912f1244b2dc7c7914247baac80d534663ab75135c004bf5473044db9e082302477b9d812b0a0db4c5f21b3e27508c26c265c5","ssdeep":"1536:twVnle2Qmbe005pkZ/gbxRYpYItN6X6ud7srzIjpitB39BsLIYOONMQHMkBxLNwO:tEnPRIN1D2zXkIYdN7Hnf","tlshash":"acb308872399d52247e484e960344212b335060f780a83acf67dfdef1d5ea4b76bab74","size":112211,"data":"","first_seen":"2025-04-01T21:32:19.700252Z","last_seen":"2026-05-17T22:16:11.734101Z","times_seen":569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/pwsscrollbar.js?ver=2.5.5","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"971c9dba00bafafbbefeec7e58dfc432","sha1":"ea7fbe2e8c2725baccf3aa09fc52244708218620","sha256":"8d66e5d985349af924510cf978564a7d84164741de08f173d1fa61f0b1c2960c","sha512":"9705ffd9da0e788542d1df3542789ed38dbf2ca3eb99a609b1271dc24c2d81b4c748591f12a3114771017be0d0c8662771231b58da93ee2c775fb8b7196914e6","ssdeep":"768:J8WQosXc7u8/fP2WRHBDQXBJhoJWR/e4NKMTul/x31JuouLdL4jS:J8ZXc7dfPtHBDaoktTsx31Juo4z","tlshash":"db1329f4370534f712eb6f5e442b020923365896670788b1707d9cb82fa1de612a7f6e","size":45008,"data":"","first_seen":"2023-03-07T01:03:54Z","last_seen":"2026-05-18T02:42:17.252426Z","times_seen":1639,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"96d9e0712bac6c9b5cf148d0a9f29cd8","sha1":"024f020a0ae4b5257d7cd8f18e07f31ab6a1265b","sha256":"1dfc875dd63facb89b456b1ba2334b012e9b79fa5d98c0da6c9f1312bd2b8f00","sha512":"2afda33d719f633f14f1c330cf5e312278721b36fc3e2698af5675aa7c948120502eb27e9a56db20535f0dc87272c401f81ce1d6aa57ea3579c2f2f34ac6015f","ssdeep":"","tlshash":"6b01103e13411dbd4bd0a1c9ee52b11395e443a6e251058dd59ce75c00bdf36f128a36","size":726,"data":"","first_seen":"2025-10-20T06:25:38.818349Z","last_seen":"2025-10-30T02:38:15.652351Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/js/jquery.cookie.js","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae0c2c5d8f01f7d35bb698bb618a62f7","sha1":"63556a22ddea1c5f23a5cf7d0b6d35c7aab54e20","sha256":"75aef2e95ea7f3a70999396fba0c2ab866f4ff06313cf1b07780d800a5fc1ebc","sha512":"eac94ca9d884692af8bdf12aa6e902a3be4eed0772ad8f2932ac1c3328b83a7351cdf743a409bbc0a3cd385956c08d3203d51c572bb1680489e37330fe27a2bb","ssdeep":"96:L4BZxb64Ng7V8cNwpGylRCsKZcj1JXulL6M/aGByLskPSP4lBCClf1wgCyC:LQnb6eg7DgCsk8fgZJkPSPa+gCyC","tlshash":"2e91fd293a0d231d149353f57aee10c8a930d632216ad46c744cb6b06f00c63ddfbbea","size":4331,"data":"","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-05-18T10:36:57.790676Z","times_seen":4450,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/e/kjkmndw1ruyf","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"17b8318ac8c4c66d7d9e8a82d605b771","sha1":"da94fcdae646dd50749accd7c1a5cbd0abf52540","sha256":"6abe6165dbe7eeca7d2519aedef11469c5233908fa665041ed5e0d4f531d57c5","sha512":"12179712d518406e51bd53cd738745032cc3fd5cdcabc35c1287405decb1714835278f1c0ef6c13d5f74eec340075a68e86b85cafe437836b6d3d2911ef68c20","ssdeep":"","tlshash":"d8f09ea93ccd8035e335126762afa15ab45a69382c4abc16c44c48853a95dba08af54c","size":506,"data":"","first_seen":"2025-06-22T04:35:10.483003Z","last_seen":"2026-05-06T23:51:55.432284Z","times_seen":241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/js/localstorage-slim.js","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba6facacb00551830393d637195804cf","sha1":"77d2d2802ee44767b33a2d679945cc3efa3619cc","sha256":"41bb37c8133d8e5c128820cfbe03bcbf63ce256bcbd60a1a76143472d8668e38","sha512":"90aa07250eb414ec22765ab6922f593ed3186faecc02008f0331c3e3807cace76861e01028142015308341e955f151b609d08b7d354ff2d27e0ff04ebfde81f9","ssdeep":"","tlshash":"ea41118275e1d9904be004e728b0c002e638992e705d62d0f7b7dd827c9909bcfb57fa","size":2064,"data":"","first_seen":"2023-03-07T15:52:27Z","last_seen":"2026-05-17T22:16:11.830278Z","times_seen":1509,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"20ae7d9ba955f0dfa6227540a1f69105","sha1":"368a59232a5a7a77a33abf431b2e7cb50e601ac0","sha256":"692bd2a41f29ff270089c83ab61a9397b10cb4a175ca676c4b2f519649cd8571","sha512":"fc6037e8406b428c13e2ee36a3587e8922e8710ac2d2bba6a0d76f3bfa559df411edb7aebbc7c8119f188b12ee47b6420c134eadafa35c869a8f9348c6bd958a","ssdeep":"","tlshash":"77d0227c4c5e2e67ea83d4ec0038e24382ce4bb0180a4b246a14cc690bda80687cf9c4","size":199,"data":"","first_seen":"2025-10-20T06:25:38.821192Z","last_seen":"2025-10-20T06:25:38.821192Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a5cbaf72ecabff49d12ac7fe346dc75","sha1":"33ec845f07bb97bb5eca31aeb64d1c3bda4af136","sha256":"5b5cda759fde40d77bceabab02c1826b496c0d6db0ce571addd5cc5136821f79","sha512":"b6d002758ab0c4f6928250cef2c9fd769bcd670c026ee3103509b0fd2aaa0cc5d36d2d06c0e057e956b76b854c3f5e8a8c1099e1a4312d6dcb520ac2de1a9877","ssdeep":"","tlshash":"ebc02b8c25035cb001db17400b1fb500b0023111e4f01c31090233045520c97b765c10","size":139,"data":"","first_seen":"2025-09-08T12:26:50.766468Z","last_seen":"2026-03-29T19:50:06.983804Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"04310cf79011cebea3fb86da6f8899ee","sha1":"520edb1c3b8cf22b346c3b8b120e4b1a163771fd","sha256":"e8da77a33828f2b4837adc6f2cf91a7ed9c3240f1679a195c51d19ac2ebda4a1","sha512":"912ca1f36ac191aa7d1d953ead1e503fbf5ab37b3ea71efc1734fb89bc33d20a1c21d8586435b3d7d6ed160b42d45a2635e359dd75a7fc9fbcbb4042a6de82dd","ssdeep":"","tlshash":"c3d02b8c611cb1595bef2254d87b8700d616b4135204198140dd2a705d54230431659c","size":251,"data":"","first_seen":"2023-03-07T01:03:08Z","last_seen":"2026-05-18T02:42:17.894245Z","times_seen":2165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-E2BG6CPV2J","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9dc3b18b5b8a615d69697eb36726de75","sha1":"e76498fbaffa1a9a44abe3b9fbeb6a1dbb017422","sha256":"35205953c89d9b079d167d86cf45c072f626672d587fc0acf45ab0450ad6e84c","sha512":"19e9caa1b4a00e33dfd3c479891a6be2f3706cf62cbae763e637d13b03f994c3c86c26c292e8725dcd4fc408481f01426f12c654fd8a1411b423622696071f76","ssdeep":"6144:qB9c6tQSyOe+hy4nkEt7F8KWjxSqpRjeWvkAX6HJLGy1tyyluxwuuSyv:kC6rRRhy4nkEt7F0EqPeKRy1bv","tlshash":"d2941a8e73c674269396f078503f018ba57b29a2f45cc896f189cce42d74a9a4277f7c","size":426450,"data":"","first_seen":"2025-10-20T06:25:38.754121Z","last_seen":"2025-10-20T06:25:38.754121Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/idtabs.js?ver=2.5.5","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3665ff6f8d2bf5a2af3de5d6e333a7c0","sha1":"db9f6a2b874f7c24a5827f0f1d679ed3c7d7b7e5","sha256":"2eb9d605c096771e0669e09ac60207d6171bd255b20416d07a4f14aca62a5df6","sha512":"eecce0b86b15eb438071ce1db21f49762634be3740451943ba95338939af20f18a06d5be4875bd114aaa42ee23a274279c926c625485316b3b6fa6894f624507","ssdeep":"","tlshash":"303115803241342b4a9eb1e7551b23d191be44a8980c40dcba71fe904cad7ce94f3e67","size":1543,"data":"","first_seen":"2023-03-07T01:03:54Z","last_seen":"2026-05-18T02:42:17.795808Z","times_seen":1850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/blueimp.js?ver=2.5.5","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c33d55a46db8350f57388504aec281f","sha1":"3701799975093b4d67e3baeea453ef6202a66fba","sha256":"833047db5433fc30adfc5f85c19e600dbb6f56d462510663208a5354a984dada","sha512":"3015128555513da131cc3ee2248dfd8a44ced924b9818b7350fa3f532dac10e8e59a369c700412c20572edcd394331bbf90651256fe85e31b8dfd379c44ee341","ssdeep":"768:4u5b2Nl3O/NAHCxxw5cJ+NIdRWg2FskcQf9wJskDhY/LXeaSa4yj75H:JJQdO/N6C7w5cJ+NIdRWHFvN9wqD/LXF","tlshash":"a0e2f85db250662241d3a2ed705f690ab232d22da411918c3a7cdbdaac70d4f717bff8","size":32964,"data":"","first_seen":"2023-03-07T01:06:58Z","last_seen":"2026-05-18T09:10:02.951001Z","times_seen":905,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/starstruck.raty.js?ver=2.5.5","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d967735d0c4a36d039142d01d02ee257","sha1":"e79738152720eef153774d3a6806d03861623f2f","sha256":"310589cc35c17dc5e369b35b45423ac830bb0a0b65f7f720a1c3b089254bd152","sha512":"ffa0ed7ed3788cb34ba92c8c94fd7c0cc4ecee293e17ab73e762b46ad604efa543dd3abc96680786632c9af5f93d374facf2daf260194f76e1787d5889017c0d","ssdeep":"192:4r1zqoHYKx2zznWhn5KsPYxUDAh8QGrCafGULhcX5LlXF/OfIpoqt:4rJxc3WwmCoKmyoqt","tlshash":"242211ccb3827146eea3337059ab270ee232be49e54a401d787dc7d1ef6990d2066e75","size":10364,"data":"","first_seen":"2023-03-07T01:06:58Z","last_seen":"2026-05-18T09:10:02.931624Z","times_seen":945,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/js/xupload.js","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ef44e11ddf37c97750431e5284e4d77","sha1":"59ed0438edbda256e8258ce41729e89e7a9f0b66","sha256":"9be83627d9e3f905d1bf43b83445f1874a98ba283e79a944acff7db7c47b2cf6","sha512":"3812f64c724a2200a8a32568e793b444748a4def13c49e78815b2608106990b813649f37a36944d19da388b759f50559635fedc8b488183d9738ecbd3b5a584f","ssdeep":"192:7IKE9YGs1axsrl6XsZWnrbll621w+4UWdRebMQ4WdReDyYQaQv7OsaaFg+BnqGQZ:EGy+qBlV9GRebVReDyYS7OsaaF10fq3u","tlshash":"0522674abaa339a12a7730350bbf52043b398407114aca54bd5cd6c4af8452897ffbfd","size":10740,"data":"","first_seen":"2024-10-19T23:08:50.51898Z","last_seen":"2026-05-06T23:51:55.375697Z","times_seen":349,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/e/kjkmndw1ruyf","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8cab17d85958f42190ed6c32f8fc2ca8","sha1":"e9cfc6e643827589a52aa91f6d8b2235c3ede9f4","sha256":"cfc457989ed330223692997687f35d896b050c8aaf9be2e1edb2bf04830e80e1","sha512":"b09a650965d5a3a92765524c3720b9f76284a5ec003b124bb8a40bbaa80767dea345c0340ed6585ca7d5a6fd2d9d39b1a561851b28ea47323965f6c0e880160f","ssdeep":"","tlshash":"d211ce26f7ac5220d13b3167d936f2c7b43d00319424ec4efe8cd69c62a198b697a8a5","size":887,"data":"","first_seen":"2025-10-20T06:25:38.824339Z","last_seen":"2025-10-20T06:25:38.824339Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/player/jw8/jwplayer.js?v=7","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"581ff912c413cd78a30f5c212f42271a","sha1":"79af689432d0f20cd1d951eb9436711da07decd4","sha256":"c708d26c24b48c3343e8cc7879d07e8ca6f23d1cc1e5df165a9f8e24a7c5830e","sha512":"c6185ea9db6db8786aa1636537595a5f061745caf287602beafc2dca984b1eceafeb3651109cad8cf45be3dba2a76a201758c6aaa7d7fb1adc8e07e95a39f41b","ssdeep":"1536:ELyl/ByW1iqxGJaGB2lAqU6ePRtwoIWz0Bk+5cm3wUn+yUi3LAalYqlkcRPUeJaQ:L4pknUi3LAbdhHwSm","tlshash":"99e339a631c2f4a613e264c7e47a4005f1790988744de8a4faacecd67956907b1b3ffc","size":148052,"data":"","first_seen":"2025-04-01T21:32:19.723959Z","last_seen":"2026-05-17T22:16:11.942599Z","times_seen":612,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/player/jw8/provider.hlsjs.js?v=42","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b88ce761b9ebc2a7859a2e03b33ce1ed","sha1":"70d94f3c48460af13fc14eea9e5969f8f28d1a3a","sha256":"0b009d01bf513b1059d8ee15e1a8b57faeb5f8066c0f47d2cf8e1dd2454e5b28","sha512":"0bf83a6b3d8d20918df3ecfd29f7016549a8d8c8cc4aa439018295d55ebf7e136397e0fca72ae0e4bc9eebcd3384261c9a4a492b6e4d43e1fc1acd3ce872c24a","ssdeep":"6144:Fy9gZtOSTvzXBukG/xu08Q9Eu961Q3/nqJxgEMLew9rrqwZk6:MyvvG/xu0pU1cqJxgEIZF","tlshash":"aca43bdd77a5a42642c2a1a5903f4607633b7d0a340dc1acfa2be9d75db8849b03bf74","size":461504,"data":"","first_seen":"2025-04-01T21:32:19.721472Z","last_seen":"2026-05-17T22:16:11.686993Z","times_seen":611,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/lazyload.js?ver=2.5.5","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3acbd4a87d123bc6b7e4ef753e63570","sha1":"3042ebd6ace02f8a053f22c5eb76c0aaec870065","sha256":"10b8714eb5a412ab0bece0bef0fcd9553a38cd0bead58a752e346d6779051373","sha512":"f536faeb35dcef8366758837b35b1547d181f425b664106e8fdbd2592928b405ff50f0114d4db6ffe445f0f732efd73172ea2ade5693dbe2f73794bf877f6432","ssdeep":"192:OO4602wGWi72hBQa0cDTrTx46C4gq4q4oFPHK818owTZ6RtA:OO460o72hVDnTxcdq4q4oFPHKI8VTIR2","tlshash":"8de1e5deb266b077a99738b4512f210f91337063bd0a9805a17ac0c25b3ca9d5237e3e","size":7238,"data":"","first_seen":"2023-03-07T01:03:55Z","last_seen":"2026-05-18T02:42:17.599924Z","times_seen":1579,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/starstruck.js?ver=2.5.5","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4279a70d8fc5018f1a4dd4328ba56d0e","sha1":"6aec001b3bd94f107f49e62c817048b1dd5ebe27","sha256":"2914ebe7e0b33da6d390b3f42a784210f285402cf57588b90d917193f773e9aa","sha512":"025d6310ec864f81a8f0afc8f33a0e8acaf08e79250f78ab5e1c8fdd87b99c9790c4ebe17cb35fa21d9765e9817bad7db90759bce5862fbfdebccb689f03f0a2","ssdeep":"","tlshash":"34219e5c309b61ae67f2a1f4287f17015332ae14b507ca3b742900b69f9d94da63a968","size":1311,"data":"","first_seen":"2023-03-07T01:06:58Z","last_seen":"2026-05-18T09:10:02.969963Z","times_seen":946,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d36d789b4a5b12745e791c075bede5b9","sha1":"12b8335d1bff8a02f01b084d2b020f37fb06bb2d","sha256":"43c51b7934a07bf860380439d0302a2f92158dc8a17534ef7ecb878b77e0eaad","sha512":"ff7f579fca19d1bc73484b1fe6ee6d24935e0d666f987bc78648fdeff2217b9ac013921f109fcac0fdc7db3b91c9da27eb53db5810f7b4024db9745c0ac24092","ssdeep":"","tlshash":"86119b2b940413680dbe333cce1f5c453671288ae405fc675a9a6ce21e60d231271928","size":884,"data":"","first_seen":"2023-03-07T12:03:19Z","last_seen":"2026-05-14T07:42:15.403985Z","times_seen":361,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/e/kjkmndw1ruyf","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76cc6a7775b7b653ba5a7d7f9cea4eb4","sha1":"6484c7b286038e9a60c38f4adc61e6ba30062c91","sha256":"a00f1ced7d3bab63e82c08fdb0b05b0e9659805756c15b085c2b9804671302c9","sha512":"38c92e616452c2021d351efc393e49b83c1405721bcab7c63eb809eb040a9cb77d87e2f9bac91373a0853d198f76616ed1759e7024a8b5b0d3d0398da48738db","ssdeep":"","tlshash":"aaa022000300b80280000cccb000c8a820ec330380c20200f223fa0eea38282c03300e","size":60,"data":"","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-05-17T22:16:12.029737Z","times_seen":1044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-05-18T11:39:31.33434Z","times_seen":777455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1edb3f99a8e79d1c75d21d7dedcacf5f","sha1":"8c34612823285ae6af50d7fa435e87e108d4f54f","sha256":"29266d2a84c794e50474932bf2d9aaf14b24ebbd5687db8bb6bae5f7633d7bcc","sha512":"ef6b84fb4e290640d466a3e654f750718c6105abb2799a693e01d4ea9962bae61161c2a5c925a48d2691b102356267a80493404604b609245bce5f7ca710eb84","ssdeep":"","tlshash":"4df08b69f1030d9c0b1987c56db9388635b91427861077d6eea9f6ac05edab87048036","size":548,"data":"","first_seen":"2025-10-20T06:25:38.827118Z","last_seen":"2025-10-30T02:38:15.656433Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/front.livesearch.min.js?ver=2.5.5","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0eea0408655c01545c25f142ecd898fd","sha1":"1bb9d98a7fee41318007652d0723141704a658e6","sha256":"5991b17b41002817f208207448eb82392a618a9b6bf9f4ca2c8e84815769a722","sha512":"da2f11b1a3b21b0d9d5bf0da0dd692adeb76910cd115264ffdfde7b4b61bc2526f3849b8f77f9e85537acd000cd14a25068715b5281bfd9267d6e180a482a63f","ssdeep":"48:TajZ6/nJN73IMTGnJNfqdaX6DlJB/KvjFd43payvh6Y2OnJNAPn2DjL/6vtnooO:T+Z+J1YMYJZqdk67B4d45nHJa2n6ne","tlshash":"4aa1564170815dd7023b23601e3bb60ba2937faad70a9401717ed1e50fa6d8a353671f","size":4741,"data":"","first_seen":"2023-03-07T01:03:55Z","last_seen":"2026-05-18T02:42:17.139784Z","times_seen":1746,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/8d/e9/ae/8de9ae4b0e4b914d604a7e4b56139ffe.js","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"efe226df7b34cfaf12077e69c581fc6c","sha1":"a59956a3eea86867af25c422cde94c65bec3516e","sha256":"546c3b249eb34013446f85b06e8e833ded12a229890e5a23a17b6455fffa7abe","sha512":"46bb70f28959da2732afd2977eab33508b891a27718de4f51c51bb2a1a646026136c32a3f17636b49346631cf4977279778b5b0b03d64b48970599960567c944","ssdeep":"192:Aiu3jQ5Vd/MinGiJ9HLfOHMcDkUpRwwls:Aiu3jQ5kinXHLfOscoUpOwm","tlshash":"3fd1c9dc3f8071e007ab647bba3fa41ab5a9cc54618fd81cc012b5e03d74a6ad577761","size":6581,"data":"","first_seen":"2025-10-14T13:51:47.725273Z","last_seen":"2025-10-21T12:57:18.671573Z","times_seen":522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2TL7NH453R","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b355b34106db02d334f2bb854a96c4cf","sha1":"9e85f13dfe1f636897fac50f765105361173afe9","sha256":"618e3ab152bdb050e9314b1f1a1af0a60171c78acb14f463a5f684c9be3c1151","sha512":"486de3b9d4a95b79a12f21d20a349f201397d94526dbd624cc3d40aa96412863d452f8c713e6b2356eb20e09bd7aa0632601b502a0ff47b40c4c36fc5c4478e5","ssdeep":"6144:nBX4c6tQSyOe+hy4nkEt7F8KWjxSqpRjeWvkAX6HJLGy1tyyluxwuuSyv:Bx6rRRhy4nkEt7F0EqPeKRy1bv","tlshash":"ff940a8e73c674269396f078503f018ba57b29a2f45cc896f189cce42d74a9a4277f7c","size":426723,"data":"","first_seen":"2025-10-19T22:24:54.24778Z","last_seen":"2025-10-20T06:25:38.801502Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/front.ajax.min.js?ver=2.5.5","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"01688e7db55bb122da5ecf1ecd76dc19","sha1":"127abb99dda567124ed64e89357caafdb672b528","sha256":"ebc7ea4f07c0230971ae1fbf81c235b1b20b8cff373f76d86dce9d10350b335b","sha512":"93ce636f46aaea47b3191fbbe42c33e57cb7c54ac956d33c32ccdc92db477955788d15d7fbfeb11e3a2881c08518859381dfb2c5aca35003677cba9909ed4b62","ssdeep":"384:1WJ5xYXJ0yfMS103o3Y93U3k3A69uDxMJxtvpWF1x1mUgspVYopnpTI6I3MIk47S:UGXfM5MigwA69uDxMJxtvpwVNRpTpxIE","tlshash":"f662635778869cca027761a1306fd50ab2b33e51d9124a06f1b9a1ec5ffdec66033b1e","size":15025,"data":"","first_seen":"2023-03-07T01:03:54Z","last_seen":"2026-05-18T02:42:17.862002Z","times_seen":1604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relishsubsequentlytank.com/e5/74/0c/e5740c7b80abc2329366e06d2dc81dff.js","fqdn":"relishsubsequentlytank.com","domain":"relishsubsequentlytank.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"introduction_type":"scriptElement","is_inline":false,"md5":"c751058dd8689599fe724bf9d0adf8b5","sha1":"ff0edca55d542b29840cee3860083809b19dab79","sha256":"3f1a8fe6b2b8ed35564f3597fa20dbba02566e96be93138decb8768350647de0","sha512":"2b832577c28f73952a93e664a43bc206891ae73a449e74c7c50cfb6a3f1b1fdfed39fa6c0131068f37ce26319e240e605ab699936b58b92ffa10f99fe01cb82c","ssdeep":"1536:H9IDYewEZykdTzY67ytOUS5VlIXga6kSFf02mdBV4mCzCgiA0eQpE0I9N0rvQ:ennT9RCgZ0eQp29N0rvQ","tlshash":"95a3a4883f40f17d0796b47a323fa61af0791a01509cd69cf107f1a8ae6674ab43fe65","size":106601,"data":"","first_seen":"2025-10-20T06:25:38.722063Z","last_seen":"2025-10-20T06:25:38.722063Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-RTM6XRXKXM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"756b722143e9076a9c7a768ec6d1dd30","sha1":"0c3db4bf7ba99e2938cfbeb3ab3ca95596d26bcb","sha256":"fdb6267716b5dba998405f22a75659c206bb6f30dbd4a0509190285300d689b9","sha512":"440ecef1bde172ed6fc560d9723e496f2d46739b045543be3b4d90136d41a4c5030ca4c4b2929f3d4f98e531170f9cbb87d316706bf3c1966d50fc78e67103f1","ssdeep":"6144:Zlc6tQSyOe+3y4nkEt7F8KWjxSqpRjeWvkAX6HJLGy1tyyluxwuuSyv:Z66rRR3y4nkEt7F0EqPeKRy1bv","tlshash":"2a94198e73c674269396f078503f018ba57b29a2f45cc895f189cce42e74a9a4277f7c","size":420404,"data":"","first_seen":"2025-10-20T06:25:38.734828Z","last_seen":"2025-10-20T06:25:38.734828Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/front.scripts.min.js?ver=2.5.5","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2731772e163f205b1c9e24a5c6c7b470","sha1":"81bdbbc6fcb56e622ddfd6a6d28e72493e3f2329","sha256":"55974bc676581db39c8e596c87ebd046b4439fdb6c381e4270b43f6065393623","sha512":"4622fa5cf1c9120c4bb5439ac1f8b97ba81df1ae3b2a0093ae9f00e6a13e223e535ead27cf999d7621d8c3ea057591c9f379dab920e38877fd6caf338ddb6787","ssdeep":"48:gqhZsZGRO2NQ5XM9gMy5U8aG0vxBOCOo7JMcvTNqfQNuJoH+p58DPJEpE751KhZD:gUTn8aGExBULEen851FEBE7NPbWqi/","tlshash":"2aa1542b3222b0dd10bf2371752fa45416276d59da05498ab8b8c8da0d3fcc621a7f3f","size":4786,"data":"","first_seen":"2023-03-07T01:03:55Z","last_seen":"2026-05-18T02:42:17.62405Z","times_seen":1741,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/js/jquery.min.js","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-05-18T11:38:52.523906Z","times_seen":470141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/e/kjkmndw1ruyf","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"88a6185944d1b1ebf683a32eff9625fd","sha1":"682791f2edfc6a7ebfabfb0ebcd3c7b3eeed2e70","sha256":"6511c629ec08a2a9274883bad04ee1799c19c16100b4bb329cbe5ddbac5aa7b7","sha512":"0fb9f86469c3e56a978f90f6b2c958baf3c6913afc5d5a8de6d14f3ec4a9d1c7ec8ff9496d3c67244a0f9fbcd07da41661e2aab399432f7b8490ef722b8a9ec5","ssdeep":"192:ZUkhQhiFZHCXeJUemQCCknvgGX6BY1sUzD7bIeBzBc0etpG:VFZiXZeXCCapX6S/zHlBzB3e6","tlshash":"87124bbd51920177976041acb82fa62c7ffa3ce17835f165c28d4c8ab5c4e4381f7989","size":9023,"data":"","first_seen":"2025-10-20T06:25:38.828609Z","last_seen":"2025-10-20T06:25:38.828609Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/e/kjkmndw1ruyf","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a6051ba30f29c3e96123c936393d2a64","sha1":"72e84d5c9a5c00bf06bd3a13f993bc0042c4e588","sha256":"901053724f7acbf7f9625f53d18089a232a763737f396bd1403805f59156f401","sha512":"d361d4edd33d1b9db785ec49b8d3ce4abf1f331a976adc777a3d5145ce8bf1f208404fe8b1f53f56dfb30994d34751291ae517abe33542f79807813fcffd33c3","ssdeep":"","tlshash":"f73153b63128347882f6166f7cbb624df07b55512e1e9084a01ce4643828fb9f6338ce","size":1526,"data":"","first_seen":"2024-12-13T22:04:23.912578Z","last_seen":"2026-05-06T23:51:55.450953Z","times_seen":326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/jur00275/jur00275jp-6.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:58.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/jur00275/jur00275jp-6.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 98421\r\nserver: openresty\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Mon, 24 Mar 2025 12:10:08 GMT\r\netag: \"67e14ba0-18075\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nvia: 1.1 92a0b0bf551e029202f2fbcf2f99eaf4.cloudfront.net (CloudFront), 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT20-P6, OSL50-P1\r\nx-amz-cf-id: 7CXBa7cbg-yc6dTxcCnmf1w_SHxkfoj4CKpeDPAXqcT2gw_ZkJ-eTw==\r\nage: 526050\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":98421,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 534x800, components 3","md5":"398350a678632177b1e1194fd90d52b7","sha1":"03101a6a8ebf4cbe4b45d9567ee3c1571db8c4e2","sha256":"1c73cf454b3ef765fafe0680083f35a049c15732e50863d21d56f00ec9b4f3b1","sha512":"fb55ab90cc83e319452fc1c3bdc403f770af277d66307e651eaa3220248190eadace71eda45eea85b254fd9e3376bd00cac64bb97ecd3f393083a5ab55a96cb4","ssdeep":"3072:AN/M8hNhHxl7bSXDcfUfyXaamDC1NKFogl:e/nzlxl7bSXDcfUfyKFiUGy","tlshash":"97a312f3feaddc34e76c205c9c808791323a2d549ad5101be2f43664af5a541aaf323e","first_seen":"2025-10-20T06:25:38.619979Z","last_seen":"2025-10-20T06:25:38.619979Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1677,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1118,"receive":559,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"3.125.32.186","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:58.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xhdfriday.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://xhdfriday.sbs\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=be416b77-170b-4f88-8a79-29468b389bd3:3:1; expires=Thu, 18 Oct 2035 06:24:58 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"44e97162a01709c9acaa2c7fe99b39f7","sha1":"3f25ec16da1729c1075ba4dc90f5f743e5ecd4c9","sha256":"c6df921e04e76577e7b022e2f414a6e36608d66bc57f455aeb1a1406b69b4c33","sha512":"f51596cd4310f4a91eb8d9072a567efd81b3fa08e745751ad20409a16a684c5ad34a902cac58a74b37db6c2fbb3b084afb3ed32d30e512b93238ee40c6d0aad6","ssdeep":"","tlshash":"0b9004f5540314d5400341010f7117413c54414f00531475c11754cf414044d5004517","first_seen":"2025-10-20T06:25:38.623438Z","last_seen":"2025-10-20T06:25:38.623438Z","times_seen":1,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":203,"dns":34,"connect":21,"send":0,"wait":21,"receive":0,"ssl":143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/uploads/2025/08/cropped-FotoJet-7ff-192x192.jpg","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:59.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:07:43 GMT","end":"Wed, 14 Jan 2026 14:06:19 GMT"},"fingerprint":{"sha1":"10:3E:D1:9C:87:2B:E6:19:B2:77:B6:7F:1A:22:7A:25:AA:1A:AC:16","sha256":"3A:EB:A1:65:EC:BA:60:40:6B:24:A6:73:1E:57:89:DD:78:FA:95:FB:5A:FD:38:E3:56:5F:E9:9B:C4:E9:72:AB"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/cropped-FotoJet-7ff-192x192.jpg HTTP/1.1\r\nHost: xhdfriday.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/\r\nCookie: starstruck_2610cdb1e7fc17e8e57860211a1b0aab=f2d421b29e8c2e151a8314a065fbeb38; _ga_RTM6XRXKXM=GS2.1.s1760941498$o1$g0$t1760941498$j60$l0$h0; _ga=GA1.1.701170056.1760941499; dom3ic8zudi28v8lr6fgphwffqoz0j6c=be416b77-170b-4f88-8a79-29468b389bd3%3A3%3A1; pp_main_e5740c7b80abc2329366e06d2dc81dff=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:59 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 13:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6529\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2BVb2MHisO3NEKE6Et4g3E5BRj1YMModlb287CDaFX0X6rnDZQYQWRqgaPS8JvzjvlZeG9pqqFeAXu5ccztihYLA5x8Ya%2B5jBV0N\"}]}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 99166f7518b00b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6529,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 192x192, components 3","md5":"23bc4d743935398bb8f1b5fa97da70f9","sha1":"8f3a6135412ea38327c0018e813bd8ec02ef4fef","sha256":"3d622014dfc5dc8a63e1a4dd62bcd583c5fe098a45f324a67b71dd8b7f66a872","sha512":"ffd9414b0079b76424870cb95fbd7f90573879f592ec5141c788ebaf65eaa48261310357a539d017c2fce30290ee8ca1f4213d1b32ace265bec6a1f6d8515dcf","ssdeep":"96:/PEAD7mvcyRjIMsYVPNWbRiJk47FtWL7AjwX9cFaQZoWJSqcn1Duge0GqjXB93+X:/PovcgMKVPNYavFtC4ccAM7U1DXBBS3","tlshash":"76d14b6f4b0181c1fa214eecba8307ed418a6a11f98739628b3accd2b4695d45ddfc38","first_seen":"2025-09-08T12:26:50.662724Z","last_seen":"2025-10-30T02:38:15.619697Z","times_seen":6,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/player/jw8/provider.hlsjs.js?v=42","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/kjkmndw1ruyf","date":"2025-10-20T06:25:02.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /player/jw8/provider.hlsjs.js?v=42 HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/kjkmndw1ruyf\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:25:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Fri, 28 Mar 2025 05:48:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 4550\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kiit23KSdvIXeTvEH12MDmdg2nv6TUO578oBlaP5pLLY823dj9Pe9WAERKXGbG7p%2BSNHJT2rBt8LHAmZYFUEe5XZA5wwTFkwaw%3D%3D\"}]}\r\netag: W/\"70ac0-631609e8e20c0\"\r\ncontent-encoding: br\r\ncf-ray: 99166f887ad256a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":461504,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65501)","md5":"b88ce761b9ebc2a7859a2e03b33ce1ed","sha1":"70d94f3c48460af13fc14eea9e5969f8f28d1a3a","sha256":"0b009d01bf513b1059d8ee15e1a8b57faeb5f8066c0f47d2cf8e1dd2454e5b28","sha512":"0bf83a6b3d8d20918df3ecfd29f7016549a8d8c8cc4aa439018295d55ebf7e136397e0fca72ae0e4bc9eebcd3384261c9a4a492b6e4d43e1fc1acd3ce872c24a","ssdeep":"6144:Fy9gZtOSTvzXBukG/xu08Q9Eu961Q3/nqJxgEMLew9rrqwZk6:MyvvG/xu0pU1cqJxgEIZF","tlshash":"aca43bdd77a5a42642c2a1a5903f4607633b7d0a340dc1acfa2be9d75db8849b03bf74","first_seen":"2025-04-01T21:32:19.721472Z","last_seen":"2026-05-17T22:16:11.686993Z","times_seen":611,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto%3A300%2C400%2C500%2C700\u0026ver=2.5.5","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:57.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"04:E6:D3:58:E3:A1:E3:05:2B:C3:56:5D:68:BB:1B:0A:08:C6:E3:FB","sha256":"25:4C:B3:A3:9A:E1:D7:FD:25:B6:BF:E9:AA:97:95:20:5D:F2:15:EA:41:46:B6:6B:01:17:19:26:EC:EF:D3:CA"}}},"request":{"raw":"GET /css?family=Roboto%3A300%2C400%2C500%2C700\u0026ver=2.5.5 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 20 Oct 2025 06:24:57 GMT\r\ndate: Mon, 20 Oct 2025 06:24:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21548,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"0ce0e705786211ddc60130dddbf31333","sha1":"3c8d0490b0f4b830c1f60f3c92e93c7ac1db586f","sha256":"f6182b1cbcd08174f2dc7eb2d65036aa68cd510971385d1f5cf7d5aea1c72604","sha512":"5a6ccf3337289ca09fca8ea809d96cfbe90008a8d357bef80c59045ae14d2298f86785471a357bdd637dabc6a18301ed16dd877da7bc1500c460ea1ffc57d3e4","ssdeep":"384:3wfnw+whwdwySw/qY4owmwGw3wfawDwwwkwyfw/qY45wLwrwcwfFwYw7w/wyEw/O:3KNyEfSQv3rgXU/9ffQiqGr8vkSfEQNg","tlshash":"e7a2fba108174000978358e223cebf34fe4f92507141d0b5abfd9b6bedcbca652693ad","first_seen":"2025-09-09T04:44:57.736265Z","last_seen":"2025-11-19T00:00:14.757832Z","times_seen":2883,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":76,"dns":0,"connect":8,"send":0,"wait":19,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/nima00041/nima00041jp-13.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:58.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/nima00041/nima00041jp-13.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 84690\r\nserver: openresty\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Mon, 20 Jan 2025 09:29:13 GMT\r\nx-cache-status: HIT\r\netag: \"678e1769-14ad2\"\r\nvia: 1.1 f2fbb273fa693dcc9ea4d5b4b7f28e48.cloudfront.net (CloudFront), 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT57-P5, OSL50-P1\r\nx-amz-cf-id: No7VzmROsly3SF0bbVhoon1gDC75_O8o20cU0k2gy6N5VJdCpx5mIw==\r\nage: 17327\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":84690,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 534x800, components 3","md5":"7b0ef1743d67dc6e724c54a777fa08b2","sha1":"617d7ede1f85daadba1529c104a918446fa94d72","sha256":"1b97853bdc9a13ff21394762dcbe78a5a4f3cefced339135caee659ab0feebc0","sha512":"bf6e3950dfddf9cc7a973993d8fc9842e1b78ca168f243641ea3ea8e43d4f4723c35667b047cefe0f9fb2d1942138eb1d6d143215eaa37c5680be7807261ac62","ssdeep":"1536:TFsWW1yKoLsGdneetd9osFBfFVpEBUWqhYDq0ekkyH2lYzxDgIckkZ:SWWQLfdeQPuuUfkO7zNgIcFZ","tlshash":"f28302cbae39ed46090d8ae2f44e7206cc504d995382dee46b1f8b211f9d17f47b846b","first_seen":"2025-10-20T06:25:38.645392Z","last_seen":"2026-03-29T19:50:06.954802Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1093,"receive":275,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn001.imggle.net/webp/poster/20240410/1731035726.webp","fqdn":"cdn001.imggle.net","domain":"imggle.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:58.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imggle.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 00:26:18 GMT","end":"Fri, 28 Nov 2025 01:26:04 GMT"},"fingerprint":{"sha1":"3D:D7:A4:29:CD:9D:68:E2:6D:DD:CB:4F:B7:65:26:2D:B8:3E:01:F6","sha256":"92:07:49:FB:FC:89:EC:3B:E7:48:EB:4C:8E:D0:E3:C2:24:FD:F3:84:C3:2F:D6:AE:8D:D2:21:6B:0F:F2:1B:4B"}}},"request":{"raw":"GET /webp/poster/20240410/1731035726.webp HTTP/1.1\r\nHost: cdn001.imggle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 78504\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 08 Nov 2024 03:15:27 GMT\r\netag: \"672d824f-132a8\"\r\nexpires: Sun, 13 Sep 2026 12:42:55 GMT\r\ncache-control: max-age=31536000\r\nx-cache: MISS\r\ncf-cache-status: HIT\r\nage: 2189271\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u8gpKCKjBDv8%2BA%2Bri271HbAzkMYkUSLbd4PGSLGYURb6mfcgjC%2BFP%2BlaxoNxPQ2Bow8Qqr%2FDChLIsYwh%2ByQ4azSlxXJPTdYR%2BbrMYnkCyKH2\"}]}\r\ncf-ray: 99166f6b4b6176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78504,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x426, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9a16642db862dd7b5e8b4d9c8fc29d15","sha1":"c597e7553d7924107e57145ac8bcade391978540","sha256":"9d337d52437f11ba08ee7d1f9e9dd1a442ca47a3060275c7560622fa70697cb1","sha512":"697d5199bcf53c64d60f75363108597e0a6d10c21650e57fc01f66939724aec6d65eb301ff0eb04260f445e9cf95d0a44fedae8b727b196d763e727af25ba554","ssdeep":"1536:IB4U1GNUE6kdNvLUjUhMYE2wEdCZcjZ5yJ2ZnILMzFL1B0e2SCp/:IBj1GuM3L322j0cZYYlYSCV","tlshash":"a87312d3081acfa5291f6dcaf446649fe5e9603203e5016fa283c83239fa09f4d0a0f1","first_seen":"2025-10-20T06:25:38.649247Z","last_seen":"2025-10-20T06:25:38.649247Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":33,"connect":1,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"old.imb.hair/images/2023/01/30/1-1bf5ebaf21ac7488b.jpg","fqdn":"old.imb.hair","domain":"imb.hair","tld":"hair"},"ip":{"addr":"104.21.25.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:58.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imb.hair","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 20:42:26 GMT","end":"Sat, 22 Nov 2025 21:40:03 GMT"},"fingerprint":{"sha1":"1D:69:4E:5F:6A:6E:B7:73:60:21:EC:15:F7:F8:BD:F4:26:5A:31:D2","sha256":"46:4F:E3:37:7A:81:B2:04:94:EF:2C:BF:CB:A1:5C:D7:18:11:A9:95:92:34:85:6D:13:A9:D0:A1:9C:3C:0F:C2"}}},"request":{"raw":"GET /images/2023/01/30/1-1bf5ebaf21ac7488b.jpg HTTP/1.1\r\nHost: old.imb.hair\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17845\r\ncache-control: public, max-age=43200\r\nexpires: Sat, 04 Oct 2025 08:10:49 GMT\r\netag: \"45b5-63d7bd0d-15a3e4;;;\"\r\nlast-modified: Mon, 30 Jan 2023 12:50:21 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 39339\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XoQLPDMmB08hNUMptNhznK8Ow%2BUAbTdrvQhfmsxz%2F7OcjQbucmuA9LGYj3ns3kmfe%2FoGDXw39vtBUAwGlHPlZfDnrKme4kqJHXiQpw%3D%3D\"}]}\r\ncf-ray: 99166f6c8db10731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17845,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75\", baseline, precision 8, 265x374, components 3","md5":"37d6d860be6a35efbb0a69b0c2ce00cd","sha1":"2a06bc2c21e03f958cf30fb5e9a057efbf1e8cd8","sha256":"fd7a284d6db18762a773d1a244c53897e586d8e8ec3dc0d852aba3791ee69ff3","sha512":"88d1aeb2013cb8b0c6f36e6d7f3a3e85c74ff351ddbd1e98138a86fc27fb2fe2ffba0a8cbeb440d1be5cb9cb10179154b5d1d925ae7b06eb54cd0ffe3bcbbddf","ssdeep":"384:YgmEOkd4UotJsDvWEmHcttDAJfv30tFlJE0RLiuCbpkHr0P:Yy+YbWEmHcttDygFCpRP","tlshash":"9982d11b8928afa9977769a54916335643e444c3cb02113bfba18de0f430efd54e4f4b","first_seen":"2025-10-20T06:25:38.652867Z","last_seen":"2025-10-20T06:25:38.652867Z","times_seen":1,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":189,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:58.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xhdfriday.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 12:56:02 GMT\r\nexpires: Fri, 16 Oct 2026 12:56:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 322136\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-18T11:40:34.112243Z","times_seen":833323,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":178,"dns":1,"connect":20,"send":0,"wait":8,"receive":4,"ssl":153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/fontawesome/webfonts/fa-solid-900.woff2","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:58.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:07:43 GMT","end":"Wed, 14 Jan 2026 14:06:19 GMT"},"fingerprint":{"sha1":"10:3E:D1:9C:87:2B:E6:19:B2:77:B6:7F:1A:22:7A:25:AA:1A:AC:16","sha256":"3A:EB:A1:65:EC:BA:60:40:6B:24:A6:73:1E:57:89:DD:78:FA:95:FB:5A:FD:38:E3:56:5F:E9:9B:C4:E9:72:AB"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: xhdfriday.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/fontawesome/css/all.min.css?ver=5.15.1\r\nCookie: starstruck_2610cdb1e7fc17e8e57860211a1b0aab=f2d421b29e8c2e151a8314a065fbeb38\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 140996\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6knTA8JkZYPj7PGWwHzGTVkojvDCuJ8XkrN0CbtbUqqNzwzcSe7yQN7taQdS7z8FtopQ%2FQMR9IEDUj23ox6PM3TjbHYJqFuuB6Ai\"}]}\r\ncontent-type: font/woff2\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 99166f6f78930b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140996,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 140996, version 331.-31392","md5":"25d740d42658b6e2c293ce7b3322aac7","sha1":"41cc9ae4b5dd70fd3988059dfb864f20f99ae371","sha256":"8b5a3ff47c2413e0bf3dd3bb7899a25aeef9b390a055847a1185a39ad48a2da2","sha512":"eb92dd22d53765b44d918ecec0105cbaae08fd5e0c7fac1ec8494a32bb553ded03e8b3826a230161ab791d6169eba1d3b384451e002ff0369760206b7775c768","ssdeep":"3072:X8Y40kER3HLOKqHj4HYwoR9G8iSjt1FrLl+JeMU:/4GZHLOtEH3wVdjtyLU","tlshash":"13d3123a6c8961b6fd2e9870bef1fc0949db7852059892c6b3565f6cd97a0031873f09","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-05-18T10:54:55.302063Z","times_seen":6038,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":185,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/front.owl.min.css?ver=2.5.5","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:57.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:07:43 GMT","end":"Wed, 14 Jan 2026 14:06:19 GMT"},"fingerprint":{"sha1":"10:3E:D1:9C:87:2B:E6:19:B2:77:B6:7F:1A:22:7A:25:AA:1A:AC:16","sha256":"3A:EB:A1:65:EC:BA:60:40:6B:24:A6:73:1E:57:89:DD:78:FA:95:FB:5A:FD:38:E3:56:5F:E9:9B:C4:E9:72:AB"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/front.owl.min.css?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/\r\nCookie: starstruck_2610cdb1e7fc17e8e57860211a1b0aab=f2d421b29e8c2e151a8314a065fbeb38\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ut%2Fi6nmBXmHMtsDSLZbvnP4LgP1kdK%2FEe%2Byu59A0GR29FGNvCfpDM6xTI8cdkf9yA42XfPB9EatBDPszZnA%2BPR8AJRiYYT%2Frlxqj\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 99166f69b8650b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2299,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2298)","md5":"d85bf9b7c512286b478726a6de8e238b","sha1":"3d2dcd82c7a1dd52a6812233239d4a5bd9115d9b","sha256":"3b963d8c3b9b23f879654a20f996366d6e2427691c9f480eb78a08bf3f8e032f","sha512":"36b72d250c430b4ef16d7eaec5befd2a1f147f05f7ddab265bdaa1e699ba49fa96815b61de8033e07cb1375560f3e15482304ec733bf6af22609f33212cf12ff","ssdeep":"","tlshash":"c941f1f44215229d603bc30966c99eca152de173ea16069e925ffe1493c7d16353f3ce","first_seen":"2023-04-08T11:04:44Z","last_seen":"2026-05-18T02:42:17.630773Z","times_seen":1170,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/pwsscrollbar.js?ver=2.5.5","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:57.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:07:43 GMT","end":"Wed, 14 Jan 2026 14:06:19 GMT"},"fingerprint":{"sha1":"10:3E:D1:9C:87:2B:E6:19:B2:77:B6:7F:1A:22:7A:25:AA:1A:AC:16","sha256":"3A:EB:A1:65:EC:BA:60:40:6B:24:A6:73:1E:57:89:DD:78:FA:95:FB:5A:FD:38:E3:56:5F:E9:9B:C4:E9:72:AB"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/pwsscrollbar.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/\r\nCookie: starstruck_2610cdb1e7fc17e8e57860211a1b0aab=f2d421b29e8c2e151a8314a065fbeb38\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BxO3UstAJajBIJ6AXGy7YlzjeDXS%2Bz%2FprI7Y%2BFjxvObsj3KI9mWE0zLu430mWe3kg44RtYT4BWO1rKDiQcKXthc9OzUEphDOfVcw\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 99166f69e86e0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45008,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (45007)","md5":"971c9dba00bafafbbefeec7e58dfc432","sha1":"ea7fbe2e8c2725baccf3aa09fc52244708218620","sha256":"8d66e5d985349af924510cf978564a7d84164741de08f173d1fa61f0b1c2960c","sha512":"9705ffd9da0e788542d1df3542789ed38dbf2ca3eb99a609b1271dc24c2d81b4c748591f12a3114771017be0d0c8662771231b58da93ee2c775fb8b7196914e6","ssdeep":"768:J8WQosXc7u8/fP2WRHBDQXBJhoJWR/e4NKMTul/x31JuouLdL4jS:J8ZXc7dfPtHBDaoktTsx31Juo4z","tlshash":"db1329f4370534f712eb6f5e442b020923365896670788b1707d9cb82fa1de612a7f6e","first_seen":"2023-03-07T01:03:54Z","last_seen":"2026-05-18T02:42:17.252426Z","times_seen":1639,"resource_available":true,"data":null}},"time_used":710,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":710,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/owlcarousel.js?ver=2.5.5","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:57.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:07:43 GMT","end":"Wed, 14 Jan 2026 14:06:19 GMT"},"fingerprint":{"sha1":"10:3E:D1:9C:87:2B:E6:19:B2:77:B6:7F:1A:22:7A:25:AA:1A:AC:16","sha256":"3A:EB:A1:65:EC:BA:60:40:6B:24:A6:73:1E:57:89:DD:78:FA:95:FB:5A:FD:38:E3:56:5F:E9:9B:C4:E9:72:AB"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/owlcarousel.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/\r\nCookie: starstruck_2610cdb1e7fc17e8e57860211a1b0aab=f2d421b29e8c2e151a8314a065fbeb38\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6XyXIQY90EfaFvBXeYjFfeCk9g1RrNQCEmyqv4N135y%2F0%2Fc0TB9d9CwRTY%2Fkg9i36WlPVYp7EUu3iWByHdHEgFZNr93BuXVcsXWe\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 99166f69f86f0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23938,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (635), with CRLF line terminators","md5":"56e770f95a9cb2ce06d6b044f93c24fa","sha1":"003bdb37bbd8cfd296bcffff38ce601b6b7df8dd","sha256":"ecc9ea285df7f95f79c647d1cfaca566239d68fcb183aa274fda98f33fce813e","sha512":"7e36ac1b0cbd3835d431fca68efd11fe05c7cb52a654cb9ef4bd3adb83f465ff890116c09b9ac1935308e0a1f94dd5d1ca12813a8af9ba67f4d39327e1053800","ssdeep":"384:7Ket0QK/Q52Cgwm0PQtiRX55DzNvYUyzLsxVxRbH:dK/Q4ptuXNQUyzLI5","tlshash":"12b2a54bb2202385469372b9419b110d713bfb78fc42855c70b6dadfaa4b84e9277b3d","first_seen":"2023-03-07T01:03:55Z","last_seen":"2026-05-18T02:42:17.710837Z","times_seen":1834,"resource_available":true,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/img/flags/jp.png","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:57.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:07:43 GMT","end":"Wed, 14 Jan 2026 14:06:19 GMT"},"fingerprint":{"sha1":"10:3E:D1:9C:87:2B:E6:19:B2:77:B6:7F:1A:22:7A:25:AA:1A:AC:16","sha256":"3A:EB:A1:65:EC:BA:60:40:6B:24:A6:73:1E:57:89:DD:78:FA:95:FB:5A:FD:38:E3:56:5F:E9:9B:C4:E9:72:AB"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/img/flags/jp.png HTTP/1.1\r\nHost: xhdfriday.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/\r\nCookie: starstruck_2610cdb1e7fc17e8e57860211a1b0aab=f2d421b29e8c2e151a8314a065fbeb38\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 109\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8GL8VYK7w7%2FePTbOrVKbKMNsLB0T1PTVM%2B4i81N6U%2BV2AU6o9SY6NtkcBXMAHQFLpMRf3VOAnsdP6ME3Ol2g3QsoOA0KCA%2F1hOQQ\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 99166f69f8770b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 12 x 12, 2-bit colormap, non-interlaced","md5":"71846767eecb8d37811c70551da5a450","sha1":"1e6bb364a8a9eef12189719c7c8133a062ffc808","sha256":"7ab35c9c4f438c9c287953626cbd9115feb04bdc25d7f7d6f61d97abaf31c2b6","sha512":"759b0d3d6ea3e8c9b93c2e5b2cd71efc2868e3256a5860be6eb29833ed7664239f7423706c1b852e39939605b9b7fade0dc4cf8303ed296a47234ef50ba2727f","ssdeep":"","tlshash":"a0b012c223902f3acf549e7a81a82421f83550540162548d1149d6283ece6558184657","first_seen":"2024-02-03T08:02:53Z","last_seen":"2026-03-26T08:34:35.997077Z","times_seen":19,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/sone00723/sone00723jp-6.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:58.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/sone00723/sone00723jp-6.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 81902\r\nserver: openresty\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Mon, 21 Apr 2025 10:42:18 GMT\r\netag: \"6806210a-13fee\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nvia: 1.1 70136d64049ea28215370c669c2b328a.cloudfront.net (CloudFront), 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT20-P6, OSL50-P1\r\nx-amz-cf-id: TK_-5TjwAsj4VY4I89_Pe-uLfjrtPTkuPgT94HmMoouQX2ea3Ecq5g==\r\nage: 5975\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":81902,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 534x800, components 3","md5":"763ae8e89e8aca974b8d029b47bf3141","sha1":"8278f6012e7aef621a9020bc2bc3f2d382e645d6","sha256":"7210e74cd325e8b2a7941a05167b595bf520c9c7f401058a2ad9284f724b8100","sha512":"86b09382b24dc4887ba52336e39cfd99a98805b8e4ae4286f2d55fc92cf6428338d0db1d70a053c59dee93d8079f9d8e566cb5b3333ba3f5a40b7fdf05668cf6","ssdeep":"1536:ov/66YN+Ci8aATwAlg/v/2TfTkOsAOy7GqRZoRqOuXQEoG7rbY3X2IvK:sBmraA0AG+rkqO8ZoXuXxoG7+X2l","tlshash":"5883014f1f17c8ab945c74b25b947b5ce564907c418237feacbee828821de663a4dcb0","first_seen":"2025-10-20T06:25:38.663999Z","last_seen":"2025-10-20T06:25:38.663999Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1032,"receive":259,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/juq00695/juq00695jp-8.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:58.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/juq00695/juq00695jp-8.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 61017\r\nserver: openresty\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Mon, 08 Apr 2024 12:38:57 GMT\r\netag: \"6613e561-ee59\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nvia: 1.1 92e3d3961440871305e475333ed7fe7a.cloudfront.net (CloudFront), 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT57-P9, OSL50-P1\r\nx-amz-cf-id: 48wN3MqywzpiLA-c8JZLcV9qEXwctQNz-__Sx3ih9RIUB78gRPq6Kg==\r\nage: 163408\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":61017,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 534x800, components 3","md5":"6ef812ec71da757b2da49a99ab63a3ba","sha1":"516b55b874700c5e4037342b28efe1b69cdc4ef0","sha256":"6b6b4060fe966b90512546ffe1afaaaebc8527d5e8b8507c244838307398e607","sha512":"c8725b95ca64c25794dce6e572a686bee32b24823b9613fbfb2ecd62c03c82de184d3416b4088a3b7868ebc3246dd46a31f7def4d11c55d7c6adf48f3b269090","ssdeep":"1536:46W9kUgu8MP9av6VDm7Vq6F0Tvms4OfLXx20/af/r:46W9kUgUspCGGE4a3r","tlshash":"41530241373222f5afab6f25464c4da8b63442e1bbc0ac8fc83f16d795e2b5991d2c64","first_seen":"2025-10-20T06:25:38.666004Z","last_seen":"2025-10-20T06:25:38.666004Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1032,"receive":259,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"old.imb.hair/images/2023/01/30/1af2c0279a32857e4.jpg","fqdn":"old.imb.hair","domain":"imb.hair","tld":"hair"},"ip":{"addr":"104.21.25.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:58.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imb.hair","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 20:42:26 GMT","end":"Sat, 22 Nov 2025 21:40:03 GMT"},"fingerprint":{"sha1":"1D:69:4E:5F:6A:6E:B7:73:60:21:EC:15:F7:F8:BD:F4:26:5A:31:D2","sha256":"46:4F:E3:37:7A:81:B2:04:94:EF:2C:BF:CB:A1:5C:D7:18:11:A9:95:92:34:85:6D:13:A9:D0:A1:9C:3C:0F:C2"}}},"request":{"raw":"GET /images/2023/01/30/1af2c0279a32857e4.jpg HTTP/1.1\r\nHost: old.imb.hair\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21576\r\ncache-control: public, max-age=43200\r\nexpires: Fri, 10 Oct 2025 19:15:34 GMT\r\netag: \"5448-63d7be75-15a433;;;\"\r\nlast-modified: Mon, 30 Jan 2023 12:56:21 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 37269\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tlklQv2Lqk2M%2BqAc5Mv6TOmCkaFRrSfpgzFezaYHKRXI3t3zlLrfHE4hvN4xqT9fYy8vJdyw5PBBTbmr7%2Fut%2BnpvVxSQ7aTdNUyGOQ%3D%3D\"}]}\r\ncf-ray: 99166f6c8db40731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21576,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75\", baseline, precision 8, 265x374, components 3","md5":"8d755aef732fc5fb3d93f900dccea754","sha1":"e7a9770547a8c7ae2eb109fa7672d6a69b71c445","sha256":"b313574ecb529cd000c1aca638e8c6244f478accffd4c593a17a3d25db203055","sha512":"4d188828228bed13a07d57b327c618695a05f6da385a77f584d688c87a49b51505032fda3c17741674bff3ec2173decd24646408aee9b8f77ffdcd9d4e7ebd3e","ssdeep":"384:YrUj9Nhz4X4wxGUmYEA2KTvve+vOE0BsRRl02ffnRGciPrBLIr/4xyT2ay:Ys9bz5wxGUmY9fWlBYhscijBS4x42V","tlshash":"c6a2cfecc060454667232a5a13c7fe6b3306c0652a46e6ff03a319395f98ef7136462e","first_seen":"2025-10-20T06:25:38.668012Z","last_seen":"2025-10-20T06:25:38.668012Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":190,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/front.scripts.min.js?ver=2.5.5","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:58.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:07:43 GMT","end":"Wed, 14 Jan 2026 14:06:19 GMT"},"fingerprint":{"sha1":"10:3E:D1:9C:87:2B:E6:19:B2:77:B6:7F:1A:22:7A:25:AA:1A:AC:16","sha256":"3A:EB:A1:65:EC:BA:60:40:6B:24:A6:73:1E:57:89:DD:78:FA:95:FB:5A:FD:38:E3:56:5F:E9:9B:C4:E9:72:AB"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/front.scripts.min.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/\r\nCookie: starstruck_2610cdb1e7fc17e8e57860211a1b0aab=f2d421b29e8c2e151a8314a065fbeb38\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:59 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AYF4gja2aACRclTu625JZX%2FXePUTWZti5gXLOzGE6lAkfnf4N6qJl%2BgvzJm1mC07w1e%2Fg%2FX8MdpN4V1DaDFOoR8McpKNdbUfgQeX\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 99166f6af87c0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4786,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4784), with CRLF line terminators","md5":"2731772e163f205b1c9e24a5c6c7b470","sha1":"81bdbbc6fcb56e622ddfd6a6d28e72493e3f2329","sha256":"55974bc676581db39c8e596c87ebd046b4439fdb6c381e4270b43f6065393623","sha512":"4622fa5cf1c9120c4bb5439ac1f8b97ba81df1ae3b2a0093ae9f00e6a13e223e535ead27cf999d7621d8c3ea057591c9f379dab920e38877fd6caf338ddb6787","ssdeep":"48:gqhZsZGRO2NQ5XM9gMy5U8aG0vxBOCOo7JMcvTNqfQNuJoH+p58DPJEpE751KhZD:gUTn8aGExBULEen851FEBE7NPbWqi/","tlshash":"2aa1542b3222b0dd10bf2371752fa45416276d59da05498ab8b8c8da0d3fcc621a7f3f","first_seen":"2023-03-07T01:03:55Z","last_seen":"2026-05-18T02:42:17.62405Z","times_seen":1741,"resource_available":true,"data":null}},"time_used":1062,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1062,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:57.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:07:43 GMT","end":"Wed, 14 Jan 2026 14:06:19 GMT"},"fingerprint":{"sha1":"10:3E:D1:9C:87:2B:E6:19:B2:77:B6:7F:1A:22:7A:25:AA:1A:AC:16","sha256":"3A:EB:A1:65:EC:BA:60:40:6B:24:A6:73:1E:57:89:DD:78:FA:95:FB:5A:FD:38:E3:56:5F:E9:9B:C4:E9:72:AB"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: xhdfriday.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/\r\nCookie: starstruck_2610cdb1e7fc17e8e57860211a1b0aab=f2d421b29e8c2e151a8314a065fbeb38\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Aug 2023 14:14:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j%2BwHCfsaoZLtsIhHlS7ayFgOjQRLW%2F3bt7gtOMXf6P2mVDto27jM7LbBUz%2BhzeAsIuxhi36WPO0XbO%2BF84tE20gintqPQFx%2BQOV4\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 99166f69e86b0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-05-18T11:39:31.322165Z","times_seen":841311,"resource_available":true,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/pppe00351/pppe00351jp-4.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:58.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/pppe00351/pppe00351jp-4.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 84792\r\nserver: openresty\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Mon, 16 Jun 2025 10:28:20 GMT\r\netag: \"684ff1c4-14b38\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nvia: 1.1 a9cd221873fc4319ad193b0ec9d1167a.cloudfront.net (CloudFront), 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT20-P6, OSL50-P1\r\nx-amz-cf-id: qIY0WKRO7AgPs05tyKBvXJ_hk2C4YcNJt5M1PNBiXP73XDJNg-_vYg==\r\nage: 534805\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":84792,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 534x800, components 3","md5":"c0e39398f71fcb8fbbd82bb48fb30384","sha1":"32735f88c7f8a76d81ef2a4c069481c4080085c7","sha256":"b64fc4d32c15043fb3bc3d922b7a63117d06170edd3fb9a48cad0a40724af2ee","sha512":"0b41a56710e8fd1b3781613639f0994e61b569a5ca522cf55acb44ab6d6bcbbd0164b15714c5188c4f9e2cbe46eaee791f0bc3544c516aef682ca87a1ddfebac","ssdeep":"1536:F3PiXJIlIejkkBPwJlCGc5oT76S6YvfwvF/thanKNjrzUM1J8Xq:lKXJIVBPqIHkUYnwvSKhrzMq","tlshash":"0883025d96e03f1848bbcf873a63781676389a5339ec3cb46dc1173c8b4a9a7156cca1","first_seen":"2025-09-08T12:26:50.737946Z","last_seen":"2025-10-20T06:25:38.675135Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1096,"receive":275,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-includes/js/comment-reply.min.js?ver=6.8.3","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:58.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:07:43 GMT","end":"Wed, 14 Jan 2026 14:06:19 GMT"},"fingerprint":{"sha1":"10:3E:D1:9C:87:2B:E6:19:B2:77:B6:7F:1A:22:7A:25:AA:1A:AC:16","sha256":"3A:EB:A1:65:EC:BA:60:40:6B:24:A6:73:1E:57:89:DD:78:FA:95:FB:5A:FD:38:E3:56:5F:E9:9B:C4:E9:72:AB"}}},"request":{"raw":"GET /wp-includes/js/comment-reply.min.js?ver=6.8.3 HTTP/1.1\r\nHost: xhdfriday.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/\r\nCookie: starstruck_2610cdb1e7fc17e8e57860211a1b0aab=f2d421b29e8c2e151a8314a065fbeb38\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Feb 2025 14:27:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KlkGb%2B2pGW1dWN4h66AqVblJBRwR%2FPVdAvs%2Fh9tNGVI9sUN0z0jAWWOTEBY2mrT6uO3I8tKtWaCxbefdcU8GDP%2F1nXNcOsp3wb2L\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 99166f6b087e0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3026,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2991)","md5":"e4a49df71f8b98c1d9f9d8fce74d89e8","sha1":"b95fcda0c8c26305ad94e80343d0cfca8a048a10","sha256":"9d4687a19cab8f7442a3bda40c45be4d10e42488e091ddd706c3caed83c3ee1f","sha512":"42cd5f854779886f24c43ed14617380110c946d1b430b454060c3b391de6fbae6d0ed8ab7cdd7cfdc9726b2d6142a4e01c4448e36088dfcee7fdd00b60909f89","ssdeep":"","tlshash":"5051a7d437c95d762a83b3395efe930271712709a50805608826c86931bcfea63b67fe","first_seen":"2024-11-13T06:33:24.856382Z","last_seen":"2026-05-18T11:43:58.686391Z","times_seen":74410,"resource_available":true,"data":null}},"time_used":801,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":801,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:58.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xhdfriday.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 12:56:02 GMT\r\nexpires: Fri, 16 Oct 2026 12:56:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 322136\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-18T11:40:34.112243Z","times_seen":833323,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":113,"dns":2,"connect":12,"send":0,"wait":8,"receive":3,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/player/jw8/jwplayer.js?v=7","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/kjkmndw1ruyf","date":"2025-10-20T06:25:02.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /player/jw8/jwplayer.js?v=7 HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/kjkmndw1ruyf\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:25:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Fri, 28 Mar 2025 05:48:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 5192\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cpn5uvF1PMLyeRHcTp0PssTnDerYGCWUm9s0KoTIwGNtDU2Lnp8Q3Oo%2FU40KjlcgARUuNehltANn1E5K6CP20uk%2Bn5HTl5NHNw%3D%3D\"}]}\r\netag: W/\"24254-631609ffc56c0\"\r\ncontent-encoding: br\r\ncf-ray: 99166f8729bb56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148052,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65503)","md5":"581ff912c413cd78a30f5c212f42271a","sha1":"79af689432d0f20cd1d951eb9436711da07decd4","sha256":"c708d26c24b48c3343e8cc7879d07e8ca6f23d1cc1e5df165a9f8e24a7c5830e","sha512":"c6185ea9db6db8786aa1636537595a5f061745caf287602beafc2dca984b1eceafeb3651109cad8cf45be3dba2a76a201758c6aaa7d7fb1adc8e07e95a39f41b","ssdeep":"1536:ELyl/ByW1iqxGJaGB2lAqU6ePRtwoIWz0Bk+5cm3wUn+yUi3LAalYqlkcRPUeJaQ:L4pknUi3LAbdhHwSm","tlshash":"99e339a631c2f4a613e264c7e47a4005f1790988744de8a4faacecd67956907b1b3ffc","first_seen":"2025-04-01T21:32:19.723959Z","last_seen":"2026-05-17T22:16:11.942599Z","times_seen":612,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/stream/L0PjnBn3df1R3bnXiRqN0A/kjhhiuahiuhgihdf/1760984702/24482347/master.m3u8","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://stbhg.click/e/kjkmndw1ruyf","date":"2025-10-20T06:25:03.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"HEAD /stream/L0PjnBn3df1R3bnXiRqN0A/kjhhiuahiuhgihdf/1760984702/24482347/master.m3u8 HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://stbhg.click/e/kjkmndw1ruyf\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:25:03 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\nserver: cloudflare\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uxSHzcJO0PgsOskktcgQ0A6Qz4QkDgYkU4ArFwenGZjxWpkmioiUF8GbpH2Rj0J79FghA%2BKHGDXQaZ9393J%2F5UJ5Fx2JAYeY9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99166f8a2c1256a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-18T11:41:01.301496Z","times_seen":15383472,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/front.crollbar.min.css?ver=2.5.5","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:57.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:07:43 GMT","end":"Wed, 14 Jan 2026 14:06:19 GMT"},"fingerprint":{"sha1":"10:3E:D1:9C:87:2B:E6:19:B2:77:B6:7F:1A:22:7A:25:AA:1A:AC:16","sha256":"3A:EB:A1:65:EC:BA:60:40:6B:24:A6:73:1E:57:89:DD:78:FA:95:FB:5A:FD:38:E3:56:5F:E9:9B:C4:E9:72:AB"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/front.crollbar.min.css?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/\r\nCookie: starstruck_2610cdb1e7fc17e8e57860211a1b0aab=f2d421b29e8c2e151a8314a065fbeb38\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rKRJlFptFS%2BvBL16DBEtr3fD3lb1G%2BHfbVZiLIS%2BHUoi5wXrceKKZwH53Y7y%2BxNW3MtddadZbH3TVDXcdYXHhfDqfPBA9h99Q9lm\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 99166f69c8660b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7194,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7193)","md5":"9e616d63cbabe72390edb6a56b0542d5","sha1":"efdae53b931dfc69ce0737b7421ed84923020cbc","sha256":"6e12666ba88aac25e0a52cb658950b878e5932f258d3d6bde397542e338a021b","sha512":"c80191ff1f688e53ae3efb32dbfe1a963f4a7af42825bdf0de7ac0251b1aba5e5ef31e214062a036b08e5f9fe8ddf5e11edd36f9b64dbc31449b0df928b48608","ssdeep":"96:hLWoARQ0z2fpRfbc70ImVH6Reug3/uTFgqoNFrPQsS:hStRQ0sXH6Rev3mEQsS","tlshash":"5ae1688c090236dff75f45bae7c233a911f977875162465db09b1ce8af8c7b6a436402","first_seen":"2023-04-06T14:37:36Z","last_seen":"2026-05-18T02:42:17.247924Z","times_seen":1199,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:57.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:07:43 GMT","end":"Wed, 14 Jan 2026 14:06:19 GMT"},"fingerprint":{"sha1":"10:3E:D1:9C:87:2B:E6:19:B2:77:B6:7F:1A:22:7A:25:AA:1A:AC:16","sha256":"3A:EB:A1:65:EC:BA:60:40:6B:24:A6:73:1E:57:89:DD:78:FA:95:FB:5A:FD:38:E3:56:5F:E9:9B:C4:E9:72:AB"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: xhdfriday.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/\r\nCookie: starstruck_2610cdb1e7fc17e8e57860211a1b0aab=f2d421b29e8c2e151a8314a065fbeb38\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 09 Jun 2023 02:49:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uQz15l%2FgmHV6aQq6xMoyqej%2FcyHcgE7qve7jmiyJutPfWMWBUDv9qSG3z98uNfA4DOyMTTXE31%2B4WjxwC5VtK%2BgPvsDWgQrn8EJ3\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 99166f69e86c0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-05-18T11:39:31.33434Z","times_seen":777455,"resource_available":true,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":550,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:58.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 23:05:43 GMT","end":"Fri, 28 Nov 2025 23:05:42 GMT"},"fingerprint":{"sha1":"B9:51:95:1F:A8:75:17:3A:9B:B1:75:96:F4:7D:7A:CF:3D:52:C9:71","sha256":"36:D1:B1:18:05:03:10:B2:46:BC:6C:71:A5:E7:BE:07:32:66:88:16:04:1E:5F:96:0F:10:B6:4B:BF:01:D1:42"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 20 Oct 2025 06:24:58 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32182\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e811a81f3d50ad69e7a1fc9368b1e342\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":63,"dns":1,"connect":17,"send":0,"wait":24,"receive":19,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.googleusercontent.com/s2/favicons?domain=https://wtsmovies.com/torrent/movie/","fqdn":"s2.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.1","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:59.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:47 GMT","end":"Mon, 15 Dec 2025 08:41:46 GMT"},"fingerprint":{"sha1":"F8:5F:63:28:35:3F:3B:74:50:6E:B0:8A:1E:82:1E:81:0B:2C:5D:57","sha256":"E5:11:BE:F6:31:91:0A:88:46:0E:37:CF:15:59:95:26:EE:40:53:A0:69:3F:0A:3E:F6:B4:44:43:15:61:C4:6F"}}},"request":{"raw":"GET /s2/favicons?domain=https://wtsmovies.com/torrent/movie/ HTTP/1.1\r\nHost: s2.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://t0.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=https://wtsmovies.com/torrent/movie/\u0026size=16\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\ndate: Mon, 20 Oct 2025 06:24:59 GMT\r\nexpires: Mon, 20 Oct 2025 06:54:59 GMT\r\ncache-control: public, max-age=1800\r\nserver: sffe\r\ncontent-length: 349\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":726,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-18T11:41:01.301496Z","times_seen":15383472,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":69,"dns":0,"connect":8,"send":0,"wait":16,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/css/main.css","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stbhg.click/e/kjkmndw1ruyf","date":"2025-10-20T06:25:02.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/kjkmndw1ruyf\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:25:02 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Nov 2022 15:05:00 GMT\r\netag: W/\"636fb61c-c11b\"\r\nexpires: Fri, 24 Oct 2025 08:06:54 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 253087\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iZ%2FJEbszBXzfSOgqdIQ%2Ba0AjTX12N7tKcbzezXEpsgPpz%2FQHOcLmAJ6YindUt1%2Boqyg3G2eXj9H9DZqFRrTFwSYr3eL6VU8RyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99166f8719b156a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49435,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"51d559d2f974e61e564a5f8120a23a9a","sha1":"9eab84e6bf40cfca88aac7f6d849df54f27ac12d","sha256":"a01ef8569a9021b0315bf38d5d518a928d98efce576f56ac012c30f2b63e1cb6","sha512":"5a4a10a2083c3375306ea83736eb2f991cca894dd2f78582c18886609ba1ac725877abdee3ecbcb368d5bb3c57fe0b418e3d0a87bcca015d0fb8de5f51e8fdc8","ssdeep":"1536:AQV8FxnYgpery2vYsRwq9AOOGvC4DONaYi3Rz:AQVMxnYTy2v/AOOkdRz","tlshash":"c8239522a7812c0cf06bd1b67d6197d6233e4053d92b1f7c7ab93578c28e4e85173b9a","first_seen":"2023-04-09T22:09:53Z","last_seen":"2026-05-17T22:16:11.72247Z","times_seen":641,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/player/jw8/jwplayer.core.controls.js?v=42","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/kjkmndw1ruyf","date":"2025-10-20T06:25:02.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /player/jw8/jwplayer.core.controls.js?v=42 HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/kjkmndw1ruyf\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:25:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Thu, 24 Oct 2024 08:24:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 4550\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n3CW9QBTbFvnNhXHtk24BkjtmhsxZczuUq1hhCuUpU2OFOHUxOjOQdWNGwQS%2FoQgpLDp3iDeKsdtoVi7mX0AWEuVtRUZIDBHqQ%3D%3D\"}]}\r\netag: W/\"50d6c-62534bc2f2f80\"\r\ncontent-encoding: br\r\ncf-ray: 99166f887acf56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":331116,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"bc91b5efc8f4bb2482c2d7d5d8d9b691","sha1":"5db922c4c6caf3a7d22f57a21670281d5c31994b","sha256":"f061c139ad68d7ed1360ab6a2c8842466d2913582468c48eb2d1ee2a651fb495","sha512":"f1e175f4658e4cb1c603875c81f3b96caaab74346c78d9b320e564f0a09a8518b11123509351bfa5229ac9d867d56c6afc1118ce7c368ff1ce729de877c7d694","ssdeep":"3072:+jY7nFuuslX/Na3u6NxIeLSJhy1yiSS64pOknRBb9Wsr9BbrC3YLrmYRJ:2Yx5U/Na3JpLSJhyJOaRBRtBHzLrmYRJ","tlshash":"e9640932214252359aea82da66514604b3398085f516cfacff2ceddd4c6e9c731fabb4","first_seen":"2024-12-01T14:07:01.698179Z","last_seen":"2026-05-17T22:16:11.716055Z","times_seen":678,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixoraa.cc/kjkmndw1ruyf0000.jpg","fqdn":"pixoraa.cc","domain":"pixoraa.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stbhg.click/e/kjkmndw1ruyf","date":"2025-10-20T06:25:03.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixoraa.cc","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Sun, 14 Sep 2025 20:10:15 GMT","end":"Sat, 13 Dec 2025 19:04:04 GMT"},"fingerprint":{"sha1":"45:E4:A3:F5:8F:7E:B1:E8:92:97:F7:D8:1D:12:4B:2C:80:44:DF:0B","sha256":"1B:AF:7D:65:DC:AC:DC:17:29:53:1A:93:D0:D0:F8:BF:AC:6E:91:2E:92:CB:77:B1:E0:45:73:7C:EE:2D:80:8E"}}},"request":{"raw":"GET /kjkmndw1ruyf0000.jpg HTTP/1.1\r\nHost: pixoraa.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 504 Gateway Timeout\r\ndate: Mon, 20 Oct 2025 06:25:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6391\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 99166f8baca535a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"504","status_text":"Gateway Timeout","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-18T11:41:01.301496Z","times_seen":15383472,"resource_available":true,"data":null}},"time_used":10175,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10174,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p16-tiktok-ads-sg.tiktokcdn.com/obj/ad-site-i18n-sg/202506015d0d04a7bc40ce0b44bc9be8","fqdn":"p16-tiktok-ads-sg.tiktokcdn.com","domain":"tiktokcdn.com","tld":"com"},"ip":{"addr":"23.36.77.89","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://stbhg.click/e/kjkmndw1ruyf","date":"2025-10-20T06:25:03.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tiktokcdn.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 07 Mar 2025 05:26:04 GMT","end":"Wed, 08 Apr 2026 05:26:03 GMT"},"fingerprint":{"sha1":"AB:A5:D2:DF:CE:6C:6D:AE:DD:36:C7:0F:CC:E1:32:1D:76:C7:35:C0","sha256":"75:76:14:5C:F5:BB:65:0D:C6:06:2B:2A:07:FA:50:AF:47:D8:3D:E9:63:80:10:B1:BA:42:B3:0B:51:AE:A7:9B"}}},"request":{"raw":"GET /obj/ad-site-i18n-sg/202506015d0d04a7bc40ce0b44bc9be8 HTTP/1.1\r\nHost: p16-tiktok-ads-sg.tiktokcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://stbhg.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 562942\r\nimagex-fmt: png2png\r\nlast-modified: Sun, 19 Oct 2025 14:22:32 GMT\r\nnw-session-id: 202510192222326793E77CB6EC569CC04Acsh8813tt\r\nnw-session-trace: 2025-10-19T14:22:32.896179621Z 106\r\nx-bdcdn-cache-status: TCP_HIT\r\nx-length: 562942\r\nx-powered-by: ImageX\r\nx-response-date: Sun, 19 Oct 2025 14:22:32 GMT\r\nx-tt-logid: 202510192222326793E77CB6EC569CC04A\r\nx-request-ip: fdbd:dc53:3:823::34\r\nx-response-cinfo: fdbd:dc53:3:823::34\r\nx-response-cache: edge_hit\r\nx-tt-trace-host: 0183ce81da5243b4236bb7c0b508ead913825f3c4756b8c8d3b51494afb8756172ffff386f203a0ffe8bd633a09cb595bc88391cad4c6904148dc6accc067340d2f13fa18075be45361bc63d4d451144e3687396df58413c6a2b93bcd6a36fe95354afe877b5b9c1ff6c701dc3929ecec3570e1e6d0ef46cc987b62a63d49fcd19\r\nx-tt-trace-id: 00-25102012122294AD2EF822093376AD43-7C854BFA4E021428-00\r\nserver: TLB\r\nx-parent-response-time: 17,23.48.148.163, 907,23.1.233.207, 919,23.36.77.85\r\ncache-control: max-age=31536000\r\ndate: Mon, 20 Oct 2025 06:25:04 GMT\r\nx-cache: TCP_MISS from a23-36-77-85.deploy.akamaitechnologies.com (AkamaiGHost/22.3.0-fcd174d50fb223c8364cec3c4b3f29c6) (-)\r\nx-cache-remote: TCP_MISS from a23-1-233-207.deploy.akamaitechnologies.com (AkamaiGHost/22.3.0-fcd174d50fb223c8364cec3c4b3f29c6) (-)\r\nx-tt-trace-tag: id=16;cdn-cache=miss;type=static\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=919, origin; dur=0, inner; dur=1\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":562942,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"2d0b8ab34986ebb9c3866e3a22709d08","sha1":"67ef2c1f37807f3feaaa16e571e5436a9fae8d24","sha256":"e42cef3712ce18b98613c317d5665a251e9fb31a73c1380b929ff113d4100fb9","sha512":"2eed547d71aa4ada3e4e7b89297f871da2aabca9a719d5ada0dba703e334127d570e8cc60116254e18aec8f62f64e096e77a8c954f283bbb142fa4f1cf6aaab2","ssdeep":"12288:y3Str7k/c1nRqnbjia42NWkJiasQvfV7HCZaIii4hEApkucVvaE3vxi+FP:yi6NyGnsG14dii4eApRaSrYP","tlshash":"5ec412496f8c1debc51311b6524cabb333744d106e486fc729b9bb8af9f62c9d92421c","first_seen":"2025-10-20T06:25:38.707486Z","last_seen":"2025-10-20T06:25:38.707486Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3202,"timings":{"blocked":312,"dns":283,"connect":1,"send":0,"wait":921,"receive":1657,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/starstruck.raty.js?ver=2.5.5","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:57.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:07:43 GMT","end":"Wed, 14 Jan 2026 14:06:19 GMT"},"fingerprint":{"sha1":"10:3E:D1:9C:87:2B:E6:19:B2:77:B6:7F:1A:22:7A:25:AA:1A:AC:16","sha256":"3A:EB:A1:65:EC:BA:60:40:6B:24:A6:73:1E:57:89:DD:78:FA:95:FB:5A:FD:38:E3:56:5F:E9:9B:C4:E9:72:AB"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/starstruck.raty.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/\r\nCookie: starstruck_2610cdb1e7fc17e8e57860211a1b0aab=f2d421b29e8c2e151a8314a065fbeb38\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hGz%2FCHgn8bNqKaQasNfM24%2BqmLnrlukuuAr8fgBYpXNmF9vXpMlmgnQ2Cxl7FtknC5bapUcqSG7o0jVQAaKAcNXedC07UxqEeDhL\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 99166f69f8730b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10364,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10362), with CRLF line terminators","md5":"d967735d0c4a36d039142d01d02ee257","sha1":"e79738152720eef153774d3a6806d03861623f2f","sha256":"310589cc35c17dc5e369b35b45423ac830bb0a0b65f7f720a1c3b089254bd152","sha512":"ffa0ed7ed3788cb34ba92c8c94fd7c0cc4ecee293e17ab73e762b46ad604efa543dd3abc96680786632c9af5f93d374facf2daf260194f76e1787d5889017c0d","ssdeep":"192:4r1zqoHYKx2zznWhn5KsPYxUDAh8QGrCafGULhcX5LlXF/OfIpoqt:4rJxc3WwmCoKmyoqt","tlshash":"242211ccb3827146eea3337059ab270ee232be49e54a401d787dc7d1ef6990d2066e75","first_seen":"2023-03-07T01:06:58Z","last_seen":"2026-05-18T09:10:02.931624Z","times_seen":945,"resource_available":true,"data":null}},"time_used":791,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":790,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t0.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=https://wtsmovies.com/torrent/movie/\u0026size=16","fqdn":"t0.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:59.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=https://wtsmovies.com/torrent/movie/\u0026size=16 HTTP/1.1\r\nHost: t0.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xhdfriday.sbs/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: image/png\r\nx-content-type-options: nosniff\r\ndate: Mon, 20 Oct 2025 06:24:59 GMT\r\nserver: sffe\r\ncontent-length: 726\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":726,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"b8a0bf372c762e966cc99ede8682bc71","sha1":"2d7c9b60d1e2b4f4726141de2e4ab738110b9287","sha256":"59bfe9bc385ad69f50793ce4a53397316d7a875a7148a63c16df9b674c6cda64","sha512":"6883c7a3f702fb3df5e698333c8a05705970fcb476a31a2008444a02122b6870de158176c86a1f6605a0783b88d3523646b4d288696e777b37cc02d5d95266ca","ssdeep":"","tlshash":"fe0165e3a34595286b870a62f4b87082162a6ae560c3c09964e4ec6e1f05168e4e5e9c","first_seen":"2023-04-05T05:54:43Z","last_seen":"2026-05-18T08:55:28.695057Z","times_seen":6919,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":88,"dns":55,"connect":8,"send":0,"wait":18,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/js/jquery.cookie.js","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/kjkmndw1ruyf","date":"2025-10-20T06:25:02.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /js/jquery.cookie.js HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/kjkmndw1ruyf\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:25:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Tue, 31 May 2011 13:53:00 GMT\r\netag: \"4de4f2bc-10eb\"\r\nexpires: Tue, 21 Oct 2025 17:55:07 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 476994\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dezqS4J8lv8yIiTcZSNlVkUVCgMOsYks%2BNjX9QA16EbbP0JJOT%2FW7pP0dFxQhAWRlLazW31slJIf%2BAKj3xYZ1BEoy%2BZ5%2BgNUjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99166f8719b856a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4331,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"ae0c2c5d8f01f7d35bb698bb618a62f7","sha1":"63556a22ddea1c5f23a5cf7d0b6d35c7aab54e20","sha256":"75aef2e95ea7f3a70999396fba0c2ab866f4ff06313cf1b07780d800a5fc1ebc","sha512":"eac94ca9d884692af8bdf12aa6e902a3be4eed0772ad8f2932ac1c3328b83a7351cdf743a409bbc0a3cd385956c08d3203d51c572bb1680489e37330fe27a2bb","ssdeep":"96:L4BZxb64Ng7V8cNwpGylRCsKZcj1JXulL6M/aGByLskPSP4lBCClf1wgCyC:LQnb6eg7DgCsk8fgZJkPSPa+gCyC","tlshash":"2e91fd293a0d231d149353f57aee10c8a930d632216ad46c744cb6b06f00c63ddfbbea","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-05-18T10:36:57.790676Z","times_seen":4450,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/stream/L0PjnBn3df1R3bnXiRqN0A/kjhhiuahiuhgihdf/1760984702/24482347/master.m3u8","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://stbhg.click/e/kjkmndw1ruyf","date":"2025-10-20T06:25:03.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /stream/L0PjnBn3df1R3bnXiRqN0A/kjhhiuahiuhgihdf/1760984702/24482347/master.m3u8 HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/kjkmndw1ruyf\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:25:03 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\nserver: cloudflare\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dp19zIRlRf6ryhWIy7RSkGZrKGZ9oArnrlRNVLgyXtLmUl1dpRkHr29xBO0hHIPV0V%2BbdlVhILGVxN15dhebZVUMvnRBzyUrkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99166f8a3c1756a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":422,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"3011b3f3cbfab1d0f0ed9d6b5aeb301a","sha1":"5eb5918a2bf30a5da40e9c05a3cf0521ced2ae62","sha256":"9cb3a8f7ced152d9054a76d1624a2ef78f6ea9c1e6c9eab347cbd2c0a2747de4","sha512":"51a738c1d8cfbdb2ea69eaa4df88d476e3ad7d2a6e7c45219ef826e49edf38a6fafc9dd5ff1104b3e43f4ea15b5d8c4c54c41901b0cc2908577119812e3cb9e3","ssdeep":"","tlshash":"95e0a79c753ed92b342499c8489c740678096cfd05849ba8f499118849d7d783aba164","first_seen":"2025-10-20T06:25:38.714508Z","last_seen":"2025-10-20T06:25:38.714508Z","times_seen":1,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-includes/css/dist/block-library/style.min.css?ver=6.8.3","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:57.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:07:43 GMT","end":"Wed, 14 Jan 2026 14:06:19 GMT"},"fingerprint":{"sha1":"10:3E:D1:9C:87:2B:E6:19:B2:77:B6:7F:1A:22:7A:25:AA:1A:AC:16","sha256":"3A:EB:A1:65:EC:BA:60:40:6B:24:A6:73:1E:57:89:DD:78:FA:95:FB:5A:FD:38:E3:56:5F:E9:9B:C4:E9:72:AB"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.8.3 HTTP/1.1\r\nHost: xhdfriday.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/\r\nCookie: starstruck_2610cdb1e7fc17e8e57860211a1b0aab=f2d421b29e8c2e151a8314a065fbeb38\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 08 Jul 2025 10:02:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SNDR77quXUdL1DbJS7Udbzn9DGQppNGIy0iWbNyKVFm6WcFcDn0fPKSHu4o7LFUw%2FF3ZTpQ4EPCXCW%2Fi2hke3w10KydPqE1mjavI\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 99166f6968610b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116345,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55654)","md5":"a06b3af98203ddc303997e0e0caaff83","sha1":"04c3e7de74a890d18014588c4e1f077a52d79acc","sha256":"838ede31a58a3cdb411d6dd7f13cbe65d4a26193d9fa31882854e63938f12bac","sha512":"4ce1079b8dc07043b0201dc74f5888b50aa530a4e604eecd7673e225946de62c421b290a707014ddaf4366591f8c4767737b5689bc44d57eb0a11aef905cead9","ssdeep":"3072:seeJu1iQg5MG7x+qehvP0x2pck2qkA3Pu:b1iQg5MG7x+qehvP0x2pck2lA2","tlshash":"34b3615417b4dcf935ffa73a5e4ee248a503aa41c68a57ebe066d190618ca490cf3f0f","first_seen":"2025-07-15T17:03:07.843749Z","last_seen":"2026-05-18T11:43:58.524728Z","times_seen":171869,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/fontawesome/css/all.min.css?ver=5.15.1","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:57.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:07:43 GMT","end":"Wed, 14 Jan 2026 14:06:19 GMT"},"fingerprint":{"sha1":"10:3E:D1:9C:87:2B:E6:19:B2:77:B6:7F:1A:22:7A:25:AA:1A:AC:16","sha256":"3A:EB:A1:65:EC:BA:60:40:6B:24:A6:73:1E:57:89:DD:78:FA:95:FB:5A:FD:38:E3:56:5F:E9:9B:C4:E9:72:AB"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/fontawesome/css/all.min.css?ver=5.15.1 HTTP/1.1\r\nHost: xhdfriday.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/\r\nCookie: starstruck_2610cdb1e7fc17e8e57860211a1b0aab=f2d421b29e8c2e151a8314a065fbeb38\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DHgxqphUxJeKc9NoVGyUtloaeGw1WcN5Cvz7pkkWT5RGCaJ7KaHtO1Ogns%2BbNqfMcLlKIv2qOr2OajoOQuXfAgBgqhD3shynHxbt\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 99166f69b8630b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":174333,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65393)","md5":"95fe9653f2c45892b7e58090566f510f","sha1":"be3795caeaada195d12c96bb689a7f0b6f8d63b1","sha256":"257418de09101ff7791d410f420f9320141ce0436c264b076d46539b0ea0f830","sha512":"ace73c0affb5ee5c14308e4eac07c952f76c9d04ef44c19b5c73f3152f6d7543d24afe8573f6db1d4c757298b9ee215bc13bb883315d5c9bef4e79f27c3e206e","ssdeep":"1536:Kwv1E8SIZlJ/Zg9ADlnIZ+mqX565dWGFIibJbiC8IYiy6BFAXq6Y18GMF63kAmhT:N1E1IZ3/g2ln++1glbqMAXHR","tlshash":"b7046fb4d41e01da7726c60fab01b27a99f6f738d5410e4ae0cb4d1e1de2b9811c9bed","first_seen":"2023-04-06T14:37:36Z","last_seen":"2026-05-18T03:08:08.139824Z","times_seen":3532,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/front.style.min.css?ver=2.5.5","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:57.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:07:43 GMT","end":"Wed, 14 Jan 2026 14:06:19 GMT"},"fingerprint":{"sha1":"10:3E:D1:9C:87:2B:E6:19:B2:77:B6:7F:1A:22:7A:25:AA:1A:AC:16","sha256":"3A:EB:A1:65:EC:BA:60:40:6B:24:A6:73:1E:57:89:DD:78:FA:95:FB:5A:FD:38:E3:56:5F:E9:9B:C4:E9:72:AB"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/front.style.min.css?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/\r\nCookie: starstruck_2610cdb1e7fc17e8e57860211a1b0aab=f2d421b29e8c2e151a8314a065fbeb38\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CPftZx0qVinplJLAXnuUkPruxSjVtP7Mt2bUZHfbCm6B0%2FoFuuPWUNOLQSNkK4MXTOeYR17W%2FbsphRmbbtEq%2FaCbGhPuWsjvEtN5\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 99166f69c8670b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97357,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c09b8d324eea3e01ab0f0eb66aba27e8","sha1":"23a640ee42f0d448a742bcb1f17dcd7661b3c4c9","sha256":"35a6c6b08117a7c8239667d8c72c17f7e92fbaede64b3491b515642c0b86e677","sha512":"b6f17115bb9b5526c28cf5343098237b957cb26655301c8040bde3dbe59daa9acfabfeff1c66601df2b2b7d569d75281cbbe5dad07b0f7f2b5c987339f6ad235","ssdeep":"1536:yfMqJ1dqPoietmX+C4+ed0qBe3bAMv1SQxK5tt1jDE1p:eL6nEjw","tlshash":"ff9344315532602cb53ba5a1fec25bec322c8167f3234dead65d653ac2d65a32532bcc","first_seen":"2023-04-06T14:37:36Z","last_seen":"2026-05-18T02:42:17.552404Z","times_seen":878,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":542,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relishsubsequentlytank.com/e5/74/0c/e5740c7b80abc2329366e06d2dc81dff.js","fqdn":"relishsubsequentlytank.com","domain":"relishsubsequentlytank.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:57.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"relishsubsequentlytank.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 22:03:42 GMT","end":"Fri, 02 Jan 2026 22:03:41 GMT"},"fingerprint":{"sha1":"E7:83:20:81:25:0E:7C:3B:7A:7C:3D:BA:C6:AA:E8:D2:87:13:7E:C1","sha256":"0C:8A:CE:2E:84:60:C2:59:BF:CF:8A:E8:E9:C4:96:C3:12:5B:FF:0A:D0:27:6C:5E:35:3E:26:A3:5C:84:94:AF"}}},"request":{"raw":"GET /e5/74/0c/e5740c7b80abc2329366e06d2dc81dff.js HTTP/1.1\r\nHost: relishsubsequentlytank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Mon, 20 Oct 2025 06:24:58 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 38344\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: relishsubsequentlytank.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0e8d11af04e315d6dbd19f7610c78aa4\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106601,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c751058dd8689599fe724bf9d0adf8b5","sha1":"ff0edca55d542b29840cee3860083809b19dab79","sha256":"3f1a8fe6b2b8ed35564f3597fa20dbba02566e96be93138decb8768350647de0","sha512":"2b832577c28f73952a93e664a43bc206891ae73a449e74c7c50cfb6a3f1b1fdfed39fa6c0131068f37ce26319e240e605ab699936b58b92ffa10f99fe01cb82c","ssdeep":"1536:H9IDYewEZykdTzY67ytOUS5VlIXga6kSFf02mdBV4mCzCgiA0eQpE0I9N0rvQ:ennT9RCgZ0eQp29N0rvQ","tlshash":"95a3a4883f40f17d0796b47a323fa61af0791a01509cd69cf107f1a8ae6674ab43fe65","first_seen":"2025-10-20T06:25:38.722063Z","last_seen":"2025-10-20T06:25:38.722063Z","times_seen":1,"resource_available":true,"data":null}},"time_used":794,"timings":{"blocked":287,"dns":26,"connect":93,"send":0,"wait":99,"receive":94,"ssl":193},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"relishsubsequentlytank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"relishsubsequentlytank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"memojav.com/image/preview/1fns00037/1fns00037jp-5.jpg","fqdn":"memojav.com","domain":"memojav.com","tld":"com"},"ip":{"addr":"207.148.118.22","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:58.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"memojav.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 13:04:19 GMT","end":"Wed, 24 Dec 2025 13:04:18 GMT"},"fingerprint":{"sha1":"AB:FE:13:26:95:37:7F:65:AB:78:21:EB:5E:DF:D7:EF:E7:63:D7:5E","sha256":"00:94:CD:27:13:BD:9E:FE:96:C8:EF:E5:C0:EF:0F:05:7E:B0:CC:97:67:61:2A:DC:F8:23:C4:5F:65:7D:00:94"}}},"request":{"raw":"GET /image/preview/1fns00037/1fns00037jp-5.jpg HTTP/1.1\r\nHost: memojav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.0\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 260329\r\nlast-modified: Sun, 18 May 2025 14:14:12 GMT\r\nvary: Accept-Encoding\r\netag: \"6829eb34-3f8e9\"\r\ncache-control: public, max-age=300\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":260329,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", baseline, precision 8, 532x800, components 3","md5":"6f5d50674b3da6ced969fbd74d01b4b4","sha1":"c15007b74b05171ff857a061e1a12c428f1a40d3","sha256":"533244312ca2e61128d8f26cfd3a882481617049c3e00d65bccb58a16e2b47fd","sha512":"64ff5e2541b0cd36e218ddb9a4125267dd4454fd78457327a927cf847c9eb61fcf2913f4220242a9040b9483af385cfea6c5f93af79d37adc68b849c791c8fa9","ssdeep":"6144:Ev5sp/XEMiV9zBWkwAY+H+5m8PlHGFTMdcEP5:Eo/eB5rH+MyHG6SE5","tlshash":"eb4413bdd6316365cfc9a981af46236835fcdd3a745a60d264e420dec8eb0498b1cf6c","first_seen":"2025-10-14T04:43:33.278405Z","last_seen":"2025-10-20T06:25:38.726308Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1780,"timings":{"blocked":362,"dns":36,"connect":187,"send":0,"wait":381,"receive":617,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=2043\u0026rd=2043\u0026fd=557\u0026bv=25.10.2289\u0026tmpl=70","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:58.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 Aug 2025 00:05:39 GMT","end":"Sat, 29 Nov 2025 00:05:38 GMT"},"fingerprint":{"sha1":"E2:5D:94:19:A8:E3:DF:BB:0C:81:C9:E0:EE:8B:9E:E1:F1:AD:67:58","sha256":"38:80:3F:7A:65:C5:71:DD:A6:A0:20:12:A2:CF:9E:19:28:AA:28:ED:C3:D3:FE:04:AE:C0:61:69:26:6D:27:C1"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=2043\u0026rd=2043\u0026fd=557\u0026bv=25.10.2289\u0026tmpl=70 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 20 Oct 2025 06:24:59 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-18T11:41:01.301496Z","times_seen":15383472,"resource_available":true,"data":null}},"time_used":718,"timings":{"blocked":312,"dns":28,"connect":95,"send":0,"wait":93,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:58.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xhdfriday.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 12:56:02 GMT\r\nexpires: Fri, 16 Oct 2026 12:56:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 322136\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-18T11:40:34.112243Z","times_seen":833323,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":99,"dns":1,"connect":7,"send":0,"wait":8,"receive":9,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.googleusercontent.com/s2/favicons?domain=https://wtsmovies.com/subtitles/movie/","fqdn":"s2.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.1","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:59.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:47 GMT","end":"Mon, 15 Dec 2025 08:41:46 GMT"},"fingerprint":{"sha1":"F8:5F:63:28:35:3F:3B:74:50:6E:B0:8A:1E:82:1E:81:0B:2C:5D:57","sha256":"E5:11:BE:F6:31:91:0A:88:46:0E:37:CF:15:59:95:26:EE:40:53:A0:69:3F:0A:3E:F6:B4:44:43:15:61:C4:6F"}}},"request":{"raw":"GET /s2/favicons?domain=https://wtsmovies.com/subtitles/movie/ HTTP/1.1\r\nHost: s2.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://t2.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=https://wtsmovies.com/subtitles/movie/\u0026size=16\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\ndate: Mon, 20 Oct 2025 06:24:59 GMT\r\nexpires: Mon, 20 Oct 2025 06:54:59 GMT\r\ncache-control: public, max-age=1800\r\nserver: sffe\r\ncontent-length: 351\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":726,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-18T11:41:01.301496Z","times_seen":15383472,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":69,"dns":0,"connect":8,"send":0,"wait":18,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-20T06:24:56.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:07:43 GMT","end":"Wed, 14 Jan 2026 14:06:19 GMT"},"fingerprint":{"sha1":"10:3E:D1:9C:87:2B:E6:19:B2:77:B6:7F:1A:22:7A:25:AA:1A:AC:16","sha256":"3A:EB:A1:65:EC:BA:60:40:6B:24:A6:73:1E:57:89:DD:78:FA:95:FB:5A:FD:38:E3:56:5F:E9:9B:C4:E9:72:AB"}}},"request":{"raw":"GET /movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/ HTTP/1.1\r\nHost: xhdfriday.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding,Cookie\r\nlink: \u003chttps://xhdfriday.sbs/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://xhdfriday.sbs/wp-json/wp/v2/movies/167\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://xhdfriday.sbs/?p=167\u003e; rel=shortlink\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dXc4lqs4I24ib8No2vlnOe3MvFA2Z8%2B8ycsEGe3qwlXpxj7yxYeMdTJIVQw%2BEsHn5LXExx94dHNC0IvtKfrMWcPikXtcnVeHhstqazA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: starstruck_2610cdb1e7fc17e8e57860211a1b0aab=f2d421b29e8c2e151a8314a065fbeb38; Path=/; Max-Age=31536000; Expires=Tue, 20 Oct 2026 06:24:57 GMT\r\ncf-ray: 99166f612f962efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Draftpress HFCM","description":"Header Footer Code Manager by Draftpress is a easy interface to add snippets to the header or footer or above or below the content of your page.","website":"https://draftpress.com/products/header-footer-code-manager-pro/","common_platform_enumeration":"","icon":"Draftpress.png","categories":["WordPress plugins"]},{"name":"Yoast SEO:25.8","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]}],"data":{"size":51239,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (36728), with CR line terminators","md5":"74d499d08d70a83d5ea08e96b706ed40","sha1":"c2560b7e1e2a3c0e1ef5c531fe36afbcdde35541","sha256":"c197dd13336e442fe946da5f6a56ee9e67aa14287e453d57c56359b9c3ed78fd","sha512":"33a24fdc040579522464438e8ad27c76ba2ecc9d6329d684d0c1c8a84936827157b164a868a18bfd3c8492007b5b2147fe67f7d38b03273ebea1780f3dfde9d9","ssdeep":"768:11asoZPJdyPZJCIMwsy9nozWlmSoYiJIMa89JRnduX:1s9Arb7toClmbIMZn5duX","tlshash":"fd33f973f05818376b2fd3d8c494732cb1a25119ce028e59f6f852ec2be5ea5a56332d","first_seen":"2025-10-20T06:25:38.729882Z","last_seen":"2025-10-20T06:25:38.729882Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1340,"timings":{"blocked":76,"dns":63,"connect":1,"send":0,"wait":1182,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-RTM6XRXKXM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:57.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtag/js?id=G-RTM6XRXKXM HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nexpires: Mon, 20 Oct 2025 06:24:58 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 140150\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":420404,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"756b722143e9076a9c7a768ec6d1dd30","sha1":"0c3db4bf7ba99e2938cfbeb3ab3ca95596d26bcb","sha256":"fdb6267716b5dba998405f22a75659c206bb6f30dbd4a0509190285300d689b9","sha512":"440ecef1bde172ed6fc560d9723e496f2d46739b045543be3b4d90136d41a4c5030ca4c4b2929f3d4f98e531170f9cbb87d316706bf3c1966d50fc78e67103f1","ssdeep":"6144:Zlc6tQSyOe+3y4nkEt7F8KWjxSqpRjeWvkAX6HJLGy1tyyluxwuuSyv:Z66rRR3y4nkEt7F0EqPeKRy1bv","tlshash":"2a94198e73c674269396f078503f018ba57b29a2f45cc895f189cce42e74a9a4277f7c","first_seen":"2025-10-20T06:25:38.734828Z","last_seen":"2025-10-20T06:25:38.734828Z","times_seen":1,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":86,"dns":1,"connect":8,"send":0,"wait":34,"receive":22,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w92","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"138.199.37.225","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:57.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Sep 2025 20:10:35 GMT","end":"Mon, 22 Dec 2025 20:10:34 GMT"},"fingerprint":{"sha1":"9B:24:B0:91:79:AC:B0:0C:F8:BA:AA:DC:AC:6D:67:E9:B9:AF:6F:BE","sha256":"11:31:79:0F:81:6F:B5:20:34:07:93:CB:FF:0D:3B:0D:EF:34:FB:C5:B5:99:92:02:90:BE:9E:5A:2D:FD:5A:E7"}}},"request":{"raw":"GET /t/p/w92 HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-DE1-1055\r\ncdn-pullzone: 775336\r\ncdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf\r\ncdn-requestcountrycode: NO\r\ncache-control: max-age=43200\r\netag: W/\"653e955073f6ff68f1e0cfa5a613ef75\"\r\nlast-modified: Thu, 08 Apr 2021 15:54:44 GMT\r\ncdn-cachedat: 10/19/2025 21:29:29\r\ncdn-proxyver: 1.39\r\ncdn-requestpullcode: 404\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 863\r\ncdn-status: 404\r\ncdn-requesttime: 0\r\ncdn-requestid: fcfb9c1c34f84beac0e0979cbfe48978\r\ncdn-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-18T11:41:01.301496Z","times_seen":15383472,"resource_available":true,"data":null}},"time_used":548,"timings":{"blocked":472,"dns":1,"connect":22,"send":0,"wait":23,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/8d/e9/ae/8de9ae4b0e4b914d604a7e4b56139ffe.js","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:58.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 Aug 2025 00:05:39 GMT","end":"Sat, 29 Nov 2025 00:05:38 GMT"},"fingerprint":{"sha1":"E2:5D:94:19:A8:E3:DF:BB:0C:81:C9:E0:EE:8B:9E:E1:F1:AD:67:58","sha256":"38:80:3F:7A:65:C5:71:DD:A6:A0:20:12:A2:CF:9E:19:28:AA:28:ED:C3:D3:FE:04:AE:C0:61:69:26:6D:27:C1"}}},"request":{"raw":"GET /8d/e9/ae/8de9ae4b0e4b914d604a7e4b56139ffe.js HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 20 Oct 2025 06:24:59 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3466\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0d3213b8b5511066a34f27f511232188\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6581,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6581), with no line terminators","md5":"efe226df7b34cfaf12077e69c581fc6c","sha1":"a59956a3eea86867af25c422cde94c65bec3516e","sha256":"546c3b249eb34013446f85b06e8e833ded12a229890e5a23a17b6455fffa7abe","sha512":"46bb70f28959da2732afd2977eab33508b891a27718de4f51c51bb2a1a646026136c32a3f17636b49346631cf4977279778b5b0b03d64b48970599960567c944","ssdeep":"192:Aiu3jQ5Vd/MinGiJ9HLfOHMcDkUpRwwls:Aiu3jQ5kinXHLfOscoUpOwm","tlshash":"3fd1c9dc3f8071e007ab647bba3fa41ab5a9cc54618fd81cc012b5e03d74a6ad577761","first_seen":"2025-10-14T13:51:47.725273Z","last_seen":"2025-10-21T12:57:18.671573Z","times_seen":522,"resource_available":true,"data":null}},"time_used":720,"timings":{"blocked":308,"dns":27,"connect":92,"send":0,"wait":99,"receive":1,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:58.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xhdfriday.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 12:56:02 GMT\r\nexpires: Fri, 16 Oct 2026 12:56:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 322136\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-18T11:40:34.112243Z","times_seen":833323,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":103,"dns":0,"connect":7,"send":0,"wait":8,"receive":6,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/uploads/2025/08/cropped-FotoJet-7ff-32x32.jpg","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:59.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:07:43 GMT","end":"Wed, 14 Jan 2026 14:06:19 GMT"},"fingerprint":{"sha1":"10:3E:D1:9C:87:2B:E6:19:B2:77:B6:7F:1A:22:7A:25:AA:1A:AC:16","sha256":"3A:EB:A1:65:EC:BA:60:40:6B:24:A6:73:1E:57:89:DD:78:FA:95:FB:5A:FD:38:E3:56:5F:E9:9B:C4:E9:72:AB"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/cropped-FotoJet-7ff-32x32.jpg HTTP/1.1\r\nHost: xhdfriday.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/\r\nCookie: starstruck_2610cdb1e7fc17e8e57860211a1b0aab=f2d421b29e8c2e151a8314a065fbeb38; _ga_RTM6XRXKXM=GS2.1.s1760941498$o1$g0$t1760941498$j60$l0$h0; _ga=GA1.1.701170056.1760941499; dom3ic8zudi28v8lr6fgphwffqoz0j6c=be416b77-170b-4f88-8a79-29468b389bd3%3A3%3A1; pp_main_e5740c7b80abc2329366e06d2dc81dff=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:59 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 13:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1149\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2B7Ha%2BZY%2BlsO8ts1X3ysrDrvBL0TIH%2BPdIQTGFa3Hp0%2BJL89B1MmZr93uDTrGni2aUWBx%2FI3BEtSlYM%2FCGCQO1gLWKnsbQj0fjDo\"}]}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 99166f7518b10b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1149,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 32x32, components 3","md5":"203b4458696a114dc8a9f24d77b2ef9d","sha1":"aeb864c9ee85bd40d866589865197160b8c8d244","sha256":"4560dc1e2bfbb42da3c42caa2afc5c4e947f6f088174b468da4f645c40822847","sha512":"ce40a6da08a0ffc079a5e27414c787a6c0c26b880eff7746249086f275ef6e778768812c30bb6121ffb6bca035fe7e2d2f3f2b36b4e90df4b7a5303fb40d30c6","ssdeep":"","tlshash":"8e2146761f0203a1c56acdfd0963239ed29e7642b99d97407f72c2b2c6148eda54c64d","first_seen":"2025-09-08T12:26:50.651139Z","last_seen":"2025-10-30T02:38:15.59364Z","times_seen":6,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/js/xupload.js","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/kjkmndw1ruyf","date":"2025-10-20T06:25:02.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /js/xupload.js HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/kjkmndw1ruyf\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:25:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Fri, 18 Oct 2024 06:42:06 GMT\r\netag: \"6712033e-29f4\"\r\nexpires: Fri, 24 Oct 2025 08:06:54 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 253087\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QKHHu8Cd7CMlKDE8MgZJ%2FfZ3PK0MkUo1Xu1B77vfkfx8dIA5h6%2BdM8qazMT7Tm2mIrQH2uRfhxMxKiazznUBKTSyxtUzLUjZag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99166f8719b556a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10740,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"7ef44e11ddf37c97750431e5284e4d77","sha1":"59ed0438edbda256e8258ce41729e89e7a9f0b66","sha256":"9be83627d9e3f905d1bf43b83445f1874a98ba283e79a944acff7db7c47b2cf6","sha512":"3812f64c724a2200a8a32568e793b444748a4def13c49e78815b2608106990b813649f37a36944d19da388b759f50559635fedc8b488183d9738ecbd3b5a584f","ssdeep":"192:7IKE9YGs1axsrl6XsZWnrbll621w+4UWdRebMQ4WdReDyYQaQv7OsaaFg+BnqGQZ:EGy+qBlV9GRebVReDyYS7OsaaF10fq3u","tlshash":"0522674abaa339a12a7730350bbf52043b398407114aca54bd5cd6c4af8452897ffbfd","first_seen":"2024-10-19T23:08:50.51898Z","last_seen":"2026-05-06T23:51:55.375697Z","times_seen":349,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/colors.dark.min.css?ver=2.5.5","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:57.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:07:43 GMT","end":"Wed, 14 Jan 2026 14:06:19 GMT"},"fingerprint":{"sha1":"10:3E:D1:9C:87:2B:E6:19:B2:77:B6:7F:1A:22:7A:25:AA:1A:AC:16","sha256":"3A:EB:A1:65:EC:BA:60:40:6B:24:A6:73:1E:57:89:DD:78:FA:95:FB:5A:FD:38:E3:56:5F:E9:9B:C4:E9:72:AB"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/colors.dark.min.css?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/\r\nCookie: starstruck_2610cdb1e7fc17e8e57860211a1b0aab=f2d421b29e8c2e151a8314a065fbeb38\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=isO2zSIilTeHwwhsfh61QawKyBC46zzzK2E2limt6tL4P01iSHwNwqHLQ8Fgl8R7ME4X%2Bamv16DQlm1DGpfr%2F%2FuJCMspZ%2BbpUczV\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 99166f69d8680b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40105,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (40104)","md5":"e7b7365d4fb0236b5df80ec3b10a8502","sha1":"c02eda52d607b6126f750d6a718c817a1711f1ba","sha256":"9904853546d3d30611944fe53ff8a7e7cb02e77a5be14923a347f6964a74e82e","sha512":"8053ca116b4c6203e2dedd7af40fd58dfe00298a70132673caa7fa2e3518697e5c6295eefed7fcf70ae1fd117238d586b56a7f3bc417d2797dc69090751ee3fd","ssdeep":"384:gNjWIEKEG9kPZi8NlrhFf9N6zlEu29wQkMwOypdNPwPTSruv9y0iQkmfhZ1UbQLK:28/N+pd5wGi1U8u","tlshash":"9a030f70e5ca020f7523e5ba6956f94e32756294e2011b7df23f30e89e811dfe6a3b05","first_seen":"2023-04-10T18:21:08Z","last_seen":"2026-05-18T02:42:17.178666Z","times_seen":1232,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/isrepeater.js?ver=2.5.5","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:57.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:07:43 GMT","end":"Wed, 14 Jan 2026 14:06:19 GMT"},"fingerprint":{"sha1":"10:3E:D1:9C:87:2B:E6:19:B2:77:B6:7F:1A:22:7A:25:AA:1A:AC:16","sha256":"3A:EB:A1:65:EC:BA:60:40:6B:24:A6:73:1E:57:89:DD:78:FA:95:FB:5A:FD:38:E3:56:5F:E9:9B:C4:E9:72:AB"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/isrepeater.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/\r\nCookie: starstruck_2610cdb1e7fc17e8e57860211a1b0aab=f2d421b29e8c2e151a8314a065fbeb38\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xv5RwnB%2BwlcT%2BfcXUpx9weZmG26LH0oL%2FdGIvl6TGKpDE1z4lnq08Pg040dKVMpfQMxinxBlPYPsJOwuQ02enJiBumd6aIdxbrVZ\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 99166f69f8710b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10380,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10378), with CRLF line terminators","md5":"6ceeb6d8b500945a6aaea27f52f6f5e6","sha1":"4647a4865cb5ba5dce1057b3765044ec9559eec6","sha256":"477f24a8aa73997ef9d469763c99d51a9a0e94826db0525b45542d9d7219e214","sha512":"08bcacdd9fd2e1f2c30b50fd1f9d6ab57ca431a61c3d152e4b700537f264459ec76b31bba225752f00cd434d73f6f567aaadbaceb5865136eb6c9f551435758e","ssdeep":"192:OHLiBsVoJ1jrQN+U+PZeX8+eo3MmYXRHLHoZq3Ho7:NsO/jrQNjvleo3HCW6I7","tlshash":"8722a9997691b5229267b830117f010fb23b98d6f94d5804e2ce99e6bfbd80c4227f9d","first_seen":"2023-03-07T01:03:55Z","last_seen":"2026-05-18T09:10:02.944524Z","times_seen":1924,"resource_available":true,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":529,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imb.hair/wp-content/uploads/2024/08/ngod00219pl.jpg","fqdn":"imb.hair","domain":"imb.hair","tld":"hair"},"ip":{"addr":"104.21.25.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:58.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imb.hair","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 20:42:26 GMT","end":"Sat, 22 Nov 2025 21:40:03 GMT"},"fingerprint":{"sha1":"1D:69:4E:5F:6A:6E:B7:73:60:21:EC:15:F7:F8:BD:F4:26:5A:31:D2","sha256":"46:4F:E3:37:7A:81:B2:04:94:EF:2C:BF:CB:A1:5C:D7:18:11:A9:95:92:34:85:6D:13:A9:D0:A1:9C:3C:0F:C2"}}},"request":{"raw":"GET /wp-content/uploads/2024/08/ngod00219pl.jpg HTTP/1.1\r\nHost: imb.hair\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 58666\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 26 Oct 2025 19:26:30 GMT\r\netag: \"e52a-66c055fb-10e2a13;;;\"\r\nlast-modified: Sat, 17 Aug 2024 07:49:15 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 39508\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4hLTpXxIjcQZpmGY19VXrXM6RLmSBuM9YJKcu4Z4fuUwx%2BPRBm1ZLlNsph9vP8puI770YveLIi6iHm8JMS04WgmHV7cfCS3S\"}]}\r\ncf-ray: 99166f6c6d6b0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":58666,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 299x425, components 3","md5":"ca48b359d5e0fae73a04ba1b53a5924d","sha1":"e0402694ff7a52087874ff7e02243461f4a7b894","sha256":"98d2dd41e921e252d038412503c3b1fd092243c905c0fc792180ab1c64986562","sha512":"33696901f3f10110aba7a00ef14fa3b3252ff66fb89fb8cfba2a4a9e79175b70121167a0be04d36dbbfacfb973ae2b250f306b59c37d2bb10e84883ade41a995","ssdeep":"1536:V9UmTlFqlayicy9MaPaub03ZlDH5aYuhbYOw6:HJTul69P63ZdCL","tlshash":"6c4302324221c793a55d75f8a09fcf516334b91fb60bbc87643b762d2ce898dde09214","first_seen":"2025-10-20T06:25:38.746338Z","last_seen":"2025-10-20T06:25:38.746338Z","times_seen":1,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":169,"dns":20,"connect":1,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/fontawesome/webfonts/fa-brands-400.woff2","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:58.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:07:43 GMT","end":"Wed, 14 Jan 2026 14:06:19 GMT"},"fingerprint":{"sha1":"10:3E:D1:9C:87:2B:E6:19:B2:77:B6:7F:1A:22:7A:25:AA:1A:AC:16","sha256":"3A:EB:A1:65:EC:BA:60:40:6B:24:A6:73:1E:57:89:DD:78:FA:95:FB:5A:FD:38:E3:56:5F:E9:9B:C4:E9:72:AB"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/fontawesome/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: xhdfriday.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/fontawesome/css/all.min.css?ver=5.15.1\r\nCookie: starstruck_2610cdb1e7fc17e8e57860211a1b0aab=f2d421b29e8c2e151a8314a065fbeb38\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:13 GMT\r\naccept-ranges: bytes\r\ncontent-length: 78464\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=29UUCcCt4jqOdUe2fqY%2FyxUWlDCSu2PdoerGfK%2BrFgKs7JvU4nwoReMJ97DOMqfh0rkLCa%2FHwtIdM1lAteOqk6rKdsT30iARtyyu\"}]}\r\ncontent-type: font/woff2\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 99166f6fa8950b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78464,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78464, version 331.-31392","md5":"ff496de99efc36ce4f6f1e611ada7e65","sha1":"f6b96b15619d6c70e152ccc6901f5872b58b08be","sha256":"59beb1f8f4ea7e16c50ae0652005e6f7a39f58f9deb0e155d8c8981ea99544b0","sha512":"dde3bfcae5ba38ce8ccb853caa044a72fe126d93c87daeb1dd692723d8800a9acaaa1661ccf9bdaa91c3b9de123a0c74ddeac8525ef7bfacf6c425fb90df0323","ssdeep":"1536:7vEqiwE+StKqlFawjLAf3tMlM7qH2M++uzYQlBJGYdD:7vEbwE+StdfZPAf3tSiqVEbl","tlshash":"41731209d6241bdb50757de10de35a7dea2f98027ea4aa058f86842abc0f04cc52b5bf","first_seen":"2023-04-05T13:28:44Z","last_seen":"2026-05-18T10:54:55.323414Z","times_seen":2770,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":179,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/js/jquery.min.js","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/kjkmndw1ruyf","date":"2025-10-20T06:25:02.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/kjkmndw1ruyf\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:25:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Mar 2021 00:27:00 GMT\r\netag: \"603ed7d4-15d9d\"\r\nexpires: Sat, 25 Oct 2025 23:23:28 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 111693\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Te26aUkkn%2BtyVRNU5a6i8gZx%2BDVvIiyGMwU0peI%2Fm%2FxaTBpc69vYzp42%2BAc7glRzLig915iftIQDMzklrlPfzHUGY3GBB6kW2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99166f8719b356a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-05-18T11:38:52.523906Z","times_seen":470141,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-E2BG6CPV2J","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/kjkmndw1ruyf","date":"2025-10-20T06:25:02.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtag/js?id=G-E2BG6CPV2J HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 20 Oct 2025 06:25:02 GMT\r\nexpires: Mon, 20 Oct 2025 06:25:02 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 141682\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":426450,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"9dc3b18b5b8a615d69697eb36726de75","sha1":"e76498fbaffa1a9a44abe3b9fbeb6a1dbb017422","sha256":"35205953c89d9b079d167d86cf45c072f626672d587fc0acf45ab0450ad6e84c","sha512":"19e9caa1b4a00e33dfd3c479891a6be2f3706cf62cbae763e637d13b03f994c3c86c26c292e8725dcd4fc408481f01426f12c654fd8a1411b423622696071f76","ssdeep":"6144:qB9c6tQSyOe+hy4nkEt7F8KWjxSqpRjeWvkAX6HJLGy1tyyluxwuuSyv:kC6rRRhy4nkEt7F0EqPeKRy1bv","tlshash":"d2941a8e73c674269396f078503f018ba57b29a2f45cc896f189cce42d74a9a4277f7c","first_seen":"2025-10-20T06:25:38.754121Z","last_seen":"2025-10-20T06:25:38.754121Z","times_seen":1,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p16-tiktok-ads-sg.tiktokcdn.com/obj/ad-site-i18n-sg/202506015d0dac300ba25238441a8da0","fqdn":"p16-tiktok-ads-sg.tiktokcdn.com","domain":"tiktokcdn.com","tld":"com"},"ip":{"addr":"23.36.77.89","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://stbhg.click/e/kjkmndw1ruyf","date":"2025-10-20T06:25:06.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tiktokcdn.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 07 Mar 2025 05:26:04 GMT","end":"Wed, 08 Apr 2026 05:26:03 GMT"},"fingerprint":{"sha1":"AB:A5:D2:DF:CE:6C:6D:AE:DD:36:C7:0F:CC:E1:32:1D:76:C7:35:C0","sha256":"75:76:14:5C:F5:BB:65:0D:C6:06:2B:2A:07:FA:50:AF:47:D8:3D:E9:63:80:10:B1:BA:42:B3:0B:51:AE:A7:9B"}}},"request":{"raw":"GET /obj/ad-site-i18n-sg/202506015d0dac300ba25238441a8da0 HTTP/1.1\r\nHost: p16-tiktok-ads-sg.tiktokcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://stbhg.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1335998\r\nimagex-fmt: png2png\r\nlast-modified: Sun, 19 Oct 2025 21:23:21 GMT\r\nnw-session-id: 202510200523215352582056D1B6EEDD7Dnxlml13tt\r\nnw-session-trace: 2025-10-19T21:23:21.392763708Z 74\r\nx-bdcdn-cache-status: TCP_HIT\r\nx-length: 1335998\r\nx-powered-by: ImageX\r\nx-response-date: Sun, 19 Oct 2025 21:23:21 GMT\r\nx-tt-logid: 202510200523215352582056D1B6EEDD7D\r\nx-request-ip: fdbd:dc53:28:80c::44\r\nx-response-cinfo: fdbd:dc53:28:80c::44\r\nx-response-cache: edge_hit\r\nx-tt-trace-host: 0137ebb3c8d33f9cd04a6164716ce631e929aeeb24316b7aa9e62d5c031c1056cad26d9fa14613437ce5fa2c2ee2b77aa27b37ca4fc77b5e612454966d14fbb4353dfed1f026cd907cbf24e275260d8181d7ad7402ef361fe61573439eba52900ded0e8c7fc44307f8fac4cb0f797a6224\r\nx-tt-trace-id: 00-2510201424310096D8BBE12C5FB47302-0718540885E48D53-00\r\nserver: TLB\r\nx-parent-response-time: 5,96.7.219.147, 246,92.123.134.138, 259,23.36.77.85\r\ncache-control: max-age=31536000\r\ndate: Mon, 20 Oct 2025 06:25:07 GMT\r\nx-cache: TCP_MISS from a23-36-77-85.deploy.akamaitechnologies.com (AkamaiGHost/22.3.0-fcd174d50fb223c8364cec3c4b3f29c6) (-)\r\nx-cache-remote: TCP_MISS from a92-123-134-138.deploy.akamaitechnologies.com (AkamaiGHost/22.3.0-fcd174d50fb223c8364cec3c4b3f29c6) (-)\r\nx-tt-trace-tag: id=16;cdn-cache=miss;type=static\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=259, origin; dur=0, inner; dur=2\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1335998,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"2dd1211dd9175c9cfe44628ab240cc85","sha1":"7137508328def7a66fdf363c3e44127a0edd6891","sha256":"37febb892006e703a147c8381f44064bd0be08876badd09d03fb2fa86f382c03","sha512":"7d9ad8e358d9c7333ab5c2d4f91f38f0e678c4263e6858d272e62c268eb2a009810f36a782d80569edde3d938f2ad3d5399d320e10aab0d218d6a4436e3b6fd5","ssdeep":"24576:uFq8ddF7Av9fND9tRZYAlFL+lKbFvz04d:u8XjnfkYRz7d","tlshash":"3f2523063b452cafee039072874947b1e9e1aa5465887f1a3a6d474ebafd7d8cd3403c","first_seen":"2025-10-20T06:25:38.757835Z","last_seen":"2025-10-20T06:25:38.757835Z","times_seen":1,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":300,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/front.gallery.min.css?ver=2.5.5","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:57.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:07:43 GMT","end":"Wed, 14 Jan 2026 14:06:19 GMT"},"fingerprint":{"sha1":"10:3E:D1:9C:87:2B:E6:19:B2:77:B6:7F:1A:22:7A:25:AA:1A:AC:16","sha256":"3A:EB:A1:65:EC:BA:60:40:6B:24:A6:73:1E:57:89:DD:78:FA:95:FB:5A:FD:38:E3:56:5F:E9:9B:C4:E9:72:AB"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/front.gallery.min.css?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/\r\nCookie: starstruck_2610cdb1e7fc17e8e57860211a1b0aab=f2d421b29e8c2e151a8314a065fbeb38\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sTBayjJmeQnZ6NWPkOcsg%2BWN%2FbsBnpLbOiTgxN3DTN%2BrxNll08iGRcCZNw57PWlXH8tNBX%2Fei9HY5st4skQhVYuT25Q3sAJRLgkX\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 99166f69e86a0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4256,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4255)","md5":"ec45c80bb5df55dbd19490461fa26ddd","sha1":"26e7429b1a724c22d3cabbe45df0518573d34075","sha256":"4a91d5332083b65f0d8e88dcdb513e7b08497c47b454a84ad30b29cb34d09426","sha512":"eb51181a86913dd06539b6a85365290d659a4e3b37e1ff851e429de486a71ba21458e4122da24d024ed9aa53ece47309b1752ac78ec0c2b414f22a1bbc9c687b","ssdeep":"48:bEXpufnFfNT4oJK02SjHkYQ/v8s/e2p7EYipR5aPc5nT:b8uvlF42XRs+2p7EYiB5T","tlshash":"72911e78ed38202562ffd36bb6b8a5b713bca502fa73767df164f141c68694b20121c4","first_seen":"2023-04-09T14:43:48Z","last_seen":"2026-05-18T02:42:17.301791Z","times_seen":547,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/sone00340/sone00340jp-1.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:57.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/sone00340/sone00340jp-1.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 60797\r\nserver: openresty\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Fri, 09 Aug 2024 11:06:42 GMT\r\netag: \"66b5f842-ed7d\"\r\nx-cache-status: HIT\r\nvia: 1.1 7940e047b4a079adf09873e0df425f28.cloudfront.net (CloudFront), 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT20-P6, OSL50-P1\r\nx-amz-cf-id: 8h-PSdMgauRARoiQQnQtW4QJ1zQTfFKxN5b21FhwhJV4yPwDblverQ==\r\nage: 91733\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":60797,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x534, components 3","md5":"9c409b5dc88c52c8c146d243bd03a217","sha1":"f979572909662c6e2e1e8e2aa4526be435d2c3af","sha256":"7b2bf7e1e0e89f8c5acb649c7e2e4e18b035fd5c2b2a51c278cf0662982d88a5","sha512":"f1b165d8055177d219e512fa0b16f47297e0596badbb010254fc287baf42d1d3ea015affaea1acef8494fb4aa9dccbd437bdb30ebc6e0ccbbaa60628ac2dd246","ssdeep":"1536:8PgPmMzFKBHyt8R7ahmZBaiSIEiKFdOrRzRzCd3:8PYmkH+R7a4usKFsNzVo","tlshash":"be53022e765d95eebb2f94131b802e244202945ec2ffd4d0e0f267c237926726dad2c6","first_seen":"2025-10-20T06:25:38.76335Z","last_seen":"2025-10-20T06:25:38.76335Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1386,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":1084,"receive":271,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/front.livesearch.min.js?ver=2.5.5","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:58.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:07:43 GMT","end":"Wed, 14 Jan 2026 14:06:19 GMT"},"fingerprint":{"sha1":"10:3E:D1:9C:87:2B:E6:19:B2:77:B6:7F:1A:22:7A:25:AA:1A:AC:16","sha256":"3A:EB:A1:65:EC:BA:60:40:6B:24:A6:73:1E:57:89:DD:78:FA:95:FB:5A:FD:38:E3:56:5F:E9:9B:C4:E9:72:AB"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/front.livesearch.min.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/\r\nCookie: starstruck_2610cdb1e7fc17e8e57860211a1b0aab=f2d421b29e8c2e151a8314a065fbeb38\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sBQmtmXHicbHE3tXwr8J%2BDz%2Bte77VkZIgej1VjttQbN09HNoF8ih6ArbavnW01%2BthJMk2BW42f1CRVCRBZ3WlBMXmEu4gkOKPU4j\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 99166f6af87d0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4741,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4739), with CRLF line terminators","md5":"0eea0408655c01545c25f142ecd898fd","sha1":"1bb9d98a7fee41318007652d0723141704a658e6","sha256":"5991b17b41002817f208207448eb82392a618a9b6bf9f4ca2c8e84815769a722","sha512":"da2f11b1a3b21b0d9d5bf0da0dd692adeb76910cd115264ffdfde7b4b61bc2526f3849b8f77f9e85537acd000cd14a25068715b5281bfd9267d6e180a482a63f","ssdeep":"48:TajZ6/nJN73IMTGnJNfqdaX6DlJB/KvjFd43payvh6Y2OnJNAPn2DjL/6vtnooO:T+Z+J1YMYJZqdk67B4d45nHJa2n6ne","tlshash":"4aa1564170815dd7023b23601e3bb60ba2937faad70a9401717ed1e50fa6d8a353671f","first_seen":"2023-03-07T01:03:55Z","last_seen":"2026-05-18T02:42:17.139784Z","times_seen":1746,"resource_available":true,"data":null}},"time_used":788,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":788,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w92","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"138.199.37.225","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:58.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Sep 2025 20:10:35 GMT","end":"Mon, 22 Dec 2025 20:10:34 GMT"},"fingerprint":{"sha1":"9B:24:B0:91:79:AC:B0:0C:F8:BA:AA:DC:AC:6D:67:E9:B9:AF:6F:BE","sha256":"11:31:79:0F:81:6F:B5:20:34:07:93:CB:FF:0D:3B:0D:EF:34:FB:C5:B5:99:92:02:90:BE:9E:5A:2D:FD:5A:E7"}}},"request":{"raw":"GET /t/p/w92 HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-DE1-1055\r\ncdn-pullzone: 775336\r\ncdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf\r\ncdn-requestcountrycode: NO\r\ncache-control: max-age=43200\r\netag: W/\"653e955073f6ff68f1e0cfa5a613ef75\"\r\nlast-modified: Thu, 08 Apr 2021 15:54:44 GMT\r\ncdn-cachedat: 10/19/2025 21:29:29\r\ncdn-proxyver: 1.39\r\ncdn-requestpullcode: 404\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 863\r\ncdn-status: 404\r\ncdn-requesttime: 0\r\ncdn-requestid: ea9af79895bdf7f10235bafe37a2b4a4\r\ncdn-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-18T11:41:01.301496Z","times_seen":15383472,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t2.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=https://wtsmovies.com/subtitles/movie/\u0026size=16","fqdn":"t2.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:59.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=https://wtsmovies.com/subtitles/movie/\u0026size=16 HTTP/1.1\r\nHost: t2.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xhdfriday.sbs/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: image/png\r\nx-content-type-options: nosniff\r\ndate: Mon, 20 Oct 2025 06:24:59 GMT\r\nserver: sffe\r\ncontent-length: 726\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":726,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"b8a0bf372c762e966cc99ede8682bc71","sha1":"2d7c9b60d1e2b4f4726141de2e4ab738110b9287","sha256":"59bfe9bc385ad69f50793ce4a53397316d7a875a7148a63c16df9b674c6cda64","sha512":"6883c7a3f702fb3df5e698333c8a05705970fcb476a31a2008444a02122b6870de158176c86a1f6605a0783b88d3523646b4d288696e777b37cc02d5d95266ca","ssdeep":"","tlshash":"fe0165e3a34595286b870a62f4b87082162a6ae560c3c09964e4ec6e1f05168e4e5e9c","first_seen":"2023-04-05T05:54:43Z","last_seen":"2026-05-18T08:55:28.695057Z","times_seen":6919,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":85,"dns":28,"connect":20,"send":0,"wait":32,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/e/kjkmndw1ruyf","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:25:01.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /e/kjkmndw1ruyf HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Oct 2025 06:25:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 19 Oct 2025 06:25:02 GMT\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CxHUaD4Y9ItiST%2BwqSj0E%2FOetcoeZjwr86dS%2BDcq9ZSqWeXCmyOv6yzTSpg%2FJAIuzgQotLxtWNFwhtqo2YxiruDnBBnNcYGWsw%3D%3D\"}]}\r\ncontent-encoding: br\r\nset-cookie: lang=1; HttpOnly; Path=/; Domain=stbhg.click\r\ncf-ray: 99166f80bcb7b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":15001,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (9054)","md5":"341c75342e860c90166a294dceecba0b","sha1":"351f73614be944fcaebdc667a2558591dc2165da","sha256":"7a91bfaa5d81614e288d151bb1f61259f3e427511380abf06f970f232aeac003","sha512":"097b2e72b3aec761f194b7832e0a9daee0a41e49e3d42770e74333ba671665c2e7b86dcae9ad7cf2d46bdd9fcdd68e5ed0f50fd01db8f49c72dc0b1054907d8c","ssdeep":"384:+lMzwboeSVFZiXZeXCCapX6S/zHlBzB3eouqRwZl2G:+lMzw3SVFZAZeopRj31LW","tlshash":"60623aba69454036936011acb83fb64c7abe2c71b825f858f59dc8457fc4fc689b7888","first_seen":"2025-10-20T06:25:38.772404Z","last_seen":"2025-10-20T06:25:38.772404Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1076,"timings":{"blocked":57,"dns":35,"connect":2,"send":0,"wait":962,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/js/localstorage-slim.js","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/kjkmndw1ruyf","date":"2025-10-20T06:25:02.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /js/localstorage-slim.js HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/kjkmndw1ruyf\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:25:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Nov 2021 13:32:00 GMT\r\netag: \"6193b2d0-810\"\r\nexpires: Fri, 24 Oct 2025 08:06:54 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 253087\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6haRYwV6Sy9o170h8HWVFAzQJKom%2F%2BiTrThqihH2gaXM1%2FisRJeZPEm6l6n8gm1%2BYTXuJ0pnTOL59Wu4yDdPCQrmiVn9td0CPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99166f8729bc56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2064,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2063)","md5":"ba6facacb00551830393d637195804cf","sha1":"77d2d2802ee44767b33a2d679945cc3efa3619cc","sha256":"41bb37c8133d8e5c128820cfbe03bcbf63ce256bcbd60a1a76143472d8668e38","sha512":"90aa07250eb414ec22765ab6922f593ed3186faecc02008f0331c3e3807cace76861e01028142015308341e955f151b609d08b7d354ff2d27e0ff04ebfde81f9","ssdeep":"","tlshash":"ea41118275e1d9904be004e728b0c002e638992e705d62d0f7b7dd827c9909bcfb57fa","first_seen":"2023-03-07T15:52:27Z","last_seen":"2026-05-17T22:16:11.830278Z","times_seen":1509,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/lazyload.js?ver=2.5.5","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:57.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:07:43 GMT","end":"Wed, 14 Jan 2026 14:06:19 GMT"},"fingerprint":{"sha1":"10:3E:D1:9C:87:2B:E6:19:B2:77:B6:7F:1A:22:7A:25:AA:1A:AC:16","sha256":"3A:EB:A1:65:EC:BA:60:40:6B:24:A6:73:1E:57:89:DD:78:FA:95:FB:5A:FD:38:E3:56:5F:E9:9B:C4:E9:72:AB"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/lazyload.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/\r\nCookie: starstruck_2610cdb1e7fc17e8e57860211a1b0aab=f2d421b29e8c2e151a8314a065fbeb38\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PthzzGR43APgGj8Ps6SisPJpKU36Ac45I%2BPlrXmQhSKAcGGsnD20J9tvTFM90xwXV30KMl0ryCYpREXIaDrlVwMm44S%2BNrbKaxuy\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 99166f69e86d0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7238,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7209), with CRLF line terminators","md5":"c3acbd4a87d123bc6b7e4ef753e63570","sha1":"3042ebd6ace02f8a053f22c5eb76c0aaec870065","sha256":"10b8714eb5a412ab0bece0bef0fcd9553a38cd0bead58a752e346d6779051373","sha512":"f536faeb35dcef8366758837b35b1547d181f425b664106e8fdbd2592928b405ff50f0114d4db6ffe445f0f732efd73172ea2ade5693dbe2f73794bf877f6432","ssdeep":"192:OO4602wGWi72hBQa0cDTrTx46C4gq4q4oFPHK818owTZ6RtA:OO460o72hVDnTxcdq4q4oFPHKI8VTIR2","tlshash":"8de1e5deb266b077a99738b4512f210f91337063bd0a9805a17ac0c25b3ca9d5237e3e","first_seen":"2023-03-07T01:03:55Z","last_seen":"2026-05-18T02:42:17.599924Z","times_seen":1579,"resource_available":true,"data":null}},"time_used":539,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/starstruck.js?ver=2.5.5","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:57.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:07:43 GMT","end":"Wed, 14 Jan 2026 14:06:19 GMT"},"fingerprint":{"sha1":"10:3E:D1:9C:87:2B:E6:19:B2:77:B6:7F:1A:22:7A:25:AA:1A:AC:16","sha256":"3A:EB:A1:65:EC:BA:60:40:6B:24:A6:73:1E:57:89:DD:78:FA:95:FB:5A:FD:38:E3:56:5F:E9:9B:C4:E9:72:AB"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/starstruck.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/\r\nCookie: starstruck_2610cdb1e7fc17e8e57860211a1b0aab=f2d421b29e8c2e151a8314a065fbeb38\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mw%2FGT2oDaq5YunvmadI29LondU3VpET90Yk3GaUU4ZHZURb3AxNODcaxsBsuSBARiJk16JWqs5g1Vou2QW2P5UkRyrsClmqBZejg\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 99166f69f8750b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1311,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1309), with CRLF line terminators","md5":"4279a70d8fc5018f1a4dd4328ba56d0e","sha1":"6aec001b3bd94f107f49e62c817048b1dd5ebe27","sha256":"2914ebe7e0b33da6d390b3f42a784210f285402cf57588b90d917193f773e9aa","sha512":"025d6310ec864f81a8f0afc8f33a0e8acaf08e79250f78ab5e1c8fdd87b99c9790c4ebe17cb35fa21d9765e9817bad7db90759bce5862fbfdebccb689f03f0a2","ssdeep":"","tlshash":"34219e5c309b61ae67f2a1f4287f17015332ae14b507ca3b742900b69f9d94da63a968","first_seen":"2023-03-07T01:06:58Z","last_seen":"2026-05-18T09:10:02.969963Z","times_seen":946,"resource_available":true,"data":null}},"time_used":760,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":758,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/ssni00845/ssni00845jp-5.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:58.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/ssni00845/ssni00845jp-5.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 156235\r\nserver: openresty\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Thu, 16 Jul 2020 12:51:20 GMT\r\netag: \"5f104d48-2624b\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nvia: 1.1 f488df389a7a8c807c115802e06fd756.cloudfront.net (CloudFront), 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT20-P6, OSL50-P1\r\nx-amz-cf-id: M3jT35jZpxnW9opA240K4E2MkB_AAXTT9HsagYTdqHCTniOYM9wogw==\r\nage: 223024\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":156235,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 534x800, components 3","md5":"0e2f830c91a6062f402589b9ffba2945","sha1":"1a0f502fa19f7bbf5f137e7091958fb492ed861a","sha256":"01b0e08ee6f4de72e96ca4a4c332889ce03904d1f3d595aa013e19581fd483a3","sha512":"10ee760ea6d9bd90d0518cd1963fec5cc543debd4623f0114a7b7f539cf8505f12d13659a367093b694af3cec607f416c3c718ce9df69eb4628629023d3d62db","ssdeep":"3072:ZMNqtxcBPCr8BiGDU7z4cCdOFbY9RSkhvkn9meNhMN5kn:DxchtiGI7zpRs9oW0UmS+n","tlshash":"11e312d673fd4865b58870b7150f5dd8b0e9bbac93d3285bec9f218010067f8a652bc5","first_seen":"2025-10-20T06:25:38.77855Z","last_seen":"2025-10-20T06:25:38.77855Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1083,"receive":547,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-admin/admin-ajax.php","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:59.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:07:43 GMT","end":"Wed, 14 Jan 2026 14:06:19 GMT"},"fingerprint":{"sha1":"10:3E:D1:9C:87:2B:E6:19:B2:77:B6:7F:1A:22:7A:25:AA:1A:AC:16","sha256":"3A:EB:A1:65:EC:BA:60:40:6B:24:A6:73:1E:57:89:DD:78:FA:95:FB:5A:FD:38:E3:56:5F:E9:9B:C4:E9:72:AB"}}},"request":{"raw":"POST /wp-admin/admin-ajax.php HTTP/1.1\r\nHost: xhdfriday.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 49\r\nOrigin: https://xhdfriday.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/\r\nCookie: starstruck_2610cdb1e7fc17e8e57860211a1b0aab=f2d421b29e8c2e151a8314a065fbeb38; _ga_RTM6XRXKXM=GS2.1.s1760941498$o1$g0$t1760941498$j60$l0$h0; _ga=GA1.1.701170056.1760941499; dom3ic8zudi28v8lr6fgphwffqoz0j6c=be416b77-170b-4f88-8a79-29468b389bd3%3A3%3A1; pp_main_e5740c7b80abc2329366e06d2dc81dff=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:25:01 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: https://xhdfriday.sbs\r\naccess-control-allow-credentials: true\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PeBBtmpgV8k5zGlefR08yE0t3TOCZA8DpWruYKVfOzaw8ZDVY2VjrZeRcybIse%2Fp5dGsMLVy9DY2ID7P2EGgDjrLvunLm15WrKju\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/json; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncf-ray: 99166f7548b30b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"21557083edd89b114c00dbf65a563ce9","sha1":"4c0193e77dd69ff4c651c0589d4edf1ff7170ad7","sha256":"576dd2af186a632f9a6be60a16b25560a13c8a79f471dc30d3f5c540ba3c73c5","sha512":"e3fdd908dcade26b4eb0de8ff3ba84fa206227fc32dc43f08625e8f689977a78071bb5e7fa17e294d37aa8c35bd7042ed01b92f4cb8e2273a23564701394aaa0","ssdeep":"","tlshash":"47a022c3228a080f22200ac002c8000cc00bbe0328ca380a33b32830a28c20c30ce30f","first_seen":"2025-10-20T06:25:38.781837Z","last_seen":"2025-10-20T06:25:38.781837Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1750,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1750,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/player/jw8/vast.js?v=32","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/kjkmndw1ruyf","date":"2025-10-20T06:25:02.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /player/jw8/vast.js?v=32 HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/kjkmndw1ruyf\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:25:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Dec 2024 07:24:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 4550\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MoxGo44EXQd%2F%2FN3ZdeH5iGRvKkdHXu6W2nKLllb9%2FLJkD0M183nfymFBl6cG7Gx2Bye7fTw7NSUR1Jm4QUTsQo3q8bHI5xv5Kg%3D%3D\"}]}\r\netag: W/\"1b653-628e55ff864c0\"\r\ncontent-encoding: br\r\ncf-ray: 99166f881a8e56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112211,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1b3eb53abc624a51f5e226d08758ddf3","sha1":"6cca061ec7c41313ec2027eaaca76fa9dfad750b","sha256":"73788e3233d5113578082f78869724925d3e4dd2c9d02fdc0bf84d6aed3a768e","sha512":"c6c7bbc31213d98134d98087ad912f1244b2dc7c7914247baac80d534663ab75135c004bf5473044db9e082302477b9d812b0a0db4c5f21b3e27508c26c265c5","ssdeep":"1536:twVnle2Qmbe005pkZ/gbxRYpYItN6X6ud7srzIjpitB39BsLIYOONMQHMkBxLNwO:tEnPRIN1D2zXkIYdN7Hnf","tlshash":"acb308872399d52247e484e960344212b335060f780a83acf67dfdef1d5ea4b76bab74","first_seen":"2025-04-01T21:32:19.700252Z","last_seen":"2026-05-17T22:16:11.734101Z","times_seen":569,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/stream/L0PjnBn3df1R3bnXiRqN0A/kjhhiuahiuhgihdf/1760984702/24482347/index-f1-v1-a1.m3u8","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://stbhg.click/e/kjkmndw1ruyf","date":"2025-10-20T06:25:03.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /stream/L0PjnBn3df1R3bnXiRqN0A/kjhhiuahiuhgihdf/1760984702/24482347/index-f1-v1-a1.m3u8 HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/kjkmndw1ruyf\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:25:03 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\nserver: cloudflare\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DJM4DEmVKcEJWX%2BVyRnrFAK62IpBjAdUw9B0XEnnQZmVup%2BJAGPDjqyC7e8o53adulRRuqRDykiU4X%2FpUzKAtJPVnmLJhyAT%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99166f8c1d6f56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78071,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"10512b87078becc10b64dc1a56280d6d","sha1":"5f915df71bb7ea5dca0b992c1a7870e24b3a48c3","sha256":"fc6aa44eaccecd68c6c991707f5dace17b7d00e5799fb6cf13711be8ca1b6391","sha512":"5c08152a1821f3b982ef3832ee677290990d86a635b38f25f98eba67d0b788936f6617cba5d68069db79cb2deebcdcdd767307e7e3759495d6450d14083063ab","ssdeep":"384:TuNwJHjyWGKQKsz4lI4+jHpsz5032wL8okk:TnJDymXm4lIbsd42wpkk","tlshash":"4173c9dade4161881a5d4c84fb74f6a8d9d1af79fcf0978db34872f60c90ca7662090d","first_seen":"2025-10-20T06:25:38.785405Z","last_seen":"2025-10-20T06:25:38.785405Z","times_seen":1,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/front.mobile.min.css?ver=2.5.5","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:57.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:07:43 GMT","end":"Wed, 14 Jan 2026 14:06:19 GMT"},"fingerprint":{"sha1":"10:3E:D1:9C:87:2B:E6:19:B2:77:B6:7F:1A:22:7A:25:AA:1A:AC:16","sha256":"3A:EB:A1:65:EC:BA:60:40:6B:24:A6:73:1E:57:89:DD:78:FA:95:FB:5A:FD:38:E3:56:5F:E9:9B:C4:E9:72:AB"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/front.mobile.min.css?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/\r\nCookie: starstruck_2610cdb1e7fc17e8e57860211a1b0aab=f2d421b29e8c2e151a8314a065fbeb38\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BxHkKs51yliNkc4Smi8xVBpHkD2ZidmRyuEXF5uQQU%2BgWzUTpMfdKULmAbIv7CpL%2BnP3U%2BU%2BT9mkKfRFXbdA2iWOBwA7Cae4GfFR\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 99166f69d8690b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8720,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8719)","md5":"09ded5f0b08a22e680e6aaf72a4646e7","sha1":"866fdd70bf20d38dde5321910e1e44587989fc86","sha256":"cdf69f171470adc15b72f2604be5440e6d8a8254b8095813596b45694cb51ab8","sha512":"b98db9343155ec5467a853abb4d98e72a3ebe243df0351674847f0791284b80d4e300bf9f33e343188b5f9227ec8c4acb15ef05fe6d9b5801d6088f69ebb0746","ssdeep":"192:wO9xMLFP6x0Gkc4QliulTuUwIl/iho/vTKsnt7aitiF/:EG0cnfveoHTKmftih","tlshash":"4f0211b20d3a342ed56af091fec631ed36995065f35722e3c86ea56da1ce3a600b164c","first_seen":"2023-04-06T14:37:36Z","last_seen":"2026-05-18T02:42:17.297771Z","times_seen":1153,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/idtabs.js?ver=2.5.5","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:57.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:07:43 GMT","end":"Wed, 14 Jan 2026 14:06:19 GMT"},"fingerprint":{"sha1":"10:3E:D1:9C:87:2B:E6:19:B2:77:B6:7F:1A:22:7A:25:AA:1A:AC:16","sha256":"3A:EB:A1:65:EC:BA:60:40:6B:24:A6:73:1E:57:89:DD:78:FA:95:FB:5A:FD:38:E3:56:5F:E9:9B:C4:E9:72:AB"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/idtabs.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/\r\nCookie: starstruck_2610cdb1e7fc17e8e57860211a1b0aab=f2d421b29e8c2e151a8314a065fbeb38\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VMX0OrjdTTXEsmu%2BSxaNzywvIGuvPWg1k2J5kwXS0RrJGbwc3kRO%2Fvt7dIXAw5IpHTFCVJRiaA%2B5tjR%2F1GFwvw2YFzl7I71vC2YH\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 99166f69f8700b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1543,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1541), with CRLF line terminators","md5":"3665ff6f8d2bf5a2af3de5d6e333a7c0","sha1":"db9f6a2b874f7c24a5827f0f1d679ed3c7d7b7e5","sha256":"2eb9d605c096771e0669e09ac60207d6171bd255b20416d07a4f14aca62a5df6","sha512":"eecce0b86b15eb438071ce1db21f49762634be3740451943ba95338939af20f18a06d5be4875bd114aaa42ee23a274279c926c625485316b3b6fa6894f624507","ssdeep":"","tlshash":"303115803241342b4a9eb1e7551b23d191be44a8980c40dcba71fe904cad7ce94f3e67","first_seen":"2023-03-07T01:03:54Z","last_seen":"2026-05-18T02:42:17.795808Z","times_seen":1850,"resource_available":true,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/uploads/2025/08/FotoJetview-1.png","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:57.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:07:43 GMT","end":"Wed, 14 Jan 2026 14:06:19 GMT"},"fingerprint":{"sha1":"10:3E:D1:9C:87:2B:E6:19:B2:77:B6:7F:1A:22:7A:25:AA:1A:AC:16","sha256":"3A:EB:A1:65:EC:BA:60:40:6B:24:A6:73:1E:57:89:DD:78:FA:95:FB:5A:FD:38:E3:56:5F:E9:9B:C4:E9:72:AB"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/FotoJetview-1.png HTTP/1.1\r\nHost: xhdfriday.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/\r\nCookie: starstruck_2610cdb1e7fc17e8e57860211a1b0aab=f2d421b29e8c2e151a8314a065fbeb38\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 13:48:51 GMT\r\naccept-ranges: bytes\r\ncontent-length: 33727\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2AK3s3LLkv8ZZTIC4jvz%2Fl%2FTsIHbkUdlM6yXKW4p5KKYrPRwDuv65%2FoAzoMkcOf22q9n2zOHk03wqMawf4orjf9afLpHx%2F14xS8T\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 99166f69f8760b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33727,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 277 x 70, 8-bit/color RGBA, non-interlaced","md5":"49b45e263432403af0f84c91d4b094bc","sha1":"0e010afdccc71d96551bfe04e8ebab7bb8213631","sha256":"5d982934d511764165ea0557916624acaf0db13efee2b60e1a468d7437cde090","sha512":"56499d56acda2c5b4af44250aa8813ee1c3d3c612d2f0f34a973bf93e5f91ab411da7d47ee9568f5dc118639e48ad58082e17849f90f38db42c8664bf92822f3","ssdeep":"768:61w1HYKesVX7Fq52TsTSr48NK/FpB8GrOTdsUfKEBu:61CYCVXE5ZTc3Q/FpaGqTi7","tlshash":"43e2f28280708774943db5f67341732888935c9d072cf7fdeaec6ab9a381da548a7846","first_seen":"2025-08-16T13:25:24.519859Z","last_seen":"2026-03-29T19:50:06.964801Z","times_seen":9,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/sone00340/sone00340jp-6.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:57.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/sone00340/sone00340jp-6.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 74794\r\nserver: openresty\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Fri, 09 Aug 2024 11:06:42 GMT\r\netag: \"66b5f842-1242a\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nvia: 1.1 017bcea4623003e4eb8b5df81f6048dc.cloudfront.net (CloudFront), 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT57-P5, OSL50-P1\r\nx-amz-cf-id: 5KBkyidqBZ-eF-kcE7Uwucg2SB6GlONxQfPeK7XsqmDUpUnbAtSbQQ==\r\nage: 92406\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":74794,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x534, components 3","md5":"c96fb04e2608cf42d3228db678797231","sha1":"e4ac9c7304ca1c47158d0530f730650edd02d884","sha256":"7e2710e1f53e3f981326e71281a7eed8732aa8689fcec7fad95e6eaeac61cc49","sha512":"5a15cb53db6313ea37f8408319456b721fb92c2e22734b7590bfb966f9b7be8b7fd9a863f2d55b0e38b5a189fd480fbb82cb2d28fd5ee767d48ce81a345b8ce5","ssdeep":"1536:MxPIUx3Ts+i2euv/idk1dtuF5Mn+ied2mg+3OeCEqO1BS:M++m2e4/4j/ZLdj/S","tlshash":"af7302242dd70429eaff2d1d1be7133db7be964f15ea779c5a1586ea87e0261000ce22","first_seen":"2025-10-20T06:25:38.791384Z","last_seen":"2025-10-20T06:25:38.791384Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1331,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":1036,"receive":260,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/sone00340/sone00340jp-4.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:57.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/sone00340/sone00340jp-4.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 79930\r\nserver: openresty\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Fri, 09 Aug 2024 11:06:42 GMT\r\netag: \"66b5f842-1383a\"\r\nx-cache-status: HIT\r\nvia: 1.1 e5e9d160d4a1bdf2fa7acdd1d6b0b89e.cloudfront.net (CloudFront), 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT20-P6, OSL50-P1\r\nx-amz-cf-id: 3DZuLe912CBcn1RJvg17k5rmVPFBF7FLjp5Bn9S2yYmDWkaxTd-oRA==\r\nage: 159720\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":79930,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x534, components 3","md5":"72045aacb04b92ba742a91e842bc26cc","sha1":"80fcb6a5ef68a623a1db4732e4f3d233493f8f6a","sha256":"4622c831c0b48855b87935844ee48153b922683230286794f334ba26bef73240","sha512":"94d650b7b13383758b6508fd7de1ff44b3d4a9f47a9639be7bd2f3ce1aebcd52dea6ebebfe28133b34f2a229b5e88f0ca018fddbb98320bb270deca3efa25209","ssdeep":"1536:ob/yp8L4Vqc0kewAYg+dgiyn2Lmm9DEvnPXpOYnckFLDmwPgt3C:k/N8VqcYpYtgDn2hDEv/MycCmTtS","tlshash":"cb73010489b84a0fef5e35b6c048ff757b21ec64d32adca1127458c9fb9a1859e5c32b","first_seen":"2025-10-20T06:25:38.795072Z","last_seen":"2025-10-20T06:25:38.795072Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1438,"timings":{"blocked":31,"dns":27,"connect":2,"send":0,"wait":1082,"receive":272,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixoraa.cc/kjkmndw1ruyf.jpg","fqdn":"pixoraa.cc","domain":"pixoraa.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stbhg.click/e/kjkmndw1ruyf","date":"2025-10-20T06:25:02.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixoraa.cc","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Sun, 14 Sep 2025 20:10:15 GMT","end":"Sat, 13 Dec 2025 19:04:04 GMT"},"fingerprint":{"sha1":"45:E4:A3:F5:8F:7E:B1:E8:92:97:F7:D8:1D:12:4B:2C:80:44:DF:0B","sha256":"1B:AF:7D:65:DC:AC:DC:17:29:53:1A:93:D0:D0:F8:BF:AC:6E:91:2E:92:CB:77:B1:E0:45:73:7C:EE:2D:80:8E"}}},"request":{"raw":"GET /kjkmndw1ruyf.jpg HTTP/1.1\r\nHost: pixoraa.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 504 Gateway Timeout\r\ndate: Mon, 20 Oct 2025 06:25:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6391\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 99166f89380335a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"504","status_text":"Gateway Timeout","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-18T11:41:01.301496Z","times_seen":15383472,"resource_available":true,"data":null}},"time_used":10816,"timings":{"blocked":313,"dns":34,"connect":1,"send":0,"wait":10177,"receive":1,"ssl":288},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/dl?op=get_slides\u0026length=7149\u0026url=https://pixoraa.cc/kjkmndw1ruyf0000.jpg","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://stbhg.click/e/kjkmndw1ruyf","date":"2025-10-20T06:25:03.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /dl?op=get_slides\u0026length=7149\u0026url=https://pixoraa.cc/kjkmndw1ruyf0000.jpg HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/kjkmndw1ruyf\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:25:03 GMT\r\ncontent-type: text/vtt\r\nserver: cloudflare\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7rMNJXobs9QdBkYeMWQIrOQtqBVSBfJWAhqSoc0rMnnq%2BUef8n0SOaIBo5%2BObKWxcbBMoNzhg0u0qAK0ZEt6dWb%2FUNqBuL%2BuxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99166f89ebe356a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9228,"size_decoded":0,"mime_type":"text/vtt","magic":"WebVTT subtitles, ASCII text","md5":"b6b7928b74fc2dcc0b25e40f8e137db1","sha1":"3144b373d8c1cac01c99db5311a0cb8745de8110","sha256":"fd53299e070f8ff36fe133dd2de61e3b446656fa9938a7eea269a64d00a340ad","sha512":"10b8139a8db3fde26d59aadd1bfb6990872da522f2c5b43c0aab5630a3a9b1a24264690a1e05b2de1e59153125981975e12eeb05a45045b2e7119c684d8a79e2","ssdeep":"96:LeE/JT2Ic7Z5GcYLtQmT3xdHguC+Z6B87d:r/Jrc7bFYBlS+Z6B8B","tlshash":"3712b5da43959c3ee7b353a4a3813ce4c917639fa9ccd850baf124a26ece52dfc61414","first_seen":"2025-10-20T06:25:38.796772Z","last_seen":"2025-10-20T06:25:38.796772Z","times_seen":1,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":254,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/ebwh00188/ebwh00188jp-8.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:58.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/ebwh00188/ebwh00188jp-8.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 73366\r\nserver: openresty\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Mon, 20 Jan 2025 09:15:39 GMT\r\nx-cache-status: HIT\r\netag: \"678e143b-11e96\"\r\naccept-ranges: bytes\r\nvia: 1.1 189f8212fe1ff96b2d61f90ee88f7b20.cloudfront.net (CloudFront), 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT20-P2, OSL50-P1\r\nx-amz-cf-id: BTONq7B9Z95aEzGvNrgGaQTyEzv0utVkwxi4WEHmTtVM0ceEqpZQ0A==\r\nage: 6023\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73366,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 534x800, components 3","md5":"52bbd20ce32fbb50fe4f4df768e78b70","sha1":"87f6c76cff802cff9a6761a5a77b72cfa3db6339","sha256":"65ac4ad38f7890c82afec344fc9643f36d726ddd2d1cc2f36e0601caf3dbfd20","sha512":"784e0512034c767a1ae02f86fcbb0294f58b20b1db3bda43300a000b6d19410738c769dcfadea40fb3097c009fdbe5451480284bc34ca955c0ad6d7618983d35","ssdeep":"1536:GawHz8+uVuBZBC1WXV8Czh5LfTdGYH7RavvFuaz4aGy1Ly7:G1z8JVb+8Cz3rHRaB4C1LE","tlshash":"cf63024e15265e85d6963a73490bf0b306ac059afeff219fd838b3f9121a5085d335cc","first_seen":"2025-10-20T06:25:38.798885Z","last_seen":"2025-10-20T06:25:38.798885Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1050,"receive":262,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=be416b77-170b-4f88-8a79-29468b389bd3\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=e5740c7b80abc2329366e06d2dc81dff\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=6","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:25:00.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 21:53:17 GMT","end":"Fri, 28 Nov 2025 21:53:16 GMT"},"fingerprint":{"sha1":"AA:2A:FC:C2:EE:01:8F:55:3F:19:46:84:4A:C8:A0:95:62:50:5C:A3","sha256":"3D:8C:1A:2E:1F:32:30:D4:D8:4F:D2:FB:CC:99:F1:9C:05:E5:7B:D8:9D:7D:24:86:AD:C5:1E:62:55:44:A4:CA"}}},"request":{"raw":"GET /pxf.gif?uuid=be416b77-170b-4f88-8a79-29468b389bd3\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=e5740c7b80abc2329366e06d2dc81dff\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=6 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 20 Oct 2025 06:25:00 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c2a2f18b0912d5d7fa14bd099172546d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-18T11:41:01.301496Z","times_seen":15383472,"resource_available":true,"data":null}},"time_used":694,"timings":{"blocked":299,"dns":15,"connect":93,"send":0,"wait":96,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2TL7NH453R","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/kjkmndw1ruyf","date":"2025-10-20T06:25:02.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtag/js?id=G-2TL7NH453R HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 20 Oct 2025 06:25:02 GMT\r\nexpires: Mon, 20 Oct 2025 06:25:02 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 141580\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":426723,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"b355b34106db02d334f2bb854a96c4cf","sha1":"9e85f13dfe1f636897fac50f765105361173afe9","sha256":"618e3ab152bdb050e9314b1f1a1af0a60171c78acb14f463a5f684c9be3c1151","sha512":"486de3b9d4a95b79a12f21d20a349f201397d94526dbd624cc3d40aa96412863d452f8c713e6b2356eb20e09bd7aa0632601b502a0ff47b40c4c36fc5c4478e5","ssdeep":"6144:nBX4c6tQSyOe+hy4nkEt7F8KWjxSqpRjeWvkAX6HJLGy1tyyluxwuuSyv:Bx6rRRhy4nkEt7F0EqPeKRy1bv","tlshash":"ff940a8e73c674269396f078503f018ba57b29a2f45cc896f189cce42d74a9a4277f7c","first_seen":"2025-10-19T22:24:54.24778Z","last_seen":"2025-10-20T06:25:38.801502Z","times_seen":2,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/stream/L0PjnBn3df1R3bnXiRqN0A/kjhhiuahiuhgihdf/1760984702/24482347/index-f2-v1-a1.m3u8","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://stbhg.click/e/kjkmndw1ruyf","date":"2025-10-20T06:25:06.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /stream/L0PjnBn3df1R3bnXiRqN0A/kjhhiuahiuhgihdf/1760984702/24482347/index-f2-v1-a1.m3u8 HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/kjkmndw1ruyf\r\nCookie: tsn=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:25:06 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\nserver: cloudflare\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i5QMbCSq%2F%2FYj3lSIMPcd4N8v13tonZ8DG9s59Ee6pP92FDIZsgi6r8ENGH0QXzgucxiS%2FjttGWPTSLhk3%2FQ4lABYVkQYDwt6MA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99166fa0290656a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78071,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"f30f70d415b7119907c278e09491198b","sha1":"d84aa629d0ec6e14404bdbf623c08237bf7ec5fe","sha256":"de30f58f181d0aa57ce2c7fab0274776844e5ee84ae2b44cb89def3d8dbfd134","sha512":"d62ea9623c4a9c56f6cb3570243d3fb161bb59bc698c525f65c1e5bfb85b87727a68f98d76f8d817e6a7bef4cc1aac2b27ed6543e86cce00a94aae0657a5dede","ssdeep":"384:TWdu8fJWdIKMfK2MjSEkmUL5JKa/YhLtBXYTrn2DdurxkFu:TW8MW0/MjbkmkHKoYhLzIfQdurxkY","tlshash":"d273cadbde4161481a6d4c84fbb4f6a499d1bf79fcf0978db348b2f608a0c67662090d","first_seen":"2025-10-20T06:25:38.803339Z","last_seen":"2025-10-20T06:25:38.803339Z","times_seen":1,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"weirdopt.com/ad/advertisers.js","fqdn":"weirdopt.com","domain":"weirdopt.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:59.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"weirdopt.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 Aug 2025 00:07:02 GMT","end":"Sat, 29 Nov 2025 00:07:01 GMT"},"fingerprint":{"sha1":"AD:4F:15:9E:60:62:A7:16:BA:4B:37:64:C6:01:6B:2B:99:47:89:BE","sha256":"44:74:EA:98:35:48:9C:28:63:20:61:17:18:F6:2B:0A:57:68:36:F4:EF:B0:67:1E:C0:7C:41:30:13:2C:02:F1"}}},"request":{"raw":"GET /ad/advertisers.js HTTP/1.1\r\nHost: weirdopt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 20 Oct 2025 06:24:59 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: bf00416c39b5859197237ad9c61faa20\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-18T11:41:01.301496Z","times_seen":15383472,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":59,"dns":1,"connect":17,"send":0,"wait":18,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/sone00340/sone00340jp-2.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:57.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/sone00340/sone00340jp-2.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 83066\r\nserver: openresty\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Fri, 09 Aug 2024 11:06:42 GMT\r\nx-cache-status: HIT\r\netag: \"66b5f842-1447a\"\r\nvia: 1.1 4129c88b7db23a46f14bad4f49e2e962.cloudfront.net (CloudFront), 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT20-P6, OSL50-P1\r\nx-amz-cf-id: rq0qiwZ59OZOb7Uy3Fezf4yLHjtwKV-5n3ejvLSc0nKQ8tTo_we-Xw==\r\nage: 26818\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":83066,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 534x800, components 3","md5":"a00f60bb0862e796292f058977c83b3a","sha1":"14d016eb0b936edd08ff1119a3d0eb33008202e5","sha256":"537dee8aa52c806995aba65ea2d1a40755b800141d0f52d4d7193b5a1963dbf7","sha512":"b84135a79dcb74bfc7f3965dda78ba622558073f7c059c53915b264fc825cd8fdf777280ba33d95a6cd4b61da1d723608352766ebaf1afe7eece1165a20fa350","ssdeep":"1536:q7iuZ5ww6R8S1ED+bJj1meQC/gOR+t2cJ38LjQiqD6pkm/a4:q7iunwXWgaAJIq4JtlyQz6n//","tlshash":"ea83027a841db6c104e60d70e91b72c5988ee7d60a473ff006532d629bc1df7a4a7e2e","first_seen":"2025-10-20T06:25:38.806129Z","last_seen":"2025-10-20T06:25:38.806129Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1489,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":1162,"receive":293,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/front.ajax.min.js?ver=2.5.5","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:57.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:07:43 GMT","end":"Wed, 14 Jan 2026 14:06:19 GMT"},"fingerprint":{"sha1":"10:3E:D1:9C:87:2B:E6:19:B2:77:B6:7F:1A:22:7A:25:AA:1A:AC:16","sha256":"3A:EB:A1:65:EC:BA:60:40:6B:24:A6:73:1E:57:89:DD:78:FA:95:FB:5A:FD:38:E3:56:5F:E9:9B:C4:E9:72:AB"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/front.ajax.min.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/\r\nCookie: starstruck_2610cdb1e7fc17e8e57860211a1b0aab=f2d421b29e8c2e151a8314a065fbeb38\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jSWbzEIIXYBc2pOt1NEgRViir0NyzcMx0jI7jz9j4BbaLZ%2BwfHESLJgJoSSapVbTkpNhNepdtsoAcb7Ox0GrgoL1y5tP%2FhJI2yQ4\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 99166f69f8720b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15025,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15023), with CRLF line terminators","md5":"01688e7db55bb122da5ecf1ecd76dc19","sha1":"127abb99dda567124ed64e89357caafdb672b528","sha256":"ebc7ea4f07c0230971ae1fbf81c235b1b20b8cff373f76d86dce9d10350b335b","sha512":"93ce636f46aaea47b3191fbbe42c33e57cb7c54ac956d33c32ccdc92db477955788d15d7fbfeb11e3a2881c08518859381dfb2c5aca35003677cba9909ed4b62","ssdeep":"384:1WJ5xYXJ0yfMS103o3Y93U3k3A69uDxMJxtvpWF1x1mUgspVYopnpTI6I3MIk47S:UGXfM5MigwA69uDxMJxtvpwVNRpTpxIE","tlshash":"f662635778869cca027761a1306fd50ab2b33e51d9124a06f1b9a1ec5ffdec66033b1e","first_seen":"2023-03-07T01:03:54Z","last_seen":"2026-05-18T02:42:17.862002Z","times_seen":1604,"resource_available":true,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":529,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.sbs/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/blueimp.js?ver=2.5.5","fqdn":"xhdfriday.sbs","domain":"xhdfriday.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:57.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:07:43 GMT","end":"Wed, 14 Jan 2026 14:06:19 GMT"},"fingerprint":{"sha1":"10:3E:D1:9C:87:2B:E6:19:B2:77:B6:7F:1A:22:7A:25:AA:1A:AC:16","sha256":"3A:EB:A1:65:EC:BA:60:40:6B:24:A6:73:1E:57:89:DD:78:FA:95:FB:5A:FD:38:E3:56:5F:E9:9B:C4:E9:72:AB"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/blueimp.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/\r\nCookie: starstruck_2610cdb1e7fc17e8e57860211a1b0aab=f2d421b29e8c2e151a8314a065fbeb38\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tEeHhAmhMcRHcvGwDo48Sd3BFGsSyTpTV3o66mcqws0sfcNMgISpnpCV1mrj5FqlmP9oHXfJluY9BVKE1IuGB3zGOBc0b%2BmQaoFR\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 99166f69f8740b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32964,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32032), with CRLF line terminators","md5":"0c33d55a46db8350f57388504aec281f","sha1":"3701799975093b4d67e3baeea453ef6202a66fba","sha256":"833047db5433fc30adfc5f85c19e600dbb6f56d462510663208a5354a984dada","sha512":"3015128555513da131cc3ee2248dfd8a44ced924b9818b7350fa3f532dac10e8e59a369c700412c20572edcd394331bbf90651256fe85e31b8dfd379c44ee341","ssdeep":"768:4u5b2Nl3O/NAHCxxw5cJ+NIdRWg2FskcQf9wJskDhY/LXeaSa4yj75H:JJQdO/N6C7w5cJ+NIdRWHFvN9wqD/LXF","tlshash":"a0e2f85db250662241d3a2ed705f690ab232d22da411918c3a7cdbdaac70d4f717bff8","first_seen":"2023-03-07T01:06:58Z","last_seen":"2026-05-18T09:10:02.951001Z","times_seen":905,"resource_available":true,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-20","alert":"Sinkholed","trigger":"xhdfriday.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/sone00340/sone00340jp-8.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.sbs/movies/sone-340-uncensored-my-classmate-missed-the-last-train-and-stayed-over-at-my-place/","date":"2025-10-20T06:24:57.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/sone00340/sone00340jp-8.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 54570\r\nserver: openresty\r\ndate: Mon, 20 Oct 2025 06:24:58 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Fri, 09 Aug 2024 11:06:42 GMT\r\netag: \"66b5f842-d52a\"\r\nx-cache-status: HIT\r\nvia: 1.1 4253323510217ba917e535f9fce97efc.cloudfront.net (CloudFront), 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT20-P6, OSL50-P1\r\nx-amz-cf-id: sOKGMt2N6ijeZpMSsAmmWsESKmZLiZJoE0r_58rixmJF-4eYdyW3Mg==\r\nage: 322473\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54570,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x534, components 3","md5":"a1b156c0c998196a7611f37631f4f36f","sha1":"3d322f8cb3a94b97061f2cac764ff8c1a100ed57","sha256":"ebe172193b0a9880e9bba690998dac38a484957b3fa5134c4422f9f6b3337527","sha512":"c774c24eaee4ade377178d3875993a31a875a189ea9bd3de196fa0ecd442b8b100b0a428cd9459155a2b714b3024952dffd8330653ddcf1a3a124557abfdf9da","ssdeep":"768:PoMNLOWJRT0VWso98/lCqTsBQg5/yTMrARQrrZ6DqV/sn2Id4XhFHCCy3lnBy9w2:PJ9T0VC9m4LBvyElrrZ7+d4X/HC9sO2","tlshash":"563302d5facc0301799fd1badf5da7d0b2dda402cd681a73c7e3ac2b3a14161238a109","first_seen":"2025-10-20T06:25:38.811004Z","last_seen":"2025-10-20T06:25:38.811004Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1402,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":1095,"receive":273,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}