{"report_id":"ec7d5400-4bf5-43e9-912b-6a288b0df137","version":6,"status":"done","tags":[],"date":"2025-10-14T02:45:09Z","url":{"schema":"http","addr":"xhdfriday.live/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss","fqdn":"xhdfriday.live","domain":"xhdfriday.live","tld":"live"},"ip":{"addr":"172.67.209.14","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"title":"SSIS-742 | [UNCENSORED] I Was Invited To Drink At Home By A Beautiful Boss - xhdfriday"},"submit":{"url":{"schema":"http","addr":"xhdfriday.live/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss","fqdn":"xhdfriday.live","domain":"xhdfriday.live","tld":"live"},"ip":{"addr":"172.67.209.14","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-18T02:45:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":15}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"relishsubsequentlytank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"pics.dmm.co.jp","ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2006-07-10","domain_rank":409090,"first_seen":"2012-08-01T07:09:25Z","last_seen":"2025-10-13T06:53:20.27101Z","alert_count":0,"request_count":13,"received_data":952711,"sent_data":6031,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"mc.yandex.com","ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1998-09-24","domain_rank":45494,"first_seen":"2014-03-01T13:57:52Z","last_seen":"2025-10-13T04:11:26.399263Z","alert_count":0,"request_count":3,"received_data":5198,"sent_data":3336,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pixoraa.cc","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-16","domain_rank":0,"first_seen":"2025-09-24T05:22:54.006271Z","last_seen":"2025-10-09T08:49:33.403607Z","alert_count":0,"request_count":1,"received_data":845462,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-12T22:12:24.910527Z","alert_count":0,"request_count":1,"received_data":22234,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"flushpersist.com","ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2025-10-08T01:17:43.238436Z","alert_count":2,"request_count":1,"received_data":530,"sent_data":765,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"xhdfriday.live","ip":{"addr":"172.67.209.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-15","domain_rank":0,"first_seen":"2025-10-14T02:45:13.223211Z","last_seen":"2025-10-14T02:45:13.223211Z","alert_count":2,"request_count":1,"received_data":51104,"sent_data":553,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"professionaltrafficmonitor.com","ip":{"addr":"3.125.105.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-01-23","domain_rank":16376,"first_seen":"2025-01-25T08:56:07.448138Z","last_seen":"2025-10-12T22:34:05.876953Z","alert_count":0,"request_count":1,"received_data":423,"sent_data":451,"comment":"","tags":null,"fingerprints":null},{"fqdn":"old.imb.hair","ip":{"addr":"104.21.25.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-26","domain_rank":0,"first_seen":"2025-07-11T23:08:07.969536Z","last_seen":"2025-10-13T18:57:46.227453Z","alert_count":0,"request_count":2,"received_data":49487,"sent_data":975,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"relishsubsequentlytank.com","ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2025-02-06","domain_rank":5445233,"first_seen":"2025-03-15T18:14:46.825163Z","last_seen":"2025-10-11T19:51:12.363475Z","alert_count":1,"request_count":1,"received_data":107421,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"region1.google-analytics.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-07-18","domain_rank":19689,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2025-10-09T03:46:15.24522Z","alert_count":0,"request_count":1,"received_data":848,"sent_data":1165,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s2.googleusercontent.com","ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":185201,"first_seen":"2012-07-08T11:51:25Z","last_seen":"2025-10-11T14:44:54.515429Z","alert_count":0,"request_count":2,"received_data":2454,"sent_data":978,"comment":"","tags":null,"fingerprints":null},{"fqdn":"stbhg.click","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-13","domain_rank":376060,"first_seen":"2024-12-13T22:04:19.166153Z","last_seen":"2025-10-13T15:55:58.427845Z","alert_count":0,"request_count":14,"received_data":1343195,"sent_data":7393,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"p16-tiktok-ads-sg.tiktokcdn.com","ip":{"addr":"23.36.77.90","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2017-09-20","domain_rank":274094,"first_seen":"2024-10-30T11:51:31Z","last_seen":"2025-10-07T04:51:47.200906Z","alert_count":0,"request_count":2,"received_data":425010,"sent_data":986,"comment":"","tags":null,"fingerprints":null},{"fqdn":"skinnycrawlinglax.com","ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":38609,"first_seen":"2025-07-09T22:28:05.771371Z","last_seen":"2025-10-13T03:57:20.763365Z","alert_count":6,"request_count":2,"received_data":7659,"sent_data":954,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-12T22:12:25.402635Z","alert_count":0,"request_count":4,"received_data":163852,"sent_data":2196,"comment":"","tags":null,"fingerprints":null},{"fqdn":"t0.gstatic.com","ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-06T20:22:05Z","last_seen":"2025-10-07T08:02:19.132787Z","alert_count":0,"request_count":2,"received_data":2044,"sent_data":1074,"comment":"","tags":null,"fingerprints":null},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2025-10-08T05:41:48.061731Z","alert_count":3,"request_count":1,"received_data":85963,"sent_data":412,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"mc.yandex.ru","ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":16498,"first_seen":"2012-05-21T09:38:30Z","last_seen":"2025-10-07T06:35:17.932898Z","alert_count":0,"request_count":1,"received_data":251513,"sent_data":411,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"xhdfriday.site","ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-29","domain_rank":0,"first_seen":"2025-10-14T02:45:13.205404Z","last_seen":"2025-10-14T02:45:13.205404Z","alert_count":62,"request_count":31,"received_data":1095244,"sent_data":21090,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Yoast SEO:25.8","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Draftpress HFCM","description":"Header Footer Code Manager by Draftpress is a easy interface to add snippets to the header or footer or above or below the content of your page.","website":"https://draftpress.com/products/header-footer-code-manager-pro/","common_platform_enumeration":"","icon":"Draftpress.png","categories":["WordPress plugins"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"weirdopt.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":37519,"first_seen":"2025-07-08T12:55:47.272157Z","last_seen":"2025-10-08T11:21:31.763121Z","alert_count":2,"request_count":1,"received_data":377,"sent_data":417,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn001.imggle.net","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-17","domain_rank":1959944,"first_seen":"2024-01-21T13:18:08Z","last_seen":"2025-10-02T22:31:21.068156Z","alert_count":0,"request_count":3,"received_data":184013,"sent_data":1386,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"image.tmdb.org","ip":{"addr":"138.199.37.227","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"2009-09-15","domain_rank":53077,"first_seen":"2021-01-09T06:43:03Z","last_seen":"2025-10-13T03:47:54.240792Z","alert_count":0,"request_count":2,"received_data":1262,"sent_data":860,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-12T22:12:10.358486Z","alert_count":0,"request_count":4,"received_data":1271336,"sent_data":2142,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/owlcarousel.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"56e770f95a9cb2ce06d6b044f93c24fa","sha1":"003bdb37bbd8cfd296bcffff38ce601b6b7df8dd","sha256":"ecc9ea285df7f95f79c647d1cfaca566239d68fcb183aa274fda98f33fce813e","sha512":"7e36ac1b0cbd3835d431fca68efd11fe05c7cb52a654cb9ef4bd3adb83f465ff890116c09b9ac1935308e0a1f94dd5d1ca12813a8af9ba67f4d39327e1053800","ssdeep":"384:7Ket0QK/Q52Cgwm0PQtiRX55DzNvYUyzLsxVxRbH:dK/Q4ptuXNQUyzLI5","tlshash":"12b2a54bb2202385469372b9419b110d713bfb78fc42855c70b6dadfaa4b84e9277b3d","size":23938,"data":"","first_seen":"2023-03-07T01:03:55Z","last_seen":"2026-04-23T20:55:32.073003Z","times_seen":1795,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relishsubsequentlytank.com/e5/74/0c/e5740c7b80abc2329366e06d2dc81dff.js","fqdn":"relishsubsequentlytank.com","domain":"relishsubsequentlytank.com","tld":"com"},"ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"introduction_type":"scriptElement","is_inline":false,"md5":"7293d4d02e7953c68d6bf88cb4248067","sha1":"49e97b21e61c813e11e36ceed5dacaaf0a75ebbe","sha256":"e001d2b15ed596855707371e71ef84bd5f38173e5ea566c1511365a26d1721e8","sha512":"c05b4733e5a52aa11aba712be30e95dfc1f33ff254762009597189451c8744d42c2908efb5b5f1ee9dec850fa34e589dd33203b3308eb7dd57e7fb11e2667745","ssdeep":"1536:99IDYewEZykXTzY67ytOUS5VlIXga6kSFf02mdBV4mCzCgiA0eQpE0I9N0rvQ:Yn9T9RCgZ0eQp29N0rvQ","tlshash":"f5a3a4883f40f17d0796b47a323fa61af0791a01509cd69cf107f1a8ae6674ab43fe65","size":106603,"data":"","first_seen":"2025-10-14T02:45:26.680941Z","last_seen":"2025-10-14T02:45:26.680941Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7e7bc662eae0d2d5b254d3c48c0ab105","sha1":"2f5bedb5116d13fc045788d10acda9a9a0f4a4a1","sha256":"393cbbfe7832e2b2e38720ce4fd5a44323f5cd1f9906e7f38c4f1699dd988fbc","sha512":"21985eedcd090c489e87277480249b09c5af7928d6f06fe2f4a2da0d9891d2195cd82d4cf1bd9fcee667c0dd75b20a45e2fb213555c5bfc2b5ba95ffcb89b284","ssdeep":"","tlshash":"de01103f13411dbd4bd4a1c9ee52b11395e443a6e241058da19ce75c00fde36f128936","size":727,"data":"","first_seen":"2025-10-14T02:45:26.890825Z","last_seen":"2025-10-14T04:43:33.658811Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b26d6f86c4345f37c33c9b3b6dc9338b","sha1":"b92b66a7dadcc3acefe2c4cbd34f36c525ef4a24","sha256":"5b3474edb6863ae89e1cfe842fb92e8ffdb6d4084a837040d36d497c4a864216","sha512":"4a761629227e8640b5401c3d20d4c21820fde23b975ac94da139912a7a4ef592f86ae1117eaa52a510b7155e9ac3c1b8413c75d429e95ff473b0b9333946382e","ssdeep":"","tlshash":"1dc02b8c720a0cb041fb27408b3fbb00b002321495d56931494923048d30e03db54c14","size":153,"data":"","first_seen":"2023-05-25T01:59:38Z","last_seen":"2026-04-02T13:28:52.639295Z","times_seen":604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/starstruck.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4279a70d8fc5018f1a4dd4328ba56d0e","sha1":"6aec001b3bd94f107f49e62c817048b1dd5ebe27","sha256":"2914ebe7e0b33da6d390b3f42a784210f285402cf57588b90d917193f773e9aa","sha512":"025d6310ec864f81a8f0afc8f33a0e8acaf08e79250f78ab5e1c8fdd87b99c9790c4ebe17cb35fa21d9765e9817bad7db90759bce5862fbfdebccb689f03f0a2","ssdeep":"","tlshash":"34219e5c309b61ae67f2a1f4287f17015332ae14b507ca3b742900b69f9d94da63a968","size":1311,"data":"","first_seen":"2023-03-07T01:06:58Z","last_seen":"2026-04-23T10:18:17.225343Z","times_seen":905,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/isrepeater.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ceeb6d8b500945a6aaea27f52f6f5e6","sha1":"4647a4865cb5ba5dce1057b3765044ec9559eec6","sha256":"477f24a8aa73997ef9d469763c99d51a9a0e94826db0525b45542d9d7219e214","sha512":"08bcacdd9fd2e1f2c30b50fd1f9d6ab57ca431a61c3d152e4b700537f264459ec76b31bba225752f00cd434d73f6f567aaadbaceb5865136eb6c9f551435758e","ssdeep":"192:OHLiBsVoJ1jrQN+U+PZeX8+eo3MmYXRHLHoZq3Ho7:NsO/jrQNjvleo3HCW6I7","tlshash":"8722a9997691b5229267b830117f010fb23b98d6f94d5804e2ce99e6bfbd80c4227f9d","size":10380,"data":"","first_seen":"2023-03-07T01:03:55Z","last_seen":"2026-04-23T20:55:32.165794Z","times_seen":1864,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ebd34a88e1927d68a2aae4e2078ddc13","sha1":"24b2e25920a7bc5d855bb5e50b577c322441ab26","sha256":"0d0a9a41be6465ad256f15b09ab0b08c18f51c8a3bd0a5bf638b5bae0b946794","sha512":"893ba2e632e27f0509af45cd1285bf2f1c28184f4d3653a4ab18028edcf436b36a79dab619370211e838313a5409e1e45a15dea05edaa5075425c3e04d27d21a","ssdeep":"","tlshash":"9cd0233c4c1e2d078683d4ec0038f14342cd47b044064a1856148c6a07d7815878fd84","size":199,"data":"","first_seen":"2025-10-14T02:45:26.896788Z","last_seen":"2025-10-14T04:43:33.673756Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ad79ce0bcbdabbb40bab8866f025baef","sha1":"525f2b7add41e4efafde41fe276ee0c84ee6fb0f","sha256":"dd0cac08b473fdd68a114cb05f3d8e3c193022ef95feb73d5d1bbca3b0f23c69","sha512":"7be20a5854c8f71ca92bd21cad1515e48014dbc18602117aded2e877e28cb1ce61c45eb6795a7b9c1066c485fa5779718274379b9fc7eaf4e9fadcf835586cdb","ssdeep":"192:IamB0mo00vjBUhpWKK8HwpyE657ZoS4XB47U1Mk9Jrzo4gE0n11CW01XUHEXS1N+:IaS0mo00vdUS8HwgtZCR51MQrzo66wSm","tlshash":"c1223c3588a04834c19517e8b4bbb368b23a2c51fd14e58dfc7ee598177c69378a3ed4","size":9953,"data":"","first_seen":"2025-10-14T02:45:26.900128Z","last_seen":"2025-10-14T02:45:26.900128Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/player/jw8/vast.js?v=32","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b3eb53abc624a51f5e226d08758ddf3","sha1":"6cca061ec7c41313ec2027eaaca76fa9dfad750b","sha256":"73788e3233d5113578082f78869724925d3e4dd2c9d02fdc0bf84d6aed3a768e","sha512":"c6c7bbc31213d98134d98087ad912f1244b2dc7c7914247baac80d534663ab75135c004bf5473044db9e082302477b9d812b0a0db4c5f21b3e27508c26c265c5","ssdeep":"1536:twVnle2Qmbe005pkZ/gbxRYpYItN6X6ud7srzIjpitB39BsLIYOONMQHMkBxLNwO:tEnPRIN1D2zXkIYdN7Hnf","tlshash":"acb308872399d52247e484e960344212b335060f780a83acf67dfdef1d5ea4b76bab74","size":112211,"data":"","first_seen":"2025-04-01T21:32:19.700252Z","last_seen":"2026-04-18T03:09:02.059719Z","times_seen":562,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/front.scripts.min.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2731772e163f205b1c9e24a5c6c7b470","sha1":"81bdbbc6fcb56e622ddfd6a6d28e72493e3f2329","sha256":"55974bc676581db39c8e596c87ebd046b4439fdb6c381e4270b43f6065393623","sha512":"4622fa5cf1c9120c4bb5439ac1f8b97ba81df1ae3b2a0093ae9f00e6a13e223e535ead27cf999d7621d8c3ea057591c9f379dab920e38877fd6caf338ddb6787","ssdeep":"48:gqhZsZGRO2NQ5XM9gMy5U8aG0vxBOCOo7JMcvTNqfQNuJoH+p58DPJEpE751KhZD:gUTn8aGExBULEen851FEBE7NPbWqi/","tlshash":"2aa1542b3222b0dd10bf2371752fa45416276d59da05498ab8b8c8da0d3fcc621a7f3f","size":4786,"data":"","first_seen":"2023-03-07T01:03:55Z","last_seen":"2026-04-23T20:55:32.155899Z","times_seen":1703,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/starstruck.raty.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d967735d0c4a36d039142d01d02ee257","sha1":"e79738152720eef153774d3a6806d03861623f2f","sha256":"310589cc35c17dc5e369b35b45423ac830bb0a0b65f7f720a1c3b089254bd152","sha512":"ffa0ed7ed3788cb34ba92c8c94fd7c0cc4ecee293e17ab73e762b46ad604efa543dd3abc96680786632c9af5f93d374facf2daf260194f76e1787d5889017c0d","ssdeep":"192:4r1zqoHYKx2zznWhn5KsPYxUDAh8QGrCafGULhcX5LlXF/OfIpoqt:4rJxc3WwmCoKmyoqt","tlshash":"242211ccb3827146eea3337059ab270ee232be49e54a401d787dc7d1ef6990d2066e75","size":10364,"data":"","first_seen":"2023-03-07T01:06:58Z","last_seen":"2026-04-23T10:18:17.227858Z","times_seen":904,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-RTM6XRXKXM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"39cf32fd5f271784c91a777ab8150f73","sha1":"8e31b7e8d04dc98b9a959a73b3cfb13889b26ed6","sha256":"809dccb13a049dc2048a4a5465af5cae9e9a9a9900fe0031facc9dd59df45b26","sha512":"49e15ca15579f141ab297d83b01ec8f40c4cdc5c498340004fde528b8aaf16e42485ffab64691d58ca6c665311a56246450c32180ee1cfadfe5cbf99fe835a91","ssdeep":"6144:ZCO/yp2j4tM0uwbWZJT+Nju5204O0NsYXdXAQY:ZOY8y0KZJu0O8","tlshash":"729418de73d674225396f078503f018ba57b28a2b44cc899f189cde52e74a9a4237f7c","size":418825,"data":"","first_seen":"2025-10-14T02:45:26.588445Z","last_seen":"2025-10-14T04:43:33.18985Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a5cbaf72ecabff49d12ac7fe346dc75","sha1":"33ec845f07bb97bb5eca31aeb64d1c3bda4af136","sha256":"5b5cda759fde40d77bceabab02c1826b496c0d6db0ce571addd5cc5136821f79","sha512":"b6d002758ab0c4f6928250cef2c9fd769bcd670c026ee3103509b0fd2aaa0cc5d36d2d06c0e057e956b76b854c3f5e8a8c1099e1a4312d6dcb520ac2de1a9877","ssdeep":"","tlshash":"ebc02b8c25035cb001db17400b1fb500b0023111e4f01c31090233045520c97b765c10","size":139,"data":"","first_seen":"2025-09-08T12:26:50.766468Z","last_seen":"2026-03-29T19:50:06.983804Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"04310cf79011cebea3fb86da6f8899ee","sha1":"520edb1c3b8cf22b346c3b8b120e4b1a163771fd","sha256":"e8da77a33828f2b4837adc6f2cf91a7ed9c3240f1679a195c51d19ac2ebda4a1","sha512":"912ca1f36ac191aa7d1d953ead1e503fbf5ab37b3ea71efc1734fb89bc33d20a1c21d8586435b3d7d6ed160b42d45a2635e359dd75a7fc9fbcbb4042a6de82dd","ssdeep":"","tlshash":"c3d02b8c611cb1595bef2254d87b8700d616b4135204198140dd2a705d54230431659c","size":251,"data":"","first_seen":"2023-03-07T01:03:08Z","last_seen":"2026-04-23T20:55:32.178954Z","times_seen":2119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d36d789b4a5b12745e791c075bede5b9","sha1":"12b8335d1bff8a02f01b084d2b020f37fb06bb2d","sha256":"43c51b7934a07bf860380439d0302a2f92158dc8a17534ef7ecb878b77e0eaad","sha512":"ff7f579fca19d1bc73484b1fe6ee6d24935e0d666f987bc78648fdeff2217b9ac013921f109fcac0fdc7db3b91c9da27eb53db5810f7b4024db9745c0ac24092","ssdeep":"","tlshash":"86119b2b940413680dbe333cce1f5c453671288ae405fc675a9a6ce21e60d231271928","size":884,"data":"","first_seen":"2023-03-07T12:03:19Z","last_seen":"2026-04-17T09:59:38.580421Z","times_seen":359,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85386,"data":"","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/js/localstorage-slim.js","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba6facacb00551830393d637195804cf","sha1":"77d2d2802ee44767b33a2d679945cc3efa3619cc","sha256":"41bb37c8133d8e5c128820cfbe03bcbf63ce256bcbd60a1a76143472d8668e38","sha512":"90aa07250eb414ec22765ab6922f593ed3186faecc02008f0331c3e3807cace76861e01028142015308341e955f151b609d08b7d354ff2d27e0ff04ebfde81f9","ssdeep":"","tlshash":"ea41118275e1d9904be004e728b0c002e638992e705d62d0f7b7dd827c9909bcfb57fa","size":2064,"data":"","first_seen":"2023-03-07T15:52:27Z","last_seen":"2026-04-21T15:58:00.258921Z","times_seen":1492,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/js/xupload.js","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ef44e11ddf37c97750431e5284e4d77","sha1":"59ed0438edbda256e8258ce41729e89e7a9f0b66","sha256":"9be83627d9e3f905d1bf43b83445f1874a98ba283e79a944acff7db7c47b2cf6","sha512":"3812f64c724a2200a8a32568e793b444748a4def13c49e78815b2608106990b813649f37a36944d19da388b759f50559635fedc8b488183d9738ecbd3b5a584f","ssdeep":"192:7IKE9YGs1axsrl6XsZWnrbll621w+4UWdRebMQ4WdReDyYQaQv7OsaaFg+BnqGQZ:EGy+qBlV9GRebVReDyYS7OsaaF10fq3u","tlshash":"0522674abaa339a12a7730350bbf52043b398407114aca54bd5cd6c4af8452897ffbfd","size":10740,"data":"","first_seen":"2024-10-19T23:08:50.51898Z","last_seen":"2026-03-11T22:57:21.208385Z","times_seen":347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2TL7NH453R","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2167e25edd11c8164edf78c946fe5a14","sha1":"1bcfb7e9085f87ab5163212af21c5c8b2691318e","sha256":"e46a5d61a55f6b4b39686288cb2015bbfaeeeeaf4e0dca7ecedcf63bdc42e54d","sha512":"777d5e88cb34a5cb6e49acd70d321b6d537f40a37dad0e0778000a0f9211372ccb4aa7ac1bb44166523cc12b72cf8bf9e2e7d392c0bc56cbbc2473b2827bc033","ssdeep":"6144:nBPb/yp2a4tM0uwbWZJT+Nju5204O0NsYXdXAQY:BWYJy0KZJu0O8","tlshash":"099419de73d674225396f078503f018ba57b28a2b44cc89af189cde42e74a9a4177f7c","size":425137,"data":"","first_seen":"2025-10-14T02:45:26.864333Z","last_seen":"2025-10-14T04:43:33.37941Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-E2BG6CPV2J","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"95ba7deaae873affaf737a6f4f4161a2","sha1":"51c5ebb5a0ea9a74e9727b89cc488c976533c85a","sha256":"04b800e47b14d0f96c521005517d5fb9fe1f2f7e2d6e71dfaf6be9916e1747d7","sha512":"2ba535053ee05928aee1648a969c77bf7dafa0299770dc7c840242031ecd1dbace15bcd6f96b12d500d9089759d9213a0e1d4a5f04c2c5c1714dc7edc3884d1e","ssdeep":"6144:qBKd/yp2W4tM0uwbWZJT+Nju5204O0NsYXdXAQY:kvY9y0KZJu0O8","tlshash":"11941ade73d674225396f078503f018ba57b28a2b44cc89af189cde42e74a9a4177f7c","size":424871,"data":"","first_seen":"2025-10-14T02:45:26.735302Z","last_seen":"2025-10-14T02:45:26.735302Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/front.ajax.min.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"01688e7db55bb122da5ecf1ecd76dc19","sha1":"127abb99dda567124ed64e89357caafdb672b528","sha256":"ebc7ea4f07c0230971ae1fbf81c235b1b20b8cff373f76d86dce9d10350b335b","sha512":"93ce636f46aaea47b3191fbbe42c33e57cb7c54ac956d33c32ccdc92db477955788d15d7fbfeb11e3a2881c08518859381dfb2c5aca35003677cba9909ed4b62","ssdeep":"384:1WJ5xYXJ0yfMS103o3Y93U3k3A69uDxMJxtvpWF1x1mUgspVYopnpTI6I3MIk47S:UGXfM5MigwA69uDxMJxtvpwVNRpTpxIE","tlshash":"f662635778869cca027761a1306fd50ab2b33e51d9124a06f1b9a1ec5ffdec66033b1e","size":15025,"data":"","first_seen":"2023-03-07T01:03:54Z","last_seen":"2026-04-23T20:55:32.070902Z","times_seen":1567,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/js/jquery.cookie.js","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae0c2c5d8f01f7d35bb698bb618a62f7","sha1":"63556a22ddea1c5f23a5cf7d0b6d35c7aab54e20","sha256":"75aef2e95ea7f3a70999396fba0c2ab866f4ff06313cf1b07780d800a5fc1ebc","sha512":"eac94ca9d884692af8bdf12aa6e902a3be4eed0772ad8f2932ac1c3328b83a7351cdf743a409bbc0a3cd385956c08d3203d51c572bb1680489e37330fe27a2bb","ssdeep":"96:L4BZxb64Ng7V8cNwpGylRCsKZcj1JXulL6M/aGByLskPSP4lBCClf1wgCyC:LQnb6eg7DgCsk8fgZJkPSPa+gCyC","tlshash":"2e91fd293a0d231d149353f57aee10c8a930d632216ad46c744cb6b06f00c63ddfbbea","size":4331,"data":"","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-04-24T16:13:40.035Z","times_seen":4391,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb3a2f747e90c553769c2155d20f3ebf","sha1":"d10496bb17cb31e6c493f1429655fd723dfa3cfb","sha256":"79ac617398535f8ab3b7a4ec458a94ef2156acd847ff57111afef826d82d3742","sha512":"a1bc1a88e5a27e3270f872097bde105a03e1f7c2281f4067f2c81dee984a6be21d5e207d3237314315b7153d39c9805701b3c0486ac74137ff83230fff68540d","ssdeep":"","tlshash":"8cc09b8c251e5cb195f72740db7fb604b4423214d4d56a314d5d63845d30f17db55954","size":153,"data":"","first_seen":"2025-05-19T10:11:33.51975Z","last_seen":"2026-04-02T13:28:52.640293Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"17b8318ac8c4c66d7d9e8a82d605b771","sha1":"da94fcdae646dd50749accd7c1a5cbd0abf52540","sha256":"6abe6165dbe7eeca7d2519aedef11469c5233908fa665041ed5e0d4f531d57c5","sha512":"12179712d518406e51bd53cd738745032cc3fd5cdcabc35c1287405decb1714835278f1c0ef6c13d5f74eec340075a68e86b85cafe437836b6d3d2911ef68c20","ssdeep":"","tlshash":"d8f09ea93ccd8035e335126762afa15ab45a69382c4abc16c44c48853a95dba08af54c","size":506,"data":"","first_seen":"2025-06-22T04:35:10.483003Z","last_seen":"2026-03-11T22:57:21.236081Z","times_seen":239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"572818764da270d6bd284254fe4c9386","sha1":"e18a1d3f2b9f72582a4c0c12b6af35ebaf941eb8","sha256":"e337fd54289df36322c92c5139d8fe14516290b7d593583aaf48dbc1ba68ceeb","sha512":"8e6abbc312e2a65059517f3a32aa69614fd18a0dde3f8d4ad225eb35bc4093eabfafc1d2b4b1aa7ea4c0b97c19c3f081664b9f286138e59bd184b006af12f11c","ssdeep":"","tlshash":"bd11ce26f7ac5120c13b3167d936f2cbb42d00319415ec4efe4ce69c63a198b397a8a5","size":887,"data":"","first_seen":"2025-10-14T02:45:26.920195Z","last_seen":"2025-10-14T02:45:26.920195Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/lazyload.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3acbd4a87d123bc6b7e4ef753e63570","sha1":"3042ebd6ace02f8a053f22c5eb76c0aaec870065","sha256":"10b8714eb5a412ab0bece0bef0fcd9553a38cd0bead58a752e346d6779051373","sha512":"f536faeb35dcef8366758837b35b1547d181f425b664106e8fdbd2592928b405ff50f0114d4db6ffe445f0f732efd73172ea2ade5693dbe2f73794bf877f6432","ssdeep":"192:OO4602wGWi72hBQa0cDTrTx46C4gq4q4oFPHK818owTZ6RtA:OO460o72hVDnTxcdq4q4oFPHKI8VTIR2","tlshash":"8de1e5deb266b077a99738b4512f210f91337063bd0a9805a17ac0c25b3ca9d5237e3e","size":7238,"data":"","first_seen":"2023-03-07T01:03:55Z","last_seen":"2026-04-25T03:47:12.700445Z","times_seen":1540,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-25T16:53:25.608627Z","times_seen":687618,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76cc6a7775b7b653ba5a7d7f9cea4eb4","sha1":"6484c7b286038e9a60c38f4adc61e6ba30062c91","sha256":"a00f1ced7d3bab63e82c08fdb0b05b0e9659805756c15b085c2b9804671302c9","sha512":"38c92e616452c2021d351efc393e49b83c1405721bcab7c63eb809eb040a9cb77d87e2f9bac91373a0853d198f76616ed1759e7024a8b5b0d3d0398da48738db","ssdeep":"","tlshash":"aaa022000300b80280000cccb000c8a820ec330380c20200f223fa0eea38282c03300e","size":60,"data":"","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-04-11T03:47:04.88884Z","times_seen":1031,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/player/jw8/provider.hlsjs.js?v=42","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b88ce761b9ebc2a7859a2e03b33ce1ed","sha1":"70d94f3c48460af13fc14eea9e5969f8f28d1a3a","sha256":"0b009d01bf513b1059d8ee15e1a8b57faeb5f8066c0f47d2cf8e1dd2454e5b28","sha512":"0bf83a6b3d8d20918df3ecfd29f7016549a8d8c8cc4aa439018295d55ebf7e136397e0fca72ae0e4bc9eebcd3384261c9a4a492b6e4d43e1fc1acd3ce872c24a","ssdeep":"6144:Fy9gZtOSTvzXBukG/xu08Q9Eu961Q3/nqJxgEMLew9rrqwZk6:MyvvG/xu0pU1cqJxgEIZF","tlshash":"aca43bdd77a5a42642c2a1a5903f4607633b7d0a340dc1acfa2be9d75db8849b03bf74","size":461504,"data":"","first_seen":"2025-04-01T21:32:19.721472Z","last_seen":"2026-04-02T13:28:52.612627Z","times_seen":602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.ru/metrika/tag.js","fqdn":"mc.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7b59334a0215861604bf2c355a01426","sha1":"f68b6a2f72d4a6086ca7c1d78a04458ae8437e23","sha256":"89b8f8c12760be3823f49f91594742c9cfeb5a20517bf72e069b5bf8a696e735","sha512":"0efa10ae9b7afa98d294704e2852d85183bc5f4a91610a6d215e9dd1ffc602352a53c95c5ed91e7b0e1104c0f91dff5f9ccea2521c4f5ff106000a3df264adec","ssdeep":"3072:2feIs6G+qwbUFP4uPB+dH//LGmSL05WWkBUrIclXXuhG84U:2feIsQFUFguP8dHHCmSk8Ur1XXG2U","tlshash":"1b34d8dd76827472937334b4907f000b72beaca6f14c8955e186e9d93e789a89137f2c","size":250673,"data":"","first_seen":"2025-10-13T11:49:52.804847Z","last_seen":"2025-10-20T12:19:55.70716Z","times_seen":800,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/blueimp.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c33d55a46db8350f57388504aec281f","sha1":"3701799975093b4d67e3baeea453ef6202a66fba","sha256":"833047db5433fc30adfc5f85c19e600dbb6f56d462510663208a5354a984dada","sha512":"3015128555513da131cc3ee2248dfd8a44ced924b9818b7350fa3f532dac10e8e59a369c700412c20572edcd394331bbf90651256fe85e31b8dfd379c44ee341","ssdeep":"768:4u5b2Nl3O/NAHCxxw5cJ+NIdRWg2FskcQf9wJskDhY/LXeaSa4yj75H:JJQdO/N6C7w5cJ+NIdRWHFvN9wqD/LXF","tlshash":"a0e2f85db250662241d3a2ed705f690ab232d22da411918c3a7cdbdaac70d4f717bff8","size":32964,"data":"","first_seen":"2023-03-07T01:06:58Z","last_seen":"2026-04-23T10:18:17.227348Z","times_seen":864,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b998fc5e0773a0d92e42295860912717","sha1":"bc5ff0d9b5b001f78338c32477e353a165b0f763","sha256":"f0bbfa7d07dafb4a9c767a649a8b65d22d20c2a91507451924574d7d0272d05f","sha512":"d9e2d9f060fe1dfe2c7a346d1e002806ee0597d4b0297fbf461bf3f268f5c3f147f05d6098bfd4db369c45b43f7cbe3c0bc0babcec8c3f2563129dda866959ef","ssdeep":"","tlshash":"6bf08b6af1030d9c0b1d83c96dbd3c8235b91527860077d6eaa9f29c05edabc7048036","size":550,"data":"","first_seen":"2025-10-14T02:45:26.932556Z","last_seen":"2025-10-14T04:43:33.692381Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/front.livesearch.min.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0eea0408655c01545c25f142ecd898fd","sha1":"1bb9d98a7fee41318007652d0723141704a658e6","sha256":"5991b17b41002817f208207448eb82392a618a9b6bf9f4ca2c8e84815769a722","sha512":"da2f11b1a3b21b0d9d5bf0da0dd692adeb76910cd115264ffdfde7b4b61bc2526f3849b8f77f9e85537acd000cd14a25068715b5281bfd9267d6e180a482a63f","ssdeep":"48:TajZ6/nJN73IMTGnJNfqdaX6DlJB/KvjFd43payvh6Y2OnJNAPn2DjL/6vtnooO:T+Z+J1YMYJZqdk67B4d45nHJa2n6ne","tlshash":"4aa1564170815dd7023b23601e3bb60ba2937faad70a9401717ed1e50fa6d8a353671f","size":4741,"data":"","first_seen":"2023-03-07T01:03:55Z","last_seen":"2026-04-23T20:55:32.052095Z","times_seen":1709,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ff72bb0f2f862983d3d4412789e7a4ef","sha1":"b7ceced90ab0cd4af6bde3936c06af14cee14f2d","sha256":"7dcfe6c267778cb1cbaf9f5550ba838f4d4857df9488b251712285b8511fcf90","sha512":"b85b3de490bc5ddcd9804bad8764cd6a90b580cee2b166cedab7f2133e403162666f05182e31e580f5496113d3acbf7be2b6800fd5f92c9e024e19c6ffca14a1","ssdeep":"192:IsoWFMblh4Zz3NmbbpqaEkizgOhkCcaEqDgk5zdcFJLS:IsoWFMblYmbDEPbOCcVqEk5zdE+","tlshash":"71121ab9d6b6003296c165ac306fa75877e52ae17831f511ff8d8c8fb184d9192f65c0","size":9059,"data":"","first_seen":"2025-10-14T02:45:26.936236Z","last_seen":"2025-10-14T02:45:26.936236Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/player/jw8/jwplayer.js?v=7","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"581ff912c413cd78a30f5c212f42271a","sha1":"79af689432d0f20cd1d951eb9436711da07decd4","sha256":"c708d26c24b48c3343e8cc7879d07e8ca6f23d1cc1e5df165a9f8e24a7c5830e","sha512":"c6185ea9db6db8786aa1636537595a5f061745caf287602beafc2dca984b1eceafeb3651109cad8cf45be3dba2a76a201758c6aaa7d7fb1adc8e07e95a39f41b","ssdeep":"1536:ELyl/ByW1iqxGJaGB2lAqU6ePRtwoIWz0Bk+5cm3wUn+yUi3LAalYqlkcRPUeJaQ:L4pknUi3LAbdhHwSm","tlshash":"99e339a631c2f4a613e264c7e47a4005f1790988744de8a4faacecd67956907b1b3ffc","size":148052,"data":"","first_seen":"2025-04-01T21:32:19.723959Z","last_seen":"2026-04-02T13:28:52.626488Z","times_seen":603,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/player/jw8/jwplayer.core.controls.js?v=42","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc91b5efc8f4bb2482c2d7d5d8d9b691","sha1":"5db922c4c6caf3a7d22f57a21670281d5c31994b","sha256":"f061c139ad68d7ed1360ab6a2c8842466d2913582468c48eb2d1ee2a651fb495","sha512":"f1e175f4658e4cb1c603875c81f3b96caaab74346c78d9b320e564f0a09a8518b11123509351bfa5229ac9d867d56c6afc1118ce7c368ff1ce729de877c7d694","ssdeep":"3072:+jY7nFuuslX/Na3u6NxIeLSJhy1yiSS64pOknRBb9Wsr9BbrC3YLrmYRJ:2Yx5U/Na3JpLSJhyJOaRBRtBHzLrmYRJ","tlshash":"e9640932214252359aea82da66514604b3398085f516cfacff2ceddd4c6e9c731fabb4","size":331116,"data":"","first_seen":"2024-12-01T14:07:01.698179Z","last_seen":"2026-04-18T03:09:02.100134Z","times_seen":669,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/idtabs.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3665ff6f8d2bf5a2af3de5d6e333a7c0","sha1":"db9f6a2b874f7c24a5827f0f1d679ed3c7d7b7e5","sha256":"2eb9d605c096771e0669e09ac60207d6171bd255b20416d07a4f14aca62a5df6","sha512":"eecce0b86b15eb438071ce1db21f49762634be3740451943ba95338939af20f18a06d5be4875bd114aaa42ee23a274279c926c625485316b3b6fa6894f624507","ssdeep":"","tlshash":"303115803241342b4a9eb1e7551b23d191be44a8980c40dcba71fe904cad7ce94f3e67","size":1543,"data":"","first_seen":"2023-03-07T01:03:54Z","last_seen":"2026-04-23T20:55:32.138289Z","times_seen":1813,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-includes/js/comment-reply.min.js?ver=6.8.3","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4a49df71f8b98c1d9f9d8fce74d89e8","sha1":"b95fcda0c8c26305ad94e80343d0cfca8a048a10","sha256":"9d4687a19cab8f7442a3bda40c45be4d10e42488e091ddd706c3caed83c3ee1f","sha512":"42cd5f854779886f24c43ed14617380110c946d1b430b454060c3b391de6fbae6d0ed8ab7cdd7cfdc9726b2d6142a4e01c4448e36088dfcee7fdd00b60909f89","ssdeep":"","tlshash":"5051a7d437c95d762a83b3395efe930271712709a50805608826c86931bcfea63b67fe","size":3026,"data":"","first_seen":"2024-11-13T06:33:24.856382Z","last_seen":"2026-04-25T15:58:38.564742Z","times_seen":63213,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/8d/e9/ae/8de9ae4b0e4b914d604a7e4b56139ffe.js","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6062294451a7a581dc74178c7c5a1332","sha1":"c8e09f671561b72bdae9fd3cfeea799629430105","sha256":"c556ffdcc50d996a51234a1dec5ae85925ffa13c788b800be900dc5eb1344d79","sha512":"5b4bcb7d6530bfa8d33d4c769d0934938af4e7842a518556021ed900fad8a06bc39c2d35494586adf34e4d6fe19095b2d41c726b8214746527e04cec9e910594","ssdeep":"192:M/H3P83adOwGuABXfKOBPpzbo3j3rFuuV6:MP/83adOwWp0j3Buz","tlshash":"fbd1a8dc768070800be7e97f776f651ab06a58501c4fe491f003a9e83d6872ed63eac1","size":6293,"data":"","first_seen":"2025-09-26T11:10:49.483616Z","last_seen":"2025-10-14T12:32:44.197235Z","times_seen":1614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/js/jquery.min.js","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-25T16:52:02.465336Z","times_seen":454934,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a6051ba30f29c3e96123c936393d2a64","sha1":"72e84d5c9a5c00bf06bd3a13f993bc0042c4e588","sha256":"901053724f7acbf7f9625f53d18089a232a763737f396bd1403805f59156f401","sha512":"d361d4edd33d1b9db785ec49b8d3ce4abf1f331a976adc777a3d5145ce8bf1f208404fe8b1f53f56dfb30994d34751291ae517abe33542f79807813fcffd33c3","ssdeep":"","tlshash":"f73153b63128347882f6166f7cbb624df07b55512e1e9084a01ce4643828fb9f6338ce","size":1526,"data":"","first_seen":"2024-12-13T22:04:23.912578Z","last_seen":"2026-03-11T22:57:21.257626Z","times_seen":324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-25T16:53:25.748475Z","times_seen":740830,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/pwsscrollbar.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"971c9dba00bafafbbefeec7e58dfc432","sha1":"ea7fbe2e8c2725baccf3aa09fc52244708218620","sha256":"8d66e5d985349af924510cf978564a7d84164741de08f173d1fa61f0b1c2960c","sha512":"9705ffd9da0e788542d1df3542789ed38dbf2ca3eb99a609b1271dc24c2d81b4c748591f12a3114771017be0d0c8662771231b58da93ee2c775fb8b7196914e6","ssdeep":"768:J8WQosXc7u8/fP2WRHBDQXBJhoJWR/e4NKMTul/x31JuouLdL4jS:J8ZXc7dfPtHBDaoktTsx31Juo4z","tlshash":"db1329f4370534f712eb6f5e442b020923365896670788b1707d9cb82fa1de612a7f6e","size":45008,"data":"","first_seen":"2023-03-07T01:03:54Z","last_seen":"2026-04-23T20:55:32.073537Z","times_seen":1603,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-RTM6XRXKXM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtag/js?id=G-RTM6XRXKXM HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 14 Oct 2025 02:44:48 GMT\r\nexpires: Tue, 14 Oct 2025 02:44:48 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 139666\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":418825,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"39cf32fd5f271784c91a777ab8150f73","sha1":"8e31b7e8d04dc98b9a959a73b3cfb13889b26ed6","sha256":"809dccb13a049dc2048a4a5465af5cae9e9a9a9900fe0031facc9dd59df45b26","sha512":"49e15ca15579f141ab297d83b01ec8f40c4cdc5c498340004fde528b8aaf16e42485ffab64691d58ca6c665311a56246450c32180ee1cfadfe5cbf99fe835a91","ssdeep":"6144:ZCO/yp2j4tM0uwbWZJT+Nju5204O0NsYXdXAQY:ZOY8y0KZJu0O8","tlshash":"729418de73d674225396f078503f018ba57b28a2b44cc899f189cde52e74a9a4237f7c","first_seen":"2025-10-14T02:45:26.588445Z","last_seen":"2025-10-14T04:43:33.18985Z","times_seen":2,"resource_available":true,"data":null}},"time_used":465,"timings":{"blocked":158,"dns":0,"connect":21,"send":0,"wait":56,"receive":57,"ssl":170},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/ssis00742/ssis00742jp-8.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 83051\r\nserver: openresty\r\ndate: Tue, 14 Oct 2025 02:44:48 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Mon, 08 May 2023 09:54:35 GMT\r\netag: \"6458c6db-1446b\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nvia: 1.1 bbc3cea1561b58f968326ca77586dda0.cloudfront.net (CloudFront), 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT57-P9, OSL50-P1\r\nx-amz-cf-id: sVQdYjWXvw-BgHNs82uR-nDH8YS8UetKwvEredttZhucN6Q_jJ8vSA==\r\nage: 209073\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":83051,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x534, components 3","md5":"05755a42897f11eebb0a9a624080df73","sha1":"a75486f1b81d278e1c18cd86ef66a4a37f70c6d7","sha256":"6a91de7be3f450d66d4629732324f3fb33421e1ddf426b67f0cf403ad4601cdc","sha512":"2595276c4212a47873e16dfef6c67ec8e4ad5eab9dfe213677be64a56322f73ee59707f684bf98e8ca1f4a58aec37e9fcc653c56ddf08467ca415e9a5138bff4","ssdeep":"1536:b8qCY46ANnJYkMObjuEF3+IXfqxY52gW6zx8D/pR04xdWdYswIh/XZ013O4hHymC:gqCYyNJYqCg+IXSxO2gW48D/Q4xYdNTZ","tlshash":"5e8302cdc490b59debbdbd7eec7657c7982db5c8a02e1d0524a2ba90bb185d301cd40b","first_seen":"2025-10-14T02:45:26.597189Z","last_seen":"2025-10-14T02:45:26.597189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1375,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":1081,"receive":271,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/front.mobile.min.css?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/front.mobile.min.css?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:48 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3oZo%2BAW4Nw5bCU25e69Dc5GWAjCpRZthL3DkahTKalFY7yXxh8JXK245MRSduU%2BhvNMtdr8oK46GhtmpQtC775pIMBaEsB9hnFjqOEJq\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 98e3bca8fb902efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8720,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8719)","md5":"09ded5f0b08a22e680e6aaf72a4646e7","sha1":"866fdd70bf20d38dde5321910e1e44587989fc86","sha256":"cdf69f171470adc15b72f2604be5440e6d8a8254b8095813596b45694cb51ab8","sha512":"b98db9343155ec5467a853abb4d98e72a3ebe243df0351674847f0791284b80d4e300bf9f33e343188b5f9227ec8c4acb15ef05fe6d9b5801d6088f69ebb0746","ssdeep":"192:wO9xMLFP6x0Gkc4QliulTuUwIl/iho/vTKsnt7aitiF/:EG0cnfveoHTKmftih","tlshash":"4f0211b20d3a342ed56af091fec631ed36995065f35722e3c86ea56da1ce3a600b164c","first_seen":"2023-04-06T14:37:36Z","last_seen":"2026-04-23T20:55:32.128996Z","times_seen":1111,"resource_available":false,"data":null}},"time_used":684,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":683,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/pwsscrollbar.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/pwsscrollbar.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:48 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XgtZUAGScUCe30h4rVC3d6Aj6IzXya3G81CeEJsA70CfcSeoSh80f4%2BKQf3VIIPz7BVuozq3NFI7LuEzygAqk0dCQIwQi6UPP7IXcRXX\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 98e3bca90b952efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45008,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (45007)","md5":"971c9dba00bafafbbefeec7e58dfc432","sha1":"ea7fbe2e8c2725baccf3aa09fc52244708218620","sha256":"8d66e5d985349af924510cf978564a7d84164741de08f173d1fa61f0b1c2960c","sha512":"9705ffd9da0e788542d1df3542789ed38dbf2ca3eb99a609b1271dc24c2d81b4c748591f12a3114771017be0d0c8662771231b58da93ee2c775fb8b7196914e6","ssdeep":"768:J8WQosXc7u8/fP2WRHBDQXBJhoJWR/e4NKMTul/x31JuouLdL4jS:J8ZXc7dfPtHBDaoktTsx31Juo4z","tlshash":"db1329f4370534f712eb6f5e442b020923365896670788b1707d9cb82fa1de612a7f6e","first_seen":"2023-03-07T01:03:54Z","last_seen":"2026-04-23T20:55:32.073537Z","times_seen":1603,"resource_available":true,"data":null}},"time_used":676,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":673,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.googleusercontent.com/s2/favicons?domain=https://wtsmovies.com/torrent/movie/","fqdn":"s2.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:47 GMT","end":"Mon, 15 Dec 2025 08:41:46 GMT"},"fingerprint":{"sha1":"F8:5F:63:28:35:3F:3B:74:50:6E:B0:8A:1E:82:1E:81:0B:2C:5D:57","sha256":"E5:11:BE:F6:31:91:0A:88:46:0E:37:CF:15:59:95:26:EE:40:53:A0:69:3F:0A:3E:F6:B4:44:43:15:61:C4:6F"}}},"request":{"raw":"GET /s2/favicons?domain=https://wtsmovies.com/torrent/movie/ HTTP/1.1\r\nHost: s2.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://t0.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=https://wtsmovies.com/torrent/movie/\u0026size=16\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\ndate: Tue, 14 Oct 2025 02:44:48 GMT\r\nexpires: Tue, 14 Oct 2025 03:14:48 GMT\r\ncache-control: public, max-age=1800\r\nserver: sffe\r\ncontent-length: 349\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":726,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T16:55:28.234721Z","times_seen":14186033,"resource_available":true,"data":null}},"time_used":595,"timings":{"blocked":479,"dns":0,"connect":11,"send":0,"wait":18,"receive":0,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/sone00840/sone00840jp-5.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/sone00840/sone00840jp-5.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 78348\r\nserver: openresty\r\ndate: Tue, 14 Oct 2025 02:44:49 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Mon, 07 Jul 2025 11:27:49 GMT\r\netag: \"686baf35-1320c\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nvia: 1.1 489c0a6967a2d73a3b53f69e6bc489cc.cloudfront.net (CloudFront), 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT57-P5, OSL50-P1\r\nx-amz-cf-id: 5MT2eW78L_UQquG1bEzEnxSbyyXO9is0D8ZgLP4DTm-NuFCkwvJ6Ig==\r\nage: 599327\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":78348,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 534x800, components 3","md5":"101cc8cce0dbb424449cdbc0cc9cba9f","sha1":"81477a10ae5362c4b3b938a636d71c9ad40adbb7","sha256":"bc2c4b1335423c4f4c31c6e65b2dd2346eac65472e31f97671e991332be81c02","sha512":"78d154db1b1d4c2ed99d49e0f01f6fc6944065bb7700af7efc5c4dc210ce92146c5a44646e6ba282417b252c21d9a8cf17da44874fbd150072a45fd73e3e3e28","ssdeep":"1536:CQy9xdet5pQQK3cVq7wTqGZ4EfGTFMIY9Ntw2kVSz0iS:CBHdetSFGZ4E+TPR2ksYT","tlshash":"987312808fdca933612fc8efcbdd2f17564ed6159023652d3eed1b62836a0c9aa4c171","first_seen":"2025-10-14T02:45:26.6145Z","last_seen":"2025-10-14T02:45:26.6145Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1166,"receive":300,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"3.125.105.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:49.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xhdfriday.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://xhdfriday.site\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=c22daec2-ef1d-4767-b56b-20cffbb9c364:1:1; expires=Fri, 12 Oct 2035 02:44:49 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"9d4cf23cef4f02ae7f44802c879593f6","sha1":"12013748f68b75c5cf1299d1b0b3c18e09ae0ab8","sha256":"2637fb26b35c559956185d42796b6888ef9ad28778509d4f84474dcec7f376a7","sha512":"79c07e390a4843005283a6112ba142bcddd160146c0de5454326e4a5d5b969dd8aa2c21adf831094f9715f96d01600a3e296442082bf1e710121f18dd24610df","ssdeep":"","tlshash":"7c900440c534c7044c1d04151c75c511513d011fc51c71734101745440f0c1514f1171","first_seen":"2025-10-14T02:45:26.618461Z","last_seen":"2025-10-14T02:45:26.618461Z","times_seen":1,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":122,"dns":21,"connect":24,"send":0,"wait":24,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/metrika/advert.gif","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","date":"2025-10-14T02:44:53.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /metrika/advert.gif HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\ncache-control: max-age=3600\r\naccept-ranges: bytes\r\nexpires: Tue, 14 Oct 2025 03:44:53 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 10 Oct 2025 19:19:10 GMT\r\nstrict-transport-security: max-age=31536000\r\ndate: Tue, 14 Oct 2025 02:44:53 GMT\r\netag: \"68e95c2e-2b\"\r\nset-cookie: bh=YKXytscGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Wed, 18 Nov 2026 02:44:53 GMT; SameSite=None; Secure\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncontent-type: image/gif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-04-25T15:59:33.095477Z","times_seen":97440,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-includes/css/dist/block-library/style.min.css?ver=6.8.3","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.8.3 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:48 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 08 Jul 2025 10:02:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tayWNBgH72uBK%2F%2FyCvF11EJhiHYcS%2BFbsn%2F3STGnY4TygVWM3dcOj4pLEvnJvJr6GlT0dSo2QVqwf%2BYFdiZLPaPg%2FNw7ljRpenX%2BMq86\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 98e3bca8cb8a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116345,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55654)","md5":"a06b3af98203ddc303997e0e0caaff83","sha1":"04c3e7de74a890d18014588c4e1f077a52d79acc","sha256":"838ede31a58a3cdb411d6dd7f13cbe65d4a26193d9fa31882854e63938f12bac","sha512":"4ce1079b8dc07043b0201dc74f5888b50aa530a4e604eecd7673e225946de62c421b290a707014ddaf4366591f8c4767737b5689bc44d57eb0a11aef905cead9","ssdeep":"3072:seeJu1iQg5MG7x+qehvP0x2pck2qkA3Pu:b1iQg5MG7x+qehvP0x2pck2lA2","tlshash":"34b3615417b4dcf935ffa73a5e4ee248a503aa41c68a57ebe066d190618ca490cf3f0f","first_seen":"2025-07-15T17:03:07.843749Z","last_seen":"2026-04-25T16:34:36.002801Z","times_seen":167211,"resource_available":false,"data":null}},"time_used":691,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":687,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weirdopt.com/ad/advertisers.js","fqdn":"weirdopt.com","domain":"weirdopt.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:49.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"weirdopt.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 Aug 2025 00:07:02 GMT","end":"Sat, 29 Nov 2025 00:07:01 GMT"},"fingerprint":{"sha1":"AD:4F:15:9E:60:62:A7:16:BA:4B:37:64:C6:01:6B:2B:99:47:89:BE","sha256":"44:74:EA:98:35:48:9C:28:63:20:61:17:18:F6:2B:0A:57:68:36:F4:EF:B0:67:1E:C0:7C:41:30:13:2C:02:F1"}}},"request":{"raw":"GET /ad/advertisers.js HTTP/1.1\r\nHost: weirdopt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 14 Oct 2025 02:44:49 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 2716b02d8ccba7bc27af1e863ba2190a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T16:55:28.234721Z","times_seen":14186033,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":92,"dns":3,"connect":35,"send":0,"wait":17,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/js/xupload.js","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","date":"2025-10-14T02:44:52.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /js/xupload.js HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Fri, 18 Oct 2024 06:42:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6712033e-29f4\"\r\nexpires: Fri, 17 Oct 2025 08:06:18 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 326314\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sJEufjeZQm%2BpbLuFW%2F0xPyIpTRIgvZTvzNIrEBfty%2FuvrAOa4KTcZDmtk2hP1ZMe1oRFYUeibzzUDuroNukkB1iJbgnRgKna9qdr\"}]}\r\ncf-ray: 98e3bcc46d250883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10740,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"7ef44e11ddf37c97750431e5284e4d77","sha1":"59ed0438edbda256e8258ce41729e89e7a9f0b66","sha256":"9be83627d9e3f905d1bf43b83445f1874a98ba283e79a944acff7db7c47b2cf6","sha512":"3812f64c724a2200a8a32568e793b444748a4def13c49e78815b2608106990b813649f37a36944d19da388b759f50559635fedc8b488183d9738ecbd3b5a584f","ssdeep":"192:7IKE9YGs1axsrl6XsZWnrbll621w+4UWdRebMQ4WdReDyYQaQv7OsaaFg+BnqGQZ:EGy+qBlV9GRebVReDyYS7OsaaF10fq3u","tlshash":"0522674abaa339a12a7730350bbf52043b398407114aca54bd5cd6c4af8452897ffbfd","first_seen":"2024-10-19T23:08:50.51898Z","last_seen":"2026-03-11T22:57:21.208385Z","times_seen":347,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/js/localstorage-slim.js","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","date":"2025-10-14T02:44:52.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /js/localstorage-slim.js HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Nov 2021 13:32:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6193b2d0-810\"\r\nexpires: Fri, 17 Oct 2025 08:06:18 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 326314\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hpxqsYE4unDsHUykqBnudXn3lhdAS5dBboO9TgVt42UD0DtCk3o9iM0byWYB1YzfufE17Lfz6oYEIpHuG1U%2Fajj3mVfWmpevdPwx\"}]}\r\ncf-ray: 98e3bcc47d310883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2064,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2063)","md5":"ba6facacb00551830393d637195804cf","sha1":"77d2d2802ee44767b33a2d679945cc3efa3619cc","sha256":"41bb37c8133d8e5c128820cfbe03bcbf63ce256bcbd60a1a76143472d8668e38","sha512":"90aa07250eb414ec22765ab6922f593ed3186faecc02008f0331c3e3807cace76861e01028142015308341e955f151b609d08b7d354ff2d27e0ff04ebfde81f9","ssdeep":"","tlshash":"ea41118275e1d9904be004e728b0c002e638992e705d62d0f7b7dd827c9909bcfb57fa","first_seen":"2023-03-07T15:52:27Z","last_seen":"2026-04-21T15:58:00.258921Z","times_seen":1492,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/stream/sJthhW1q2lV2I_Psc5sj-g/kjhhiuahiuhgihdf/1760453092/1957020/master.m3u8","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","date":"2025-10-14T02:44:53.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /stream/sJthhW1q2lV2I_Psc5sj-g/kjhhiuahiuhgihdf/1760453092/1957020/master.m3u8 HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:53 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\nserver: cloudflare\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8o2TQKZRGYPRFX29Bvv4sC89nk%2FhuLFuD%2F%2FGLtJxC%2FJTeRVifrffA6iSNXZ4uI%2F6jgUkO%2F7n2NGl%2B8YaGtaY1vEy4paf3HzNGnQw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98e3bcc798d08deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":422,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"10ef3d8e518bdf281032af8a3f7953b8","sha1":"7c016f8f09d8dca1806aa0cd212da7b390e4631d","sha256":"07d520dc15f007bf22f7bae4b272d6c2db63132992591d0765656b84bbb784d3","sha512":"d80789a27257aa12e6aac7e11c3a4649a9a57ad803b56f9602370d79c98c22c148b2c6d3e9377661cdbe0726d2e825d725548191fbc7bcd0edf345025215c506","ssdeep":"","tlshash":"91e0e56db53ed72a39249ac4488c652b3c4a5cfc058497a9f48a11c9c9c7d783bbf274","first_seen":"2025-10-14T02:45:26.635828Z","last_seen":"2025-10-14T02:45:26.635828Z","times_seen":1,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p16-tiktok-ads-sg.tiktokcdn.com/obj/ad-site-i18n-sg/202506095d0d62d92bc3e6254f2bbd11","fqdn":"p16-tiktok-ads-sg.tiktokcdn.com","domain":"tiktokcdn.com","tld":"com"},"ip":{"addr":"23.36.77.90","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","date":"2025-10-14T02:44:53.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tiktokcdn.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 07 Mar 2025 05:26:04 GMT","end":"Wed, 08 Apr 2026 05:26:03 GMT"},"fingerprint":{"sha1":"AB:A5:D2:DF:CE:6C:6D:AE:DD:36:C7:0F:CC:E1:32:1D:76:C7:35:C0","sha256":"75:76:14:5C:F5:BB:65:0D:C6:06:2B:2A:07:FA:50:AF:47:D8:3D:E9:63:80:10:B1:BA:42:B3:0B:51:AE:A7:9B"}}},"request":{"raw":"GET /obj/ad-site-i18n-sg/202506095d0d62d92bc3e6254f2bbd11 HTTP/1.1\r\nHost: p16-tiktok-ads-sg.tiktokcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://stbhg.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 102718\r\nimagex-fmt: png2png\r\nlast-modified: Tue, 14 Oct 2025 02:44:54 GMT\r\nnw-session-id: 2025101410445408B51C809A0F1BEC736C6sp5c12tt\r\nnw-session-trace: 2025-10-14T02:44:54.401570861Z 55\r\nx-bdcdn-cache-status: TCP_MISS\r\nx-length: 102718\r\nx-powered-by: ImageX\r\nx-response-date: Tue, 14 Oct 2025 02:44:54 GMT\r\nx-tt-logid: 2025101410445408B51C809A0F1BEC736C\r\nx-request-ip: fdbd:dc53:21:a40::31\r\nx-response-cinfo: fdbd:dc53:21:a40::31\r\nx-response-cache: miss\r\nx-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60076ed0b0dd04ab106d7d092f9a4e2cb2b87ff943b0e72ca335274582081dbfca57c5c8d09a0fe50d41069f921a1ef5e039a6ee76dd39d6be09c2ece89c40ae49bf0d998cc195c18e223727684de40650483f8d05976267bcf83d2ea101adfb60808a94a695188b707182e6ba372f9925\r\nx-tt-trace-id: 00-25101410445408B51C809A0F1BEC736C-60AE18323C5E8CAB-00\r\nserver: TLB\r\nx-origin-response-time: 133,23.193.181.16\r\ncache-control: max-age=31536000\r\ndate: Tue, 14 Oct 2025 02:44:54 GMT\r\nx-cache: TCP_MISS from a23-36-77-85.deploy.akamaitechnologies.com (AkamaiGHost/22.2.5-a9c17ad842a5a5bbb9fede73ebb832d8) (-)\r\nx-cache-remote: TCP_MISS from a23-60-69-82.deploy.akamaitechnologies.com (AkamaiGHost/22.3.0-fcd174d50fb223c8364cec3c4b3f29c6) (-)\r\nx-tt-trace-tag: id=16;cdn-cache=miss;type=static\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=691, origin; dur=129, inner; dur=62\r\nx-parent-response-time: 811,23.60.69.82, 820,23.36.77.85\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102718,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"40b2d1b775bdc6652f8b716b9ac37826","sha1":"1d5b33c7fede456ba93440c5c573b2e9c52c239a","sha256":"bca8b2515666ad51b5fc9759a56f29e2142f7fa391e4de8d3bf6d4b095077d39","sha512":"d367137133ed27a7ba1d50bf9567f22a1b895a9895a3cebe85fc988629ed6d3e9e4cd12a64a7a7fcd7bbfdd413f94f6ac691545d6c75778affb068b689272973","ssdeep":"1536:qmYs3az0MQXfBDdCYR3lFKZ8v80IpFkz/NHJ+F:MkCs3JvTSFKUF","tlshash":"f8a3830c1bec92d5e96365666eaccb9a7a841d045f880fcf34aa3b17fcbc586d472047","first_seen":"2025-10-14T02:45:26.639592Z","last_seen":"2025-10-14T02:45:26.639592Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2081,"timings":{"blocked":186,"dns":157,"connect":2,"send":0,"wait":822,"receive":887,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-4.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/ssis00742/ssis00742jp-4.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 48394\r\nserver: openresty\r\ndate: Tue, 14 Oct 2025 02:44:48 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Mon, 08 May 2023 09:54:35 GMT\r\netag: \"6458c6db-bd0a\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nvia: 1.1 f2fbb273fa693dcc9ea4d5b4b7f28e48.cloudfront.net (CloudFront), 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT57-P5, OSL50-P1\r\nx-amz-cf-id: X03Iji-SsJEh8yzedbZ_YF3E0UfjDbJGXpMx8YikC0N0fSfV7bTV3g==\r\nage: 146575\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":48394,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x534, components 3","md5":"fbaf9db8d90d6fa4b75b2466d3576289","sha1":"ffc885d9eca72e2c6972de33ce7b16db0f46ca72","sha256":"7859efa84fc43280172367ac62bc8074084a28f751e72cb504dfa730319d74d0","sha512":"035791d49a377e40d00ee1895d4ca4dc35784816213295819153d5ace3d6d566c083ff905036b1386d3f344d6b3f21da653ff7828cd14d118c83a33f1e19ff82","ssdeep":"768:xcz8mU0ICyqt1QzNaSS4QlnTL8GqW/cR8uwj5GV1ClXuMSimJOFyyzirIUI:uc05tKzNaZpnTuFR8TIVkeMSlJOF5ziO","tlshash":"4d23f11b0b07eaccfd0ca0aa7bc1a475c884de5efbd6087fa08045bc9f85457e16a759","first_seen":"2025-10-14T02:45:26.644006Z","last_seen":"2025-10-14T02:45:26.644006Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1330,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":1045,"receive":261,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn001.imggle.net/webp/poster/20241115/1734675873.webp","fqdn":"cdn001.imggle.net","domain":"imggle.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imggle.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 00:26:18 GMT","end":"Fri, 28 Nov 2025 01:26:04 GMT"},"fingerprint":{"sha1":"3D:D7:A4:29:CD:9D:68:E2:6D:DD:CB:4F:B7:65:26:2D:B8:3E:01:F6","sha256":"92:07:49:FB:FC:89:EC:3B:E7:48:EB:4C:8E:D0:E3:C2:24:FD:F3:84:C3:2F:D6:AE:8D:D2:21:6B:0F:F2:1B:4B"}}},"request":{"raw":"GET /webp/poster/20241115/1734675873.webp HTTP/1.1\r\nHost: cdn001.imggle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 82964\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 20 Dec 2024 06:24:34 GMT\r\netag: \"67650da2-14414\"\r\nexpires: Thu, 24 Sep 2026 21:24:15 GMT\r\ncache-control: max-age=31536000\r\nx-cache: HIT\r\ncf-cache-status: HIT\r\nage: 496250\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=na95ckUCuqp8WGbbqXdY9agVKPTLxBXz5w00unH5TJsXYUVqv3vn9ZkiKhZ4rx8u%2F5OrHBhCNFDL1Qy8sbpYWNS5RyFgMa%2BfmbYgaC31%2Fsm5\"}]}\r\ncf-ray: 98e3bcab8d245ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82964,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x426, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8dcb9abe78ef32175ccd16d82093d264","sha1":"a819c61f3cce4d177d9ae985659049778b614448","sha256":"5f8b67eb782b8012075752c0feb32894883ed00437e7ac53a33fc9c07cf2fb8c","sha512":"e2d56bb21195f31144d3821bf978f9a3937e40937b1e41b23035804b2678daadf3c240399d4464bc7959a8aeedb9d7e13a38310a071b4edeeab8c30fb689140b","ssdeep":"1536:qE5VARFE8I6VNqBqM4L6SEL1fCrlzSRcd45cwSq/OKDJrrFlnP+:qoVARzVNm4bEBfuUl53XNrrjnP+","tlshash":"118302cca308310ab72fde55b9af50541aeff15afcd26fea066292250138df49d114d6","first_seen":"2024-12-24T21:31:29.713522Z","last_seen":"2025-10-14T02:45:26.647947Z","times_seen":2,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":175,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/meyd00605/meyd00605jp-9.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/meyd00605/meyd00605jp-9.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 89169\r\nserver: openresty\r\ndate: Tue, 14 Oct 2025 02:44:49 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Thu, 11 Jun 2020 10:19:51 GMT\r\netag: \"5ee20547-15c51\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nvia: 1.1 fe26baab4cd7f8f73bb7f560a1b08cb6.cloudfront.net (CloudFront), 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT57-P5, OSL50-P1\r\nx-amz-cf-id: 7R54sBhJcagLJKNkr5VZ291DsFsk5rzU7XWxTZftDzSCh71jgoxKIg==\r\nage: 332967\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":89169,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 532x800, components 3","md5":"d30f03ed1f8e4573c8ead3fda2a06fbd","sha1":"02857c6ae4133317651b248821b4410b4e470c6f","sha256":"ea066b2efff21c276fd218bf0e038353754b9feaa4b4d2d42194830756aff2a1","sha512":"4cecb64ef2c90636338447762caa0c0c915853af24d8e7ce47bc4661e0e5eaaa9d3a70e828e2987a80942aa8869c054498bf3b57c61ce06f5e52e08f3b8b8cab","ssdeep":"1536:7J5iCQGFne+iMhQmQ4bwR7DJrS5V8r2cyspGHW//9yIjLM43JTRN+L1:V3QGlh3Q4AhS5V8/ys4H01pjLlMJ","tlshash":"8a9302d3fd28f0e675765a208a87c92506b5b4e778821527babd12d722d20dd21e23f3","first_seen":"2025-10-14T02:45:26.653305Z","last_seen":"2025-10-14T02:45:26.653305Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1046,"receive":264,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"old.imb.hair/images/2023/07/27/pb_e_300ntk-818-PhotoRoom_11zon.jpg","fqdn":"old.imb.hair","domain":"imb.hair","tld":"hair"},"ip":{"addr":"104.21.25.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imb.hair","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 20:42:26 GMT","end":"Sat, 22 Nov 2025 21:40:03 GMT"},"fingerprint":{"sha1":"1D:69:4E:5F:6A:6E:B7:73:60:21:EC:15:F7:F8:BD:F4:26:5A:31:D2","sha256":"46:4F:E3:37:7A:81:B2:04:94:EF:2C:BF:CB:A1:5C:D7:18:11:A9:95:92:34:85:6D:13:A9:D0:A1:9C:3C:0F:C2"}}},"request":{"raw":"GET /images/2023/07/27/pb_e_300ntk-818-PhotoRoom_11zon.jpg HTTP/1.1\r\nHost: old.imb.hair\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23156\r\ncache-control: public, max-age=43200\r\nexpires: Fri, 10 Oct 2025 19:14:11 GMT\r\netag: \"5a74-64c21e48-17911f;;;\"\r\nlast-modified: Thu, 27 Jul 2023 07:35:36 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: REVALIDATED\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fLrPHxOY%2B3QUQ5xz15cf5ZsC%2FkHdCYOtd%2BdPuixVGNV8wg27uiSOgdbZbiwR63GxdzJ4G4zUpF%2BDzzi4Wur1KdkAZTj5kWysL5w%3D\"}]}\r\ncf-ray: 98e3bcac5ae256cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23156,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x425, components 3","md5":"4f9019366b55de2eaf7e75df456bde68","sha1":"6fe0fa53f01efbe47b30a74a00a975c63e1fec12","sha256":"611cb71490d5b0c75a59d772c6aecf72d4fc606f378d2d51ad99360d7fabb7f4","sha512":"96e1658e85167ac58a7d8e8f40cff7968970cde668f9e2eb65e92a08b296a3d0308245053324ca0e5c0f430f73bbf2f9f70af5416b42e57278a360fcaa5ec8c5","ssdeep":"384:9wR3KBE7OVwLncUWUlNfhPtMhPSJNaPeq5T8ftk0f/TjRudev058bdEb3:ChT7ZLc/U7XSSJcPe+8ftkm/TjReevKb","tlshash":"c1a2d0a1d36b8232d775327235a0bbb1e05803867bd6df7bc0b4e54972149c3ca8d58b","first_seen":"2025-10-14T02:45:26.659234Z","last_seen":"2025-10-14T02:45:26.659234Z","times_seen":1,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":304,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/front.livesearch.min.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/front.livesearch.min.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:49 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P4X%2BaSLFpMt9o1m4WZ14Z18qXguR5%2BoAjeChTzCanRzQw9qkwKMSqnEXn7RC9nZEnwlQOSHBCPQ10HW1Kgp6rIc5DK0PrPR398B5GBkL\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 98e3bcaa6bac2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4741,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4739), with CRLF line terminators","md5":"0eea0408655c01545c25f142ecd898fd","sha1":"1bb9d98a7fee41318007652d0723141704a658e6","sha256":"5991b17b41002817f208207448eb82392a618a9b6bf9f4ca2c8e84815769a722","sha512":"da2f11b1a3b21b0d9d5bf0da0dd692adeb76910cd115264ffdfde7b4b61bc2526f3849b8f77f9e85537acd000cd14a25068715b5281bfd9267d6e180a482a63f","ssdeep":"48:TajZ6/nJN73IMTGnJNfqdaX6DlJB/KvjFd43payvh6Y2OnJNAPn2DjL/6vtnooO:T+Z+J1YMYJZqdk67B4d45nHJa2n6ne","tlshash":"4aa1564170815dd7023b23601e3bb60ba2937faad70a9401717ed1e50fa6d8a353671f","first_seen":"2023-03-07T01:03:55Z","last_seen":"2026-04-23T20:55:32.052095Z","times_seen":1709,"resource_available":true,"data":null}},"time_used":1372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1371,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=3237\u0026rd=3237\u0026fd=580\u0026bv=25.10.2289\u0026tmpl=70","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:49.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:00:34 GMT","end":"Tue, 25 Nov 2025 22:00:33 GMT"},"fingerprint":{"sha1":"FC:5B:24:E2:ED:A9:65:69:CA:97:74:44:F8:E9:93:1A:50:E7:73:C1","sha256":"26:1B:F8:72:30:B2:C4:49:6A:2E:E7:A5:FC:26:35:74:02:CB:56:D1:F7:7E:A5:5E:89:65:A9:B4:1F:1F:DB:8F"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=3237\u0026rd=3237\u0026fd=580\u0026bv=25.10.2289\u0026tmpl=70 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 14 Oct 2025 02:44:49 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T16:55:28.234721Z","times_seen":14186033,"resource_available":true,"data":null}},"time_used":697,"timings":{"blocked":294,"dns":10,"connect":93,"send":0,"wait":92,"receive":0,"ssl":198},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:49.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xhdfriday.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Oct 2025 12:56:02 GMT\r\nexpires: Fri, 09 Oct 2026 12:56:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 395327\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-25T16:55:33.479509Z","times_seen":760262,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":96,"dns":0,"connect":0,"send":0,"wait":93,"receive":2,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/player/jw8/jwplayer.js?v=7","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","date":"2025-10-14T02:44:52.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /player/jw8/jwplayer.js?v=7 HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 28 Mar 2025 05:48:51 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lp8U1GCRrJRShV%2FSrQj46Ks7J3%2Fj78RJJY5U2V5YQAeBnbFTkjOHg4UKhztkXUH5hSHUACxPyeAF4QmYJs1V%2F630W1luyYyIGCei\"}]}\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 1995\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"24254-631609ffc56c0\"\r\ncontent-encoding: br\r\ncf-ray: 98e3bcc46d2e0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148052,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65503)","md5":"581ff912c413cd78a30f5c212f42271a","sha1":"79af689432d0f20cd1d951eb9436711da07decd4","sha256":"c708d26c24b48c3343e8cc7879d07e8ca6f23d1cc1e5df165a9f8e24a7c5830e","sha512":"c6185ea9db6db8786aa1636537595a5f061745caf287602beafc2dca984b1eceafeb3651109cad8cf45be3dba2a76a201758c6aaa7d7fb1adc8e07e95a39f41b","ssdeep":"1536:ELyl/ByW1iqxGJaGB2lAqU6ePRtwoIWz0Bk+5cm3wUn+yUi3LAalYqlkcRPUeJaQ:L4pknUi3LAbdhHwSm","tlshash":"99e339a631c2f4a613e264c7e47a4005f1790988744de8a4faacecd67956907b1b3ffc","first_seen":"2025-04-01T21:32:19.723959Z","last_seen":"2026-04-02T13:28:52.626488Z","times_seen":603,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:48 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Aug 2023 14:14:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PywAsVYhFLW68%2BKUpBXmmEcglleG0oGScqBjpspAd%2BgFr03jIeeXayPzXB0bLDG8RLuXO%2BHXbTa3RmISvqzd1vpAvsk8iCFfs1gRs48l\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 98e3bca90b922efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-25T16:53:25.748475Z","times_seen":740830,"resource_available":true,"data":null}},"time_used":669,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":663,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relishsubsequentlytank.com/e5/74/0c/e5740c7b80abc2329366e06d2dc81dff.js","fqdn":"relishsubsequentlytank.com","domain":"relishsubsequentlytank.com","tld":"com"},"ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"relishsubsequentlytank.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 22:03:42 GMT","end":"Fri, 02 Jan 2026 22:03:41 GMT"},"fingerprint":{"sha1":"E7:83:20:81:25:0E:7C:3B:7A:7C:3D:BA:C6:AA:E8:D2:87:13:7E:C1","sha256":"0C:8A:CE:2E:84:60:C2:59:BF:CF:8A:E8:E9:C4:96:C3:12:5B:FF:0A:D0:27:6C:5E:35:3E:26:A3:5C:84:94:AF"}}},"request":{"raw":"GET /e5/74/0c/e5740c7b80abc2329366e06d2dc81dff.js HTTP/1.1\r\nHost: relishsubsequentlytank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Tue, 14 Oct 2025 02:44:48 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 38349\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: relishsubsequentlytank.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 9e59eebf892f9a6a83389daa226bb0a3\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106603,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7293d4d02e7953c68d6bf88cb4248067","sha1":"49e97b21e61c813e11e36ceed5dacaaf0a75ebbe","sha256":"e001d2b15ed596855707371e71ef84bd5f38173e5ea566c1511365a26d1721e8","sha512":"c05b4733e5a52aa11aba712be30e95dfc1f33ff254762009597189451c8744d42c2908efb5b5f1ee9dec850fa34e589dd33203b3308eb7dd57e7fb11e2667745","ssdeep":"1536:99IDYewEZykXTzY67ytOUS5VlIXga6kSFf02mdBV4mCzCgiA0eQpE0I9N0rvQ:Yn9T9RCgZ0eQp29N0rvQ","tlshash":"f5a3a4883f40f17d0796b47a323fa61af0791a01509cd69cf107f1a8ae6674ab43fe65","first_seen":"2025-10-14T02:45:26.680941Z","last_seen":"2025-10-14T02:45:26.680941Z","times_seen":1,"resource_available":true,"data":null}},"time_used":824,"timings":{"blocked":298,"dns":39,"connect":93,"send":0,"wait":99,"receive":94,"ssl":198},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"relishsubsequentlytank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/img/flags/jp.png","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/img/flags/jp.png HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:49 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 109\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BuAuXM%2FlWsjhOkzpADiqcg7id%2ByZL%2FKiZ%2Fr1rtgS%2Br0wm8fYpalVh79XXQ%2BZECM8EEeWh1vQUe%2FSauuKBBucsOdyxpBETxxJosLF1bgQ\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 98e3bca91b9e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 12 x 12, 2-bit colormap, non-interlaced","md5":"71846767eecb8d37811c70551da5a450","sha1":"1e6bb364a8a9eef12189719c7c8133a062ffc808","sha256":"7ab35c9c4f438c9c287953626cbd9115feb04bdc25d7f7d6f61d97abaf31c2b6","sha512":"759b0d3d6ea3e8c9b93c2e5b2cd71efc2868e3256a5860be6eb29833ed7664239f7423706c1b852e39939605b9b7fade0dc4cf8303ed296a47234ef50ba2727f","ssdeep":"","tlshash":"a0b012c223902f3acf549e7a81a82421f83550540162548d1149d6283ece6558184657","first_seen":"2024-02-03T08:02:53Z","last_seen":"2026-03-26T08:34:35.997077Z","times_seen":19,"resource_available":false,"data":null}},"time_used":886,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":886,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn001.imggle.net/webp/poster/20230908/1694714182.webp","fqdn":"cdn001.imggle.net","domain":"imggle.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imggle.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 00:26:18 GMT","end":"Fri, 28 Nov 2025 01:26:04 GMT"},"fingerprint":{"sha1":"3D:D7:A4:29:CD:9D:68:E2:6D:DD:CB:4F:B7:65:26:2D:B8:3E:01:F6","sha256":"92:07:49:FB:FC:89:EC:3B:E7:48:EB:4C:8E:D0:E3:C2:24:FD:F3:84:C3:2F:D6:AE:8D:D2:21:6B:0F:F2:1B:4B"}}},"request":{"raw":"GET /webp/poster/20230908/1694714182.webp HTTP/1.1\r\nHost: cdn001.imggle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17832\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 08 Jul 2024 03:05:56 GMT\r\netag: \"668b5794-45a8\"\r\nexpires: Thu, 17 Sep 2026 23:10:58 GMT\r\ncache-control: max-age=31536000\r\nx-cache: MISS\r\ncf-cache-status: HIT\r\nage: 1658961\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z4H9xr5F7NqWUd6HdfGGzeNCFewjPP0KnV6ot79f4BQwMV5%2B46tLhzbJ7MQ%2BWHUcreQvj%2FeB7jF5BVV2tg9sytX0Hnz6EJiroTl9agOSuFEX\"}]}\r\ncf-ray: 98e3bcab8d225ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17832,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x426, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f6110a8b61ae531844d7e4b625493ba1","sha1":"f80f7b0f06e782c4d477a106638b55350dd2f6ac","sha256":"7dbd1b8be8156342cac7f7dff50435eba3dec555840926c7e9be3dd4b92807b0","sha512":"d0d170e2aef8f6ffc97299f2fad04a37939b953394f9ecbade8c2879e793e89f97ca01d3969598b6ce37c977989a735f9e081044c912a97614cfa2255df16e16","ssdeep":"384:ISENfYjxx2gIh1PygJA2i0Ui2fYFtx6pSGw3cbSMXbQ2Mc0xM89l:QY1mRy5PfYFtxawASMXbxiM8X","tlshash":"dc82c009df09389c3e9e1942449fb5a585032c3ff3a7460051ffeb960a36fd27a96c56","first_seen":"2025-10-14T02:45:26.690925Z","last_seen":"2025-10-14T02:45:26.690925Z","times_seen":1,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":179,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"old.imb.hair/images/2023/10/25/kbr-009-i-went-crazy-in-front-of-my-husbands-dead--1_11zon.jpg","fqdn":"old.imb.hair","domain":"imb.hair","tld":"hair"},"ip":{"addr":"104.21.25.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imb.hair","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 20:42:26 GMT","end":"Sat, 22 Nov 2025 21:40:03 GMT"},"fingerprint":{"sha1":"1D:69:4E:5F:6A:6E:B7:73:60:21:EC:15:F7:F8:BD:F4:26:5A:31:D2","sha256":"46:4F:E3:37:7A:81:B2:04:94:EF:2C:BF:CB:A1:5C:D7:18:11:A9:95:92:34:85:6D:13:A9:D0:A1:9C:3C:0F:C2"}}},"request":{"raw":"GET /images/2023/10/25/kbr-009-i-went-crazy-in-front-of-my-husbands-dead--1_11zon.jpg HTTP/1.1\r\nHost: old.imb.hair\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24717\r\ncache-control: public, max-age=43200\r\nexpires: Sun, 12 Oct 2025 05:01:00 GMT\r\netag: \"608d-6539780f-179aa5;;;\"\r\nlast-modified: Wed, 25 Oct 2023 20:18:23 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 20182\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F8AuSCwg9%2B88mTijD%2FofROSY4CD66pzrJitmPSF%2FMCeImGGve86CCW4b%2BrGMQC2jGYk9J2M3xJLDEd%2B%2B%2FaXk0b5JNujLKzsQ6AI%3D\"}]}\r\ncf-ray: 98e3bcac5ae056cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24717,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 299x425, components 3","md5":"553a3f1e02db7b1c12001436e434aeb4","sha1":"c55efc60a3714de4f4bff19440858c04732d222c","sha256":"b87e6034171ea12a83c5f3784bd7b63db0604a90e68d90b51b9c6a6a1c9f35ac","sha512":"99ddc9a52e34999eb50c29aea70abe7052bea51c1865b27791c8d88825176577d9a41616b31cb1d5e9e0e7e1a94e04cad566294b09f3c2efde181c2591cdf344","ssdeep":"768:CwdjyUxPT0XPJ9RjAsy7H+sfiNgty6S/GQk:5jjMPDNWty67","tlshash":"beb2f1132fbedfc1d1e82af2509c3a30d727795599cac03dd3624aa08fa325c7d02a45","first_seen":"2025-10-14T02:45:26.696056Z","last_seen":"2025-10-14T02:45:26.696056Z","times_seen":1,"resource_available":false,"data":null}},"time_used":632,"timings":{"blocked":309,"dns":34,"connect":6,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t0.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=https://wtsmovies.com/subtitles/movie/\u0026size=16","fqdn":"t0.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=https://wtsmovies.com/subtitles/movie/\u0026size=16 HTTP/1.1\r\nHost: t0.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xhdfriday.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: image/png\r\nx-content-type-options: nosniff\r\ndate: Tue, 14 Oct 2025 02:44:49 GMT\r\nserver: sffe\r\ncontent-length: 726\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":726,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"b8a0bf372c762e966cc99ede8682bc71","sha1":"2d7c9b60d1e2b4f4726141de2e4ab738110b9287","sha256":"59bfe9bc385ad69f50793ce4a53397316d7a875a7148a63c16df9b674c6cda64","sha512":"6883c7a3f702fb3df5e698333c8a05705970fcb476a31a2008444a02122b6870de158176c86a1f6605a0783b88d3523646b4d288696e777b37cc02d5d95266ca","ssdeep":"","tlshash":"fe0165e3a34595286b870a62f4b87082162a6ae560c3c09964e4ec6e1f05168e4e5e9c","first_seen":"2023-04-05T05:54:43Z","last_seen":"2026-04-24T12:32:24.507288Z","times_seen":6738,"resource_available":true,"data":null}},"time_used":378,"timings":{"blocked":171,"dns":72,"connect":21,"send":0,"wait":29,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:49.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xhdfriday.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Oct 2025 12:56:02 GMT\r\nexpires: Fri, 09 Oct 2026 12:56:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 395327\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-25T16:55:33.479509Z","times_seen":760262,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":1,"connect":21,"send":0,"wait":76,"receive":3,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/uploads/2025/08/cropped-FotoJet-7ff-192x192.jpg","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:50.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/cropped-FotoJet-7ff-192x192.jpg HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5; _ga_RTM6XRXKXM=GS2.1.s1760409889$o1$g0$t1760409889$j60$l0$h0; _ga=GA1.1.251347382.1760409890; pp_main_e5740c7b80abc2329366e06d2dc81dff=1; dom3ic8zudi28v8lr6fgphwffqoz0j6c=c22daec2-ef1d-4767-b56b-20cffbb9c364%3A1%3A1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:50 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 13:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6529\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J00Lpu7FTz07myEWJ6HDAMwdFyEqWzGmNcaD9FqH7JS4bFS%2B7ADpaS%2FDoCrYAzOUfskl9Nl93Hd7KsLHNcONsjLmdsy6Wfg5h%2FcFEpN8\"}]}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 98e3bcb84c0a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6529,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 192x192, components 3","md5":"23bc4d743935398bb8f1b5fa97da70f9","sha1":"8f3a6135412ea38327c0018e813bd8ec02ef4fef","sha256":"3d622014dfc5dc8a63e1a4dd62bcd583c5fe098a45f324a67b71dd8b7f66a872","sha512":"ffd9414b0079b76424870cb95fbd7f90573879f592ec5141c788ebaf65eaa48261310357a539d017c2fce30290ee8ca1f4213d1b32ace265bec6a1f6d8515dcf","ssdeep":"96:/PEAD7mvcyRjIMsYVPNWbRiJk47FtWL7AjwX9cFaQZoWJSqcn1Duge0GqjXB93+X:/PovcgMKVPNYavFtC4ccAM7U1DXBBS3","tlshash":"76d14b6f4b0181c1fa214eecba8307ed418a6a11f98739628b3accd2b4695d45ddfc38","first_seen":"2025-09-08T12:26:50.662724Z","last_seen":"2025-10-30T02:38:15.619697Z","times_seen":6,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-10.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/ssis00742/ssis00742jp-10.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 78866\r\nserver: openresty\r\ndate: Tue, 14 Oct 2025 02:44:48 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Mon, 08 May 2023 09:54:35 GMT\r\netag: \"6458c6db-13412\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nvia: 1.1 3cf110c7ae3bb0f3c089ac76aec5869a.cloudfront.net (CloudFront), 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT57-P5, OSL50-P1\r\nx-amz-cf-id: yhZu5IWFtLu9RUyknU-GR4hUHxkq3sjvqXsAqlMQacR2weTJRpdkuQ==\r\nage: 374102\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":78866,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 534x800, components 3","md5":"eb3dac8fedcb29006df544bbbd4a8ca7","sha1":"64077cfdab795b1d1cf81ed1a77df0b0bd920080","sha256":"132bc358c5c1de8fb44177317998ee06c26cc3c6168668bde2b08e43c45730c0","sha512":"e818e68868f21754ef637ba1b74ae5f250b470ae61721bd55aa3473a38ad1f47de4b074633406128e3eb44fd47c5687cf0d77183145e05dae1ab030df6177540","ssdeep":"1536:7j3zBr2ya+Pc/p3ftPGefC38vYaw0E0Q9/0TIsoFtW6wwx2:7j3Njazp3ft+0CeYyQ9/6o7kk2","tlshash":"6f731252f7f2d692ba2cdde23900b990a3f6d5d027a504f072cba02d6b591810f969df","first_seen":"2025-10-14T02:45:26.709518Z","last_seen":"2025-10-14T02:45:26.709518Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1382,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":1081,"receive":271,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/front.scripts.min.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/front.scripts.min.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:49 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OajigUqV2sf1p8khWIvROFoms8rV6WFBDexZhgT9WpeL3XHb3WXyp8lTQK1%2FANE81OIfnh7COIhkItam6FIke6Zv3bK3oOb%2Bo0%2B06HtR\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 98e3bcaa6bab2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4786,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4784), with CRLF line terminators","md5":"2731772e163f205b1c9e24a5c6c7b470","sha1":"81bdbbc6fcb56e622ddfd6a6d28e72493e3f2329","sha256":"55974bc676581db39c8e596c87ebd046b4439fdb6c381e4270b43f6065393623","sha512":"4622fa5cf1c9120c4bb5439ac1f8b97ba81df1ae3b2a0093ae9f00e6a13e223e535ead27cf999d7621d8c3ea057591c9f379dab920e38877fd6caf338ddb6787","ssdeep":"48:gqhZsZGRO2NQ5XM9gMy5U8aG0vxBOCOo7JMcvTNqfQNuJoH+p58DPJEpE751KhZD:gUTn8aGExBULEen851FEBE7NPbWqi/","tlshash":"2aa1542b3222b0dd10bf2371752fa45416276d59da05498ab8b8c8da0d3fcc621a7f3f","first_seen":"2023-03-07T01:03:55Z","last_seen":"2026-04-23T20:55:32.155899Z","times_seen":1703,"resource_available":true,"data":null}},"time_used":1145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1144,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/sone00832/sone00832jp-1.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/sone00832/sone00832jp-1.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 96482\r\nserver: openresty\r\ndate: Tue, 14 Oct 2025 02:44:49 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Mon, 07 Jul 2025 11:27:47 GMT\r\nx-cache-status: HIT\r\netag: \"686baf33-178e2\"\r\nvia: 1.1 06ca49c39b6e44817571de755403666c.cloudfront.net (CloudFront), 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT57-P5, OSL50-P1\r\nx-amz-cf-id: Bwnt2UYG4HC8OmP6c8KewDmvnb3hgHeJ-nFeUSeei5bNIeDzsRBN0g==\r\nage: 4898\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96482,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 534x800, components 3","md5":"b0dcafa1d287f18a9336e954412d528e","sha1":"73a9646213bb0f7257b31a2cab8dc4586d10bbe1","sha256":"9293d3940a15450dc91a04a18f4480ac34a9079520bd1c8b83f8448812df023d","sha512":"40ef66936b3811665be7541ef33e2b3be4fb8177e72a42fdd29b4e861ed077014ee7490499f2591ae0887047d814f3464486b4cf7eae65747f5e92af5eb43fe0","ssdeep":"1536:gu0D0kp5+68O5QS9GT9pFOcwwn/KYNQdbqlyKv3qYCEeSuwAOTmcf5jzgnLoJ:gu07SlpFldnDQdmPqfEeSVDzBzgLG","tlshash":"a8931364d86ac159d4afe374f11e4cdeabb0338835ceb2462ab70d5cc4971b84dee246","first_seen":"2025-10-14T02:45:26.716627Z","last_seen":"2025-10-14T04:43:33.4896Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1105,"receive":278,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:49.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xhdfriday.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Oct 2025 12:56:02 GMT\r\nexpires: Fri, 09 Oct 2026 12:56:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 395327\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-25T16:55:33.479509Z","times_seen":760262,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":92,"dns":1,"connect":20,"send":0,"wait":51,"receive":25,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/css/main.css","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","date":"2025-10-14T02:44:52.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:52 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Nov 2022 15:05:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"636fb61c-c11b\"\r\nexpires: Wed, 15 Oct 2025 05:56:06 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 506926\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GpDKEEskOqfdJFYSKdKDViVhEk85qOCevS45oT8vytvtoOlYI5rdsEdyu9DqjRDBx8mo2Ro%2FzbNuGUr4wVxjBfxgshjuFl%2Ffkpy6\"}]}\r\ncf-ray: 98e3bcc45d1d0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49435,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"51d559d2f974e61e564a5f8120a23a9a","sha1":"9eab84e6bf40cfca88aac7f6d849df54f27ac12d","sha256":"a01ef8569a9021b0315bf38d5d518a928d98efce576f56ac012c30f2b63e1cb6","sha512":"5a4a10a2083c3375306ea83736eb2f991cca894dd2f78582c18886609ba1ac725877abdee3ecbcb368d5bb3c57fe0b418e3d0a87bcca015d0fb8de5f51e8fdc8","ssdeep":"1536:AQV8FxnYgpery2vYsRwq9AOOGvC4DONaYi3Rz:AQVMxnYTy2v/AOOkdRz","tlshash":"c8239522a7812c0cf06bd1b67d6197d6233e4053d92b1f7c7ab93578c28e4e85173b9a","first_seen":"2023-04-09T22:09:53Z","last_seen":"2026-04-01T19:35:17.258141Z","times_seen":632,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-1.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/ssis00742/ssis00742jp-1.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 60612\r\nserver: openresty\r\ndate: Tue, 14 Oct 2025 02:44:48 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Mon, 08 May 2023 09:54:35 GMT\r\netag: \"6458c6db-ecc4\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nvia: 1.1 e6fee154206c62588f17535ec08da33a.cloudfront.net (CloudFront), 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT20-P2, OSL50-P1\r\nx-amz-cf-id: AstCihodL7ttyWU36Z-VkzDW1KusF1o1HKzG6Jk75XNNAex7ekh-Wg==\r\nage: 374007\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60612,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 800x534, components 3","md5":"df2ea1daea8c661be2992d917cbb5a46","sha1":"6fecd6293271d5d6053a966031ca94f1878e885d","sha256":"ba408d4f53f731e0979a624bfe8be81800f8ebca3ffa67e0ca38b8df480f794e","sha512":"c624d707c5c1da7c26f94790b8d61d4dee48fa8aad732e14811ed498008bc450a97f104577cc625ea532b8c75034db3b1a39cc7f21045728451923d35429d7e9","ssdeep":"1536:ItK/eeie1ia/Cu/p0cf8tbEsvt3XFyldaMtu1j:ItK/soX/p0YWFylsMw1","tlshash":"cd43029f1b50a5f1e45f9233327b33b69f575714a884d64b676c168097be0cc0a2d8f8","first_seen":"2025-10-14T02:45:26.722989Z","last_seen":"2025-10-14T02:45:26.722989Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1516,"timings":{"blocked":27,"dns":25,"connect":1,"send":0,"wait":1148,"receive":287,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/td?id=G-RTM6XRXKXM\u0026v=3\u0026t=t\u0026pid=521779831\u0026seq=1\u0026exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480709~115752876~115834636~115834638~115868795~115868797~115938465~115938468\u0026dl=xhdfriday.site%2Fmovies%2Fssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss%2F\u0026tdp=G-RTM6XRXKXM;100818081;0;0;0\u0026frm=0\u0026rtg=100818081\u0026slo=11\u0026hlo=17\u0026lst=3\u0026bt=0\u0026ct=3\u0026z=0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:49.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /td?id=G-RTM6XRXKXM\u0026v=3\u0026t=t\u0026pid=521779831\u0026seq=1\u0026exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480709~115752876~115834636~115834638~115868795~115868797~115938465~115938468\u0026dl=xhdfriday.site%2Fmovies%2Fssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss%2F\u0026tdp=G-RTM6XRXKXM;100818081;0;0;0\u0026frm=0\u0026rtg=100818081\u0026slo=11\u0026hlo=17\u0026lst=3\u0026bt=0\u0026ct=3\u0026z=0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Tue, 14 Oct 2025 02:44:49 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgtc:45:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsgtc:45:0\r\nreport-to: {\"group\":\"ascnsrsgtc:45:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgtc:45:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T16:55:28.234721Z","times_seen":14186033,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixoraa.cc/h2l0ic8jngt70000.jpg","fqdn":"pixoraa.cc","domain":"pixoraa.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","date":"2025-10-14T02:44:53.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixoraa.cc","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Sun, 14 Sep 2025 20:10:15 GMT","end":"Sat, 13 Dec 2025 19:04:04 GMT"},"fingerprint":{"sha1":"45:E4:A3:F5:8F:7E:B1:E8:92:97:F7:D8:1D:12:4B:2C:80:44:DF:0B","sha256":"1B:AF:7D:65:DC:AC:DC:17:29:53:1A:93:D0:D0:F8:BF:AC:6E:91:2E:92:CB:77:B1:E0:45:73:7C:EE:2D:80:8E"}}},"request":{"raw":"GET /h2l0ic8jngt70000.jpg HTTP/1.1\r\nHost: pixoraa.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:53 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 844729\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 17 Sep 2025 04:55:13 GMT\r\netag: \"68ca3f31-ce3b9\"\r\nexpires: Tue, 21 Oct 2025 02:44:53 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nMyYe8GbB9Izqa43ezTcuKcJyIyAC%2Bi6TVDJ97CI4RWh0K9tplYAnjlpHjy4o2zHw8RIsty8DxBMCELLqcbBxxcSIwCSdj4JrtU%3D\"}]}\r\ncf-ray: 98e3bccaa99876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":844729,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 2000x1120, components 3","md5":"45c6fb9b63005ec1db5700552da111c0","sha1":"71b83f227ce2fa0ac351489a51b00b2d6afeff12","sha256":"04c8724324379e68b0c3364c3077ec24606cb23d18a26523379b291363ab4a36","sha512":"269f2c0b6a01e8c7a742144f6fee8006d11370d759be50956b88a7c5295265536cce6218692be9f6fd8eb872df0386f0ad5a2c53b840c9e238bb109138d696a8","ssdeep":"24576:VxVxbSmE665NGOecSckwmKj+TAIjYbHYl373:VxVx2l66NG6tkwxKUcaK3D","tlshash":"b50533612c870c551f353bd2a45863399b2ea22568c4ba9cd1abc36a5fcf248c1972df","first_seen":"2025-10-14T02:45:26.72662Z","last_seen":"2025-10-14T02:45:26.72662Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1222,"timings":{"blocked":256,"dns":22,"connect":1,"send":0,"wait":375,"receive":334,"ssl":230},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/sone00340/sone00340jp-9.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/sone00340/sone00340jp-9.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 70977\r\nserver: openresty\r\ndate: Tue, 14 Oct 2025 02:44:49 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Fri, 09 Aug 2024 11:06:42 GMT\r\nx-cache-status: HIT\r\netag: \"66b5f842-11541\"\r\naccept-ranges: bytes\r\nvia: 1.1 361902a6d5ab0a02e24e772d6f4d0c14.cloudfront.net (CloudFront), 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT57-P5, OSL50-P1\r\nx-amz-cf-id: 0UsNoKafUXgge88p9U8r12TODrMd405yYGjXfrI4cdDCBR_tVPvBOg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":70977,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 534x800, components 3","md5":"edea3b121a6c7a64f0823ce9ef43f949","sha1":"554776ba765b417f4ea10f45c80d865fded1a967","sha256":"7dcc315988ad7bd6cbd36512d9ceb47a07d031c653cb973d93a38bf789456bc1","sha512":"91e8a04881cebce510c20593fe6485bac97d0340e2517bdc5588b686ed149a6919d5e1c454798afad4f8571fdeb2224f71ed3d4cd0f9c4cab1ea50c1754cbd82","ssdeep":"1536:n3tzdt88eAzTeoI1pG75I3uI6Fva2rnVTz298arZ4+GSa8J62W7r/CXBnpV:n3xreUTeoe46/Ir1zs80fGS9w2W7bCDV","tlshash":"9563023602ed4292cb4f015b05310aef16e1090e6fe83e2a5d5d156cefa53e9a58e3e6","first_seen":"2025-10-14T02:45:26.731782Z","last_seen":"2025-10-14T02:45:26.731782Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1048,"receive":263,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-E2BG6CPV2J","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","date":"2025-10-14T02:44:52.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtag/js?id=G-E2BG6CPV2J HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 14 Oct 2025 02:44:52 GMT\r\nexpires: Tue, 14 Oct 2025 02:44:52 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 141257\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":424871,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"95ba7deaae873affaf737a6f4f4161a2","sha1":"51c5ebb5a0ea9a74e9727b89cc488c976533c85a","sha256":"04b800e47b14d0f96c521005517d5fb9fe1f2f7e2d6e71dfaf6be9916e1747d7","sha512":"2ba535053ee05928aee1648a969c77bf7dafa0299770dc7c840242031ecd1dbace15bcd6f96b12d500d9089759d9213a0e1d4a5f04c2c5c1714dc7edc3884d1e","ssdeep":"6144:qBKd/yp2W4tM0uwbWZJT+Nju5204O0NsYXdXAQY:kvY9y0KZJu0O8","tlshash":"11941ade73d674225396f078503f018ba57b28a2b44cc89af189cde42e74a9a4177f7c","first_seen":"2025-10-14T02:45:26.735302Z","last_seen":"2025-10-14T02:45:26.735302Z","times_seen":1,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/player/jw8/vast.js?v=32","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","date":"2025-10-14T02:44:52.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /player/jw8/vast.js?v=32 HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Dec 2024 07:24:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 1994\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UHeqydiZXZEKVY%2BnnwFU0ZGhG6S%2FnGLEwXJtiKtn1E4G45oJiIG49B9nhbh8pHKbFrL4CvAEGjiBHPA3Il5R2X9tRbHriLImq2xT\"}]}\r\netag: W/\"1b653-628e55ff864c0\"\r\ncontent-encoding: br\r\ncf-ray: 98e3bcc54f5c8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112211,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1b3eb53abc624a51f5e226d08758ddf3","sha1":"6cca061ec7c41313ec2027eaaca76fa9dfad750b","sha256":"73788e3233d5113578082f78869724925d3e4dd2c9d02fdc0bf84d6aed3a768e","sha512":"c6c7bbc31213d98134d98087ad912f1244b2dc7c7914247baac80d534663ab75135c004bf5473044db9e082302477b9d812b0a0db4c5f21b3e27508c26c265c5","ssdeep":"1536:twVnle2Qmbe005pkZ/gbxRYpYItN6X6ud7srzIjpitB39BsLIYOONMQHMkBxLNwO:tEnPRIN1D2zXkIYdN7Hnf","tlshash":"acb308872399d52247e484e960344212b335060f780a83acf67dfdef1d5ea4b76bab74","first_seen":"2025-04-01T21:32:19.700252Z","last_seen":"2026-04-18T03:09:02.059719Z","times_seen":562,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/stream/sJthhW1q2lV2I_Psc5sj-g/kjhhiuahiuhgihdf/1760453092/1957020/index-f1-v1-a1.m3u8","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","date":"2025-10-14T02:44:53.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /stream/sJthhW1q2lV2I_Psc5sj-g/kjhhiuahiuhgihdf/1760453092/1957020/index-f1-v1-a1.m3u8 HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:53 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\nserver: cloudflare\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hjMio4IPLh4lNsJuYJ0nVfnyn9F%2FG6c6ch%2FozqATVwr2jDckG8TQ3RPtBoaQtcTdkUd%2F5gXnfNjf5k0kIdQsz0f8tDrUJSO%2BV08J\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98e3bcc929bd8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99325,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"3e96144d73d6c31925a0398103e9602a","sha1":"a961ab3d1d97654f63d863ed08e4b97bc7649b4d","sha256":"0e75acb3dba03b97c7ac324904481794d42405a0f20899923ed82aa8295d607b","sha512":"91c0adb3d4cb50a8db1c29c0975c9667b90900efb21299abf419be878276d75d51a5322bf6ebeb4a4b56d287e38b84085ec54bb0f096e228bbcb2e089ae50cb7","ssdeep":"384:TVbtLl+vHJNKO1AZpP37g287Tb3vKD2JSxz/T/IBlOEMU0:TVbwHvAZ/cK2Exz/bIw","tlshash":"92a3b91ade41a1481a5e0ca5fbb6f6a8bbf58b75fcf0538db04c62f60c90c675a2091d","first_seen":"2025-10-14T02:45:26.743123Z","last_seen":"2025-10-14T02:45:26.743123Z","times_seen":1,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/102872415/1?wmode=7\u0026page-url=https%3A%2F%2Fstbhg.click%2Fe%2Fh2l0ic8jngt7%3Fposter%3Dhttps%3A%2F%2Fpics.dmm.co.jp%2Fdigital%2Fvideo%2Fssis00742%2Fssis00742jp-8.jpg\u0026page-ref=https%3A%2F%2Fxhdfriday.site%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7014vjzf8k4aa82j%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2220%3Acn%3A1%3Adp%3A0%3Als%3A66003841189%3Ahid%3A843030951%3Az%3A0%3Ai%3A20251014024456%3Aet%3A1760409896%3Ac%3A1%3Arn%3A337725844%3Arqn%3A1%3Au%3A176040989342575956%3Aw%3A879x495%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Afp%3A1894%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C249%2C3%2C4292%2C4292%2C1%2C1555%3Aco%3A0%3Acpf%3A1%3Ans%3A1760409891158%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1760409896%3At%3ASSIS-742-MOSAIC-FCJAV.COM-06162023.mp4\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2883952132%29ti%281%29\u0026redirnss=1","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","date":"2025-10-14T02:44:56.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /watch/102872415/1?wmode=7\u0026page-url=https%3A%2F%2Fstbhg.click%2Fe%2Fh2l0ic8jngt7%3Fposter%3Dhttps%3A%2F%2Fpics.dmm.co.jp%2Fdigital%2Fvideo%2Fssis00742%2Fssis00742jp-8.jpg\u0026page-ref=https%3A%2F%2Fxhdfriday.site%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7014vjzf8k4aa82j%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2220%3Acn%3A1%3Adp%3A0%3Als%3A66003841189%3Ahid%3A843030951%3Az%3A0%3Ai%3A20251014024456%3Aet%3A1760409896%3Ac%3A1%3Arn%3A337725844%3Arqn%3A1%3Au%3A176040989342575956%3Aw%3A879x495%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Afp%3A1894%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C249%2C3%2C4292%2C4292%2C1%2C1555%3Aco%3A0%3Acpf%3A1%3Ans%3A1760409891158%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1760409896%3At%3ASSIS-742-MOSAIC-FCJAV.COM-06162023.mp4\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2883952132%29ti%281%29\u0026redirnss=1 HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://stbhg.click\r\nReferer: https://stbhg.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: bh=YKXytscGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; yabs-sid=1279009901760409896; i=9ucUxG6nJ2K/94BQJ2VTGpLfwfuxOxckjr6LsfCXigRuugB/Hye6FPNttE2qsigKz0ccOMxZLlwf1x8LIH+M/LTJWk8=; yandexuid=811176881760409896; yuidss=811176881760409896; ymex=1791945896.yrts.1760409896#1791945896.yrtsi.1760409896\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 677\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nlast-modified: Tue, 14-Oct-2025 02:44:56 GMT\r\naccess-control-allow-origin: https://stbhg.click\r\nx-xss-protection: 1; mode=block\r\nexpires: Tue, 14-Oct-2025 02:44:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":677,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"253cb7fe43cac6701b816a2190468a96","sha1":"4e2855295ed4491ee2f10efed9937d439bb72dae","sha256":"6cdd5e7cf0bb830e99a4b09849aecb7b110464974e91d6f30c9e9b8ef813f6f2","sha512":"6da5cb7829a4369eec2e8178d717bf1e080a95bd62236b70ecd6d2142ea604e3c7793d487e9863ce4d94930118043ad3a82ced704009dcd2e2d345f02a7c3041","ssdeep":"","tlshash":"19014e8828560938490a1fd4285e6606a1cca3248c522b90679193805cceefab30a370","first_seen":"2025-10-14T02:45:26.746467Z","last_seen":"2025-10-14T02:45:26.746467Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto%3A300%2C400%2C500%2C700\u0026ver=2.5.5","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"04:E6:D3:58:E3:A1:E3:05:2B:C3:56:5D:68:BB:1B:0A:08:C6:E3:FB","sha256":"25:4C:B3:A3:9A:E1:D7:FD:25:B6:BF:E9:AA:97:95:20:5D:F2:15:EA:41:46:B6:6B:01:17:19:26:EC:EF:D3:CA"}}},"request":{"raw":"GET /css?family=Roboto%3A300%2C400%2C500%2C700\u0026ver=2.5.5 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 14 Oct 2025 02:44:48 GMT\r\ndate: Tue, 14 Oct 2025 02:44:48 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21548,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"0ce0e705786211ddc60130dddbf31333","sha1":"3c8d0490b0f4b830c1f60f3c92e93c7ac1db586f","sha256":"f6182b1cbcd08174f2dc7eb2d65036aa68cd510971385d1f5cf7d5aea1c72604","sha512":"5a6ccf3337289ca09fca8ea809d96cfbe90008a8d357bef80c59045ae14d2298f86785471a357bdd637dabc6a18301ed16dd877da7bc1500c460ea1ffc57d3e4","ssdeep":"384:3wfnw+whwdwySw/qY4owmwGw3wfawDwwwkwyfw/qY45wLwrwcwfFwYw7w/wyEw/O:3KNyEfSQv3rgXU/9ffQiqGr8vkSfEQNg","tlshash":"e7a2fba108174000978358e223cebf34fe4f92507141d0b5abfd9b6bedcbca652693ad","first_seen":"2025-09-09T04:44:57.736265Z","last_seen":"2025-11-19T00:00:14.757832Z","times_seen":2883,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":97,"dns":0,"connect":20,"send":0,"wait":33,"receive":0,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/colors.dark.min.css?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/colors.dark.min.css?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:48 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WwZc3l3UClICnzFsrdmMfvVnXzkfKdwzLR70a1NPVPXDAbO8i50mIWsxv5l9CbRZUt3oauiBIzvrrgPXsV5oBkuBylWcWLcQFnbxtbMw\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 98e3bca8fb8f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40105,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (40104)","md5":"e7b7365d4fb0236b5df80ec3b10a8502","sha1":"c02eda52d607b6126f750d6a718c817a1711f1ba","sha256":"9904853546d3d30611944fe53ff8a7e7cb02e77a5be14923a347f6964a74e82e","sha512":"8053ca116b4c6203e2dedd7af40fd58dfe00298a70132673caa7fa2e3518697e5c6295eefed7fcf70ae1fd117238d586b56a7f3bc417d2797dc69090751ee3fd","ssdeep":"384:gNjWIEKEG9kPZi8NlrhFf9N6zlEu29wQkMwOypdNPwPTSruv9y0iQkmfhZ1UbQLK:28/N+pd5wGi1U8u","tlshash":"9a030f70e5ca020f7523e5ba6956f94e32756294e2011b7df23f30e89e811dfe6a3b05","first_seen":"2023-04-10T18:21:08Z","last_seen":"2026-04-23T20:55:32.128451Z","times_seen":1205,"resource_available":false,"data":null}},"time_used":671,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":671,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/blueimp.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/blueimp.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:48 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uwI6FBPOpzMFwOMmOojAd4iwaYRFNZ9B9MXUpbag%2FMrCRT4qqC6Y%2FTvZ7L6EUQXlp3k428ZW14N6RV8ixZE%2BFWNu6xu3N%2FTHq8trL7V5\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 98e3bca90b9a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32964,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32032), with CRLF line terminators","md5":"0c33d55a46db8350f57388504aec281f","sha1":"3701799975093b4d67e3baeea453ef6202a66fba","sha256":"833047db5433fc30adfc5f85c19e600dbb6f56d462510663208a5354a984dada","sha512":"3015128555513da131cc3ee2248dfd8a44ced924b9818b7350fa3f532dac10e8e59a369c700412c20572edcd394331bbf90651256fe85e31b8dfd379c44ee341","ssdeep":"768:4u5b2Nl3O/NAHCxxw5cJ+NIdRWg2FskcQf9wJskDhY/LXeaSa4yj75H:JJQdO/N6C7w5cJ+NIdRWHFvN9wqD/LXF","tlshash":"a0e2f85db250662241d3a2ed705f690ab232d22da411918c3a7cdbdaac70d4f717bff8","first_seen":"2023-03-07T01:06:58Z","last_seen":"2026-04-23T10:18:17.227348Z","times_seen":864,"resource_available":true,"data":null}},"time_used":710,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":708,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/uploads/2025/08/FotoJetview-1.png","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/FotoJetview-1.png HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:49 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 13:48:51 GMT\r\naccept-ranges: bytes\r\ncontent-length: 33727\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2BiQ%2BBYqrKqx46t0gGKqYCz%2BEKJQD5mbqfI9JdSFDbnNlQ5cLMtZenbMXZxe3JDwIHSony5x3yqLjuWy0T5asiFADRkVqSp94YOSmBL3\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 98e3bca91b9d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33727,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 277 x 70, 8-bit/color RGBA, non-interlaced","md5":"49b45e263432403af0f84c91d4b094bc","sha1":"0e010afdccc71d96551bfe04e8ebab7bb8213631","sha256":"5d982934d511764165ea0557916624acaf0db13efee2b60e1a468d7437cde090","sha512":"56499d56acda2c5b4af44250aa8813ee1c3d3c612d2f0f34a973bf93e5f91ab411da7d47ee9568f5dc118639e48ad58082e17849f90f38db42c8664bf92822f3","ssdeep":"768:61w1HYKesVX7Fq52TsTSr48NK/FpB8GrOTdsUfKEBu:61CYCVXE5ZTc3Q/FpaGqTi7","tlshash":"43e2f28280708774943db5f67341732888935c9d072cf7fdeaec6ab9a381da548a7846","first_seen":"2025-08-16T13:25:24.519859Z","last_seen":"2026-03-29T19:50:06.964801Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1354,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/mida00156/mida00156jp-1.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/mida00156/mida00156jp-1.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 54444\r\nserver: openresty\r\ndate: Tue, 14 Oct 2025 02:44:49 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Mon, 14 Apr 2025 11:00:39 GMT\r\netag: \"67fcead7-d4ac\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nvia: 1.1 e5e9d160d4a1bdf2fa7acdd1d6b0b89e.cloudfront.net (CloudFront), 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT20-P6, OSL50-P1\r\nx-amz-cf-id: H75JTTlzRDUTvRqSqqjIcOagbismvwb60ZKwJ1T4fAYX8meuM9CpgA==\r\nage: 357689\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54444,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 534x800, components 3","md5":"c70277afa2e3ff9dad4b634d08f0672b","sha1":"423a2ea463bc40524f9a95d266c28d151de8cdac","sha256":"eda12cb4a11de2aafedc2a66526baebc255f200099f3c4ea3f033f0e423212a4","sha512":"2ec8683f2d200036962e7e68a192279e2cb6d5d48317ca9e01ec72929492ee2023b109247eeec768903bcabfed18a87f108167b9ea298d452b6dee21b70276dd","ssdeep":"1536:Wd/YrtF6DEzONpsJuFDJv2RaqzYniJwbYG38LVksk8:WlYrbgOONps0DxyajEnGy","tlshash":"b333f2029770d08c9278a4aa97fea0f577334c16359e71dcf458a22a1b1f6b37846a37","first_seen":"2025-10-14T02:45:26.76546Z","last_seen":"2025-10-14T02:45:26.76546Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1463,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1157,"receive":306,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/fontawesome/webfonts/fa-brands-400.woff2","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:49.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/fontawesome/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/fontawesome/css/all.min.css?ver=5.15.1\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:50 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:13 GMT\r\naccept-ranges: bytes\r\ncontent-length: 78464\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QcF4yo3YGo7OKCWSDIQbsopiaDTRUZLgTp5yiU0eBNigcs9KY22zTFPmtmSSuROIoo3U4dA3m9bCO385%2BTkKUclLJsw2DYeaKzVzTxNL\"}]}\r\ncontent-type: font/woff2\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 98e3bcb23bd62efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78464,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78464, version 331.-31392","md5":"ff496de99efc36ce4f6f1e611ada7e65","sha1":"f6b96b15619d6c70e152ccc6901f5872b58b08be","sha256":"59beb1f8f4ea7e16c50ae0652005e6f7a39f58f9deb0e155d8c8981ea99544b0","sha512":"dde3bfcae5ba38ce8ccb853caa044a72fe126d93c87daeb1dd692723d8800a9acaaa1661ccf9bdaa91c3b9de123a0c74ddeac8525ef7bfacf6c425fb90df0323","ssdeep":"1536:7vEqiwE+StKqlFawjLAf3tMlM7qH2M++uzYQlBJGYdD:7vEbwE+StdfZPAf3tSiqVEbl","tlshash":"41731209d6241bdb50757de10de35a7dea2f98027ea4aa058f86842abc0f04cc52b5bf","first_seen":"2023-04-05T13:28:44Z","last_seen":"2026-04-24T10:53:45.796217Z","times_seen":2659,"resource_available":false,"data":null}},"time_used":862,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":858,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"region1.google-analytics.com/g/collect?v=2\u0026tid=G-RTM6XRXKXM\u0026gtm=45je5a81v9100818081za200zd9100818081\u0026_p=1760409889402\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=251347382.1760409890\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480709~115752876~115834636~115834638~115868795~115868797~115938465~115938468\u0026sid=1760409889\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fxhdfriday.site%2Fmovies%2Fssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss%2F\u0026dt=SSIS-742%20%7C%20%5BUNCENSORED%5D%20I%20Was%20Invited%20To%20Drink%20At%20Home%20By%20A%20Beautiful%20Boss%20-%20xhdfriday\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=4273","fqdn":"region1.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:49.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-RTM6XRXKXM\u0026gtm=45je5a81v9100818081za200zd9100818081\u0026_p=1760409889402\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=251347382.1760409890\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480709~115752876~115834636~115834638~115868795~115868797~115938465~115938468\u0026sid=1760409889\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fxhdfriday.site%2Fmovies%2Fssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss%2F\u0026dt=SSIS-742%20%7C%20%5BUNCENSORED%5D%20I%20Was%20Invited%20To%20Drink%20At%20Home%20By%20A%20Beautiful%20Boss%20-%20xhdfriday\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=4273 HTTP/1.1\r\nHost: region1.google-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xhdfriday.site/\r\nOrigin: https://xhdfriday.site\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://xhdfriday.site\r\ndate: Tue, 14 Oct 2025 02:44:49 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:102:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:102:0\r\nreport-to: {\"group\":\"ascnsrsggc:102:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:102:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T16:55:28.234721Z","times_seen":14186033,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":90,"dns":1,"connect":22,"send":0,"wait":30,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/owlcarousel.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/owlcarousel.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:48 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f8jU%2FsPy7rqMQMbITAFWOeHfX7vPIV0OTZLtEcnPPtojZ13qQOrdzf74ImobrYzdc7sDjGBzNZpbjc6QbDtOVa%2Bz9oTCNQBt5qVKy%2FGf\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 98e3bca90b962efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23938,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (635), with CRLF line terminators","md5":"56e770f95a9cb2ce06d6b044f93c24fa","sha1":"003bdb37bbd8cfd296bcffff38ce601b6b7df8dd","sha256":"ecc9ea285df7f95f79c647d1cfaca566239d68fcb183aa274fda98f33fce813e","sha512":"7e36ac1b0cbd3835d431fca68efd11fe05c7cb52a654cb9ef4bd3adb83f465ff890116c09b9ac1935308e0a1f94dd5d1ca12813a8af9ba67f4d39327e1053800","ssdeep":"384:7Ket0QK/Q52Cgwm0PQtiRX55DzNvYUyzLsxVxRbH:dK/Q4ptuXNQUyzLI5","tlshash":"12b2a54bb2202385469372b9419b110d713bfb78fc42855c70b6dadfaa4b84e9277b3d","first_seen":"2023-03-07T01:03:55Z","last_seen":"2026-04-23T20:55:32.073003Z","times_seen":1795,"resource_available":true,"data":null}},"time_used":716,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":715,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w92","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"138.199.37.227","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Sep 2025 20:10:35 GMT","end":"Mon, 22 Dec 2025 20:10:34 GMT"},"fingerprint":{"sha1":"9B:24:B0:91:79:AC:B0:0C:F8:BA:AA:DC:AC:6D:67:E9:B9:AF:6F:BE","sha256":"11:31:79:0F:81:6F:B5:20:34:07:93:CB:FF:0D:3B:0D:EF:34:FB:C5:B5:99:92:02:90:BE:9E:5A:2D:FD:5A:E7"}}},"request":{"raw":"GET /t/p/w92 HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 14 Oct 2025 02:44:48 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-DE1-860\r\ncdn-pullzone: 775336\r\ncdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf\r\ncdn-requestcountrycode: NO\r\ncache-control: max-age=43200\r\netag: W/\"653e955073f6ff68f1e0cfa5a613ef75\"\r\nlast-modified: Thu, 08 Apr 2021 15:54:44 GMT\r\ncdn-cachedat: 10/13/2025 21:29:16\r\ncdn-proxyver: 1.38\r\ncdn-requestpullcode: 404\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 863\r\ncdn-status: 404\r\ncdn-requesttime: 0\r\ncdn-requestid: 2f5593f73fd85aa97396f12e9643d067\r\ncdn-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T16:55:28.234721Z","times_seen":14186033,"resource_available":true,"data":null}},"time_used":555,"timings":{"blocked":479,"dns":0,"connect":22,"send":0,"wait":23,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.googleusercontent.com/s2/favicons?domain=https://wtsmovies.com/subtitles/movie/","fqdn":"s2.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:47 GMT","end":"Mon, 15 Dec 2025 08:41:46 GMT"},"fingerprint":{"sha1":"F8:5F:63:28:35:3F:3B:74:50:6E:B0:8A:1E:82:1E:81:0B:2C:5D:57","sha256":"E5:11:BE:F6:31:91:0A:88:46:0E:37:CF:15:59:95:26:EE:40:53:A0:69:3F:0A:3E:F6:B4:44:43:15:61:C4:6F"}}},"request":{"raw":"GET /s2/favicons?domain=https://wtsmovies.com/subtitles/movie/ HTTP/1.1\r\nHost: s2.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://t0.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=https://wtsmovies.com/subtitles/movie/\u0026size=16\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\ndate: Tue, 14 Oct 2025 02:44:48 GMT\r\nexpires: Tue, 14 Oct 2025 03:14:48 GMT\r\ncache-control: public, max-age=1800\r\nserver: sffe\r\ncontent-length: 351\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":726,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T16:55:28.234721Z","times_seen":14186033,"resource_available":true,"data":null}},"time_used":594,"timings":{"blocked":478,"dns":0,"connect":7,"send":0,"wait":17,"receive":0,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn001.imggle.net/webp/poster/20240410/1731122620.webp","fqdn":"cdn001.imggle.net","domain":"imggle.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imggle.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 Aug 2025 00:26:18 GMT","end":"Fri, 28 Nov 2025 01:26:04 GMT"},"fingerprint":{"sha1":"3D:D7:A4:29:CD:9D:68:E2:6D:DD:CB:4F:B7:65:26:2D:B8:3E:01:F6","sha256":"92:07:49:FB:FC:89:EC:3B:E7:48:EB:4C:8E:D0:E3:C2:24:FD:F3:84:C3:2F:D6:AE:8D:D2:21:6B:0F:F2:1B:4B"}}},"request":{"raw":"GET /webp/poster/20240410/1731122620.webp HTTP/1.1\r\nHost: cdn001.imggle.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 81002\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 09 Nov 2024 03:23:42 GMT\r\netag: \"672ed5be-13c6a\"\r\nexpires: Sun, 13 Sep 2026 18:52:11 GMT\r\ncache-control: max-age=31536000\r\nx-cache: HIT\r\ncf-cache-status: HIT\r\nage: 2278938\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NZ5zUJsKvAmo8NqmcyFhBLneicxQ8kcA5U2mD8Z%2FnI8FnGnsbTBe8Lnwr%2FaMjeCARI5SP4yBK37r%2BnfkD8%2FylN4jdeC5LhgNugpOsuFeQSg5\"}]}\r\ncf-ray: 98e3bcab8d1e5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81002,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x426, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"68f18adb4e4878f43441458a7e05a578","sha1":"18fb927ff75c2ac401d4a84544ce04027f2a338a","sha256":"69acbbc51b23c3655deb8a7da7f0e54e60bbc5cf2b9ac534430b1db4a0700c93","sha512":"e736ba53ecdb8f1142731ee9b6742cb9bce969eabf86c5410c879f56207d0254a867f6673d7328ef66d4c9eb31d8568755f109da389085ebf6060484e327ccc6","ssdeep":"1536:Cvmei2luECqMs43gI+csFFN3M3GnLaF1spXxI8XTRQF0l0N5EDcQ0DcC7F:CvmA6VRsFjkQpXq8DcI0N5LQ0DcKF","tlshash":"678312fabc083df1fa0f799c91f2c317c294b8081b1619f18e81958a9bb54d7a854ad3","first_seen":"2025-10-14T02:45:26.774679Z","last_seen":"2026-03-29T19:50:06.951363Z","times_seen":2,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":183,"dns":30,"connect":2,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-admin/admin-ajax.php","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:50.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"POST /wp-admin/admin-ajax.php HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 49\r\nOrigin: https://xhdfriday.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5; _ga_RTM6XRXKXM=GS2.1.s1760409889$o1$g0$t1760409889$j60$l0$h0; _ga=GA1.1.251347382.1760409890; pp_main_e5740c7b80abc2329366e06d2dc81dff=1; dom3ic8zudi28v8lr6fgphwffqoz0j6c=c22daec2-ef1d-4767-b56b-20cffbb9c364%3A1%3A1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:51 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: https://xhdfriday.site\r\naccess-control-allow-credentials: true\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CLKi6EE8iKokat0xrkvuvR8Uf17%2FtbOrxnjB6f0do3Z%2BKlfm2s5%2B1bkzyoJjUaIZuLPB78%2BJoQtqVshah%2FgCkpPtBpV3Efm91JjDukFo\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/json; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncf-ray: 98e3bcb5abf52efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"39bc127a6437eff4334e1d4b2a441553","sha1":"a6d8ced1f41430d0dc0604d984132752cdb11b08","sha256":"16a24545c1fe0fe41e45719c559b5cb7b3f1d63101df12612d9d52687d3e1b74","sha512":"2296ef36d946ca20909460a0b4e608bf9fad9cd37a0eb8ae1a88c288a5d3d1438d4a59c396164b66c3f8a353176576a9baf8d52f7fad938051ab51903b5963b0","ssdeep":"","tlshash":"07c08cf27080861021a031d95849626ce69e744b608cd409a9ea243c8a0e25433a41bf","first_seen":"2025-10-14T02:45:26.780395Z","last_seen":"2025-10-14T02:45:26.780395Z","times_seen":1,"resource_available":false,"data":null}},"time_used":969,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":969,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=c22daec2-ef1d-4767-b56b-20cffbb9c364\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=e5740c7b80abc2329366e06d2dc81dff\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=2","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:50.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 21:53:17 GMT","end":"Fri, 28 Nov 2025 21:53:16 GMT"},"fingerprint":{"sha1":"AA:2A:FC:C2:EE:01:8F:55:3F:19:46:84:4A:C8:A0:95:62:50:5C:A3","sha256":"3D:8C:1A:2E:1F:32:30:D4:D8:4F:D2:FB:CC:99:F1:9C:05:E5:7B:D8:9D:7D:24:86:AD:C5:1E:62:55:44:A4:CA"}}},"request":{"raw":"GET /pxf.gif?uuid=c22daec2-ef1d-4767-b56b-20cffbb9c364\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=e5740c7b80abc2329366e06d2dc81dff\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=2 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 14 Oct 2025 02:44:51 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: afef373ff9bab6bdb216cc66ad6492c2\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T16:55:28.234721Z","times_seen":14186033,"resource_available":true,"data":null}},"time_used":663,"timings":{"blocked":284,"dns":1,"connect":92,"send":0,"wait":95,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/js/jquery.cookie.js","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","date":"2025-10-14T02:44:52.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /js/jquery.cookie.js HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Tue, 31 May 2011 13:53:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"4de4f2bc-10eb\"\r\nexpires: Tue, 14 Oct 2025 17:51:15 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 550417\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C0C%2BhmZc2DpRLywH1asJoT9RjhVzH0P1KxVOA1jtxhKsT4qmy%2BInuGMj7rfGWBOuaNQJFiduyiYrkYArSZZ4Fjf%2FycoKjaiAJVb7\"}]}\r\ncf-ray: 98e3bcc46d290883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4331,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"ae0c2c5d8f01f7d35bb698bb618a62f7","sha1":"63556a22ddea1c5f23a5cf7d0b6d35c7aab54e20","sha256":"75aef2e95ea7f3a70999396fba0c2ab866f4ff06313cf1b07780d800a5fc1ebc","sha512":"eac94ca9d884692af8bdf12aa6e902a3be4eed0772ad8f2932ac1c3328b83a7351cdf743a409bbc0a3cd385956c08d3203d51c572bb1680489e37330fe27a2bb","ssdeep":"96:L4BZxb64Ng7V8cNwpGylRCsKZcj1JXulL6M/aGByLskPSP4lBCClf1wgCyC:LQnb6eg7DgCsk8fgZJkPSPa+gCyC","tlshash":"2e91fd293a0d231d149353f57aee10c8a930d632216ad46c744cb6b06f00c63ddfbbea","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-04-24T16:13:40.035Z","times_seen":4391,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/dl?op=get_slides\u0026length=9099\u0026url=https://pixoraa.cc/h2l0ic8jngt70000.jpg","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","date":"2025-10-14T02:44:52.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /dl?op=get_slides\u0026length=9099\u0026url=https://pixoraa.cc/h2l0ic8jngt70000.jpg HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:53 GMT\r\ncontent-type: text/vtt\r\nserver: cloudflare\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xa1Y7U966JJEBqrZzA%2BjOVMXLOCCP3THDkfP7MUy4xAH%2BJr0mURZ9bu0ir7uf5VnHbmoRmwfooJ3zeMzwaecUNR8N3RnLScejFMB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98e3bcc7388b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9228,"size_decoded":0,"mime_type":"text/vtt","magic":"WebVTT subtitles, ASCII text","md5":"9f76b3a913a7c3fbb7ab8478bb9ac561","sha1":"3ac5aa7eb463be5ba1787522b7efb720d285d317","sha256":"32e936b3c8955e6ad26bf2df5ce7f968aa7d55fb89332a3360bf9f4e306514e0","sha512":"b8c47f4f3f8aef3df6a6bdccfda83bbfe935e2f025d3a41037a30a423055e1eb139abe9e2164183edfa143771f61ec1cd2f723a36fef41aafb1ed32c9dc97bd9","ssdeep":"48:LdSVotrZYzFozELUh05aCAIRRpt3nFmevYAxG/thRcvtN/h1tKDjnksX9qLrZ9TE:LbuzFfUBk3nF2thevejpX9aZ9Y","tlshash":"0e125ad692514c6ef6a972e0b3a03db5f61323cbbaccc856fcb02cb65cdd518ad21464","first_seen":"2025-10-14T02:45:26.786666Z","last_seen":"2025-10-14T02:45:26.786666Z","times_seen":1,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-14T02:44:45.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 14 Oct 2025 02:44:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/\r\nserver: cloudflare\r\nvary: Accept-Encoding,Cookie\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nx-redirect-by: WordPress\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ulKNl5aSVC99s2dwsIfisWbslYVSGfYSoQvN78wVJdtbsKzu5tahycDiTpa7b016zmZ8IUjFjValVrE%2FE1TAR75%2BwgTAcAKx9hvGBw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nset-cookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5; Path=/; Max-Age=31536000; Expires=Wed, 14 Oct 2026 02:44:46 GMT\r\ncf-ray: 98e3bc9bf8f456b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50502,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T16:55:28.234721Z","times_seen":14186033,"resource_available":true,"data":null}},"time_used":1354,"timings":{"blocked":232,"dns":34,"connect":1,"send":0,"wait":889,"receive":0,"ssl":195},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/front.style.min.css?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/front.style.min.css?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:48 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D1hmc3XK%2B5clcHe2pJ7d9GzxSzsp%2BHnKCDZTLC0MR%2BZUOlRdTzGBNKSgmp4Z5by7xz%2BTAWxxBqfO2O5AMDVbjfB%2FbJsJ1oD6VZ8GH4qf\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 98e3bca8fb8e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97357,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c09b8d324eea3e01ab0f0eb66aba27e8","sha1":"23a640ee42f0d448a742bcb1f17dcd7661b3c4c9","sha256":"35a6c6b08117a7c8239667d8c72c17f7e92fbaede64b3491b515642c0b86e677","sha512":"b6f17115bb9b5526c28cf5343098237b957cb26655301c8040bde3dbe59daa9acfabfeff1c66601df2b2b7d569d75281cbbe5dad07b0f7f2b5c987339f6ad235","ssdeep":"1536:yfMqJ1dqPoietmX+C4+ed0qBe3bAMv1SQxK5tt1jDE1p:eL6nEjw","tlshash":"ff9344315532602cb53ba5a1fec25bec322c8167f3234dead65d653ac2d65a32532bcc","first_seen":"2023-04-06T14:37:36Z","last_seen":"2026-04-23T20:55:32.164197Z","times_seen":859,"resource_available":false,"data":null}},"time_used":669,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":666,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/front.gallery.min.css?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/front.gallery.min.css?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:48 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H9qg9plW6FtoCJ0HhlGrkBIUGWKp%2BQRNmBAYqGtZWbs8YR4ossD%2FEE%2Fda%2FoPwfZkXOvnBSKqM%2Bn8fA4VxPaidzHsEgH%2BZziCkfsrerY4\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 98e3bca90b912efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4256,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4255)","md5":"ec45c80bb5df55dbd19490461fa26ddd","sha1":"26e7429b1a724c22d3cabbe45df0518573d34075","sha256":"4a91d5332083b65f0d8e88dcdb513e7b08497c47b454a84ad30b29cb34d09426","sha512":"eb51181a86913dd06539b6a85365290d659a4e3b37e1ff851e429de486a71ba21458e4122da24d024ed9aa53ece47309b1752ac78ec0c2b414f22a1bbc9c687b","ssdeep":"48:bEXpufnFfNT4oJK02SjHkYQ/v8s/e2p7EYipR5aPc5nT:b8uvlF42XRs+2p7EYiB5T","tlshash":"72911e78ed38202562ffd36bb6b8a5b713bca502fa73767df164f141c68694b20121c4","first_seen":"2023-04-09T14:43:48Z","last_seen":"2026-04-23T10:18:17.231757Z","times_seen":532,"resource_available":false,"data":null}},"time_used":685,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":685,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:49 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 09 Jun 2023 02:49:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=efgF01k56DdtZoFx9NaTknrDt1T55vUlni%2Bb7nLkQxttpS23s4YtGU4D%2BadokHDBr0N7s%2B%2BE0LBm1RAmIm348Jepf%2BkOV4%2Fh2Gse34GI\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 98e3bca90b932efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-25T16:53:25.608627Z","times_seen":687618,"resource_available":true,"data":null}},"time_used":872,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":872,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/juny00146/juny00146jp-1.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/juny00146/juny00146jp-1.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 80506\r\nserver: openresty\r\ndate: Tue, 14 Oct 2025 02:44:49 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Mon, 16 Dec 2024 09:10:16 GMT\r\netag: \"675fee78-13a7a\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nvia: 1.1 b5192ff233b952d600d3d2646e95643a.cloudfront.net (CloudFront), 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT20-P6, OSL50-P1\r\nx-amz-cf-id: noCfTs07Ldd7cq3Z4YHqGJ1hryhXqmcwgye3L6K4oR_t9Ra9vboGLQ==\r\nage: 389956\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":80506,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 534x800, components 3","md5":"84c2d645972299d8379ab68e30e499cc","sha1":"ad2fc18d06009ec35e852271d63d6331eb31b549","sha256":"998faf92e590c7a8c0bc6676e51aaba10814a56b838f98003e9c2d678be20796","sha512":"f31fc14d9eba7b117dd9921ca02cd62e62cb17437819e48fc9f27f71918d90d1ea1836af40e10db910cce478d518d868bb178b07454eedb975dc297cbb5bb4a2","ssdeep":"1536:Fg8MGhLqZ+9TPX4ILIkvJtsx9yT/w4BMbnjqMokfCbkRye8ge08NGLv6F:FLqZ+9TPIIskvsx8bkfCbkcFRK6F","tlshash":"1473024e27cf0af7a1be16ea0b82d1da3281d1f54dc762c86cdc5842af524c2f5b85b5","first_seen":"2025-10-14T02:45:26.799182Z","last_seen":"2025-10-14T02:45:26.799182Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1119,"receive":282,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/uploads/2025/08/cropped-FotoJet-7ff-32x32.jpg","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:50.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/cropped-FotoJet-7ff-32x32.jpg HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5; _ga_RTM6XRXKXM=GS2.1.s1760409889$o1$g0$t1760409889$j60$l0$h0; _ga=GA1.1.251347382.1760409890; pp_main_e5740c7b80abc2329366e06d2dc81dff=1; dom3ic8zudi28v8lr6fgphwffqoz0j6c=c22daec2-ef1d-4767-b56b-20cffbb9c364%3A1%3A1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:50 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 13:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1149\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=caUjI2bi5Qd5eMRSoyUP%2BkEntOzFRSnTW1X40VUeM3rkV8ua6TcU7OcAJ%2BOGyc9bW6Kx9SXA84s7EOmeEai996yfPIyU7mH9Zk4h6%2Bxx\"}]}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 98e3bcb84c0b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1149,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 32x32, components 3","md5":"203b4458696a114dc8a9f24d77b2ef9d","sha1":"aeb864c9ee85bd40d866589865197160b8c8d244","sha256":"4560dc1e2bfbb42da3c42caa2afc5c4e947f6f088174b468da4f645c40822847","sha512":"ce40a6da08a0ffc079a5e27414c787a6c0c26b880eff7746249086f275ef6e778768812c30bb6121ffb6bca035fe7e2d2f3f2b36b4e90df4b7a5303fb40d30c6","ssdeep":"","tlshash":"8e2146761f0203a1c56acdfd0963239ed29e7642b99d97407f72c2b2c6148eda54c64d","first_seen":"2025-09-08T12:26:50.651139Z","last_seen":"2025-10-30T02:38:15.59364Z","times_seen":6,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","date":"2025-10-14T02:44:52.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/ssis00742/ssis00742jp-8.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 83051\r\nserver: openresty\r\ndate: Tue, 14 Oct 2025 02:44:52 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Mon, 08 May 2023 09:54:35 GMT\r\netag: \"6458c6db-1446b\"\r\nx-cache-status: HIT\r\nvia: 1.1 d86afd95def8027da7d9399bfa3de354.cloudfront.net (CloudFront), 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)\r\naccept-ranges: bytes\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT20-P6, OSL50-P1\r\nx-amz-cf-id: QkaKavtn1fMs2LSZ17-S6AVKrNQylLIbVvaxPqmxacU01udsSx3CyQ==\r\nage: 225963\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":83051,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x534, components 3","md5":"05755a42897f11eebb0a9a624080df73","sha1":"a75486f1b81d278e1c18cd86ef66a4a37f70c6d7","sha256":"6a91de7be3f450d66d4629732324f3fb33421e1ddf426b67f0cf403ad4601cdc","sha512":"2595276c4212a47873e16dfef6c67ec8e4ad5eab9dfe213677be64a56322f73ee59707f684bf98e8ca1f4a58aec37e9fcc653c56ddf08467ca415e9a5138bff4","ssdeep":"1536:b8qCY46ANnJYkMObjuEF3+IXfqxY52gW6zx8D/pR04xdWdYswIh/XZ013O4hHymC:gqCYyNJYqCg+IXSxO2gW48D/Q4xYdNTZ","tlshash":"5e8302cdc490b59debbdbd7eec7657c7982db5c8a02e1d0524a2ba90bb185d301cd40b","first_seen":"2025-10-14T02:45:26.597189Z","last_seen":"2025-10-14T02:45:26.597189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":788,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":526,"receive":262,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/stream/sJthhW1q2lV2I_Psc5sj-g/kjhhiuahiuhgihdf/1760453092/1957020/master.m3u8","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","date":"2025-10-14T02:44:53.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"HEAD /stream/sJthhW1q2lV2I_Psc5sj-g/kjhhiuahiuhgihdf/1760453092/1957020/master.m3u8 HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:53 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\nserver: cloudflare\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qOdNyTme28oXritbyvQTq31jrDgn%2Fc0BiWDwKzAjsvt4vORMcf2GsYSS%2BSj0bLXpYswHz07x1x%2FNqOjHN71p%2B%2BgwnS%2BnT79NdsR2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98e3bcc788b68deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T16:55:28.234721Z","times_seen":14186033,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":221,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.live/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss","fqdn":"xhdfriday.live","domain":"xhdfriday.live","tld":"live"},"ip":{"addr":"172.67.209.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-14T02:44:45.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:14:05 GMT","end":"Sun, 14 Dec 2025 09:12:50 GMT"},"fingerprint":{"sha1":"D3:97:E0:19:E6:7D:D9:F8:11:5D:C6:26:BF:C4:EF:1A:E3:B7:02:9C","sha256":"22:3F:77:26:15:6E:96:9C:82:0B:E1:0F:48:A2:9F:35:DD:35:AE:99:63:E8:D3:ED:71:AA:D0:F8:0D:5C:EF:A3"}}},"request":{"raw":"GET /ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss HTTP/1.1\r\nHost: xhdfriday.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 14 Oct 2025 02:44:45 GMT\r\nlocation: https://xhdfriday.site/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oSXk1Ss6%2FL74IFUBqY8sCBf50HYCh6PTlrfgPCdcq9yF94AzVBkXb%2FwJFHbhbm%2F5JV%2FmUdNIPmXyaIKDEruHJZop%2FJ%2FONX41iBu%2FjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98e3bc9a6f97569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50502,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T16:55:28.234721Z","times_seen":14186033,"resource_available":true,"data":null}},"time_used":660,"timings":{"blocked":327,"dns":26,"connect":1,"send":0,"wait":5,"receive":0,"ssl":298},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/front.ajax.min.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/front.ajax.min.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:49 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7OvonlFhU7ixd8iTr4JLApl4jbmDS%2BDBUU%2BNYBamSWQCLsKn%2BD%2BSB9tw%2BxFWqQIsla%2BPk4rju%2B2gRU5TPtkHIjQuKvUCyLpp4dG5AlKp\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 98e3bca90b992efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15025,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15023), with CRLF line terminators","md5":"01688e7db55bb122da5ecf1ecd76dc19","sha1":"127abb99dda567124ed64e89357caafdb672b528","sha256":"ebc7ea4f07c0230971ae1fbf81c235b1b20b8cff373f76d86dce9d10350b335b","sha512":"93ce636f46aaea47b3191fbbe42c33e57cb7c54ac956d33c32ccdc92db477955788d15d7fbfeb11e3a2881c08518859381dfb2c5aca35003677cba9909ed4b62","ssdeep":"384:1WJ5xYXJ0yfMS103o3Y93U3k3A69uDxMJxtvpWF1x1mUgspVYopnpTI6I3MIk47S:UGXfM5MigwA69uDxMJxtvpwVNRpTpxIE","tlshash":"f662635778869cca027761a1306fd50ab2b33e51d9124a06f1b9a1ec5ffdec66033b1e","first_seen":"2023-03-07T01:03:54Z","last_seen":"2026-04-23T20:55:32.070902Z","times_seen":1567,"resource_available":true,"data":null}},"time_used":906,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":905,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p16-tiktok-ads-sg.tiktokcdn.com/obj/ad-site-i18n-sg/202506095d0d0fedc6951e2849b9b412","fqdn":"p16-tiktok-ads-sg.tiktokcdn.com","domain":"tiktokcdn.com","tld":"com"},"ip":{"addr":"23.36.77.90","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","date":"2025-10-14T02:44:55.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tiktokcdn.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 07 Mar 2025 05:26:04 GMT","end":"Wed, 08 Apr 2026 05:26:03 GMT"},"fingerprint":{"sha1":"AB:A5:D2:DF:CE:6C:6D:AE:DD:36:C7:0F:CC:E1:32:1D:76:C7:35:C0","sha256":"75:76:14:5C:F5:BB:65:0D:C6:06:2B:2A:07:FA:50:AF:47:D8:3D:E9:63:80:10:B1:BA:42:B3:0B:51:AE:A7:9B"}}},"request":{"raw":"GET /obj/ad-site-i18n-sg/202506095d0d0fedc6951e2849b9b412 HTTP/1.1\r\nHost: p16-tiktok-ads-sg.tiktokcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://stbhg.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 319294\r\nimagex-fmt: png2png\r\nlast-modified: Tue, 14 Oct 2025 02:44:55 GMT\r\nnw-session-id: 202510141044557FB543B0F2E96C9E689Cfp6zv12tt\r\nnw-session-trace: 2025-10-14T02:44:55.807277198Z 71\r\nx-bdcdn-cache-status: TCP_MISS\r\nx-length: 319294\r\nx-powered-by: ImageX\r\nx-response-date: Tue, 14 Oct 2025 02:44:55 GMT\r\nx-tt-logid: 202510141044557FB543B0F2E96C9E689C\r\nx-request-ip: fdbd:dc51:5000:20::224\r\nx-response-cinfo: fdbd:dc51:5000:20::224\r\nx-response-cache: miss\r\nx-tt-trace-host: 016eabbbec2a80a817c88fdee8d986cf60217e87b8ae286e0cb8d7362906644156f95edac9be50c794101fd85e5c4fbd644ee26499c3613d2f24cdf5bf62ab178b6816e194e422336c8d4b62864887ec937dea2f5f5a55063a618d4dc9205c7196610250a3f7579b7eb45f1dcfed9e519c\r\nx-tt-trace-id: 00-2510141044557FB543B0F2E96C9E689C-14F19C27A4095A49-00\r\nserver: TLB\r\nx-origin-response-time: 150,23.193.181.32\r\ncache-control: max-age=31536000\r\ndate: Tue, 14 Oct 2025 02:44:55 GMT\r\nx-cache: TCP_MISS from a23-36-77-85.deploy.akamaitechnologies.com (AkamaiGHost/22.2.5-a9c17ad842a5a5bbb9fede73ebb832d8) (-)\r\nx-cache-remote: TCP_MISS from a2-21-8-223.deploy.akamaitechnologies.com (AkamaiGHost/22.3.0-fcd174d50fb223c8364cec3c4b3f29c6) (-)\r\nx-tt-trace-tag: id=16;cdn-cache=miss;type=static\r\nserver-timing: cdn-cache; desc=MISS, edge; dur=247, origin; dur=146, inner; dur=78\r\nx-parent-response-time: 383,2.21.8.223, 393,23.36.77.85\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":319294,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"42fee418f9822c21474bf775efd3ad0f","sha1":"66aeadb73108de29cce1739548ab25f114a71fb0","sha256":"f50626111fa2860d70189293659d2c25dfc2f03a29fb97071dbb4dad34e49de0","sha512":"db898f66e4b12971a89c2ee9b3ca0160045693802aa7e3d5262b4ca3fa5c5c4d1cc3568c37279773f90d78971172d70e38c525ba8d7241b1c5ae52b50f7325a2","ssdeep":"6144:oLvazzFEuUmqzlp/4EdnXFb6IHue/QP/4hWeQ2WYcD1QZuiO0p7fr:OEEplJXFtHuMMp2BcBQMiO6r","tlshash":"4864f1186f8974d9d90706b2cb1e8377be861c01ad8d4f97297d7f5af9f9298cd20048","first_seen":"2025-10-14T02:45:26.811703Z","last_seen":"2025-10-14T02:45:26.811703Z","times_seen":1,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":395,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/fontawesome/css/all.min.css?ver=5.15.1","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/fontawesome/css/all.min.css?ver=5.15.1 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:48 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n5TQPWSSIyQwr1TgyWehmpYcxZ1OdqAh5bsd%2BcZuSWSF8X6Z%2BTq3ZmtnLb%2FOxceuKKsHODDzo3QVVnU7eq6E6KFjSXOx9HZs8yiMr7DY\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 98e3bca8eb8b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":174333,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65393)","md5":"95fe9653f2c45892b7e58090566f510f","sha1":"be3795caeaada195d12c96bb689a7f0b6f8d63b1","sha256":"257418de09101ff7791d410f420f9320141ce0436c264b076d46539b0ea0f830","sha512":"ace73c0affb5ee5c14308e4eac07c952f76c9d04ef44c19b5c73f3152f6d7543d24afe8573f6db1d4c757298b9ee215bc13bb883315d5c9bef4e79f27c3e206e","ssdeep":"1536:Kwv1E8SIZlJ/Zg9ADlnIZ+mqX565dWGFIibJbiC8IYiy6BFAXq6Y18GMF63kAmhT:N1E1IZ3/g2ln++1glbqMAXHR","tlshash":"b7046fb4d41e01da7726c60fab01b27a99f6f738d5410e4ae0cb4d1e1de2b9811c9bed","first_seen":"2023-04-06T14:37:36Z","last_seen":"2026-04-25T08:58:23.646824Z","times_seen":3416,"resource_available":false,"data":null}},"time_used":671,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":666,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/isrepeater.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/isrepeater.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:48 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i3HC0ukrwvZxj4yK7Hr6akIhhMKFCJ01mFt24hIunzj%2BUhqNoEIV7fA68iVCHCT%2BXMDR2tnKZ9BBEluQ67ShhhmneGWwHYu2BnhzIHNa\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 98e3bca90b982efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10380,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10378), with CRLF line terminators","md5":"6ceeb6d8b500945a6aaea27f52f6f5e6","sha1":"4647a4865cb5ba5dce1057b3765044ec9559eec6","sha256":"477f24a8aa73997ef9d469763c99d51a9a0e94826db0525b45542d9d7219e214","sha512":"08bcacdd9fd2e1f2c30b50fd1f9d6ab57ca431a61c3d152e4b700537f264459ec76b31bba225752f00cd434d73f6f567aaadbaceb5865136eb6c9f551435758e","ssdeep":"192:OHLiBsVoJ1jrQN+U+PZeX8+eo3MmYXRHLHoZq3Ho7:NsO/jrQNjvleo3HCW6I7","tlshash":"8722a9997691b5229267b830117f010fb23b98d6f94d5804e2ce99e6bfbd80c4227f9d","first_seen":"2023-03-07T01:03:55Z","last_seen":"2026-04-23T20:55:32.165794Z","times_seen":1864,"resource_available":true,"data":null}},"time_used":664,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":664,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-2.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/ssis00742/ssis00742jp-2.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 62566\r\nserver: openresty\r\ndate: Tue, 14 Oct 2025 02:44:48 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Mon, 08 May 2023 09:54:35 GMT\r\netag: \"6458c6db-f466\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nvia: 1.1 9d33abc9b369e83018afd4810022d30a.cloudfront.net (CloudFront), 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT20-P6, OSL50-P1\r\nx-amz-cf-id: IZDoGLaKb9c5o6BFGhwfrKtHlPElkMAzA3gVEhoy0lk7uFV09dQTxg==\r\nage: 71583\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":62566,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x534, components 3","md5":"f468170e43439a0ea2c9916f6ce67d73","sha1":"397c97490476efbef1a154b21711ec47c75ce5f8","sha256":"f822114a43c49dd3b93fb50184fd2d854417fc8064211cb972f0dcd108124814","sha512":"baffcf6fc4fa484858f33e8f628953d5ab9641f8b7475b1a566de78a10a5c565bb72bd853fce0f436df1fc35c01a99746d8c1fca4c5aa57a90405fd23b654231","ssdeep":"1536:x+jJbWE8PjJp2lgwdlDa0NpvAeaXskxRP5nI3+twcy4:KWTlUlH9z7kxc+S+","tlshash":"f65302479245c262fd89d22228f25994532dce603bcfd781b702fa95875b1cecbca5f4","first_seen":"2025-10-14T02:45:26.82138Z","last_seen":"2025-10-14T02:45:26.82138Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1400,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":1095,"receive":276,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:49.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 23:05:43 GMT","end":"Fri, 28 Nov 2025 23:05:42 GMT"},"fingerprint":{"sha1":"B9:51:95:1F:A8:75:17:3A:9B:B1:75:96:F4:7D:7A:CF:3D:52:C9:71","sha256":"36:D1:B1:18:05:03:10:B2:46:BC:6C:71:A5:E7:BE:07:32:66:88:16:04:1E:5F:96:0F:10:B6:4B:BF:01:D1:42"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 14 Oct 2025 02:44:49 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32182\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 12d0014f8ebc471f86794d680b92122a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":42,"dns":1,"connect":18,"send":0,"wait":31,"receive":19,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:49.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xhdfriday.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Oct 2025 12:56:02 GMT\r\nexpires: Fri, 09 Oct 2026 12:56:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 395327\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-25T16:55:33.479509Z","times_seen":760262,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":3,"connect":24,"send":0,"wait":21,"receive":28,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:51.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 13 Oct 2025 02:44:52 GMT\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o1qY3hetcNhXOHaNLZwFk%2Fs4XI%2BYlUWaFfUFYdYP%2BZkpt840RSRrXR09rAconQx0tBfrBKRjVuPKvZ0U3qt8J1dsBnu4A7b4pBcy\"}]}\r\ncontent-encoding: br\r\nset-cookie: lang=1; HttpOnly; Path=/; Domain=stbhg.click\r\ncf-ray: 98e3bcbd3ff60883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15048,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (9090)","md5":"5bb64080f08cd04bf33af8bf9424a9ab","sha1":"c067d23c75405a0d63ad64437ad524335dd60b21","sha256":"42b352a3b0944f4324c6e780b422ef5da5228909dfdfd671e6a2d786e0decc94","sha512":"a8b316ce71f6f314b65c83781628c5bf6fe9b69e950d32d1aaa6b724a912efd241d0e1d3dfa2156301aced6bdb387b554d09aacc9a0b7866b2f6aa8d70ec9272","ssdeep":"384:bFslMzwHoeLIsoWFMblYmbDEPbOCcVqEk5zdE0uqRwZl2G:bFslMzwTLIsDDEzGOgW","tlshash":"ee625d76ee69003146d1216c743ff70c76aa2571b921f850fa8dd84ebb84fc595b78c0","first_seen":"2025-10-14T02:45:26.828792Z","last_seen":"2025-10-14T02:45:26.828792Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1473,"timings":{"blocked":226,"dns":39,"connect":1,"send":0,"wait":1021,"receive":0,"ssl":184},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/js/jquery.min.js","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","date":"2025-10-14T02:44:52.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Mar 2021 00:27:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"603ed7d4-15d9d\"\r\nexpires: Sat, 18 Oct 2025 23:17:27 GMT\r\ncache-control: max-age=604800\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 185245\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5SQdbnPJtYEkumJIIYio3zdIBSO2DO0KULomAKX%2Fqm3CJBRltZEn4OCSe1sQJaYknFkH%2B5%2BfNvqDTvwceRXULtBu5XcBf5FkTE4D\"}]}\r\ncf-ray: 98e3bcc45d230883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-25T16:52:02.465336Z","times_seen":454934,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-includes/js/comment-reply.min.js?ver=6.8.3","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-includes/js/comment-reply.min.js?ver=6.8.3 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:49 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Feb 2025 14:27:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rKrIKtTjhruiQ51shyLq0SUO7g%2FvhLg60yW36YBgT5jHFryG452x46ByeRVnlWL5ojXYs2PaWXnhEk2j4BFiWZgimXf3WuScl4yFeyHl\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 98e3bcaa7bad2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3026,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2991)","md5":"e4a49df71f8b98c1d9f9d8fce74d89e8","sha1":"b95fcda0c8c26305ad94e80343d0cfca8a048a10","sha256":"9d4687a19cab8f7442a3bda40c45be4d10e42488e091ddd706c3caed83c3ee1f","sha512":"42cd5f854779886f24c43ed14617380110c946d1b430b454060c3b391de6fbae6d0ed8ab7cdd7cfdc9726b2d6142a4e01c4448e36088dfcee7fdd00b60909f89","ssdeep":"","tlshash":"5051a7d437c95d762a83b3395efe930271712709a50805608826c86931bcfea63b67fe","first_seen":"2024-11-13T06:33:24.856382Z","last_seen":"2026-04-25T15:58:38.564742Z","times_seen":63213,"resource_available":true,"data":null}},"time_used":1289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.tmdb.org/t/p/w92","fqdn":"image.tmdb.org","domain":"tmdb.org","tld":"org"},"ip":{"addr":"138.199.37.227","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:49.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"image.tmdb.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Sep 2025 20:10:35 GMT","end":"Mon, 22 Dec 2025 20:10:34 GMT"},"fingerprint":{"sha1":"9B:24:B0:91:79:AC:B0:0C:F8:BA:AA:DC:AC:6D:67:E9:B9:AF:6F:BE","sha256":"11:31:79:0F:81:6F:B5:20:34:07:93:CB:FF:0D:3B:0D:EF:34:FB:C5:B5:99:92:02:90:BE:9E:5A:2D:FD:5A:E7"}}},"request":{"raw":"GET /t/p/w92 HTTP/1.1\r\nHost: image.tmdb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 14 Oct 2025 02:44:49 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-DE1-860\r\ncdn-pullzone: 775336\r\ncdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf\r\ncdn-requestcountrycode: NO\r\ncache-control: max-age=43200\r\netag: W/\"653e955073f6ff68f1e0cfa5a613ef75\"\r\nlast-modified: Thu, 08 Apr 2021 15:54:44 GMT\r\ncdn-cachedat: 10/13/2025 21:29:16\r\ncdn-proxyver: 1.38\r\ncdn-requestpullcode: 404\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 863\r\ncdn-status: 404\r\ncdn-requesttime: 0\r\ncdn-requestid: d4b56ae4341822cc5acda4032399602e\r\ncdn-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T16:55:28.234721Z","times_seen":14186033,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.ru/metrika/tag.js","fqdn":"mc.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","date":"2025-10-14T02:44:52.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /metrika/tag.js HTTP/1.1\r\nHost: mc.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 83689\r\ndate: Tue, 14 Oct 2025 02:44:52 GMT\r\ncache-control: max-age=3600\r\netag: \"68e95c2e-146e9\"\r\nexpires: Tue, 14 Oct 2025 03:44:52 GMT\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncontent-type: application/javascript\r\nset-cookie: bh=YKTytscGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Wed, 18 Nov 2026 02:44:52 GMT; SameSite=None; Secure\r\nstrict-transport-security: max-age=31536000\r\ntiming-allow-origin: *\r\ncontent-encoding: br\r\nlast-modified: Fri, 10 Oct 2025 19:19:10 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":250676,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (675)","md5":"b7b59334a0215861604bf2c355a01426","sha1":"f68b6a2f72d4a6086ca7c1d78a04458ae8437e23","sha256":"89b8f8c12760be3823f49f91594742c9cfeb5a20517bf72e069b5bf8a696e735","sha512":"0efa10ae9b7afa98d294704e2852d85183bc5f4a91610a6d215e9dd1ffc602352a53c95c5ed91e7b0e1104c0f91dff5f9ccea2521c4f5ff106000a3df264adec","ssdeep":"3072:2feIs6G+qwbUFP4uPB+dH//LGmSL05WWkBUrIclXXuhG84U:2feIsQFUFguP8dHHCmSk8Ur1XXG2U","tlshash":"1b34d8dd76827472937334b4907f000b72beaca6f14c8955e186e9d93e789a89137f2c","first_seen":"2025-10-13T11:49:52.804847Z","last_seen":"2025-10-20T12:19:55.70716Z","times_seen":800,"resource_available":true,"data":null}},"time_used":535,"timings":{"blocked":186,"dns":1,"connect":42,"send":0,"wait":86,"receive":76,"ssl":139},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/player/jw8/jwplayer.core.controls.js?v=42","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","date":"2025-10-14T02:44:52.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /player/jw8/jwplayer.core.controls.js?v=42 HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Thu, 24 Oct 2024 08:24:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 1231\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4r2h8xVJpRHX2Um321nKKi6IVly82Hn0oYHfr54sLKWFdHoCNr2oqzWR63Yf0FkU9nMaYnue6T8Z9nHOxDNeEMvQBHq1%2FNLkbTng\"}]}\r\netag: W/\"50d6c-62534bc2f2f80\"\r\ncontent-encoding: br\r\ncf-ray: 98e3bcc58f838deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":331116,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"bc91b5efc8f4bb2482c2d7d5d8d9b691","sha1":"5db922c4c6caf3a7d22f57a21670281d5c31994b","sha256":"f061c139ad68d7ed1360ab6a2c8842466d2913582468c48eb2d1ee2a651fb495","sha512":"f1e175f4658e4cb1c603875c81f3b96caaab74346c78d9b320e564f0a09a8518b11123509351bfa5229ac9d867d56c6afc1118ce7c368ff1ce729de877c7d694","ssdeep":"3072:+jY7nFuuslX/Na3u6NxIeLSJhy1yiSS64pOknRBb9Wsr9BbrC3YLrmYRJ:2Yx5U/Na3JpLSJhyJOaRBRtBHzLrmYRJ","tlshash":"e9640932214252359aea82da66514604b3398085f516cfacff2ceddd4c6e9c731fabb4","first_seen":"2024-12-01T14:07:01.698179Z","last_seen":"2026-04-18T03:09:02.100134Z","times_seen":669,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stbhg.click/player/jw8/provider.hlsjs.js?v=42","fqdn":"stbhg.click","domain":"stbhg.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","date":"2025-10-14T02:44:52.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stbhg.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 10:05:10 GMT","end":"Fri, 02 Jan 2026 11:03:23 GMT"},"fingerprint":{"sha1":"28:DD:67:25:16:81:8F:1A:4C:C3:08:49:42:8B:FB:75:A8:84:FA:BF","sha256":"B0:47:58:05:FF:0D:92:1F:17:32:32:AB:A6:7F:A6:73:7D:B6:F8:AE:70:14:A7:2F:A9:D5:0A:CD:6D:C2:DA:2D"}}},"request":{"raw":"GET /player/jw8/provider.hlsjs.js?v=42 HTTP/1.1\r\nHost: stbhg.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Fri, 28 Mar 2025 05:48:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 1531\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kq8cV9iSyfXV8RRFGJfII3JNCmYnn6tRiGVX76sW8ASqdqTGytkEB%2FvR4Kit08qz1jKfVzD2huJ34zDhxp0vWwOTldl3Dueau49w\"}]}\r\netag: W/\"70ac0-631609e8e20c0\"\r\ncontent-encoding: br\r\ncf-ray: 98e3bcc59f868deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":461504,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65501)","md5":"b88ce761b9ebc2a7859a2e03b33ce1ed","sha1":"70d94f3c48460af13fc14eea9e5969f8f28d1a3a","sha256":"0b009d01bf513b1059d8ee15e1a8b57faeb5f8066c0f47d2cf8e1dd2454e5b28","sha512":"0bf83a6b3d8d20918df3ecfd29f7016549a8d8c8cc4aa439018295d55ebf7e136397e0fca72ae0e4bc9eebcd3384261c9a4a492b6e4d43e1fc1acd3ce872c24a","ssdeep":"6144:Fy9gZtOSTvzXBukG/xu08Q9Eu961Q3/nqJxgEMLew9rrqwZk6:MyvvG/xu0pU1cqJxgEIZF","tlshash":"aca43bdd77a5a42642c2a1a5903f4607633b7d0a340dc1acfa2be9d75db8849b03bf74","first_seen":"2025-04-01T21:32:19.721472Z","last_seen":"2026-04-02T13:28:52.612627Z","times_seen":602,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/102872415?wmode=7\u0026page-url=https%3A%2F%2Fstbhg.click%2Fe%2Fh2l0ic8jngt7%3Fposter%3Dhttps%3A%2F%2Fpics.dmm.co.jp%2Fdigital%2Fvideo%2Fssis00742%2Fssis00742jp-8.jpg\u0026page-ref=https%3A%2F%2Fxhdfriday.site%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7014vjzf8k4aa82j%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2220%3Acn%3A1%3Adp%3A0%3Als%3A66003841189%3Ahid%3A843030951%3Az%3A0%3Ai%3A20251014024456%3Aet%3A1760409896%3Ac%3A1%3Arn%3A337725844%3Arqn%3A1%3Au%3A176040989342575956%3Aw%3A879x495%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Afp%3A1894%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C249%2C3%2C4292%2C4292%2C1%2C1555%3Aco%3A0%3Acpf%3A1%3Ans%3A1760409891158%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1760409896%3At%3ASSIS-742-MOSAIC-FCJAV.COM-06162023.mp4\u0026t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(83952132)ti(1)","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","date":"2025-10-14T02:44:56.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /watch/102872415?wmode=7\u0026page-url=https%3A%2F%2Fstbhg.click%2Fe%2Fh2l0ic8jngt7%3Fposter%3Dhttps%3A%2F%2Fpics.dmm.co.jp%2Fdigital%2Fvideo%2Fssis00742%2Fssis00742jp-8.jpg\u0026page-ref=https%3A%2F%2Fxhdfriday.site%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7014vjzf8k4aa82j%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2220%3Acn%3A1%3Adp%3A0%3Als%3A66003841189%3Ahid%3A843030951%3Az%3A0%3Ai%3A20251014024456%3Aet%3A1760409896%3Ac%3A1%3Arn%3A337725844%3Arqn%3A1%3Au%3A176040989342575956%3Aw%3A879x495%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Afp%3A1894%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C249%2C3%2C4292%2C4292%2C1%2C1555%3Aco%3A0%3Acpf%3A1%3Ans%3A1760409891158%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1760409896%3At%3ASSIS-742-MOSAIC-FCJAV.COM-06162023.mp4\u0026t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(83952132)ti(1) HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://stbhg.click/\r\nOrigin: https://stbhg.click\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: bh=YKXytscGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nexpires: Tue, 14-Oct-2025 02:44:56 GMT\r\npragma: no-cache\r\nset-cookie: yabs-sid=1279009901760409896; Path=/; SameSite=None; Secure\ni=9ucUxG6nJ2K/94BQJ2VTGpLfwfuxOxckjr6LsfCXigRuugB/Hye6FPNttE2qsigKz0ccOMxZLlwf1x8LIH+M/LTJWk8=; Expires=Fri, 12-Oct-2035 02:44:50 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=811176881760409896; Expires=Fri, 12-Oct-2035 02:44:50 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None\nyuidss=811176881760409896; Expires=Wed, 14-Oct-2026 02:44:56 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure\nymex=1791945896.yrts.1760409896#1791945896.yrtsi.1760409896; Expires=Wed, 14-Oct-2026 02:44:56 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://stbhg.click\r\nlocation: /watch/102872415/1?wmode=7\u0026page-url=https%3A%2F%2Fstbhg.click%2Fe%2Fh2l0ic8jngt7%3Fposter%3Dhttps%3A%2F%2Fpics.dmm.co.jp%2Fdigital%2Fvideo%2Fssis00742%2Fssis00742jp-8.jpg\u0026page-ref=https%3A%2F%2Fxhdfriday.site%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtl2zg7014vjzf8k4aa82j%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2220%3Acn%3A1%3Adp%3A0%3Als%3A66003841189%3Ahid%3A843030951%3Az%3A0%3Ai%3A20251014024456%3Aet%3A1760409896%3Ac%3A1%3Arn%3A337725844%3Arqn%3A1%3Au%3A176040989342575956%3Aw%3A879x495%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Afp%3A1894%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C%2C0%2C%2C249%2C3%2C4292%2C4292%2C1%2C1555%3Aco%3A0%3Acpf%3A1%3Ans%3A1760409891158%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1760409896%3At%3ASSIS-742-MOSAIC-FCJAV.COM-06162023.mp4\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2883952132%29ti%281%29\u0026redirnss=1\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\nlast-modified: Tue, 14-Oct-2025 02:44:56 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":677,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T16:55:28.234721Z","times_seen":14186033,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-14T02:44:46.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/ HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding,Cookie\r\nlink: \u003chttps://xhdfriday.site/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://xhdfriday.site/wp-json/wp/v2/movies/255\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://xhdfriday.site/?p=255\u003e; rel=shortlink\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qM%2Fg568ff76G6zJvxy8fHuClNCDOW4eIGfUIbLAGkt43NDL9UQFeNrt4hYU3H7KghseMzalHiUlqbaH63v0OC%2FZFYhJPC27pMpTvnA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 98e3bca18a2d56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Yoast SEO:25.8","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Draftpress HFCM","description":"Header Footer Code Manager by Draftpress is a easy interface to add snippets to the header or footer or above or below the content of your page.","website":"https://draftpress.com/products/header-footer-code-manager-pro/","common_platform_enumeration":"","icon":"Draftpress.png","categories":["WordPress plugins"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":50502,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (36185), with CR line terminators","md5":"72a4f477dfa788f0a71c6d8a42729ed4","sha1":"d43eb88c6a1150cf51a9cf1bcd5e3ee5d0bed3c3","sha256":"3faec35774516e40f3a03006da7335cbaf14ca2b3567d03ebf35792de9f74271","sha512":"33f7a2fb2b4ae4bc3f64f0389c2ef548f4e5d92b3cbd5bcb37d2d2e5a9b238bc485887327361d3351bea58c2186ded1f6abd68f1c5559b4a4e13d799c2637752","ssdeep":"768:N1WeiPJdyPZ7VwVwsyVawzWlCKOuIxomn8NdTX:NEA9O0EwClCjOdTX","tlshash":"3533f873b0541836271bd3d8d894732eb1a1500dce468b69f2fc82ec1be9de9967362d","first_seen":"2025-10-14T02:45:26.851209Z","last_seen":"2025-10-14T02:45:26.851209Z","times_seen":1,"resource_available":false,"data":null}},"time_used":915,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":915,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/starstruck.raty.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/starstruck.raty.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:49 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N1T%2FZ7VsjZ8IuVpdmiFFqtleyJAQ5L%2FlOr4UxPW0NpFBob3l53iyjvrbetb7NSORp3JK%2FM7wySWRSBDstkTkBKbexdQC8JCc3Cykv9ls\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 98e3bca90b9b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10364,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10362), with CRLF line terminators","md5":"d967735d0c4a36d039142d01d02ee257","sha1":"e79738152720eef153774d3a6806d03861623f2f","sha256":"310589cc35c17dc5e369b35b45423ac830bb0a0b65f7f720a1c3b089254bd152","sha512":"ffa0ed7ed3788cb34ba92c8c94fd7c0cc4ecee293e17ab73e762b46ad604efa543dd3abc96680786632c9af5f93d374facf2daf260194f76e1787d5889017c0d","ssdeep":"192:4r1zqoHYKx2zznWhn5KsPYxUDAh8QGrCafGULhcX5LlXF/OfIpoqt:4rJxc3WwmCoKmyoqt","tlshash":"242211ccb3827146eea3337059ab270ee232be49e54a401d787dc7d1ef6990d2066e75","first_seen":"2023-03-07T01:06:58Z","last_seen":"2026-04-23T10:18:17.227858Z","times_seen":904,"resource_available":true,"data":null}},"time_used":1089,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1088,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t0.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=https://wtsmovies.com/torrent/movie/\u0026size=16","fqdn":"t0.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=https://wtsmovies.com/torrent/movie/\u0026size=16 HTTP/1.1\r\nHost: t0.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xhdfriday.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: image/png\r\nx-content-type-options: nosniff\r\ndate: Tue, 14 Oct 2025 02:44:49 GMT\r\nserver: sffe\r\ncontent-length: 726\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":726,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"b8a0bf372c762e966cc99ede8682bc71","sha1":"2d7c9b60d1e2b4f4726141de2e4ab738110b9287","sha256":"59bfe9bc385ad69f50793ce4a53397316d7a875a7148a63c16df9b674c6cda64","sha512":"6883c7a3f702fb3df5e698333c8a05705970fcb476a31a2008444a02122b6870de158176c86a1f6605a0783b88d3523646b4d288696e777b37cc02d5d95266ca","ssdeep":"","tlshash":"fe0165e3a34595286b870a62f4b87082162a6ae560c3c09964e4ec6e1f05168e4e5e9c","first_seen":"2023-04-05T05:54:43Z","last_seen":"2026-04-24T12:32:24.507288Z","times_seen":6738,"resource_available":true,"data":null}},"time_used":407,"timings":{"blocked":181,"dns":87,"connect":23,"send":0,"wait":30,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/8d/e9/ae/8de9ae4b0e4b914d604a7e4b56139ffe.js","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:49.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:00:34 GMT","end":"Tue, 25 Nov 2025 22:00:33 GMT"},"fingerprint":{"sha1":"FC:5B:24:E2:ED:A9:65:69:CA:97:74:44:F8:E9:93:1A:50:E7:73:C1","sha256":"26:1B:F8:72:30:B2:C4:49:6A:2E:E7:A5:FC:26:35:74:02:CB:56:D1:F7:7E:A5:5E:89:65:A9:B4:1F:1F:DB:8F"}}},"request":{"raw":"GET /8d/e9/ae/8de9ae4b0e4b914d604a7e4b56139ffe.js HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 14 Oct 2025 02:44:49 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3430\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 07a7c1bb6e323654930e3f768525f391\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":6293,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6293), with no line terminators","md5":"6062294451a7a581dc74178c7c5a1332","sha1":"c8e09f671561b72bdae9fd3cfeea799629430105","sha256":"c556ffdcc50d996a51234a1dec5ae85925ffa13c788b800be900dc5eb1344d79","sha512":"5b4bcb7d6530bfa8d33d4c769d0934938af4e7842a518556021ed900fad8a06bc39c2d35494586adf34e4d6fe19095b2d41c726b8214746527e04cec9e910594","ssdeep":"192:M/H3P83adOwGuABXfKOBPpzbo3j3rFuuV6:MP/83adOwWp0j3Buz","tlshash":"fbd1a8dc768070800be7e97f776f651ab06a58501c4fe491f003a9e83d6872ed63eac1","first_seen":"2025-09-26T11:10:49.483616Z","last_seen":"2025-10-14T12:32:44.197235Z","times_seen":1614,"resource_available":true,"data":null}},"time_used":691,"timings":{"blocked":288,"dns":10,"connect":92,"send":0,"wait":94,"receive":0,"ssl":200},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/fontawesome/webfonts/fa-solid-900.woff2","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:49.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/fontawesome/css/all.min.css?ver=5.15.1\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:50 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 140996\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wrB3JNvnxGC4wH3bth5z8WYg0My1wHELaFe7NxEtPkcUD4T0KJCmAHOIagbsgajjcBubi9UvPLDch4IxaHjGcVJe%2FAnk41PEqx%2Fbx8ma\"}]}\r\ncontent-type: font/woff2\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 98e3bcb23bd52efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140996,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 140996, version 331.-31392","md5":"25d740d42658b6e2c293ce7b3322aac7","sha1":"41cc9ae4b5dd70fd3988059dfb864f20f99ae371","sha256":"8b5a3ff47c2413e0bf3dd3bb7899a25aeef9b390a055847a1185a39ad48a2da2","sha512":"eb92dd22d53765b44d918ecec0105cbaae08fd5e0c7fac1ec8494a32bb553ded03e8b3826a230161ab791d6169eba1d3b384451e002ff0369760206b7775c768","ssdeep":"3072:X8Y40kER3HLOKqHj4HYwoR9G8iSjt1FrLl+JeMU:/4GZHLOtEH3wVdjtyLU","tlshash":"13d3123a6c8961b6fd2e9870bef1fc0949db7852059892c6b3565f6cd97a0031873f09","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-04-25T11:27:19.230594Z","times_seen":5793,"resource_available":false,"data":null}},"time_used":696,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":676,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2TL7NH453R","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stbhg.click/e/h2l0ic8jngt7?poster=https://pics.dmm.co.jp/digital/video/ssis00742/ssis00742jp-8.jpg","date":"2025-10-14T02:44:52.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtag/js?id=G-2TL7NH453R HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stbhg.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 14 Oct 2025 02:44:52 GMT\r\nexpires: Tue, 14 Oct 2025 02:44:52 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 141255\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":425137,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"2167e25edd11c8164edf78c946fe5a14","sha1":"1bcfb7e9085f87ab5163212af21c5c8b2691318e","sha256":"e46a5d61a55f6b4b39686288cb2015bbfaeeeeaf4e0dca7ecedcf63bdc42e54d","sha512":"777d5e88cb34a5cb6e49acd70d321b6d537f40a37dad0e0778000a0f9211372ccb4aa7ac1bb44166523cc12b72cf8bf9e2e7d392c0bc56cbbc2473b2827bc033","ssdeep":"6144:nBPb/yp2a4tM0uwbWZJT+Nju5204O0NsYXdXAQY:BWYJy0KZJu0O8","tlshash":"099419de73d674225396f078503f018ba57b28a2b44cc89af189cde42e74a9a4177f7c","first_seen":"2025-10-14T02:45:26.864333Z","last_seen":"2025-10-14T04:43:33.37941Z","times_seen":2,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/front.crollbar.min.css?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/front.crollbar.min.css?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:48 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gkga%2B%2Bwn7RabTPuPNDLusxgnqGCklKNcpgNJ%2Fd3%2F9rMP%2BWEF176pPowdf7a3V1CbgOevqjZkn%2BSg4C%2B%2FKFCjRbks8Sin26mz%2B9aTJ6NU\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 98e3bca8fb8d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7194,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7193)","md5":"9e616d63cbabe72390edb6a56b0542d5","sha1":"efdae53b931dfc69ce0737b7421ed84923020cbc","sha256":"6e12666ba88aac25e0a52cb658950b878e5932f258d3d6bde397542e338a021b","sha512":"c80191ff1f688e53ae3efb32dbfe1a963f4a7af42825bdf0de7ac0251b1aba5e5ef31e214062a036b08e5f9fe8ddf5e11edd36f9b64dbc31449b0df928b48608","ssdeep":"96:hLWoARQ0z2fpRfbc70ImVH6Reug3/uTFgqoNFrPQsS:hStRQ0sXH6Rev3mEQsS","tlshash":"5ae1688c090236dff75f45bae7c233a911f977875162465db09b1ce8af8c7b6a436402","first_seen":"2023-04-06T14:37:36Z","last_seen":"2026-04-23T20:55:32.14099Z","times_seen":1157,"resource_available":false,"data":null}},"time_used":672,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":672,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/lazyload.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/lazyload.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:48 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DOiMt8lZNXGLL8AHQGxlVtrzgFg52ekfyrHsbaNIeINZdNHC4wqr37736U9gAUiqkrlxO6QcY4y3cNhav%2BLefPDJinVlK75ULm%2BvPxX9\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 98e3bca90b942efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7238,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7209), with CRLF line terminators","md5":"c3acbd4a87d123bc6b7e4ef753e63570","sha1":"3042ebd6ace02f8a053f22c5eb76c0aaec870065","sha256":"10b8714eb5a412ab0bece0bef0fcd9553a38cd0bead58a752e346d6779051373","sha512":"f536faeb35dcef8366758837b35b1547d181f425b664106e8fdbd2592928b405ff50f0114d4db6ffe445f0f732efd73172ea2ade5693dbe2f73794bf877f6432","ssdeep":"192:OO4602wGWi72hBQa0cDTrTx46C4gq4q4oFPHK818owTZ6RtA:OO460o72hVDnTxcdq4q4oFPHKI8VTIR2","tlshash":"8de1e5deb266b077a99738b4512f210f91337063bd0a9805a17ac0c25b3ca9d5237e3e","first_seen":"2023-03-07T01:03:55Z","last_seen":"2026-04-25T03:47:12.700445Z","times_seen":1540,"resource_available":true,"data":null}},"time_used":668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":668,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/starstruck.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/starstruck.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:48 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6QeqdysKUWf7Nk6A%2BAXHW7Cm5fvqoCiKapro32J60wMK3v8EhVqZO0XIGRdsGjEFSQKrOyMhE1GGHRkZXTU4tclQSADWvdAT2xyMTu3d\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 98e3bca91b9c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1311,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1309), with CRLF line terminators","md5":"4279a70d8fc5018f1a4dd4328ba56d0e","sha1":"6aec001b3bd94f107f49e62c817048b1dd5ebe27","sha256":"2914ebe7e0b33da6d390b3f42a784210f285402cf57588b90d917193f773e9aa","sha512":"025d6310ec864f81a8f0afc8f33a0e8acaf08e79250f78ab5e1c8fdd87b99c9790c4ebe17cb35fa21d9765e9817bad7db90759bce5862fbfdebccb689f03f0a2","ssdeep":"","tlshash":"34219e5c309b61ae67f2a1f4287f17015332ae14b507ca3b742900b69f9d94da63a968","first_seen":"2023-03-07T01:06:58Z","last_seen":"2026-04-23T10:18:17.225343Z","times_seen":905,"resource_available":true,"data":null}},"time_used":664,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":664,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pics.dmm.co.jp/digital/video/miab00510/miab00510jp-11.jpg","fqdn":"pics.dmm.co.jp","domain":"dmm.co.jp","tld":"co.jp"},"ip":{"addr":"54.230.80.79","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.dmm.com","organization":"DMM.com LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 07:11:06 GMT","end":"Sat, 20 Jun 2026 07:11:05 GMT"},"fingerprint":{"sha1":"40:F2:9C:EF:05:B5:FA:93:84:2A:AF:B3:BC:09:BD:07:8A:E4:00:C7","sha256":"E9:AE:DF:FC:EA:84:38:F8:94:56:74:E4:71:77:A5:75:A7:BC:12:28:97:39:9A:9A:84:57:C5:6C:EA:99:84:8B"}}},"request":{"raw":"GET /digital/video/miab00510/miab00510jp-11.jpg HTTP/1.1\r\nHost: pics.dmm.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 58934\r\nserver: openresty\r\ndate: Tue, 14 Oct 2025 02:44:49 GMT\r\nx-pics-origin: imgsrc\r\nlast-modified: Mon, 02 Jun 2025 11:40:03 GMT\r\netag: \"683d8d93-e636\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nvia: 1.1 82a9e991bed1dae10f5f957b02f9e5d2.cloudfront.net (CloudFront), 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: NRT20-P6, OSL50-P1\r\nx-amz-cf-id: UZ8AvVMy4TIxL-CJQn8NSHUje0aTFEwymLgp2JGvo-uYCR8PAXClBg==\r\nage: 358852\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":58934,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 534x800, components 3","md5":"d1deb88ebd1f692bab31c147e85dbee4","sha1":"ba4289a2990ab7d42981421f4723793781ba48a5","sha256":"ebfa373cb0ae3f52b3e091a81d3edfde95b8f90945a19d5efdc75b8cf18b1f9b","sha512":"19c229a0bf5b8f6db44b4866a1d8d47e30b3ade18109284c30123fbbbe04096ebc73c9c6a1104dde839cff9e94c5ce4eebed7f3c2e4cdc59e561419d8a8c0633","ssdeep":"1536:GgOGW7l+HeopckqOwfVPj6Fqr7UDLsItovr:dHeoHS9PWyY0Fvr","tlshash":"9343024f1d0dd71a463df42c9d6bfbb1d41efec52350a641e7982a835b1002bb6ad113","first_seen":"2025-10-14T02:45:26.879324Z","last_seen":"2025-10-14T02:45:26.879324Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1047,"receive":267,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/front.owl.min.css?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/css/front.owl.min.css?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:48 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m9C8DkVl%2BUDx%2FfNqgmqekEJ71ITOjPpEMAPw%2FIDG0EZUZtgc51rRRUyamKPnjP2rNfekwthwq6hVb8gHyNwmiV%2BW6cbVaZKiFZ%2Fzv21D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 98e3bca8fb8c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2299,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2298)","md5":"d85bf9b7c512286b478726a6de8e238b","sha1":"3d2dcd82c7a1dd52a6812233239d4a5bd9115d9b","sha256":"3b963d8c3b9b23f879654a20f996366d6e2427691c9f480eb78a08bf3f8e032f","sha512":"36b72d250c430b4ef16d7eaec5befd2a1f147f05f7ddab265bdaa1e699ba49fa96815b61de8033e07cb1375560f3e15482304ec733bf6af22609f33212cf12ff","ssdeep":"","tlshash":"c941f1f44215229d603bc30966c99eca152de173ea16069e925ffe1493c7d16353f3ce","first_seen":"2023-04-08T11:04:44Z","last_seen":"2026-04-23T20:55:32.154741Z","times_seen":1139,"resource_available":false,"data":null}},"time_used":677,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":676,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xhdfriday.site/wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/idtabs.js?ver=2.5.5","fqdn":"xhdfriday.site","domain":"xhdfriday.site","tld":"site"},"ip":{"addr":"172.67.213.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/","date":"2025-10-14T02:44:48.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xhdfriday.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 10:28:49 GMT","end":"Sun, 28 Dec 2025 11:27:16 GMT"},"fingerprint":{"sha1":"FD:65:48:CC:0E:15:3E:F3:26:5F:60:4B:57:81:AF:27:AB:10:E8:FA","sha256":"B3:34:EF:18:E6:A0:CF:66:C7:46:BF:62:3F:0F:BE:B7:1E:74:8B:DB:DD:9C:B6:7D:A2:FF:76:AC:9D:3A:BE:36"}}},"request":{"raw":"GET /wp-content/themes/dooplay-theme-86-1673275142-j6nnvs/assets/js/lib/idtabs.js?ver=2.5.5 HTTP/1.1\r\nHost: xhdfriday.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xhdfriday.site/movies/ssis-742-uncensored-i-was-invited-to-drink-at-home-by-a-beautiful-boss/\r\nCookie: starstruck_3c9e60001178d7f5ccb6f4ab851fc1f1=e8c7d183288d9e17e4d1f87b59715af5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Oct 2025 02:44:49 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 09:09:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GCzfYZiS3yQ80B734YWQ0P48xhbeBXkUfcEF%2Bzhj3iBGCs5xUYf88WMDHYw%2BXU%2BG72APl65J7RmEzC%2BhAsQft%2BHxPLXM9zQ8nDFj28Th\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 98e3bca90b972efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1543,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1541), with CRLF line terminators","md5":"3665ff6f8d2bf5a2af3de5d6e333a7c0","sha1":"db9f6a2b874f7c24a5827f0f1d679ed3c7d7b7e5","sha256":"2eb9d605c096771e0669e09ac60207d6171bd255b20416d07a4f14aca62a5df6","sha512":"eecce0b86b15eb438071ce1db21f49762634be3740451943ba95338939af20f18a06d5be4875bd114aaa42ee23a274279c926c625485316b3b6fa6894f624507","ssdeep":"","tlshash":"303115803241342b4a9eb1e7551b23d191be44a8980c40dcba71fe904cad7ce94f3e67","first_seen":"2023-03-07T01:03:54Z","last_seen":"2026-04-23T20:55:32.138289Z","times_seen":1813,"resource_available":true,"data":null}},"time_used":937,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":937,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"xhdfriday.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}