SBSD

SBSD (Secondary Bot Score Detection) is an additional challenge layer. When triggered, you receive an HTML page instead of expected content.

Identifying SBSD

You've hit an SBSD challenge when you receive:

<html>
    <head>
        <script src="/.well-known/sbsd?v=f96b0144-83cf-fd90-7200-553b2f046010&t=259288945"></script>
        <script>
        (function() {
            var proxied = window.XMLHttpRequest.prototype.send;
            window.XMLHttpRequest.prototype.send = function() {
            var pointer = this
            var intervalId = window.setInterval(function(){
                if (pointer.readyState != 4){
                return;
                }
                location.reload(true)
                clearInterval(intervalId);
            }, 1);
            return proxied.apply(this, [].slice.call(arguments));
            };
        })();
        </script>
    </head>
    <body></body>
</html>

Solution Flow

1

Extract the VID

Parse the v parameter from the script URL:

2

Get the Cookie

Find the bm_o cookie from your initial GET request.

If unavailable, use bm_iso instead—remove the ^{timestamp} suffix:

Not all sites use bm_o. If you can't find it, open a Discord ticket.

3

Generate SBSD Payload

Example request to the SBSD service:

4

Submit Payload

POST to the SBSD endpoint:

5

Retry Original Request

After solving, retry your original request. You should now receive normal content.

Troubleshooting

Can't find bm_o

Try bm_iso, or ask in Discord.

Still getting SBSD

Proxy may be flagged.

Payload rejected

Try static: true parameter.

PreviousSec CptNextPixel

Last updated