{"report_id":"3168136f-8130-4f0e-9f84-329081c71307","version":6,"status":"done","tags":[],"date":"2026-01-03T13:47:00Z","url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"160.22.16.197","port":0,"asn":45899,"as":"VNPT Corp","country":"Vietnam","country_code":"VN"},"final":{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"title":"Hot Videos 人気動画--VIDEOS@AV4.us","dom":{"size":294701,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (57664)","md5":"e21c514eb536bc839a43e5904fcd5815","sha1":"7a1862bbbbe5b9116996216867fa27cf476766d2","sha256":"f86191e84b2e3d76c476c8fbbe74e7da01c04b7ee7e027a2c3e34052f8382ee3","sha512":"cce65164e5b949a6866e59f333509822df251182166035181e99a3dd75adebaa7e18af24b63b98cfbca1c82df497b9fcaffe69e34de10f47ef26c26139c904ef","ssdeep":"3072:Td57vPogXMOMwMbMPzZRRVTAsurtJLbmX/5zdB8II4vFx:T/7vPo8JrQEzZRgrtJLbW5zdB8II4vFx","tlshash":"3a54cabf935178771a8182d3f0975aadc527624fe6e64788fc6f34a173c08bca432658","dom_hash":"domhash193d367ec693d20b41a5fa196c2b16d4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"160.22.16.197","port":0,"asn":45899,"as":"VNPT Corp","country":"Vietnam","country_code":"VN"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-07T13:47:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"tq2tmylv9quqkoe"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":26}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"www.oedy9.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"dragon.brettspizzeria.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"fqjpg4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"en.vidmo.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"www.effedupmovies.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ds2.obmenvsemfiles.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"page.phic4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ds.nashobmenfiles.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"timg216.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"www.jxjav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"pdocac.4vid.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"pornyc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"oedy9.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"degustibusbread.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"darkvod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"darkvod.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"fixedjs.4vid.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"en.av2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"cav10.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Content Category / Application Block","trigger":"cav10.com","verdict":"suspicious","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"cav10.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"fqjpg3.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ds2.nashobmenfiles.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"www.cav10.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Content Category / Application Block","trigger":"www.cav10.com","verdict":"suspicious","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"www.cav10.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"dragon.brettspizzeria.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-12-08","domain_rank":7147683,"first_seen":"2025-03-25T21:53:28.12769Z","last_seen":"2026-01-02T15:37:32.054922Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":440,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pizdauz.cc","ip":{"addr":"194.146.127.68","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"Bulgaria","country_code":"BG"},"domain_registered":"2019-11-26","domain_rank":285428,"first_seen":"2019-12-21T16:37:52Z","last_seen":"2026-01-02T09:21:50.815944Z","alert_count":0,"request_count":2,"received_data":11091,"sent_data":846,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sbzytpimg1.com","ip":{"addr":"142.248.99.81","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-04-24","domain_rank":160397,"first_seen":"2024-07-25T07:47:58Z","last_seen":"2026-01-02T15:37:34.711105Z","alert_count":0,"request_count":17,"received_data":1847399,"sent_data":8177,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cos.tv","ip":{"addr":"108.157.229.92","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2011-08-26","domain_rank":163856,"first_seen":"2019-02-06T12:57:53Z","last_seen":"2026-01-02T15:37:37.525721Z","alert_count":0,"request_count":1,"received_data":15643,"sent_data":421,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.thisav.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2009-09-25","domain_rank":5490778,"first_seen":"2012-07-20T17:32:21Z","last_seen":"2025-12-18T05:22:20.629718Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":400,"comment":"","tags":null,"fingerprints":null},{"fqdn":"zenvideo.net","ip":{"addr":"82.192.80.157","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2020-12-20","domain_rank":268309,"first_seen":"2017-04-24T12:49:32Z","last_seen":"2025-12-30T08:47:47.042799Z","alert_count":0,"request_count":2,"received_data":15565,"sent_data":858,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"blumpkintube.com","ip":{"addr":"172.67.148.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-11-26","domain_rank":91888,"first_seen":"2017-05-23T16:37:55Z","last_seen":"2025-12-25T10:42:22.201455Z","alert_count":0,"request_count":3,"received_data":33213,"sent_data":1333,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"indianpornbase.com","ip":{"addr":"192.243.50.110","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2020-01-22","domain_rank":283843,"first_seen":"2016-02-06T18:20:30Z","last_seen":"2025-12-16T23:18:34.315916Z","alert_count":0,"request_count":1,"received_data":172,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"videosection.com","ip":{"addr":"190.2.144.120","port":443,"asn":49981,"as":"WorldStream B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2002-11-25","domain_rank":37381,"first_seen":"2013-05-10T14:45:04Z","last_seen":"2025-12-30T20:09:30.396128Z","alert_count":0,"request_count":1,"received_data":650,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"jsjs.jpg4.icu","ip":{"addr":"172.67.183.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-06-01","domain_rank":0,"first_seen":"2025-11-19T01:17:39.197833Z","last_seen":"2026-01-02T09:21:40.416965Z","alert_count":0,"request_count":1,"received_data":758,"sent_data":413,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"en.av2.top","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-03-14","domain_rank":1091376,"first_seen":"2025-03-17T03:14:06.478942Z","last_seen":"2025-12-21T16:36:48.897027Z","alert_count":2,"request_count":2,"received_data":182572,"sent_data":874,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fqjpg3.top","ip":{"addr":"104.21.87.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-27","domain_rank":154688,"first_seen":"2025-04-08T05:11:12.012576Z","last_seen":"2026-01-02T09:21:50.012518Z","alert_count":1,"request_count":1,"received_data":428,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"vq50.com","ip":{"addr":"172.67.139.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-02-16","domain_rank":170649,"first_seen":"2019-02-17T16:59:29Z","last_seen":"2025-12-27T16:59:50.525314Z","alert_count":0,"request_count":1,"received_data":95808,"sent_data":427,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pornoperso.com","ip":{"addr":"172.67.166.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-06-06","domain_rank":25644,"first_seen":"2017-06-17T23:41:58Z","last_seen":"2025-12-30T08:47:50.483439Z","alert_count":0,"request_count":1,"received_data":802,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.xvideos.com","ip":{"addr":"185.88.181.5","port":443,"asn":46652,"as":"SERVERSTACK-ASN","country":"The Netherlands","country_code":"NL"},"domain_registered":"1997-12-30","domain_rank":1943,"first_seen":"2012-05-21T20:29:12Z","last_seen":"2026-01-02T09:21:42.123482Z","alert_count":0,"request_count":1,"received_data":15370,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"css.jpg4.icu","ip":{"addr":"172.67.183.25","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-06-01","domain_rank":0,"first_seen":"2025-11-19T01:17:37.695346Z","last_seen":"2026-01-02T09:21:41.974625Z","alert_count":0,"request_count":1,"received_data":5082,"sent_data":345,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.kwai.com","ip":{"addr":"23.215.2.149","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"domain_registered":"2002-01-16","domain_rank":13387,"first_seen":"2014-12-08T08:52:52Z","last_seen":"2026-01-02T09:21:39.222476Z","alert_count":0,"request_count":1,"received_data":3691,"sent_data":427,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ero-scen.ru","ip":{"addr":"193.163.7.2","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-07-01","domain_rank":0,"first_seen":"2025-12-16T23:47:58.376621Z","last_seen":"2025-12-29T03:04:08.788317Z","alert_count":0,"request_count":1,"received_data":214,"sent_data":426,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"davalka.online","ip":{"addr":"51.75.34.66","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"domain_registered":"2019-12-09","domain_rank":389748,"first_seen":"2020-02-17T01:43:57Z","last_seen":"2025-12-30T08:47:49.46834Z","alert_count":0,"request_count":2,"received_data":29474,"sent_data":928,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"realincest.me","ip":{"addr":"172.67.168.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-11-03","domain_rank":215480,"first_seen":"2017-02-25T20:17:15Z","last_seen":"2026-01-01T11:43:44.53859Z","alert_count":0,"request_count":1,"received_data":6004,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cavporn.com","ip":{"addr":"45.150.227.99","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"domain_registered":"2022-07-03","domain_rank":456686,"first_seen":"2019-08-12T12:44:54Z","last_seen":"2025-09-23T06:43:02.464Z","alert_count":0,"request_count":2,"received_data":4703,"sent_data":890,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdne-pics.youjizz.com","ip":{"addr":"64.210.135.118","port":80,"asn":30361,"as":"SWIFTWILL2","country":"United States","country_code":"US"},"domain_registered":"2007-10-22","domain_rank":731156,"first_seen":"2017-01-30T06:19:28Z","last_seen":"2026-01-02T09:21:43.333348Z","alert_count":0,"request_count":1,"received_data":15120,"sent_data":403,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sexsex10.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-04-17","domain_rank":688235,"first_seen":"2025-07-08T05:40:36.488095Z","last_seen":"2025-12-30T08:47:49.43076Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":427,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-28T22:17:36.419718Z","alert_count":0,"request_count":1,"received_data":289720,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"st.peppahub.com","ip":{"addr":"51.75.130.124","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2019-10-23","domain_rank":0,"first_seen":"2019-12-22T22:55:40Z","last_seen":"2025-12-20T20:22:20.008904Z","alert_count":0,"request_count":1,"received_data":16925,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"zooporner.com","ip":{"addr":"104.21.72.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-10","domain_rank":230956,"first_seen":"2019-01-27T22:55:50Z","last_seen":"2026-01-02T09:21:47.42494Z","alert_count":0,"request_count":3,"received_data":11124,"sent_data":1307,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.ekkofilm.dk","ip":{"addr":"65.109.19.181","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2002-12-18","domain_rank":1269056,"first_seen":"2017-01-31T08:59:34Z","last_seen":"2025-12-27T20:47:49.680354Z","alert_count":0,"request_count":2,"received_data":490077,"sent_data":896,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"obmenvsemfilesec.com","ip":{"addr":"82.192.80.149","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-10-18","domain_rank":0,"first_seen":"2025-11-05T02:42:46.868919Z","last_seen":"2025-12-31T14:45:36.768697Z","alert_count":0,"request_count":1,"received_data":13625,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"xvideosrei.com","ip":{"addr":"54.38.46.215","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2017-09-21","domain_rank":80835,"first_seen":"2018-01-03T10:28:29Z","last_seen":"2025-12-25T10:42:25.868786Z","alert_count":0,"request_count":2,"received_data":41269,"sent_data":897,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.sexsex61.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-04-17","domain_rank":3526336,"first_seen":"2025-03-12T03:12:00.175026Z","last_seen":"2026-01-02T09:21:45.559724Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":431,"comment":"","tags":null,"fingerprints":null},{"fqdn":"vidmo.pro","ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2022-04-10","domain_rank":59347,"first_seen":"2019-07-12T22:27:24Z","last_seen":"2026-01-02T09:21:52.293792Z","alert_count":0,"request_count":4,"received_data":42736,"sent_data":1849,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sasisa.ru","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2005-01-12","domain_rank":154794,"first_seen":"2016-04-26T02:06:35Z","last_seen":"2025-12-25T16:43:16.087801Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":424,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mc.webvisor.org","ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2009-08-25","domain_rank":99131,"first_seen":"2017-08-16T02:40:17Z","last_seen":"2025-12-29T20:34:32.76263Z","alert_count":0,"request_count":2,"received_data":4784,"sent_data":3280,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"stickamvids.net","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2011-03-02","domain_rank":222913,"first_seen":"2014-10-12T04:57:06Z","last_seen":"2025-12-25T10:42:20.07888Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":879,"comment":"","tags":null,"fingerprints":null},{"fqdn":"haha888.xyz","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2020-04-08","domain_rank":0,"first_seen":"2025-09-22T12:43:04.908553Z","last_seen":"2026-01-02T15:37:35.363756Z","alert_count":0,"request_count":3,"received_data":0,"sent_data":1288,"comment":"","tags":null,"fingerprints":null},{"fqdn":"image.beckybelike.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-10-26","domain_rank":3852212,"first_seen":"2025-01-01T06:43:10.563767Z","last_seen":"2026-01-02T15:37:37.088244Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":403,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kompoz2.com","ip":{"addr":"172.67.206.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-04","domain_rank":1845,"first_seen":"2020-09-07T18:13:33Z","last_seen":"2026-01-02T09:21:51.648708Z","alert_count":0,"request_count":1,"received_data":628,"sent_data":426,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.14","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"asianpornxbb.sbs","ip":{"addr":"104.21.23.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-13","domain_rank":195805,"first_seen":"2025-03-18T06:53:36.727587Z","last_seen":"2025-12-18T23:50:47.537643Z","alert_count":0,"request_count":1,"received_data":77809,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.twi-videos.net","ip":{"addr":"172.67.181.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-05","domain_rank":3757802,"first_seen":"2021-11-10T10:36:55Z","last_seen":"2026-01-02T09:21:44.648487Z","alert_count":0,"request_count":1,"received_data":560,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"naturismv.com","ip":{"addr":"104.21.44.17","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-07","domain_rank":171242,"first_seen":"2014-04-08T13:58:23Z","last_seen":"2026-01-02T09:21:50.043778Z","alert_count":0,"request_count":4,"received_data":265171,"sent_data":1680,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"img2.russkoeporno.tv","ip":{"addr":"172.67.180.196","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-01-18","domain_rank":4128436,"first_seen":"2024-12-03T12:50:28Z","last_seen":"2026-01-02T09:21:39.357266Z","alert_count":0,"request_count":3,"received_data":53696,"sent_data":1339,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"erota2.com","ip":{"addr":"104.26.4.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-05-31","domain_rank":439658,"first_seen":"2019-04-02T11:04:19Z","last_seen":"2026-01-02T15:37:32.484443Z","alert_count":0,"request_count":3,"received_data":14468,"sent_data":1256,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"img22.sdratmue.com","ip":{"addr":"45.138.107.48","port":443,"asn":208414,"as":"WEDOS Internet, a.s.","country":"Czechia","country_code":"CZ"},"domain_registered":"2024-12-07","domain_rank":0,"first_seen":"2025-10-20T02:55:59.149323Z","last_seen":"2026-01-02T15:37:33.10212Z","alert_count":0,"request_count":1,"received_data":16266,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}]},{"fqdn":"page.phic4.top","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-03-07","domain_rank":4536559,"first_seen":"2024-03-28T08:56:57Z","last_seen":"2026-01-02T09:21:49.399905Z","alert_count":2,"request_count":2,"received_data":0,"sent_data":810,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.jxjav.com","ip":{"addr":"38.225.209.250","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"domain_registered":"2024-04-09","domain_rank":5580760,"first_seen":"2024-04-16T18:34:09Z","last_seen":"2026-01-02T15:37:37.369149Z","alert_count":1,"request_count":1,"received_data":4293,"sent_data":428,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.aisan-porn.org","ip":{"addr":"192.243.50.111","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2020-01-03","domain_rank":5292813,"first_seen":"2021-05-06T08:15:59Z","last_seen":"2026-01-02T15:37:38.673389Z","alert_count":0,"request_count":1,"received_data":172,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"media.crazyshit.com","ip":{"addr":"45.133.44.4","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"1999-02-20","domain_rank":2942510,"first_seen":"2019-08-06T22:57:07Z","last_seen":"2026-01-02T15:37:31.674672Z","alert_count":0,"request_count":2,"received_data":505183,"sent_data":902,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.twi-dl.net","ip":{"addr":"104.21.2.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-05-15","domain_rank":124394,"first_seen":"2024-09-09T09:24:24Z","last_seen":"2026-01-02T09:21:52.192704Z","alert_count":0,"request_count":2,"received_data":1472,"sent_data":858,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sexsex13.com","ip":{"addr":"27.124.42.183","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2023-04-17","domain_rank":0,"first_seen":"2025-09-06T19:36:54.712931Z","last_seen":"2026-01-02T09:21:45.813552Z","alert_count":0,"request_count":1,"received_data":142,"sent_data":398,"comment":"","tags":null,"fingerprints":null},{"fqdn":"99xing.cc","ip":{"addr":"104.21.38.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-12","domain_rank":253138,"first_seen":"2022-05-10T16:01:18Z","last_seen":"2026-01-02T09:21:42.706192Z","alert_count":0,"request_count":1,"received_data":604,"sent_data":424,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"content.jwplatform.com","ip":{"addr":"3.164.240.118","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2010-04-13","domain_rank":42202,"first_seen":"2017-09-15T13:11:36Z","last_seen":"2026-01-01T13:30:48.364946Z","alert_count":0,"request_count":1,"received_data":344,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"mediaplatform2.xiaoice.com","ip":{"addr":"47.93.35.244","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"domain_registered":"2014-06-22","domain_rank":0,"first_seen":"2025-10-08T22:00:36.5589Z","last_seen":"2026-01-02T09:21:42.614598Z","alert_count":0,"request_count":1,"received_data":188767,"sent_data":509,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"pornodrochka.org","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2019-09-09","domain_rank":235403,"first_seen":"2019-09-10T10:42:36Z","last_seen":"2026-01-02T15:37:32.499005Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":431,"comment":"","tags":null,"fingerprints":null},{"fqdn":"motherless.com","ip":{"addr":"185.107.81.233","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2005-11-19","domain_rank":1728,"first_seen":"2012-05-21T16:56:06Z","last_seen":"2026-01-02T09:21:41.679901Z","alert_count":0,"request_count":1,"received_data":1494,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"oedy9.com","ip":{"addr":"38.225.209.250","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"domain_registered":"2023-10-27","domain_rank":150266,"first_seen":"2023-10-27T10:41:23Z","last_seen":"2026-01-02T01:23:02.47592Z","alert_count":1,"request_count":1,"received_data":144,"sent_data":424,"comment":"","tags":null,"fingerprints":null},{"fqdn":"nudegirls.wiki","ip":{"addr":"109.202.99.24","port":443,"asn":49453,"as":"Global Layer B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2021-04-27","domain_rank":96966,"first_seen":"2021-06-09T14:55:04Z","last_seen":"2025-12-18T08:24:38.746024Z","alert_count":0,"request_count":1,"received_data":143,"sent_data":429,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.po-kaki-to.com","ip":{"addr":"104.21.10.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-09-18","domain_rank":33483,"first_seen":"2012-07-18T02:37:54Z","last_seen":"2025-12-27T20:47:51.231165Z","alert_count":0,"request_count":1,"received_data":53175,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pornovrach.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2019-04-16","domain_rank":1624755,"first_seen":"2021-02-01T19:20:19Z","last_seen":"2025-12-18T23:47:57.987561Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":429,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.kompoz2.com","ip":{"addr":"172.67.206.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-04","domain_rank":2252290,"first_seen":"2020-09-27T10:24:26Z","last_seen":"2026-01-02T09:21:51.15651Z","alert_count":0,"request_count":1,"received_data":7158,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn77-pic.xvideos-cdn.com","ip":{"addr":"185.76.9.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2017-08-25","domain_rank":75108,"first_seen":"2018-09-06T22:43:13Z","last_seen":"2026-01-02T08:33:28.240113Z","alert_count":0,"request_count":4,"received_data":64506,"sent_data":2114,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"cataphractarii.com","ip":{"addr":"104.21.38.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-27","domain_rank":293882,"first_seen":"2025-05-21T16:17:01.435227Z","last_seen":"2025-12-18T09:20:21.888729Z","alert_count":0,"request_count":1,"received_data":690,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.video01.org","ip":{"addr":"172.67.222.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-20","domain_rank":331865,"first_seen":"2022-06-15T10:29:39Z","last_seen":"2026-01-02T15:37:35.101137Z","alert_count":0,"request_count":2,"received_data":5496,"sent_data":888,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn2.nudegirls.wiki","ip":{"addr":"213.152.173.82","port":443,"asn":49453,"as":"Global Layer B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2021-04-27","domain_rank":0,"first_seen":"2022-03-19T16:38:40Z","last_seen":"2025-10-20T02:56:03.282623Z","alert_count":0,"request_count":1,"received_data":56555,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"preziktv.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2019-04-11","domain_rank":890044,"first_seen":"2025-06-05T11:12:35.885661Z","last_seen":"2025-12-16T23:18:37.13308Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":427,"comment":"","tags":null,"fingerprints":null},{"fqdn":"159i.net","ip":{"addr":"104.21.68.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-11-06","domain_rank":162531,"first_seen":"2025-05-20T07:09:11.067593Z","last_seen":"2026-01-02T09:21:50.01184Z","alert_count":0,"request_count":2,"received_data":66841,"sent_data":913,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"b.pornodrochka.club","ip":{"addr":"91.194.110.9","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"domain_registered":"2021-09-21","domain_rank":0,"first_seen":"2025-11-21T22:45:32.595892Z","last_seen":"2026-01-02T15:37:34.976297Z","alert_count":0,"request_count":1,"received_data":132885,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn5-thumbs.motherlessmedia.com","ip":{"addr":"185.107.92.224","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2008-10-11","domain_rank":905009,"first_seen":"2018-12-23T05:30:23Z","last_seen":"2026-01-02T09:21:39.952108Z","alert_count":0,"request_count":1,"received_data":23734,"sent_data":453,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"www.blacktowhite.net","ip":{"addr":"192.243.63.82","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2007-09-21","domain_rank":120301,"first_seen":"2014-01-17T17:34:06Z","last_seen":"2025-12-30T08:47:52.190519Z","alert_count":0,"request_count":3,"received_data":168825,"sent_data":1446,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.17.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sorkab.com","ip":{"addr":"104.26.1.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-06-30","domain_rank":60433,"first_seen":"2021-02-01T01:07:10Z","last_seen":"2025-12-25T10:42:15.522527Z","alert_count":0,"request_count":2,"received_data":1576,"sent_data":877,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"krudplug.net","ip":{"addr":"104.26.12.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-06-03","domain_rank":365173,"first_seen":"2019-05-15T06:59:09Z","last_seen":"2025-12-20T14:38:22.27008Z","alert_count":0,"request_count":1,"received_data":41653,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"xvideosporno.blog","ip":{"addr":"104.21.43.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-02-21","domain_rank":165583,"first_seen":"2019-02-10T21:20:03Z","last_seen":"2025-12-16T23:18:37.799068Z","alert_count":0,"request_count":1,"received_data":23588,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"lsbzytp.com","ip":{"addr":"142.248.99.61","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-04-09","domain_rank":243364,"first_seen":"2023-05-07T13:36:46Z","last_seen":"2026-01-02T02:43:41.55124Z","alert_count":0,"request_count":4,"received_data":131164,"sent_data":1912,"comment":"","tags":null,"fingerprints":null},{"fqdn":"filtradas.com","ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"domain_registered":"2025-04-09","domain_rank":184383,"first_seen":"2025-06-15T07:12:29.914989Z","last_seen":"2026-01-02T09:21:49.03374Z","alert_count":0,"request_count":18,"received_data":820519,"sent_data":8908,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"vidmo.org","ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2012-10-07","domain_rank":73868,"first_seen":"2013-01-12T05:42:46Z","last_seen":"2025-12-30T20:09:30.4777Z","alert_count":0,"request_count":1,"received_data":5697,"sent_data":424,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"avhub.live","ip":{"addr":"104.21.52.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-05-12","domain_rank":5772921,"first_seen":"2025-06-16T22:45:37.067599Z","last_seen":"2025-06-16T22:45:37.067599Z","alert_count":0,"request_count":1,"received_data":121080,"sent_data":501,"comment":"","tags":null,"fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn1.hotmoza.tv","ip":{"addr":"104.21.70.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-17","domain_rank":3967188,"first_seen":"2018-01-22T21:57:29Z","last_seen":"2026-01-02T15:37:31.72108Z","alert_count":0,"request_count":6,"received_data":77430,"sent_data":2820,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"filmesporno.xxx","ip":{"addr":"80.82.65.89","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"domain_registered":"2018-07-24","domain_rank":10355,"first_seen":"2019-03-31T05:29:58Z","last_seen":"2026-01-02T09:21:43.929566Z","alert_count":0,"request_count":5,"received_data":91262,"sent_data":2306,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ds2.obmenvsemfiles.net","ip":{"addr":"85.17.28.50","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2020-06-19","domain_rank":4168968,"first_seen":"2020-06-19T20:52:45Z","last_seen":"2025-12-18T23:47:59.521718Z","alert_count":1,"request_count":1,"received_data":18353,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"muy-porno.com","ip":{"addr":"172.67.220.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-04-12","domain_rank":76575,"first_seen":"2021-04-13T14:29:38Z","last_seen":"2025-12-30T20:09:25.905198Z","alert_count":0,"request_count":1,"received_data":800,"sent_data":428,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ds2.nashobmenfiles.com","ip":{"addr":"85.17.28.50","port":80,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2018-08-19","domain_rank":5394944,"first_seen":"2018-11-09T03:55:39Z","last_seen":"2025-12-18T12:52:31.825933Z","alert_count":1,"request_count":1,"received_data":13640,"sent_data":411,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.123rf.com","ip":{"addr":"108.157.229.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2005-03-04","domain_rank":105099,"first_seen":"2012-05-22T19:25:08Z","last_seen":"2025-12-21T04:03:17.551614Z","alert_count":0,"request_count":1,"received_data":1630,"sent_data":399,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.9188porn.xyz","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-02-21","domain_rank":3270384,"first_seen":"2025-03-12T03:12:05.263544Z","last_seen":"2026-01-02T15:37:37.786836Z","alert_count":0,"request_count":6,"received_data":0,"sent_data":2874,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-12-28T22:26:34.892336Z","alert_count":0,"request_count":1,"received_data":215401,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-12-28T22:20:33.111263Z","alert_count":0,"request_count":1,"received_data":11706,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"lovense.tv","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2019-02-21T18:11:21Z","last_seen":"2025-12-25T10:42:23.55784Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":425,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.9188porn.com","ip":{"addr":"172.67.220.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-06-18","domain_rank":3479355,"first_seen":"2025-02-07T09:21:52Z","last_seen":"2026-01-02T09:21:50.82948Z","alert_count":0,"request_count":3,"received_data":2239,"sent_data":1271,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ansuko.net","ip":{"addr":"104.21.54.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-07-04","domain_rank":87799,"first_seen":"2023-07-04T08:10:56Z","last_seen":"2026-01-02T09:21:47.785738Z","alert_count":0,"request_count":3,"received_data":147935,"sent_data":1363,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"de.chezcathy.com","ip":{"addr":"185.111.111.160","port":443,"asn":212238,"as":"Datacamp Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2007-03-03","domain_rank":5293391,"first_seen":"2024-10-07T10:54:04Z","last_seen":"2026-01-02T09:21:46.344403Z","alert_count":0,"request_count":1,"received_data":2402,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"fapdig.com","ip":{"addr":"172.67.154.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-03-03","domain_rank":199248,"first_seen":"2017-08-25T19:59:36Z","last_seen":"2025-12-27T20:47:49.641352Z","alert_count":0,"request_count":3,"received_data":16295,"sent_data":1303,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"thumb.aporntv.com","ip":{"addr":"104.26.1.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-07","domain_rank":3254568,"first_seen":"2018-03-19T05:34:25Z","last_seen":"2026-01-02T09:21:49.432929Z","alert_count":0,"request_count":6,"received_data":37277,"sent_data":3300,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"idolerotic.net","ip":{"addr":"153.122.86.155","port":443,"asn":131921,"as":"GMO GlobalSign Holdings K.K.","country":"Japan","country_code":"JP"},"domain_registered":"2014-11-07","domain_rank":198291,"first_seen":"2016-02-17T00:43:30Z","last_seen":"2025-12-28T11:04:08.519551Z","alert_count":0,"request_count":3,"received_data":24823,"sent_data":1360,"comment":"","tags":null,"fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}]},{"fqdn":"www.porn100.tv","ip":{"addr":"172.67.211.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-03-04","domain_rank":126842,"first_seen":"2023-03-11T17:36:20Z","last_seen":"2026-01-02T09:21:51.433916Z","alert_count":0,"request_count":2,"received_data":1618,"sent_data":890,"comment":"","tags":null,"fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pornohub24.ru","ip":{"addr":"193.163.7.2","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2015-12-18","domain_rank":222572,"first_seen":"2016-02-13T06:11:04Z","last_seen":"2026-01-02T09:21:48.747742Z","alert_count":0,"request_count":1,"received_data":245,"sent_data":428,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.dailymail.co.uk","ip":{"addr":"96.6.16.210","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"1996-08-01","domain_rank":69335,"first_seen":"2012-05-22T12:34:10Z","last_seen":"2026-01-02T09:21:47.438439Z","alert_count":0,"request_count":1,"received_data":4990,"sent_data":487,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fqjpg4.top","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-05-14","domain_rank":162173,"first_seen":"2025-06-28T08:10:55.589739Z","last_seen":"2026-01-02T09:21:40.940176Z","alert_count":8,"request_count":8,"received_data":0,"sent_data":3777,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ru-trah.net","ip":{"addr":"78.40.116.51","port":80,"asn":200019,"as":"Alexhost Srl","country":"Sweden","country_code":"SE"},"domain_registered":"2015-08-31","domain_rank":3171441,"first_seen":"2025-10-31T05:11:56.259586Z","last_seen":"2025-11-13T05:34:06.593353Z","alert_count":0,"request_count":2,"received_data":5885,"sent_data":813,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"i0.wp.com","ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":841,"first_seen":"2013-09-17T06:14:42Z","last_seen":"2025-12-29T01:59:47.929231Z","alert_count":0,"request_count":1,"received_data":260,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn2.geefap.com","ip":{"addr":"31.10.5.97","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2017-09-12","domain_rank":4560962,"first_seen":"2019-09-14T00:30:50Z","last_seen":"2026-01-02T09:21:43.804667Z","alert_count":0,"request_count":1,"received_data":26629,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"img.pornorusskie.org","ip":{"addr":"104.21.81.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-01-06","domain_rank":0,"first_seen":"2021-09-10T05:20:23Z","last_seen":"2025-11-01T08:52:22.742678Z","alert_count":0,"request_count":1,"received_data":17883,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.ptt.sex","ip":{"addr":"104.21.24.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-09-20","domain_rank":329698,"first_seen":"2022-06-23T18:06:45Z","last_seen":"2025-12-29T03:09:37.028777Z","alert_count":0,"request_count":1,"received_data":748,"sent_data":426,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"chezcathy.com","ip":{"addr":"169.150.247.33","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"2007-03-03","domain_rank":55670,"first_seen":"2012-05-29T12:07:35Z","last_seen":"2026-01-02T09:21:39.672555Z","alert_count":0,"request_count":2,"received_data":27494,"sent_data":878,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"pdocac.4vid.top","ip":{"addr":"172.67.181.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-03-09","domain_rank":0,"first_seen":"2025-11-19T01:17:36.035067Z","last_seen":"2026-01-02T09:21:42.124117Z","alert_count":1,"request_count":1,"received_data":3426,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"avatars.mds.yandex.net","ip":{"addr":"87.250.247.182","port":80,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2000-11-14","domain_rank":37773,"first_seen":"2014-12-15T11:43:59Z","last_seen":"2025-12-31T11:08:01.621892Z","alert_count":0,"request_count":2,"received_data":24305,"sent_data":814,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pic.javstar.mobi","ip":{"addr":"172.67.199.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-10-05","domain_rank":0,"first_seen":"2018-09-28T22:29:44Z","last_seen":"2025-12-18T09:20:18.500016Z","alert_count":0,"request_count":1,"received_data":19998,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sexsex2.com","ip":{"addr":"27.124.42.183","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2023-04-17","domain_rank":229935,"first_seen":"2025-03-07T05:24:12.468328Z","last_seen":"2026-01-02T09:21:52.727686Z","alert_count":0,"request_count":1,"received_data":142,"sent_data":426,"comment":"","tags":null,"fingerprints":null},{"fqdn":"nlt05.videosection.com","ip":{"addr":"104.26.12.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2002-11-25","domain_rank":3904544,"first_seen":"2022-07-28T14:37:54Z","last_seen":"2025-11-14T02:30:36.685072Z","alert_count":0,"request_count":1,"received_data":87087,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ex.ucoz.ru","ip":{"addr":"193.109.247.20","port":443,"asn":204343,"as":"Compubyte Limited","country":"Russia","country_code":"RU"},"domain_registered":"2005-08-20","domain_rank":0,"first_seen":"2025-06-05T11:12:37.673158Z","last_seen":"2025-12-25T16:43:15.473573Z","alert_count":0,"request_count":3,"received_data":78567,"sent_data":1182,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"theporn.cc","ip":{"addr":"172.67.164.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-07-19","domain_rank":102466,"first_seen":"2019-07-20T10:47:54Z","last_seen":"2026-01-02T09:11:48.137492Z","alert_count":0,"request_count":1,"received_data":598,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sexsex61.com","ip":{"addr":"27.124.42.183","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2023-04-17","domain_rank":155642,"first_seen":"2025-03-24T07:20:20.686063Z","last_seen":"2026-01-02T09:21:39.17063Z","alert_count":0,"request_count":1,"received_data":142,"sent_data":427,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ekkofilm.dk","ip":{"addr":"65.109.19.181","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2002-12-18","domain_rank":276455,"first_seen":"2025-07-13T22:15:17.617268Z","last_seen":"2025-12-18T08:24:47.16303Z","alert_count":0,"request_count":1,"received_data":210,"sent_data":426,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"p16-kimg.kwai.net","ip":{"addr":"193.212.191.26","port":443,"asn":2119,"as":"Telenor Norge AS","country":"Norway","country_code":"NO"},"domain_registered":"1999-10-05","domain_rank":305176,"first_seen":"2024-07-17T19:55:13Z","last_seen":"2025-12-25T16:43:15.381822Z","alert_count":0,"request_count":1,"received_data":30279,"sent_data":646,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"img.reddit.tube","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2018-10-21","domain_rank":0,"first_seen":"2025-10-09T20:45:10.894187Z","last_seen":"2025-12-20T19:05:35.375619Z","alert_count":0,"request_count":1,"received_data":12758,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"www.oedy9.com","ip":{"addr":"38.225.209.250","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"domain_registered":"2023-10-27","domain_rank":3836162,"first_seen":"2023-10-27T17:25:38Z","last_seen":"2026-01-02T09:21:40.467732Z","alert_count":1,"request_count":1,"received_data":144,"sent_data":428,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pornodrochka.club","ip":{"addr":"91.194.110.9","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"domain_registered":"2021-09-21","domain_rank":202390,"first_seen":"2021-09-21T22:17:20Z","last_seen":"2025-12-25T10:42:21.816867Z","alert_count":0,"request_count":1,"received_data":99982,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"multicst.com","ip":{"addr":"104.21.94.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-09-25","domain_rank":160888,"first_seen":"2023-09-25T11:47:33Z","last_seen":"2026-01-02T09:21:39.77684Z","alert_count":0,"request_count":1,"received_data":56363,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"realincestvideos.org","ip":{"addr":"104.21.1.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-12-31","domain_rank":255039,"first_seen":"2016-01-24T15:59:03Z","last_seen":"2025-12-25T16:43:16.649027Z","alert_count":0,"request_count":1,"received_data":10995,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"en.vidmo.org","ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2012-10-07","domain_rank":5121515,"first_seen":"2017-03-14T11:42:51Z","last_seen":"2025-12-25T16:43:11.653765Z","alert_count":0,"request_count":1,"received_data":5697,"sent_data":427,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.redd.tube","ip":{"addr":"54.39.222.96","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"domain_registered":"2022-05-03","domain_rank":13819,"first_seen":"2022-05-09T18:20:16Z","last_seen":"2025-12-25T10:42:14.017829Z","alert_count":0,"request_count":1,"received_data":962,"sent_data":399,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"i.redd.it","ip":{"addr":"199.232.173.140","port":443,"asn":54113,"as":"FASTLY","country":"United Kingdom","country_code":"GB"},"domain_registered":"2010-05-31","domain_rank":17323,"first_seen":"2016-05-24T20:20:56Z","last_seen":"2026-01-01T20:32:48.962543Z","alert_count":0,"request_count":1,"received_data":136973,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"216.58.207.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2025-12-28T22:36:42.452939Z","alert_count":0,"request_count":2,"received_data":175824,"sent_data":878,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pdocac.jpg4.icu","ip":{"addr":"172.67.183.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-06-01","domain_rank":0,"first_seen":"2025-11-19T01:17:48.933973Z","last_seen":"2026-01-02T09:21:38.50088Z","alert_count":0,"request_count":1,"received_data":3555,"sent_data":404,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rtgallery.net","ip":{"addr":"5.63.144.84","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2021-12-29","domain_rank":78203,"first_seen":"2022-03-30T19:38:20Z","last_seen":"2025-12-30T08:47:47.089507Z","alert_count":0,"request_count":4,"received_data":174352,"sent_data":1739,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"8zoonet.z00.monster","ip":{"addr":"148.113.152.129","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"domain_registered":"2019-08-26","domain_rank":0,"first_seen":"2020-06-27T22:13:57Z","last_seen":"2025-12-21T16:29:03.629085Z","alert_count":0,"request_count":1,"received_data":15345,"sent_data":450,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sexsex16.com","ip":{"addr":"27.124.42.183","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2023-04-17","domain_rank":0,"first_seen":"2025-10-30T20:35:29.747428Z","last_seen":"2026-01-02T09:21:47.295884Z","alert_count":0,"request_count":1,"received_data":142,"sent_data":427,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ds.nashobmenfiles.com","ip":{"addr":"85.17.28.58","port":80,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2018-08-19","domain_rank":4960458,"first_seen":"2018-09-06T13:34:42Z","last_seen":"2025-12-18T12:52:31.573717Z","alert_count":1,"request_count":1,"received_data":13668,"sent_data":410,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"degustibusbread.co.uk","ip":{"addr":"172.67.198.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-08-06","domain_rank":597754,"first_seen":"2025-05-21T11:41:57.815168Z","last_seen":"2025-12-21T07:34:04.849288Z","alert_count":4,"request_count":4,"received_data":53187,"sent_data":1780,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"darkvod.com","ip":{"addr":"104.21.15.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-04","domain_rank":239802,"first_seen":"2024-01-04T17:39:45Z","last_seen":"2025-12-27T20:47:50.759687Z","alert_count":6,"request_count":3,"received_data":6616,"sent_data":1374,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pornvideoq.com","ip":{"addr":"104.21.235.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-10-27","domain_rank":358741,"first_seen":"2015-10-29T23:25:48Z","last_seen":"2025-12-25T16:43:17.770809Z","alert_count":0,"request_count":1,"received_data":12006,"sent_data":557,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"fixedjs.4vid.top","ip":{"addr":"172.67.181.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-03-09","domain_rank":0,"first_seen":"2025-11-19T01:17:38.764851Z","last_seen":"2026-01-02T15:37:35.179171Z","alert_count":2,"request_count":2,"received_data":6665,"sent_data":788,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.cav10.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-12-11","domain_rank":0,"first_seen":"2025-12-25T16:43:12.710949Z","last_seen":"2026-01-02T09:21:41.158069Z","alert_count":3,"request_count":1,"received_data":0,"sent_data":428,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.mymediaing.my","ip":{"addr":"104.21.71.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-07T20:07:31.091044Z","last_seen":"2026-01-02T09:21:46.561134Z","alert_count":0,"request_count":1,"received_data":53481,"sent_data":415,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"theav.xyz","ip":{"addr":"172.67.203.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-07-20","domain_rank":192954,"first_seen":"2018-08-26T12:26:24Z","last_seen":"2026-01-02T09:21:43.061982Z","alert_count":0,"request_count":1,"received_data":605,"sent_data":424,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pornyc.com","ip":{"addr":"104.21.2.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-05-13","domain_rank":67935,"first_seen":"2017-01-20T12:37:34Z","last_seen":"2026-01-02T09:21:45.522224Z","alert_count":3,"request_count":3,"received_data":23353,"sent_data":1316,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.w3schools.com","ip":{"addr":"23.36.77.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2000-03-21","domain_rank":2135,"first_seen":"2014-02-05T20:15:46Z","last_seen":"2025-12-29T12:48:22.357269Z","alert_count":0,"request_count":1,"received_data":24014,"sent_data":428,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img.imghuo.cfd","ip":{"addr":"185.53.178.99","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"domain_registered":"2024-07-16","domain_rank":3764022,"first_seen":"2024-07-28T22:31:34Z","last_seen":"2025-12-30T20:09:27.23546Z","alert_count":0,"request_count":2,"received_data":498,"sent_data":884,"comment":"","tags":null,"fingerprints":null},{"fqdn":"p15-kimg.kwai.net","ip":{"addr":"108.157.214.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1999-10-05","domain_rank":291092,"first_seen":"2024-07-17T21:55:13Z","last_seen":"2026-01-02T09:21:38.986678Z","alert_count":0,"request_count":1,"received_data":28494,"sent_data":646,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.krudplug.net","ip":{"addr":"104.26.12.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-06-03","domain_rank":0,"first_seen":"2019-05-01T08:11:56Z","last_seen":"2025-12-20T14:38:24.504089Z","alert_count":0,"request_count":1,"received_data":41672,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cav10.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-12-11","domain_rank":0,"first_seen":"2025-12-18T05:22:23.700643Z","last_seen":"2026-01-02T09:21:40.635833Z","alert_count":3,"request_count":1,"received_data":0,"sent_data":424,"comment":"","tags":null,"fingerprints":null},{"fqdn":"desiporn.me","ip":{"addr":"172.67.218.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-28","domain_rank":379285,"first_seen":"2016-10-06T13:50:03Z","last_seen":"2025-12-18T19:32:05.702916Z","alert_count":0,"request_count":1,"received_data":6921,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.peppahub.com","ip":{"addr":"104.21.91.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-10-23","domain_rank":0,"first_seen":"2019-12-22T22:55:40Z","last_seen":"2025-12-16T23:18:37.304489Z","alert_count":0,"request_count":1,"received_data":603,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"im2.mediacont.net","ip":{"addr":"104.160.9.33","port":443,"asn":63119,"as":"Angelnet Limited","country":"United States","country_code":"US"},"domain_registered":"2024-01-13","domain_rank":2088534,"first_seen":"2024-01-15T00:31:55Z","last_seen":"2026-01-02T09:21:50.159245Z","alert_count":0,"request_count":2,"received_data":26031,"sent_data":907,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"img.youtube.com","ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-02-15","domain_rank":6546,"first_seen":"2012-05-30T07:03:49Z","last_seen":"2025-12-29T08:16:15.807668Z","alert_count":0,"request_count":2,"received_data":32928,"sent_data":878,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sex18.photos","ip":{"addr":"31.10.5.97","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2015-10-01","domain_rank":225743,"first_seen":"2016-02-14T19:06:16Z","last_seen":"2026-01-02T09:21:39.979028Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":427,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"img.aosikaimge.com","ip":{"addr":"64.112.78.82","port":443,"asn":6939,"as":"HURRICANE","country":"United States","country_code":"US"},"domain_registered":"2022-11-29","domain_rank":3184584,"first_seen":"2022-12-08T15:32:54Z","last_seen":"2026-01-02T01:55:22.481039Z","alert_count":0,"request_count":1,"received_data":7044,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.syougakuseijridol.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2018-02-21","domain_rank":6055036,"first_seen":"2020-06-28T07:44:08Z","last_seen":"2025-12-18T05:22:21.69308Z","alert_count":0,"request_count":2,"received_data":192283,"sent_data":855,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"www.pornlulu.com","ip":{"addr":"104.21.34.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-05-17","domain_rank":33047,"first_seen":"2021-07-12T18:20:26Z","last_seen":"2026-01-02T09:21:47.544093Z","alert_count":0,"request_count":5,"received_data":26192,"sent_data":2267,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.clporn.com","ip":{"addr":"104.21.25.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-10-16","domain_rank":764883,"first_seen":"2015-04-11T05:54:49Z","last_seen":"2026-01-02T09:21:43.29521Z","alert_count":0,"request_count":2,"received_data":22019,"sent_data":872,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pornodiler.com","ip":{"addr":"91.227.144.56","port":80,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2018-04-26","domain_rank":180126,"first_seen":"2013-10-29T21:45:02Z","last_seen":"2025-12-25T10:42:12.431762Z","alert_count":0,"request_count":1,"received_data":40089,"sent_data":360,"comment":"","tags":null,"fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}]},{"fqdn":"twitter.yandex.com.tr","ip":{"addr":"87.250.255.11","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2010-03-15","domain_rank":1612077,"first_seen":"2023-09-22T13:36:46Z","last_seen":"2026-01-02T09:21:44.604864Z","alert_count":0,"request_count":1,"received_data":3060,"sent_data":436,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cloudflare-br-pic.kwai.net","ip":{"addr":"3.164.230.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1999-10-05","domain_rank":526119,"first_seen":"2023-06-29T09:22:43Z","last_seen":"2025-11-30T21:38:30.435119Z","alert_count":0,"request_count":1,"received_data":26530,"sent_data":555,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"en.vidmo.pro","ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2022-04-10","domain_rank":122476,"first_seen":"2022-04-11T13:12:45Z","last_seen":"2026-01-02T09:21:42.544335Z","alert_count":8,"request_count":8,"received_data":120844,"sent_data":3773,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"vidcdn.123rf.com","ip":{"addr":"65.9.46.15","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2005-03-04","domain_rank":4315114,"first_seen":"2017-02-01T04:02:16Z","last_seen":"2025-12-18T08:24:40.427837Z","alert_count":0,"request_count":1,"received_data":7070,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"cataphractarii.z00.monster","ip":{"addr":"148.113.178.17","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"domain_registered":"2019-08-26","domain_rank":0,"first_seen":"2019-11-08T02:55:18Z","last_seen":"2025-12-18T09:20:20.122571Z","alert_count":0,"request_count":1,"received_data":26715,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"img.sekesporno.net","ip":{"addr":"104.21.53.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-09-18","domain_rank":4617189,"first_seen":"2022-09-14T04:20:03Z","last_seen":"2025-12-30T20:09:31.718827Z","alert_count":0,"request_count":1,"received_data":22638,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"img.apian088.sbs","ip":{"addr":"104.21.50.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-15","domain_rank":4180399,"first_seen":"2025-07-19T07:04:29.096235Z","last_seen":"2026-01-02T09:21:41.086267Z","alert_count":0,"request_count":6,"received_data":85040,"sent_data":2697,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.effedupmovies.com","ip":{"addr":"45.138.107.14","port":443,"asn":208414,"as":"WEDOS Internet, a.s.","country":"Czechia","country_code":"CZ"},"domain_registered":"2017-08-24","domain_rank":121897,"first_seen":"2018-01-06T11:19:22Z","last_seen":"2026-01-02T09:21:50.366142Z","alert_count":2,"request_count":2,"received_data":26643,"sent_data":913,"comment":"","tags":null,"fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"8zoo.net","ip":{"addr":"172.67.146.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-05-31","domain_rank":462853,"first_seen":"2020-05-31T12:49:43Z","last_seen":"2025-12-21T16:29:02.769549Z","alert_count":0,"request_count":1,"received_data":672,"sent_data":423,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fapello.com","ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-10-11","domain_rank":1679,"first_seen":"2021-10-11T09:03:39Z","last_seen":"2026-01-02T09:21:50.811969Z","alert_count":0,"request_count":2,"received_data":15443,"sent_data":890,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"timg216.top","ip":{"addr":"104.20.25.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-04","domain_rank":157563,"first_seen":"2025-05-11T16:24:46.418762Z","last_seen":"2026-01-02T09:11:47.282195Z","alert_count":3,"request_count":3,"received_data":95877,"sent_data":1441,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js?1","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-27T16:18:26.397483Z","times_seen":123485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4b936eab4235f662d4eb756534d69d7","sha1":"4ee18cb14eaf40e117a19a7f86dcefe6291bc0cf","sha256":"f7650ed40588ee2d1128869afc47866ee4eb09d4860ce1c3e07c9860b7242d33","sha512":"8ab68f0f71a5ed1bfef35dbdad985867b7695f46cd03e3d3bbf2ebe8de35b5a95638f5fdb41fdd52b85ecca95cbcb4a341f6fa560f1cb6a39a2026e22a9af10c","ssdeep":"","tlshash":"0260003c003f00030cc03c0000c0c000c000003c000303f00f030000000003030cc00c","size":12,"data":"","first_seen":"2023-03-07T12:07:12Z","last_seen":"2026-04-22T17:26:51.495207Z","times_seen":2308,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fixedjs.4vid.top/?vidjs=51qxezx","fqdn":"fixedjs.4vid.top","domain":"4vid.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c464314281019f9661a5bc038dd79a3c","sha1":"a75a34d9e07301746278e942bf7e72cf68c70bce","sha256":"1516426517d2dc367f5eb57426ab7400a555a4bfe433f2492c26eda55ce990ed","sha512":"715a6dd5ab7cd5c14e9cc6602ebddfd9e4491ef915852eab86a0c7c15e45c7998611c6def39c18c90249b69e02aee21fd70a79310c379df700cc078d40927706","ssdeep":"1536:UMJTUxbKOOmlUJKJzQ2ns+VKPv4n7IrNNYl2xGSKLG7EjzK1dQoKJUJ3PVZJnFpl:NUxbKLJlPs7rYGSKLG8ze6oXPZz8fS","tlshash":"137395bb725d502844e106a369714244fc2be637ad80d290f96c2c316f74e2a99f7fec","size":76996,"data":"","first_seen":"2025-11-25T01:08:54.715442Z","last_seen":"2026-03-15T05:55:43.327555Z","times_seen":257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"fc0f0c892151b495af634faf41a8af7d","sha1":"f1dcadca7eb9a3ae799b9f0e48c7ffff9dc732b8","sha256":"00c7da82ac5e19146b267db1da74f1c4f5e42aa1c4303569ae2561362c702d4a","sha512":"31ffc20ccf95e5ff3af2ce3c89500942ac246ecb64772e9b9082e53ce6c2f16b6d3878da73340f30701dfcb0c8c5ecd36d97f4f14a16821e5db5f828a5ad2f99","ssdeep":"","tlshash":"fd110000c802022202030b3a2008280020000200c082028000a000000080820002280c","size":931,"data":"","first_seen":"2025-11-25T01:08:54.722116Z","last_seen":"2026-04-22T17:26:51.500494Z","times_seen":189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0b92303a1cb08e00253e7879d304ee26","sha1":"68bdd0c37dddd5312507918516eaa994a1a1cb93","sha256":"7f10c6dc85b21ab592994c008eea9b75e836674d27bef1d026c511b4fb158432","sha512":"ea194370faf1c720d260f547d126b2beb99385dbbb29af6d954059e7bd3e622bf4040ad7731eaffea192c45551bf8816b8ba85ba40ef1a5ea1edae09e4c770e7","ssdeep":"","tlshash":"e7e0c035342d010202170260ac772a6a743dea750fc060b0d23825787684cb661596fd","size":353,"data":"","first_seen":"2024-05-18T10:55:44Z","last_seen":"2026-04-22T17:26:51.497035Z","times_seen":1354,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-27T16:18:26.397483Z","times_seen":123485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-620120-3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff6f1135da88b9ea5580cf5d4190a125","sha1":"89d781adfb620b1a24599c53baa58d5e3d7aacc3","sha256":"2c6b70c82b78e1051432d6152ba9c446e22a4734a7506ef790fcdbe6386d78e4","sha512":"c3b99bd208bbbfb50d569149648bee2e4075e3c762051210958638e11e2f175d22fb81b7fa517d2acb788a44647cd1f7a2ed203ff1f89c10c76f282e6f54d7b1","ssdeep":"6144:lIeJW2bulKYv9VGDmHYmyBFzfns9TWO4Baa5g:2Ebu7lEDns5WOmab","tlshash":"a95409c8b3da742683a36478503f114bb23b79d1f84cd894e186d8d42e74aaa4277f7d","size":289070,"data":"","first_seen":"2026-01-03T13:47:52.732177Z","last_seen":"2026-01-03T13:47:52.732177Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/yandex-metrica-watch/watch.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"13874b43d7a0d16e9294fbd7769da715","sha1":"80021aaaf6d92a36a4c07b8a0aa92c828c0e88b4","sha256":"1997c1177df62b07fd1794d3a9f8ebdc72842e6cb20a1e1987e939065921f646","sha512":"403cf4d5c09cb01f3ffa12aab85665ed7f39d89ef43127cc982dc478cebc89f618228abadfdec1aeb9894324335fcd988df24cb715cbba168bdb398dd2dc7461","ssdeep":"6144:y49/+QUgRED0pera7677001NeCHO/SPon:/+gmS767Q01NeCuwon","tlshash":"2b24e7d976927062937334b4902f000fb2bea8a6f10c8955f1c9d9d97e78da89137f6c","size":214296,"data":"","first_seen":"2025-12-05T22:31:48.465207Z","last_seen":"2026-03-18T10:59:26.977539Z","times_seen":566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mymediaing.my/sdk/p/?zid=9801","fqdn":"cdn.mymediaing.my","domain":"mymediaing.my","tld":"my"},"ip":{"addr":"104.21.71.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"30ce9aa09dc3c57eb33877503ec95907","sha1":"dc550297c6a7afffe1476389995a1de9089f1114","sha256":"d36a0ef928f1c18e82fcac655c24f545c7d909ab16c593058d7f7152265153a0","sha512":"5a084e66e8f40f71752d39e9eba41ef1ebe7b80c470e161b6e7d62cf962ad85a6bad561e9ffdfffaf9ffdb4a4e6169bfb62bce1b0380c48d1bfabe35ae56cd66","ssdeep":"1536:nFiJtBRiqSJQUUBU1wpIbS0UboLxCSMzHUgNvFq:nDqSJQUUBU1wpIbS0UboLxCSMzHHC","tlshash":"e13392982fd0b94053dbab7b772fb4e5f4571c2f6a81484fe225bc20359071beaa5930","size":52894,"data":"","first_seen":"2026-01-03T13:47:52.974018Z","last_seen":"2026-01-03T13:47:52.974018Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"264d10031939cccbe6ccacad85d05572","sha1":"6ba289e4515dc98f790c54f154c41f5026e65a3d","sha256":"ca71ec20421522e662c56569f6b1de4a34668cac9465c0dbb28f347952399469","sha512":"4fa8a2033fcbfff126915701936d4656d394f6f3ad7c449f202223b455db9e60555ec46b87bdc3f12d9678610cd9feb23c26efc94d008a4b68df71e12d33ec79","ssdeep":"","tlshash":"558000e0e280a0ba00f2a20ca2002020082ac2280e83e3828c2aa0cc08008f38aeba00","size":34,"data":"","first_seen":"2025-02-08T03:33:08.473479Z","last_seen":"2026-04-22T17:26:51.500018Z","times_seen":498,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"13b29d7aeaa1d827a9a3feeb39148a43","sha1":"da2040ef13a2d1ce62b0eef9c6ced0fe14f66b28","sha256":"d2d18329527d4d7d4acda028f92281274ac2a08bd840af1c0480620582f98338","sha512":"86dc2b9ccd6cda65753b62b83dda93aabd9272931c1cd9bae1a56ccb607d7de074a8b9873c3a91b69479abf9fb911a4e10b47e0ae7f9cd242d638ce732869c53","ssdeep":"","tlshash":"466000003333000030c00c03c0000c00cf0c00cc000030003c030c00303000030c33c3","size":14,"data":"","first_seen":"2023-03-07T12:07:12Z","last_seen":"2026-04-12T19:29:51.785587Z","times_seen":1774,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/nosleep/0.11.0/NoSleep.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea77f824de2ef57acb12e7cb6596365e","sha1":"10bad0dbdf30a0471c2c786b349daeb1dd19180e","sha256":"2b19d92ce83bf3b498f73103ba1240f09c84798b1f92aedf1491ccf0aa6f5e4c","sha512":"cf69dd76334b7318c829868da8a7e9c2097ef261555388132fc69f95d42e91420e2988056c3d93c830b20059422ae5a82e1109e3dce9127ccb0e23cc5ca27591","ssdeep":"192:N0rZbTPe+fl9SKRGyFgkw+wi+FrZJqbzr+5rA7wbUCzebIkm:N09voK7gzi+FrZJqbzrarAyUX5m","tlshash":"7a22f8b33133fd9f8fba085ac61d61045c7dbc6f4aa94091bb0884e86af4558ead5d34","size":10687,"data":"","first_seen":"2023-03-07T12:02:01Z","last_seen":"2026-04-26T04:37:41.979268Z","times_seen":2342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jsjs.jpg4.icu/index.php?js=very","fqdn":"jsjs.jpg4.icu","domain":"jpg4.icu","tld":"icu"},"ip":{"addr":"172.67.183.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b233f841a00264f453c84a0133d40b73","sha1":"113b10d80e4239e059e0664e6a65c585d9d6f0a9","sha256":"5fc97199ad041b9b414b04b05ac5da6a028a0d38ab23e2e3df651fad33e484b8","sha512":"e9ed36b3674f82b79936412f2b94d85ea669a0e3ec1a55ab482cdc0c3430952cad6d6907d9379c7bbd50be8bd1b60ea6bcf47060bf1c1f386bda8055df015df3","ssdeep":"","tlshash":"66b01200f025cc3d7088152840d0485502c9b2c801c20f024780272648266c6a102070","size":87,"data":"","first_seen":"2025-12-21T09:21:39.060054Z","last_seen":"2026-01-03T13:47:53.134201Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jsjs.jpg4.icu/index.php?js=av4\u0026advertisement\u0026","fqdn":"jsjs.jpg4.icu","domain":"jpg4.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3830057db4c459efd54285d4479b10fc","sha1":"78d5db0b24ce8da20f4158223219f90f6e15037f","sha256":"4cbd5675e5099f2cd2327b25c9ca12fdbec90c9af3f3dcd22f11d8fb65f33816","sha512":"f0707e90e1005d3d5a49595a4e27db085705d7b6f3c319fcfe2ba7b684865896abc5ef4fa8b3222f9c041357d01bb0ee78c712100a01392ad24706b431e3b7dd","ssdeep":"3072:yhV1y+HrCm85U/4V/6JEvT14EOtsCtJNS63nkA2kDQNv:GPy+Ht85U/4SEvyXkA2kDQNv","tlshash":"2314e9f63608502951f302a79a758684f833a02b99416884fd1c6d751f78e7f297affc","size":192318,"data":"","first_seen":"2026-01-03T13:47:53.136226Z","last_seen":"2026-01-03T13:47:53.136226Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"e0498db14fe83331f17dc99853bcfcf5","sha1":"f5cb3a321493d833dc79b1de5a12670e66f1427e","sha256":"d3e961841188e795b42e54d35149f83b5e2fba96ff37f301068c85b442bdb914","sha512":"0223c38c221e2c859927bb8623b40ee6c4189f2888792019a65c4f464b0db60d3f707d75267a8efdb024272a99242e87bf974eed60b649a9660600a7ba7ca7db","ssdeep":"","tlshash":"a5110000e2208a28002028332800020800020000c08008008002002000208030ea000a","size":960,"data":"","first_seen":"2025-11-25T01:08:54.725598Z","last_seen":"2026-04-22T17:26:51.499147Z","times_seen":309,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d170c17ae6ff8efc74d28a6e19f8ea0d","sha1":"6389888951ca149b44a486dc199f4b395352f544","sha256":"d0b2da63a59351dcae26ceea570d089c69fdf5c03b6e0161cbada6386d663122","sha512":"e2984271e11c901481d7202e69e1d3294cedfedef0ad757f50de8437e4d035f49b559f819359da2a13aa47914c6567f04d5b97304ea44597ea66ed4f47f3e7a2","ssdeep":"","tlshash":"a890027b98243042154900829047551c401d240896e096494857704564c012d61b1105","size":51,"data":"","first_seen":"2025-11-19T01:18:40.603002Z","last_seen":"2026-03-03T14:10:04.007743Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"edc24b7d2fc7536422daee6621435edf","sha1":"71fd4875b509449d820e6a3dd7d83e5f6c31fac8","sha256":"ec599569faa2feb73e0954dcb1f0f7ac5ba6d49ad50d17d3932506608b86a2fc","sha512":"04c6206b3bc1bac7456e96da9d1c58b9a9173e86ff91e8c94fbcd1088b011b5660519419f7971fae6370e8f281951c046c3539ea74a00f7b29830311e0174b34","ssdeep":"","tlshash":"c79002532d0494c2214558c564a0a80f9411644a58a4869688a5051161082ec0842500","size":55,"data":"","first_seen":"2024-04-16T15:37:12Z","last_seen":"2026-04-22T17:26:51.503064Z","times_seen":2326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"8da66cae5fc09ad0ad54710cd4960dbd","sha1":"01ef404d9c252491d6f0cd6900cce145d4b76db1","sha256":"90b1ab53462f9b18c6a0d06704f07055e834c86239bdc87a3708514e9a6b6762","sha512":"5d4f175963755b790e21d7765434cab11676f9d02d4d9fa2885c05dbb2dd665ec871d93e3b7d9f50f79de7ed991f8815f7e6dc1bf82f9b1c70c8d4becf28e953","ssdeep":"","tlshash":"c1b0124b1d0c882f25319c40a552647f0072f0263510caee84b40120dc302cc4420400","size":88,"data":"","first_seen":"2023-03-07T12:02:01Z","last_seen":"2026-04-22T17:26:51.501332Z","times_seen":2425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"ba2d069a5ce8ce7375ebf3de4090d6ab","sha1":"047efdb45f9ab165220bad539963beafff342c21","sha256":"f9d065cd35e491e424a72fd109f41436dc68807c941b0dac69ef18756b5be44b","sha512":"8f42f09500b77f9a4a064300140e70273f97f89f18fa9916343576c0a585f22f072c75bff915ba21cfcec94719465b509a8d417aba75860b4192627abdcac837","ssdeep":"","tlshash":"10d0a76b0c21b4528a2042e5e067500cc05e980a93d4da6280c794327580bed247d51a","size":232,"data":"","first_seen":"2025-11-19T01:18:40.612848Z","last_seen":"2026-03-15T05:55:43.351877Z","times_seen":337,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2badd01f80cd03eb7ffce90487ab3f71","sha1":"1d0af7cc184466c7d86216085ea60242daeb1eb4","sha256":"e8f6c4dca8b7093bad96494bef55525265ce366c13dc6f76d9358cca8ee182d4","sha512":"ec9d7c3fe33550482bf70ec70ab0f2bb4c989ce096f4744d2e29646fae993113711dcf2c447e743ce4d422299d5b5155561522571a5b3c617d138ea55299078c","ssdeep":"","tlshash":"0b900410c47007103004550cc47573570531430d5f45171c0f10d4d3f5cf110553014c","size":43,"data":"","first_seen":"2023-03-07T12:07:12Z","last_seen":"2026-04-22T17:26:51.502314Z","times_seen":2355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"cataphractarii.z00.monster/scj/thumbs/16/311-teen-and.jpg","fqdn":"cataphractarii.z00.monster","domain":"z00.monster","tld":"monster"},"ip":{"addr":"148.113.178.17","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cataphractarii.z00.monster","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Dec 2025 05:22:44 GMT","end":"Tue, 03 Mar 2026 05:22:43 GMT"},"fingerprint":{"sha1":"12:C2:53:2F:75:6D:6E:8E:40:08:CC:B7:B5:DD:8B:8D:22:B1:5A:F6","sha256":"67:39:C8:7C:16:32:31:A1:CF:58:94:46:77:CB:91:F8:EE:D4:E2:66:F2:12:92:3A:7E:BF:D0:D2:18:D5:F9:7B"}}},"request":{"raw":"GET /scj/thumbs/16/311-teen-and.jpg HTTP/1.1\r\nHost: cataphractarii.z00.monster\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26412\r\nlast-modified: Sun, 26 Jan 2020 01:57:12 GMT\r\netag: \"5e2cf1f8-672c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26412,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x240, components 3","md5":"bab8b65d54fd28a069403692e5ffd864","sha1":"c1ea5c00d094336e938944733985ccaadaa57315","sha256":"f13139bd975e0451b345526468c9cb2ea8b2f225cb32b87891addfcf6d893612","sha512":"b40fab935d9fc79abfa14bc0a99fcaeab5128daedeff3ada8b2f353a6045d6da18a3b18f4dd5be2b6708dc11efbd0325399caf39b73c1717e1d6329e403d9f88","ssdeep":"384:ktmRRBcnR8AR93/gFiGCiQjvwKCOfiuLfnn3eCSc4aVwYi9JwbFkHJ8Ho:kAPBcnygpgFSFN+CfnVQJQSHf","tlshash":"f2c2e1e971e05ae4829ea134a1a0e098fb7c0d44d5ee876db75b097c393c2d20db7197","first_seen":"2025-07-17T06:33:28.474898Z","last_seen":"2026-02-06T15:51:51.689131Z","times_seen":10,"resource_available":false,"data":null}},"time_used":4134,"timings":{"blocked":3487,"dns":1,"connect":140,"send":0,"wait":93,"receive":93,"ssl":308},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.oedy9.com/favicon.ico","fqdn":"www.oedy9.com","domain":"oedy9.com","tld":"com"},"ip":{"addr":"38.225.209.250","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oedy9.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 12:19:19 GMT","end":"Thu, 26 Feb 2026 12:19:18 GMT"},"fingerprint":{"sha1":"69:7B:3D:0C:13:0E:79:59:85:79:6C:9F:CC:02:E7:C6:0C:DB:09:6B","sha256":"CD:1C:CE:88:E8:D4:C6:2F:12:8F:68:0A:04:29:1A:D5:09:16:39:90:F4:A1:9B:08:35:6D:A8:0F:8C:54:E1:96"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.oedy9.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 448\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":450,"timings":{"blocked":117,"dns":144,"connect":29,"send":0,"wait":100,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"www.oedy9.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pizdauz.cc/favicon.ico","fqdn":"pizdauz.cc","domain":"pizdauz.cc","tld":"cc"},"ip":{"addr":"194.146.127.68","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pizdauz.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Dec 2025 00:16:58 GMT","end":"Sat, 07 Mar 2026 00:16:57 GMT"},"fingerprint":{"sha1":"19:11:5E:A5:D1:15:E5:61:C7:5F:C3:6A:8D:41:81:1F:02:5A:2A:52","sha256":"1D:F5:ED:D3:01:CE:87:62:23:71:60:5A:30:4D:BC:AF:3E:09:76:4F:6A:CD:72:CB:92:01:73:D6:37:AC:BC:A7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pizdauz.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 13:46:34 GMT\r\nContent-Type: image/vnd.microsoft.icon\r\nContent-Length: 1150\r\nConnection: keep-alive\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Thu, 02 Jul 2020 15:02:35 GMT\r\nETag: \"47e-5a976b2dd6000\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000;\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"0177fe6e0018eb853a8c8dc0613fcbb1","sha1":"a0cf2ed70318f4dec7eb983782dd7e5dfe382b9c","sha256":"d873fcd96aba0179c8773f6211afb165635a69b81ea5a3c801599ef192dbc7b5","sha512":"f6441ffa67efe1dd8c6658da97af8864dd87414a1d7317d9ab4e7c840669d388ca1e195dc8d8add52ab4210f7df64a919b6587e639c95d20daadde9b92979fd3","ssdeep":"","tlshash":"ce2141517be9d08cec685b30e5131ff90482be83c9a0694b141bbf1a363519608a8061","first_seen":"2023-05-04T22:30:41Z","last_seen":"2026-04-22T17:26:51.390191Z","times_seen":307,"resource_available":false,"data":null}},"time_used":481,"timings":{"blocked":374,"dns":52,"connect":17,"send":0,"wait":17,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"pizdauz.cc/files/chechenskoe_porno/sisyastaya_chechenka_trahaet_sebya_dlinnyim_fallosom/screen.jpg","fqdn":"pizdauz.cc","domain":"pizdauz.cc","tld":"cc"},"ip":{"addr":"194.146.127.68","port":80,"asn":207728,"as":"EUROHOSTER Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.084Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/chechenskoe_porno/sisyastaya_chechenka_trahaet_sebya_dlinnyim_fallosom/screen.jpg HTTP/1.1\r\nHost: pizdauz.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 13:46:31 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 9278\r\nLast-Modified: Thu, 02 Jul 2020 15:51:29 GMT\r\nConnection: keep-alive\r\nETag: \"5efe0281-243e\"\r\nExpires: Sun, 04 Jan 2026 13:46:31 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9278,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 266x200, components 3","md5":"5058fc45fb2124e278e13ebf4a03d7c6","sha1":"871f8b97dfb7009f3366146578f4e93ae0ddc5d4","sha256":"1e1e6b4837b6487e24eb52bd8b1a6d6e6aad0abda3ae2f4fb89369e0ba8ecf6e","sha512":"17053a692f62983d6f9cbb60b0d5f5fe5528636fcca8fd088b9edbd22b8bf5a0bc471e76b2819c024bea63c57b98b11f9f714f8d7e322aa80583696805ee1fa7","ssdeep":"96:435Bj6Nf/FkAihd9eX3sEwf5hqfC/3bYqBkbR+ANevr5DPo5FEhjuXaY7+L7SWUK:gC/SSk6fkbYjN+dJPKy+a2A7xBjD9t","tlshash":"f812af873b855293dd5cbbb31795a3c17900e748c9321f1b05900d589fbb961daec3a6","first_seen":"2025-05-25T07:14:28.176538Z","last_seen":"2026-01-13T04:12:04.624752Z","times_seen":15,"resource_available":false,"data":null}},"time_used":3591,"timings":{"blocked":3414,"dns":1,"connect":87,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dragon.brettspizzeria.com/favicon.ico","fqdn":"dragon.brettspizzeria.com","domain":"brettspizzeria.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.339Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dragon.brettspizzeria.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":940,"timings":{"blocked":433,"dns":106,"connect":5,"send":0,"wait":0,"receive":0,"ssl":396},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"dragon.brettspizzeria.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lsbzytp.com:3519/upload/vod/20231030-1/a5e391c9de653cdd7ca6f172cfac7f13.jpg","fqdn":"lsbzytp.com","domain":"lsbzytp.com","tld":"com"},"ip":{"addr":"142.248.99.61","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 09:53:21 GMT","end":"Fri, 06 Mar 2026 09:53:20 GMT"},"fingerprint":{"sha1":"55:92:B5:BC:78:CB:75:63:3B:0F:C6:A3:DD:2D:2F:7C:FA:07:B7:4A","sha256":"02:67:5F:F2:7D:A5:B6:59:8F:77:98:9C:EF:94:84:1A:E6:C9:FC:6E:A7:27:06:47:BB:16:5D:BE:A9:91:90:79"}}},"request":{"raw":"GET /upload/vod/20231030-1/a5e391c9de653cdd7ca6f172cfac7f13.jpg HTTP/1.1\r\nHost: lsbzytp.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 03 Jan 2026 13:46:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nage: 0\r\ncache-status: MISS\r\nserver: HyperCDN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":1090,"timings":{"blocked":10,"dns":9,"connect":146,"send":0,"wait":618,"receive":0,"ssl":302},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornodrochka.club/uploads/posts/2016-12/medium/1481049813_00_01_22.jpg","fqdn":"pornodrochka.club","domain":"pornodrochka.club","tld":"club"},"ip":{"addr":"91.194.110.9","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pornodrochka.club","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 22:39:15 GMT","end":"Sun, 22 Mar 2026 22:39:14 GMT"},"fingerprint":{"sha1":"77:C2:08:F8:95:39:05:94:EE:FD:33:F7:75:B2:B0:93:A7:D4:0B:E8","sha256":"03:64:E7:4D:3A:88:D4:CD:D4:AD:A8:56:D3:F7:61:27:A4:AD:1F:48:90:02:82:A3:64:A6:27:6E:2D:FE:B9:6B"}}},"request":{"raw":"GET /uploads/posts/2016-12/medium/1481049813_00_01_22.jpg HTTP/1.1\r\nHost: pornodrochka.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.10.3\r\ndate: Sat, 03 Jan 2026 13:44:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 99629\r\nlast-modified: Sat, 29 Aug 2020 17:53:57 GMT\r\netag: \"5f4a9635-1852d\"\r\nexpires: Sat, 10 Jan 2026 13:44:15 GMT\r\ncache-control: max-age=604800\r\nstrict-transport-security: max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":99629,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 450x253, components 3","md5":"7109a9534a3829e1116dc2ee10b83b53","sha1":"4291468d09cdeb4cef32ef118a72be8ce50e399b","sha256":"f8a52e1f2ae842112f03ae42683df6f11ee097f278232d566a4c56e72c237468","sha512":"731d4cb10690a1671ddcd4be8b5b741a388d06f48e703ff3518f66815df889692f0948ba03f2c7002e2ef9314f3941d240de24d28ab48ed747e2ec8c3d80e95a","ssdeep":"1536:OpvtHYYaKAiQj7DIK16eZxRpqDgyZdbIgW0ZVA79mqJFS2sXWgTlSCwJcTcdwpA:UVHBakQj9F6Z6xj7EnXLnrew+","tlshash":"aca3121048c6d13d878e9973b429ad95cea3f3f350fc6b079129817ae631c6bca2552f","first_seen":"2026-01-03T13:47:52.357475Z","last_seen":"2026-03-01T16:28:28.817116Z","times_seen":8,"resource_available":false,"data":null}},"time_used":4466,"timings":{"blocked":3464,"dns":1,"connect":79,"send":0,"wait":25,"receive":531,"ssl":325},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtgallery.net/tb/lauraa.jpg","fqdn":"rtgallery.net","domain":"rtgallery.net","tld":"net"},"ip":{"addr":"5.63.144.84","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtgallery.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 17:00:08 GMT","end":"Tue, 17 Feb 2026 17:00:07 GMT"},"fingerprint":{"sha1":"5D:8A:5C:FE:24:B0:28:D3:1B:23:AE:94:5D:BC:79:7D:DD:8F:20:3F","sha256":"7A:EB:AE:AA:18:8B:DF:0F:6B:03:FE:39:39:5C:2D:B6:E1:64:4C:4E:FC:EF:35:B2:E5:8E:27:F9:70:BF:DB:C3"}}},"request":{"raw":"GET /tb/lauraa.jpg HTTP/1.1\r\nHost: rtgallery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Sat, 03 Jan 2026 13:46:31 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 34336\r\nLast-Modified: Mon, 04 Apr 2022 14:06:03 GMT\r\nConnection: keep-alive\r\nETag: \"624afb4b-8620\"\r\nCache-Control: private, max-age=600, must-revalidate\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34336,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, comment: \"Created with GIMP\", progressive, precision 8, 480x360, components 3","md5":"d77dfdba8765184c777d34ba20a49492","sha1":"912ecfea35fdd93c0ff83acea0e3a3281fcab88d","sha256":"8b3bc662364d92ea9428380c9613c1fa0b4fcac88d77a93dd64fcefd304a7396","sha512":"b0e61fa6b9199ee22880379d1baa42f478b4c6d6f70c4f4cfb5a8fa52646d184df194d5240ae1523355e5626d7ce791a2de089f4bd27fff54f8bf9cd32db37d4","ssdeep":"384:T/vnps6MAvA+qDA98G0azEz8GRPPAs89SgMkfXYmJGE+k8B+mx1yoZUIEf++uxfU:rvS6CE9+aFs8b1xfmSeUIEfEdcSPw7sY","tlshash":"b8f2f15e0ef497cefb266333cea02fa1d8b35d02608a92591dca00a54bc9fda065c5e5","first_seen":"2024-04-30T18:10:32Z","last_seen":"2026-01-16T16:06:07.467755Z","times_seen":11,"resource_available":false,"data":null}},"time_used":3796,"timings":{"blocked":3397,"dns":1,"connect":100,"send":0,"wait":37,"receive":2,"ssl":222},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/1/1f439dc2a741f2336402b354732332810320f4c8_2_627x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/optimized/2X/1/1f439dc2a741f2336402b354732332810320f4c8_2_627x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 92024\r\nlast-modified: Tue, 12 Aug 2025 05:34:18 GMT\r\nexpires: Sun, 03 Jan 2027 13:46:27 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92024,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 627x1024, components 3","md5":"a4c2e28a66078bb83c158d9920f3afc1","sha1":"78ea142bbea8107b2bc2c7dbdc7f8d285bee96e8","sha256":"3acc8d3343fdf079ef66d73f1f4b0034e6af40a05f1f664e72a3b40b1cde45cb","sha512":"18186138f394506e454233bbccc01365ed00077169feed622f31be6b8a14d3b29c2def5431925685f8cbc5bd40e6987c45ab5f4307ca54642727a239ab8e8721","ssdeep":"1536:7Pu0HAXSwOwHZBKXZ8JQ/4+iFpXQ4NYq9pzdV1Yum5gVmjuy43BSQfFzHwbe/S8Y:7Pu0gXSwOwHZBKXZ8JQ/KXQmZVdV1Y2e","tlshash":"ff93022dad550180f22f4d92618968006f6eab707a9bf6b03db9c14d7fa7442da9b31c","first_seen":"2025-08-05T22:57:37.900553Z","last_seen":"2026-04-03T21:47:16.436844Z","times_seen":17,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooporner.com/media/videos/tmb/000/002/072/1.jpg","fqdn":"zooporner.com","domain":"zooporner.com","tld":"com"},"ip":{"addr":"104.21.72.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooporner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Nov 2025 02:12:50 GMT","end":"Thu, 19 Feb 2026 03:11:36 GMT"},"fingerprint":{"sha1":"B3:56:06:32:90:21:12:D0:8C:12:A6:88:5F:3F:70:C0:82:C5:66:88","sha256":"3B:AA:33:56:81:2D:26:BB:5E:09:6A:DE:73:A2:D5:57:34:77:D0:06:66:30:48:13:E2:60:49:12:23:D0:59:9F"}}},"request":{"raw":"GET /media/videos/tmb/000/002/072/1.jpg HTTP/1.1\r\nHost: zooporner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8898\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Mar 2023 17:18:39 GMT\r\netag: \"6421cfef-22c2\"\r\naccept-ranges: bytes\r\nage: 2946\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6l7spusNIZPjVOu4%2FWIUZ89BuOUXxPqppifxf8LvJ0r4w6C%2FffibPJwH2M05CuBboSaEsWYphkcfGtLCG1GrIs9NDACUuwoVfnjD3A8%3D\"}]}\r\ncf-ray: 9b82f15cecb8b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8898,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: \"Lavc59.51.101\", baseline, precision 8, 320x240, components 3","md5":"06481625a09bc235b338fe7ba240b85a","sha1":"74269161612c76c278b6484e05f70a9c57a430e0","sha256":"4d576c1655beb0eb1573653a763af70c2243ea238952ccb741d369842f70de5c","sha512":"d99882f4518bf04e8240d6c235114b950aba6f6fd163ec649835888154ca0acb12bcce9b3017ac92757c8331b4426fd5089aedca7a7f958f68cc7ef2cdee1bba","ssdeep":"192:JCa6COCYkk7xfWQzF451Bbiw+wWnt4AqC/B3+K3w8CLVG:J9LYnfNzF451BWvZ2/C9gpG","tlshash":"3302af5cb200cff7ee60df02e30112de06aad78764628a35809499d4b97d087195b3fb","first_seen":"2025-06-13T21:09:49.510812Z","last_seen":"2026-04-03T22:52:06.947951Z","times_seen":23,"resource_available":false,"data":null}},"time_used":3737,"timings":{"blocked":3414,"dns":1,"connect":3,"send":0,"wait":7,"receive":0,"ssl":258},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krudplug.net/video_thumbs/1603976589.jpg","fqdn":"krudplug.net","domain":"krudplug.net","tld":"net"},"ip":{"addr":"104.26.12.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:29.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krudplug.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 16:10:09 GMT","end":"Mon, 23 Mar 2026 17:10:04 GMT"},"fingerprint":{"sha1":"03:EC:F0:2A:2D:9D:39:BB:4A:D9:FA:68:D6:AE:5B:4C:7F:68:90:79","sha256":"A0:B9:C2:35:1E:89:76:31:12:C5:AB:85:99:4C:09:ED:88:5A:B0:5D:F3:E1:A8:2A:84:AC:AE:B0:FF:C1:27:F7"}}},"request":{"raw":"GET /video_thumbs/1603976589.jpg HTTP/1.1\r\nHost: krudplug.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://en.av2.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 41010\r\nlast-modified: Wed, 25 Jun 2025 06:04:19 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 5240\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sCHIWUPh6LJ6UckLeBfyeeEl8aGsJjVoIzaELmQ74IToop3PYyFCWnETIIHcDtAY5CzC9AqNzQS75QOuL7fsq0AqO9fc6mcOgTTH\"}]}\r\ncf-ray: 9b82f15afd858deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41010,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 141 x 126, 8-bit/color RGBA, non-interlaced","md5":"17c82a6173a92a6a907b73036ed816d3","sha1":"93d301d95b70ba7ac5e405e305a37b55c893712d","sha256":"13292bb2edbf4480fdae8629f07fb4be4b91969844afac447c089ad3ff966d46","sha512":"e434004798fc9b26b6502c67df8c44bd9e1f83cfc6b5ac11108e73983b5dcaa6494135d76dc43915815d95647fbfe290abd6f199ee461cad3953fc80a286f9dc","ssdeep":"768:OBo1uPqn7ANR9I7a/2GLCbocQ2hHfijH6DgZ4/crQ9wjxsk6lkTlL9:Oq1p2c3GLCqAD9/vkT6aT","tlshash":"7103f1e48e651653de251e49bac804cfc9d2d4c73dd68cc3f38675a30da860e46ba72d","first_seen":"2025-06-23T22:00:49.867506Z","last_seen":"2026-04-22T17:26:51.464449Z","times_seen":15,"resource_available":false,"data":null}},"time_used":2164,"timings":{"blocked":2114,"dns":1,"connect":4,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250729-1/6c1e67484db5b3bb17a8ebf5cc21f094.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"142.248.99.81","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 09:53:21 GMT","end":"Fri, 06 Mar 2026 09:53:20 GMT"},"fingerprint":{"sha1":"55:92:B5:BC:78:CB:75:63:3B:0F:C6:A3:DD:2D:2F:7C:FA:07:B7:4A","sha256":"02:67:5F:F2:7D:A5:B6:59:8F:77:98:9C:EF:94:84:1A:E6:C9:FC:6E:A7:27:06:47:BB:16:5D:BE:A9:91:90:79"}}},"request":{"raw":"GET /upload/vod/20250729-1/6c1e67484db5b3bb17a8ebf5cc21f094.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 57338\r\nlast-modified: Tue, 29 Jul 2025 02:44:18 GMT\r\nvary: Accept-Encoding\r\netag: \"68883582-dffa\"\r\nexpires: Thu, 29 Jan 2026 06:35:49 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 371439\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":57338,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=5, height=288, software=www.meitu.com, datetime=2024:09:24 20:59:36, width=512], baseline, precision 8, 500x281, components 3","md5":"183fbc68991cf4514a2869c5bea62cb9","sha1":"8f134faa1c426334254e969941a70e43dc4f2b2f","sha256":"addaa38d7e7ff676bbe2c731768aab9978eac673af78fd144df01267b2843a84","sha512":"ff26362e7a194ab9ccd363ee3642d70f689f8739b6ca852bdc6edefc303cfe480e604f363f490d671a3769c3efdc7fe92e558f87e219b582e3f02f26912f7c56","ssdeep":"768:pfHdd7CSWhY+0AyynRurq/rWBvDkXQTk+57yGlmLjLHw4ZYbTQP2+tl7CXIAgwh6:pPjV+XJIcCF7BlmhwTQPRtRCZgwcj","tlshash":"9b43f268d9af49f7ea1840f052b7cec72367840c97b9f5b34adac48fa40139db5668c4","first_seen":"2025-09-07T10:04:44.336067Z","last_seen":"2026-03-03T09:47:10.8305Z","times_seen":81,"resource_available":false,"data":null}},"time_used":751,"timings":{"blocked":170,"dns":0,"connect":0,"send":0,"wait":474,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.sekesporno.net/ruxp/img/4/48451_r1.jpg","fqdn":"img.sekesporno.net","domain":"sekesporno.net","tld":"net"},"ip":{"addr":"104.21.53.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sekesporno.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 00:10:20 GMT","end":"Sat, 07 Feb 2026 22:55:29 GMT"},"fingerprint":{"sha1":"17:BC:5E:3B:0A:56:7B:31:F1:41:73:E0:22:88:96:79:E7:70:A1:EB","sha256":"C5:68:15:D1:8E:B5:11:9F:26:9A:E2:62:7C:2A:E7:3C:A8:59:B3:18:15:90:42:27:C3:C2:69:FA:39:C6:75:E4"}}},"request":{"raw":"GET /ruxp/img/4/48451_r1.jpg HTTP/1.1\r\nHost: img.sekesporno.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21823\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Feb 2025 14:43:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67aa1096-553f\"\r\nexpires: Sun, 04 Jan 2026 05:28:28 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccept-ranges: bytes\r\nage: 2535482\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4U8ldNknJ0Alzk96f3%2BEHZT6XIpfaOM4IKYKQI%2BaSNE1Vpy%2BWfYyr8GU9vzOh8KSXi1hXimNIR0CP9KygXMfMBBN0jhLwPvC1TP%2FMGQsTE5JJg%3D%3D\"}]}\r\ncf-ray: 9b82f15cde28b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21823,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x224, components 3","md5":"41f1c75760d0bd20f245dd6486fc91d7","sha1":"a5937d501f2ce2a73a149632c24c35520dc07063","sha256":"a1ee19aa1a95078999c39705efafb0a8cb6b9cb91ef92977cccf02237d86adca","sha512":"bf186e7cd375f2b8f54d6690cb0e80d626dd20cf1ca6031b6e6ff487f9f315c3a26f2d8b6d71b282b3249ede5e6b625a633c94520a198a226cf2a66c833b2724","ssdeep":"384:QR5JzOWwTPI4+bBSZYXgdl9Gp9aYsENn6FpPJPcKuW8+SCj/NUYEJ1+nEDJzA:QR7OWEP6zO1Ysr/JPcBuhEJwn60","tlshash":"5aa2e01398077ebeee6e7632d75434a54048d26420a7da1750523d4ab363d32def30fa","first_seen":"2025-04-24T14:39:22.444183Z","last_seen":"2026-01-03T20:06:23.505609Z","times_seen":14,"resource_available":false,"data":null}},"time_used":3713,"timings":{"blocked":3401,"dns":1,"connect":3,"send":0,"wait":9,"receive":0,"ssl":251},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sexsex61.com/favicon.ico","fqdn":"www.sexsex61.com","domain":"sexsex61.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.155Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.sexsex61.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":947,"timings":{"blocked":-1,"dns":947,"connect":1077,"send":0,"wait":0,"receive":0,"ssl":277},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdocac.jpg4.icu/av4usimage.png","fqdn":"pdocac.jpg4.icu","domain":"jpg4.icu","tld":"icu"},"ip":{"addr":"172.67.183.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jpg4.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 15:32:54 GMT","end":"Thu, 26 Feb 2026 16:30:32 GMT"},"fingerprint":{"sha1":"DD:1F:06:D1:AD:C8:98:82:F6:76:1B:72:E5:E3:ED:49:53:4D:2E:C2","sha256":"5D:0D:E6:96:38:E2:AC:E2:A7:81:11:6D:6A:D8:8A:47:43:3D:50:7D:FE:2E:30:F8:62:AA:CC:2B:30:C7:DF:7F"}}},"request":{"raw":"GET /av4usimage.png HTTP/1.1\r\nHost: pdocac.jpg4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 2619\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"a3b-6437702003080\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\ncache-control: public, max-age=360000\r\nx-proxy-cache-192g-la: MISS\r\nxkey-192la: pdocac.jpg4.icu/av4usimage.png--pdocac.jpg4.icu-pdocac.jpg4.icu-myzone---no\r\nx-proxy-cache-tot-vt: HIT\r\nxkey-tot-vt: pdocac.jpg4.icu/av4usimage.png--pdocac.jpg4.icu--my_zone\r\naccept-ranges: bytes\r\nage: 335061\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I0LcIxAJxZ3AShUmeQ6t%2BcbUwxkv%2B15CtnDTbN6GLa0cs3QbUpcEI0M2zjkj%2F4i3f75dpIY17%2BeRMLsfqvWG4t85We73eiAgSQn%2BffDLtw%3D%3D\"}]}\r\ncf-ray: 9b82f17088161525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2619,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 339 x 89, 8-bit/color RGB, non-interlaced","md5":"8267aaadeeeb8c9fa7482f2f9db2d4e3","sha1":"a2ef23d3b5f9d9bb3102c855a8ace072884ba60c","sha256":"998cf9d427c2e322904e89a056ba823b56078fb199b7395883f3eafabaadbea8","sha512":"719215d8ec70b8b36b24277a80e7876be2fa1afe3698c05bbff013b6a2936701f266e694c221756e7306d1a945013986a53e41af0bc90bdd4bbf0dcbe33f7637","ssdeep":"","tlshash":"f5513ccb05b2fdbc657d79976105a79ef3a896c72982b872565c38c14243a0096c1fe1","first_seen":"2025-11-13T21:07:01.541567Z","last_seen":"2026-04-22T17:26:51.423965Z","times_seen":363,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":519,"dns":99,"connect":1,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ekkofilm.dk/favicon.ico","fqdn":"www.ekkofilm.dk","domain":"ekkofilm.dk","tld":"dk"},"ip":{"addr":"65.109.19.181","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ekkofilm.dk","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Nov 2025 07:37:52 GMT","end":"Tue, 24 Feb 2026 07:37:51 GMT"},"fingerprint":{"sha1":"44:1E:0F:83:75:53:2B:9E:80:14:CB:39:D1:0B:58:52:E6:46:A3:75","sha256":"4A:7A:21:06:B2:E6:55:C4:59:3C:32:C6:44:3A:38:90:65:63:30:CA:BE:1D:7F:3E:75:88:74:99:0E:37:A8:C7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.ekkofilm.dk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0\r\nDate: Sat, 03 Jan 2026 13:46:34 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p15-kimg.kwai.net/kimg/EKzM1y8qmQEKAnMzEg1waG90by1vdmVyc2VhGoMBdXBpYy8yMDI0LzA2LzMwLzA5L0JNakF5TkRBMk16QXdPVEUxTlRKZk1UVXdNREF4TlRZMU9EUXpNamN3WHpFMU1ERXdOalEwTmpFMk16QXhPVjh4WHpNPV9vdXVfQjU2OTNmNjgxNjgwM2QzZTI4OWNjOTNjMDBmZjkzZWUzLndlYnA.webp","fqdn":"p15-kimg.kwai.net","domain":"kwai.net","tld":"net"},"ip":{"addr":"108.157.214.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kwai.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"40:BE:54:57:6D:45:F7:8E:24:1D:98:F1:55:09:C2:AD:15:88:7F:ED","sha256":"78:0A:E5:01:45:63:BC:19:B9:9F:2A:BA:00:FE:22:2E:1B:6E:09:F6:9B:B5:E7:A5:81:A9:03:00:AE:EC:EE:41"}}},"request":{"raw":"GET /kimg/EKzM1y8qmQEKAnMzEg1waG90by1vdmVyc2VhGoMBdXBpYy8yMDI0LzA2LzMwLzA5L0JNakF5TkRBMk16QXdPVEUxTlRKZk1UVXdNREF4TlRZMU9EUXpNamN3WHpFMU1ERXdOalEwTmpFMk16QXhPVjh4WHpNPV9vdXVfQjU2OTNmNjgxNjgwM2QzZTI4OWNjOTNjMDBmZjkzZWUzLndlYnA.webp HTTP/1.1\r\nHost: p15-kimg.kwai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 27894\r\ndate: Thu, 01 Jan 2026 22:11:44 GMT\r\ncache-control: public, max-age=31536000\r\nkrtid: gw47951e238709448d82d8894d9c49ec71\r\nexpires: Fri, 01 Jan 2027 22:11:44 GMT\r\nvia: 1.1 248e05f803b9ec4139b6bc53e3088d18.cloudfront.net (CloudFront), 1.1 5e29eae3156522edc7886df59287259c.cloudfront.net (CloudFront)\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: FRA50-P1, ARN56-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 5lnn7l281E6lNGgQpe0qXhQOKyt22jbvd6TY-B28_r9WhYTPQdAWzg==\r\nage: 142487\r\ntiming-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":27894,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 323x576, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"096f19d4640423ef2953255724863570","sha1":"c74532ca005bfe6d5d4da8bafd4d2310d858335d","sha256":"a7ce685c21de1da66db8d3609c8f9d8e3139c21994f3ef5e71c1138be425e7f4","sha512":"57d7563360c29e9b7a125d427cab196bcc1a656a9d1593f5abfed2d88227038eef633c55f1996471da2d4894fb47b9d4e7ddf4ca6d5e46aa2757db320d040de7","ssdeep":"768:Mq4E+K//PRhlbLAIYJdEFj5h72hrmtUn2X9VuuK:MhE+I3tbLAI6ajj6Zdn2XfuuK","tlshash":"f7c2e11828bc6d16f5bd1116f9963170eacff6220936ca77a6e72a232357e2dcf40570","first_seen":"2025-06-03T06:10:03.816353Z","last_seen":"2026-01-03T13:47:52.396166Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3812,"timings":{"blocked":3413,"dns":1,"connect":12,"send":0,"wait":23,"receive":1,"ssl":351},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jsjs.jpg4.icu/index.php?js=very","fqdn":"jsjs.jpg4.icu","domain":"jpg4.icu","tld":"icu"},"ip":{"addr":"172.67.183.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jpg4.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 15:32:54 GMT","end":"Thu, 26 Feb 2026 16:30:32 GMT"},"fingerprint":{"sha1":"DD:1F:06:D1:AD:C8:98:82:F6:76:1B:72:E5:E3:ED:49:53:4D:2E:C2","sha256":"5D:0D:E6:96:38:E2:AC:E2:A7:81:11:6D:6A:D8:8A:47:43:3D:50:7D:FE:2E:30:F8:62:AA:CC:2B:30:C7:DF:7F"}}},"request":{"raw":"GET /index.php?js=very HTTP/1.1\r\nHost: jsjs.jpg4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nimghost: 1729614248-h-jsjsjpg4icumh--NO-rm1726420930/index.php?js=very\r\n56nloadrate: 0.175625\r\ncache-control: max-age=360000, private\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=whYzt4qgWY8LSbYDYPdQ5r52ptbRaNIVIArtVcxnTrRqKwWpDhR7%2Fd3ShqpK454wDD3SW1CwxLCYsAxlmeq8ViWpTZu5GSOm8ym8kvc%3D\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\ncf-ray: 9b82f142ad751525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":416,"timings":{"blocked":17,"dns":30,"connect":1,"send":0,"wait":355,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250409-1/119e032cd19c63f976d94418eb6882a5.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"142.248.99.81","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 09:53:21 GMT","end":"Fri, 06 Mar 2026 09:53:20 GMT"},"fingerprint":{"sha1":"55:92:B5:BC:78:CB:75:63:3B:0F:C6:A3:DD:2D:2F:7C:FA:07:B7:4A","sha256":"02:67:5F:F2:7D:A5:B6:59:8F:77:98:9C:EF:94:84:1A:E6:C9:FC:6E:A7:27:06:47:BB:16:5D:BE:A9:91:90:79"}}},"request":{"raw":"GET /upload/vod/20250409-1/119e032cd19c63f976d94418eb6882a5.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 63949\r\nlast-modified: Wed, 09 Apr 2025 02:38:24 GMT\r\nvary: Accept-Encoding\r\netag: \"67f5dda0-f9cd\"\r\nexpires: Thu, 29 Jan 2026 06:35:47 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 371441\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":63949,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 500x281, components 3","md5":"3b6a4b944be50c9cf620c720defa68ba","sha1":"f779006fb8cc52977776fff09dfaf307211fda75","sha256":"95f625f3eafacf19fbd4c3189a7611360a8fa0f8da998cf6c94f8c425131a9d5","sha512":"d21913fa51491dd715db7b11d543d2ad08181d8af21e53eeafce2f404f0c0d46a33fd590b604d0596b5c547f30e008677e59e7030d47b19db202a411a8de6501","ssdeep":"1536:6t2X0JxZB0QgmMQgMOcag4segsyp7ZzF3AB:6xZBgmMQgMOVsXsyp7ZF3Q","tlshash":"8b5302b220809cf52be7f994147d7a6931d09f30b24a67432bd6b520d44d86c9a3fed4","first_seen":"2025-10-12T05:38:41.677283Z","last_seen":"2026-03-03T09:47:10.895303Z","times_seen":38,"resource_available":false,"data":null}},"time_used":1714,"timings":{"blocked":126,"dns":0,"connect":145,"send":0,"wait":783,"receive":359,"ssl":298},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn1.hotmoza.tv/thumb/36/f4/f2/36f4f283ade6b1f86f225636927a0b6f.jpg","fqdn":"cdn1.hotmoza.tv","domain":"hotmoza.tv","tld":"tv"},"ip":{"addr":"104.21.70.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotmoza.tv","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 22:14:18 GMT","end":"Wed, 18 Mar 2026 23:10:42 GMT"},"fingerprint":{"sha1":"13:95:73:49:25:9B:A5:9F:37:DA:EB:FC:66:4B:44:80:9D:54:03:8B","sha256":"68:BC:DA:3E:17:C2:7E:93:BC:49:E4:F4:F9:30:6C:D0:23:D1:05:BE:99:82:2C:AD:E9:F9:64:D2:CE:D4:B7:12"}}},"request":{"raw":"GET /thumb/36/f4/f2/36f4f283ade6b1f86f225636927a0b6f.jpg HTTP/1.1\r\nHost: cdn1.hotmoza.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11322\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\netag: b0e2dd02723485e4ccbca20a0b4e2140\r\nlast-modified: Sun, 18 Aug 2024 01:26:18 GMT\r\nx-timestamp: 1723944377.71046\r\nx-trans-id: txb7afa796f62d46b4a580f-0067920494\r\nx-openstack-request-id: txb7afa796f62d46b4a580f-0067920494\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\ncache-control: max-age=172800\r\nexpires: Sat, 03 Jan 2026 21:57:40 GMT\r\nx-cdn-host-id: ds8140,DS9225\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nage: 143327\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k%2BLmfeEuzkHQrbFiXCMJ3%2BXSQZ7rooE3uIlszx%2BViNwuIcaRuIBznFh9Ztgoe1p1qCDa5FBgZm%2FkgUlwZCSb%2FKWqjf3PwCP0mlPnyj0%3D\"}]}\r\ncf-ray: 9b82f144ea6656cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11322,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", progressive, precision 8, 320x180, components 3","md5":"b0e2dd02723485e4ccbca20a0b4e2140","sha1":"0eaed8e4223fba775cb6bbf38ff622d79a85395f","sha256":"6e255a000fa17a75f954d0041bfb939389f70db67ad92c1dd0bc440cdba49c9d","sha512":"811636317acbd0ef38fd52bc949aaa9f4fc56eb3c92f4f6c94dd263d9466b807aaae6c628038c16453a9ae30357139439b0c7888e067d7b5f665090421e29def","ssdeep":"192:XnwVNkCD1kyymaf6tV4C3h8PcEuEXtOPvsrsTYIdV45KQ:3kCw0SvyXuEXgPvsAgl","tlshash":"b132c0319ecc2b86ccfcb2fae6c45cdbc734af5530281fd062a416ad2b54c558e6e588","first_seen":"2025-11-12T01:19:31.959856Z","last_seen":"2026-01-11T08:33:16.162863Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xvideos.com/favicon.ico","fqdn":"www.xvideos.com","domain":"xvideos.com","tld":"com"},"ip":{"addr":"185.88.181.5","port":443,"asn":46652,"as":"SERVERSTACK-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xvideos.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 01 Jan 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3F:BF:5A:CD:C6:01:7E:29:71:D7:38:54:EB:31:14:23:89:FE:ED:28","sha256":"83:4A:AF:29:35:45:0A:09:D2:D6:66:E6:AA:20:35:34:81:1F:2A:D2:88:17:A1:88:DC:AD:07:12:D4:EF:62:43"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.xvideos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15086\r\nlast-modified: Mon, 09 Oct 2023 14:43:32 GMT\r\netag: \"65241194-3aee\"\r\nexpires: Sat, 10 Jan 2026 13:46:34 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nserver: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"d6baf7b631c1e482b6e2f770f9e67057","sha1":"73eb49e766e5954e1ad9538cc35038b9f14494b9","sha256":"fa1ee8d05ad6dfa0731ee0d37badfd019cc3315e6d3b9ca1ae161cee4749481b","sha512":"3e1060de4568d23e10a9e8de1a27e5a965ab9e7e377004badb5f82f6018b46239542efd7378fff55a332b2e04a6211e53031b26a8044f28f3e9507760214e184","ssdeep":"96:jxUVxTXzZJEubLaOmLXa8zyyyyByyyyKzEdgCUPOuQqyyyytyyyuEX:jxUVxTFO722d7NX","tlshash":"ac62a8c7e5054da1dda887b04073998b156bfd6b09632c1a20c63f98d9b3eebf474b01","first_seen":"2023-05-07T23:40:39Z","last_seen":"2026-04-25T20:34:00.136227Z","times_seen":742,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":155,"dns":6,"connect":22,"send":0,"wait":23,"receive":7,"ssl":257},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20240826-1/d057169f65aae824f7cf74353abe4cd3.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"142.248.99.81","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 09:53:21 GMT","end":"Fri, 06 Mar 2026 09:53:20 GMT"},"fingerprint":{"sha1":"55:92:B5:BC:78:CB:75:63:3B:0F:C6:A3:DD:2D:2F:7C:FA:07:B7:4A","sha256":"02:67:5F:F2:7D:A5:B6:59:8F:77:98:9C:EF:94:84:1A:E6:C9:FC:6E:A7:27:06:47:BB:16:5D:BE:A9:91:90:79"}}},"request":{"raw":"GET /upload/vod/20240826-1/d057169f65aae824f7cf74353abe4cd3.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 109513\r\nlast-modified: Mon, 26 Aug 2024 12:19:56 GMT\r\nvary: Accept-Encoding\r\netag: \"66cc72ec-1abc9\"\r\nexpires: Thu, 29 Jan 2026 06:35:47 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 371441\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":109513,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 718 x 404, 8-bit colormap, non-interlaced","md5":"5458537618c4b77efcf97dd332f1bd05","sha1":"f5a108f90960b5e52924a0c2bc96ff079460af3e","sha256":"77dac8c6aba5250d2c21b5914d7f4fb4ba5bcbf3665b410c957399c84900c9cd","sha512":"5eb60bd8bfc9c0a7cbb8b8f181a000d7315eec3d4a0a05aabff7f74c07e057bbd0c4ad3f02dbfe29b6b48b7a928025346037254ed4f422ef1d6630a736886956","ssdeep":"3072:6CmVbnAJ+bRcyEicuLfGTuT9Z06uupzFWlJJpHOt6Hu:6CSkwbRcyXcEOuT306uupz4HJxOUHu","tlshash":"37b312ce7c1f18e940253d9fd302a193addaaabd593fb651dd02c9b41dd0e1ad50c90e","first_seen":"2025-02-15T18:15:16.973387Z","last_seen":"2026-04-20T19:16:50.634728Z","times_seen":124,"resource_available":false,"data":null}},"time_used":1727,"timings":{"blocked":139,"dns":0,"connect":144,"send":0,"wait":769,"receive":371,"ssl":298},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8zoonet.z00.monster/scj/thumbs/0/280_chinos.jpg","fqdn":"8zoonet.z00.monster","domain":"z00.monster","tld":"monster"},"ip":{"addr":"148.113.152.129","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8zoonet.z00.monster","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 04:16:10 GMT","end":"Fri, 27 Feb 2026 04:16:09 GMT"},"fingerprint":{"sha1":"A2:48:61:37:1D:31:A1:AC:74:9D:18:EE:3E:89:64:2F:52:D1:1A:D2","sha256":"78:EE:5C:C1:24:F8:52:20:2C:DE:7C:EC:1F:B7:6C:62:9F:79:7B:5B:C1:C6:BF:36:4F:C4:78:1F:8D:81:31:BE"}}},"request":{"raw":"GET /scj/thumbs/0/280_chinos.jpg HTTP/1.1\r\nHost: 8zoonet.z00.monster\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:29 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15042\r\nlast-modified: Thu, 02 Jul 2020 18:01:27 GMT\r\netag: \"5efe20f7-3ac2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15042,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x240, components 3","md5":"2767f6073ec5f718d15f6bdd61b4d34a","sha1":"a230e90c138c9ccf9c24f87b5b09090b6e8431ae","sha256":"0b5ff0e11eb2f7882690a1746ffa62c2c2a8f8b4a560325dd4bfd01aa7d9318c","sha512":"68196f8202dbe3ab84a56d70f80c7b280a6ab9ce252118641b7303cc25d8c28ba9b1f2f2f1a1f6ff35a5b1b0fa55a5ebc6c511d23d162a16ce7155bd4978d290","ssdeep":"384:2TifnEVVxZgIoFGoKELcWWAzcBQw/1/cru2N2MyQ8i7CHXuM:2Tifn8Zvo/x40zqp/cn2/Q8SS","tlshash":"6262d06c09c9c0b2cb8d8a2059399f929cad07fec24f4fa35e1df5597b182ed5484192","first_seen":"2024-08-19T19:45:08.579633Z","last_seen":"2026-03-03T08:08:10.362194Z","times_seen":55,"resource_available":false,"data":null}},"time_used":1178,"timings":{"blocked":161,"dns":541,"connect":94,"send":0,"wait":94,"receive":94,"ssl":194},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.w3schools.com/w3css/4/w3.css","fqdn":"www.w3schools.com","domain":"w3schools.com","tld":"com"},"ip":{"addr":"23.36.77.27","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:33.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"certification.w3schools.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Oct 2025 05:09:45 GMT","end":"Sun, 18 Jan 2026 05:09:44 GMT"},"fingerprint":{"sha1":"1B:0A:07:AA:E5:29:0E:01:21:18:F3:4C:23:42:E9:6A:3F:85:C5:39","sha256":"57:8C:78:FA:CB:E0:9B:8C:76:B8:05:E6:78:67:4F:0D:0C:B6:F1:8A:3B:26:BD:E1:51:03:95:09:8B:93:A0:12"}}},"request":{"raw":"GET /w3css/4/w3.css HTTP/1.1\r\nHost: www.w3schools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nlast-modified: Thu, 18 Dec 2025 11:43:10 GMT\r\naccept-ranges: bytes\r\netag: \"09beb7b1370dc1:0\"\r\ncontent-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com;\r\nx-content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com;\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 5256\r\ncache-control: public, max-age=30150522\r\nexpires: Fri, 18 Dec 2026 12:55:15 GMT\r\ndate: Sat, 03 Jan 2026 13:46:33 GMT\r\nx-loc: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23427,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"75b37d4abbdde1322116d2744181081d","sha1":"6d6b5ff442af4682c30e970c382002a7c694ac5b","sha256":"c4f2aba13970ecf8303fb9329f97c8824861569273b0aa27acce48abc61d04f5","sha512":"8ba303e078af3f71176b6e7fa5c32b0f3984014393133a960da7103bc78204a144a3d034a3d1ad7126f1547f45408e00e036175f54766ffccc8cf84cd4c129a5","ssdeep":"384:aHHLO7eS0F4bBY/fn6jZcy9/cGK1q8CarY64Cb+dOy:aHHCLYXfl1q8CarY64Cb+dl","tlshash":"fbb2f022ff8a1138261a873660d5fbfc573a8681df9f1b7a7030373943894c26796e49","first_seen":"2023-06-26T21:08:35Z","last_seen":"2026-04-27T14:43:43.737287Z","times_seen":16808,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":58,"dns":34,"connect":1,"send":0,"wait":17,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sexsex16.com/favicon.ico","fqdn":"sexsex16.com","domain":"sexsex16.com","tld":"com"},"ip":{"addr":"27.124.42.183","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sex83.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Dec 2025 11:56:06 GMT","end":"Wed, 04 Mar 2026 11:56:05 GMT"},"fingerprint":{"sha1":"62:15:D0:4F:44:F8:F8:4E:EB:1C:8C:5D:5B:6C:03:3A:EC:61:66:78","sha256":"E2:4B:7E:3F:65:EB:1A:17:67:6A:30:C4:46:A1:06:E7:37:DB:6C:BC:29:8D:B2:69:0E:32:F5:66:3A:4E:DB:52"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sexsex16.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 406\r\ndate: Sat, 03 Jan 2026 13:46:36 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":2218,"timings":{"blocked":159,"dns":99,"connect":318,"send":0,"wait":1319,"receive":0,"ssl":323},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.apian088.sbs/nb/tmb/000/001/178/10.jpg","fqdn":"img.apian088.sbs","domain":"apian088.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apian088.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 12:00:16 GMT","end":"Sat, 14 Feb 2026 12:44:47 GMT"},"fingerprint":{"sha1":"81:62:5B:8E:F8:D6:89:63:71:73:E3:18:57:53:27:65:B5:AD:00:32","sha256":"1E:DA:15:FE:0A:FF:52:03:D1:A0:EE:60:AD:2A:3A:55:0D:CD:56:3F:75:52:A1:90:E2:E7:70:D3:2A:15:12:5E"}}},"request":{"raw":"GET /nb/tmb/000/001/178/10.jpg HTTP/1.1\r\nHost: img.apian088.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7576\r\nserver: cloudflare\r\nlast-modified: Sat, 23 Mar 2024 12:21:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65fec940-1d98\"\r\naccept-ranges: bytes\r\nage: 2780460\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=khO5u3m03Kp8L39%2BLxMP1OJ82O%2FJ0eInl4I%2FYZj%2B%2BVCi0tC7qXsM5cykOBfClYXWjdD1I9KMFMOAopTc87m060%2FfF9MI7QDhxu%2FGgtW%2F\"}]}\r\ncf-ray: 9b82f1431b7256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7576,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"2271156c30feba89c9fe6f9fef0f55bb","sha1":"5c9aec0fd7c0f6636c5adee23fd5732e5f78c09c","sha256":"4320dc6b56c5f4c1766d303b0ce3adf138a3d1ca063bec2d656b01aa4ff6719b","sha512":"7d656662a4a2a09628d01d2e073e34285caaf542ac721595c0821f3269124fa8565249f487854684b5f78fe74026f59ad60b6b8b51dba5793546c9b2ba91fa2a","ssdeep":"96:kMTz/KKREekubLYeB4Rjr/Nq+o6DUW4JF1u0v/xy2FkRC9QK9FzBMbZg1PetFGZh:TKjekkYCo/4yMlt9fXzObZj+44wnJET","tlshash":"c5f19f136a90489cf59cbeb200de57a2ebe88cb10477b71fc7462d4197145fb07a57e4","first_seen":"2025-10-03T09:25:04.755839Z","last_seen":"2026-02-22T03:46:20.382833Z","times_seen":17,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":6,"dns":35,"connect":1,"send":0,"wait":10,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.youtube.com/vi/nR7O3Eh9ykQ/0.jpg","fqdn":"img.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:42.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"47:99:FB:97:02:C2:03:A6:B6:60:07:03:D3:B7:37:4B:99:D1:7F:1F","sha256":"01:72:D6:C3:FA:E5:7E:F5:EF:15:83:1F:EE:A5:BF:37:4C:78:02:B4:CD:BF:8D:EF:62:9F:53:B1:B3:1A:B6:EB"}}},"request":{"raw":"GET /vi/nR7O3Eh9ykQ/0.jpg HTTP/1.1\r\nHost: img.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13634\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 13:35:11 GMT\r\nexpires: Sat, 03 Jan 2026 15:35:11 GMT\r\ncache-control: public, max-age=7200\r\nage: 691\r\netag: \"0\"\r\ncontent-type: image/jpeg\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13634,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3","md5":"31325d2d4c0cf8f1b3c38177b60897ac","sha1":"5d1a904a09fdb8c04092c92e7ee08cadd1eaf405","sha256":"f0bdbc7e6343c3813871df0ef709d6b2c6d226d3f754f6dea87846791ff5ef2a","sha512":"62534f560f6d15a8bbc66131403bb47445964c14d15e1f7075bee587e0bb8dfed818b226ac1862d6e38a3840fe9723f4b87b7a0d209e4264feca70ed4142ab7f","ssdeep":"384:qYlnUniqLl1x4kSmX2maD5e5O42HYLTNOBq:l5UnPfx4kS22x5ey3s","tlshash":"d952d0acb2368fa4d006253c42f24d2936cffb24a054f4a5815e923c4af60d78b7d973","first_seen":"2025-12-22T08:22:21.836792Z","last_seen":"2026-01-15T02:29:14.848277Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1646,"timings":{"blocked":55,"dns":1524,"connect":8,"send":0,"wait":8,"receive":3,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.imghuo.cfd/nb/tmb/000/000/333/2.jpg","fqdn":"img.imghuo.cfd","domain":"imghuo.cfd","tld":"cfd"},"ip":{"addr":"185.53.178.99","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.imghuo.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Dec 2025 14:59:28 GMT","end":"Mon, 23 Mar 2026 14:59:27 GMT"},"fingerprint":{"sha1":"00:9C:65:3E:87:85:26:0F:B6:58:D3:F2:6F:B7:DA:06:3E:4C:47:26","sha256":"A0:FF:38:A4:88:31:FA:C6:40:D3:03:3E:F0:7D:C8:DB:E6:05:16:5E:C3:9B:B8:C8:47:82:D3:37:51:C1:01:CF"}}},"request":{"raw":"GET /nb/tmb/000/000/333/2.jpg HTTP/1.1\r\nHost: img.imghuo.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\nalt-svc: h3=\":8443\"; ma=2592000\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\nstatus: 400 Bad Request\r\nvia: 1.1 Caddy, 0.0 Caddy\r\nx-blocked: 11015.10\r\ncontent-length: 20\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":337,"timings":{"blocked":163,"dns":1,"connect":29,"send":0,"wait":32,"receive":0,"ssl":112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"davalka.online/uploads/posts/2020-05/beremennaya-doch-dolbit-sya-so-svoim-otcom-v-vaginu-i-s.jpg","fqdn":"davalka.online","domain":"davalka.online","tld":"online"},"ip":{"addr":"51.75.34.66","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkporno.com.davalka.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Oct 2025 23:12:45 GMT","end":"Mon, 26 Jan 2026 23:12:44 GMT"},"fingerprint":{"sha1":"11:FC:1B:B5:15:4B:0D:9A:49:00:80:F0:52:C4:F7:73:C9:30:9A:DF","sha256":"04:73:1E:0C:39:EE:41:F2:D1:A5:22:21:A6:12:2B:48:D3:6C:35:5B:D8:F1:80:B2:87:13:6A:15:5A:DE:15:52"}}},"request":{"raw":"GET /uploads/posts/2020-05/beremennaya-doch-dolbit-sya-so-svoim-otcom-v-vaginu-i-s.jpg HTTP/1.1\r\nHost: davalka.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13226\r\nlast-modified: Wed, 17 Jun 2020 16:29:56 GMT\r\netag: \"5eea4504-33aa\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=*, usb=()\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13226,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 382x215, components 3","md5":"bd144e16ad2167e19b9c364b6d20de70","sha1":"2326fb326b7414325110fd4a917262865da8f082","sha256":"4e4bb85405a5666bd2512ac07b4620acad86ee7cce39b051a40f2d1ace1d62fa","sha512":"c7f9f9cf103e06ad4f2515b309b1cdd72a99a8a0a8c9c0f8d49427a55d23aea2c4d9e4c780d757d335e9e019c4e778a70884fe2d97b8340dbbff84b24a3a97d0","ssdeep":"192:S5EGZVizfuSwYHNg/mcYmsEXGQUpC1M6qj3rS+BWfdbXqL4ccOlidoR:SLZAzfutucgEXCchq3kk0ccciuR","tlshash":"4252cf1a39210fd2c254f537fafd27b72d87c24a5e4b27da35db9088dd15af1ac42900","first_seen":"2024-05-10T17:13:40Z","last_seen":"2026-01-09T04:09:04.212595Z","times_seen":30,"resource_available":false,"data":null}},"time_used":3893,"timings":{"blocked":3465,"dns":1,"connect":80,"send":0,"wait":50,"receive":15,"ssl":241},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lovense.tv/favicon.ico","fqdn":"lovense.tv","domain":"lovense.tv","tld":"tv"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.247Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: lovense.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg4.top/upload/vod/20250124-1/18115c5b5465c1fe8e6ad7c48a6fd2a8.jpg","fqdn":"fqjpg4.top","domain":"fqjpg4.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.005Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /upload/vod/20250124-1/18115c5b5465c1fe8e6ad7c48a6fd2a8.jpg HTTP/1.1\r\nHost: fqjpg4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":407,"timings":{"blocked":186,"dns":1,"connect":107,"send":0,"wait":0,"receive":0,"ssl":113},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"fqjpg4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realincest.me/thumbs/31/7786039698555886031_0.jpg","fqdn":"realincest.me","domain":"realincest.me","tld":"me"},"ip":{"addr":"172.67.168.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realincest.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 16:45:36 GMT","end":"Mon, 09 Feb 2026 17:39:08 GMT"},"fingerprint":{"sha1":"1B:E6:88:EB:4D:DA:9E:CB:19:10:AE:6F:6B:F3:DD:86:03:80:EC:6B","sha256":"89:5A:7F:BD:CC:77:C1:04:A2:CA:B2:FD:EC:03:30:27:E4:DB:D8:D6:FF:90:96:F1:9A:3A:54:D3:12:4A:2A:F1"}}},"request":{"raw":"GET /thumbs/31/7786039698555886031_0.jpg HTTP/1.1\r\nHost: realincest.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5291\r\nserver: cloudflare\r\nlast-modified: Sat, 19 Feb 2022 18:20:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"621134fe-14ab\"\r\nexpires: Sun, 04 Jan 2026 05:40:31 GMT\r\ncache-control: max-age=259200\r\naccept-ranges: bytes\r\nage: 201960\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gLm431lnpnv7L4oigIlohE%2BW5N5uJfRTzKC0Nq6%2BwAzOP%2BUgfZZuzpOuX1vSAjsqUcXkw3F%2BL05gFseQPWU8BI54dFAau7qguQEd\"}]}\r\ncf-ray: 9b82f15cef4f56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5291,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x180, components 3","md5":"a62232dfed7bbbc928c03d0ae2e057d6","sha1":"2390bb15c645cb92eb8651d09a02e6915ded7b94","sha256":"7a5b322d2dc762613273b5710cd46a153f1537a86f7fe9c34e5d51165ebf24e2","sha512":"5209625850fe78062bfd60f0a6f728b2a773075d1df27ad46cec875552632ce712754c5ab0633f58a5b4fc14f5c41d0346c1632d5a7000929899adcb77673156","ssdeep":"96:rRf/hDx/jC6oZe5H0n+uDEAfw4vF+H/eM2kkMsbxkJ5HLCXB:rdZx/m6ocH0n94E+HGMObxkJg","tlshash":"79b17e15ba607630e754dbb21f7a1710f3679f504593fbae241ee2c461b40284f9bd29","first_seen":"2025-02-08T03:33:08.389119Z","last_seen":"2026-01-24T11:08:05.502651Z","times_seen":31,"resource_available":false,"data":null}},"time_used":3712,"timings":{"blocked":3394,"dns":1,"connect":3,"send":0,"wait":9,"receive":0,"ssl":255},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg4.top/upload/vod/20240914-10/6ceb85f7d9521b8b51c4f335791b6cbc.jpg","fqdn":"fqjpg4.top","domain":"fqjpg4.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.006Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /upload/vod/20240914-10/6ceb85f7d9521b8b51c4f335791b6cbc.jpg HTTP/1.1\r\nHost: fqjpg4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":3866,"timings":{"blocked":3492,"dns":1,"connect":151,"send":0,"wait":0,"receive":0,"ssl":213},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"fqjpg4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theporn.cc/favicon.ico","fqdn":"theporn.cc","domain":"theporn.cc","tld":"cc"},"ip":{"addr":"172.67.164.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theporn.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:28:32 GMT","end":"Tue, 03 Feb 2026 19:27:15 GMT"},"fingerprint":{"sha1":"60:0C:A1:91:D7:97:B5:D5:C5:83:A3:FB:9F:01:93:D7:A1:6E:0C:A9","sha256":"4F:E8:A3:52:16:CD:B8:84:29:B7:F9:37:A7:CC:2F:73:BF:85:1E:11:DE:15:CD:C6:87:20:0B:DB:20:01:77:BE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: theporn.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 30897\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BRaW84InHNud%2Bwwkok55rliUcsA6V8XOEod%2Fm2qMBIsNSUqUNW6Q6ajGSVBMJ2qd3v70bCL5TgAyHshSAI7zNa6Q%2FFPSTKGr\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9b82f16cab1d7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":48,"dns":33,"connect":1,"send":0,"wait":12,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.123rf.com/favicon.ico","fqdn":"www.123rf.com","domain":"123rf.com","tld":"com"},"ip":{"addr":"108.157.229.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123rf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sat, 08 Mar 2025 00:00:00 GMT","end":"Mon, 06 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F6:36:7A:1D:6B:64:06:84:8B:E1:86:3C:2F:42:B6:A9:0B:8D:1F:8D","sha256":"95:F0:3B:5D:6A:15:1A:62:D3:FE:38:20:4A:D0:4B:4B:47:01:0C:F5:07:89:CC:D3:6B:E5:E1:6C:EA:CD:EC:4B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.123rf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 1150\r\ndate: Sat, 03 Jan 2026 13:46:35 GMT\r\nserver: nginx\r\nlast-modified: Thu, 17 Oct 2024 07:53:56 GMT\r\netag: \"2054-47e-624a77d0a5488\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d5d7b369f72f565a0dffcd2db50ec516.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: EB94Bk4pS92wxZb8FUMkZoVK2aflSeMGx1njWjr4yqVgVatZmBmeWA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"0ddcbe7c5d5e59ee80aa8dadb6f4dba6","sha1":"b3e91db129901063803fda1dcdf4f6469909cbd9","sha256":"0a72940d13e6e5c9f46e66189312f2654c370b9f088c023edd203d012ec9dbec","sha512":"b6980203d2e68e1731d8b4a4470082cfa5814fbe86340e96a73121cfd6d44c5f539052bf573e8eee9a2561a9af61d02a02b105b3bb3c998e8a4cf3348f2bf364","ssdeep":"","tlshash":"0f2122b75a5a0963c7cd0770ac2ffd140348b88fdb186132d23aa56f28ac5a42d30e80","first_seen":"2024-10-11T08:37:17.78693Z","last_seen":"2026-03-02T10:40:01.367404Z","times_seen":154,"resource_available":false,"data":null}},"time_used":806,"timings":{"blocked":488,"dns":108,"connect":8,"send":0,"wait":187,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediaplatform2.xiaoice.com/image/fetchimage?key=JMGkCUAwbwSlitj1bX0ZYjrp0ouMCKMJIIjra1PngHos1AkYHFzo09-mYw","fqdn":"mediaplatform2.xiaoice.com","domain":"xiaoice.com","tld":"com"},"ip":{"addr":"47.93.35.244","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.xiaoice.com","organization":"北京红棉小冰科技有限公司"},"issuer":{"commonName":"GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"43:CE:85:C8:04:2E:4D:14:D8:92:25:E6:A1:A9:C7:8C:B5:7C:1C:EC","sha256":"7B:9C:C2:13:7C:B9:85:62:41:2E:D2:61:99:0F:4C:D9:EE:5E:A0:DC:EE:05:F8:51:E6:18:C8:7C:6C:AC:1D:20"}}},"request":{"raw":"GET /image/fetchimage?key=JMGkCUAwbwSlitj1bX0ZYjrp0ouMCKMJIIjra1PngHos1AkYHFzo09-mYw HTTP/1.1\r\nHost: mediaplatform2.xiaoice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:32 GMT\r\ncontent-type: image/jpeg\r\nserver: istio-envoy\r\ncontent-length: 188522\r\nreq-cost-time: 60\r\nreq-arrive-time: 1767447993031\r\nresp-start-time: 1767447993092\r\nx-envoy-upstream-service-time: 60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":188522,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 1080x618, components 3","md5":"dc2ff4fcfdc00b9280c5731bcee15b8a","sha1":"e0cd6601db62af0344e3acb608b43d0be16f232a","sha256":"8c26e973372ad286ca5f6915c142fbe8db29212c534346a4ea55905e62a0bd4f","sha512":"55e7d8643692f0ce47f4286e91e41f12ec194da71c5b8bd62566e607dfa531fbd7672f785185e3284d08204080f24582ba50b2938eb23b0597649a65dd8d4b42","ssdeep":"3072:fXwMTm0QJb7lbqQXTWjeBglbCghT8PJRtaEHpzw7gSRXf05n632Vyg02zr3LPaWm:fp8J5ZAeClbjh4xzaExdSlS632YRirTA","tlshash":"af04129cbd2092b3d10187bd38f0b161d4f195cfbb17951c26d238dec6d48a8b36a79a","first_seen":"2025-12-30T08:48:51.779699Z","last_seen":"2026-01-03T14:25:46.653669Z","times_seen":9,"resource_available":false,"data":null}},"time_used":6039,"timings":{"blocked":3447,"dns":1,"connect":244,"send":0,"wait":366,"receive":782,"ssl":1196},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.syougakuseijridol.com/favicon.ico","fqdn":"www.syougakuseijridol.com","domain":"syougakuseijridol.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.254Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.syougakuseijridol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":636,"timings":{"blocked":77,"dns":559,"connect":838,"send":0,"wait":0,"receive":0,"ssl":298},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidmo.pro/thumbs_320/4c/f4/4cf41cfb04803086fc7302706ec525ba/11889633.jpg","fqdn":"vidmo.pro","domain":"vidmo.pro","tld":"pro"},"ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"en.vidmo.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 20:48:10 GMT","end":"Thu, 19 Feb 2026 20:48:09 GMT"},"fingerprint":{"sha1":"B8:8B:9C:2B:E9:53:D3:85:0E:57:74:8D:32:07:72:DF:38:F3:91:DA","sha256":"9B:B3:9F:DD:FB:1B:36:C3:04:60:BF:DF:87:AA:AB:5D:F6:0D:45:20:77:9B:29:19:5F:C4:B6:F1:04:C9:23:3E"}}},"request":{"raw":"GET /thumbs_320/4c/f4/4cf41cfb04803086fc7302706ec525ba/11889633.jpg HTTP/1.1\r\nHost: vidmo.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26645\r\nlast-modified: Tue, 26 May 2020 03:45:57 GMT\r\nexpires: Wed, 10 Apr 2024 12:45:17 GMT\r\ncache-control: max-age=604800, public, no-transform\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26645,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 320x240, components 3","md5":"d3e91848081f57e6a5bab981c2d69040","sha1":"053f10c4e406a33e1d5737e27d69a635712a8643","sha256":"b0204f750e3309382f0cf307b6a3bc3394593fc5a7c5eaa3ac1b6a2f2a3e6a38","sha512":"5fa4a3f678ff1539b89beec00205db64b4e428a1a97387040e9c524e749668708779ab4acd308958551b4789cdc110bdce42fecd61cd4bd7d9407a298d925eac","ssdeep":"768:Y8JgyB9+yXfEA3MTBYjuFlW1a08F4VzdV/:Y+gyBfvN3FjV14F4Hd","tlshash":"9ac2df5fdc48af53c8ac9b94a10b0db7730f5b8b898b39d78a276885ca060564dc7d2d","first_seen":"2024-04-24T10:38:26Z","last_seen":"2026-02-06T15:51:51.792605Z","times_seen":24,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.video01.org/favicon.ico","fqdn":"www.video01.org","domain":"video01.org","tld":"org"},"ip":{"addr":"172.67.222.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"video01.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 16:57:51 GMT","end":"Fri, 13 Mar 2026 17:55:23 GMT"},"fingerprint":{"sha1":"47:BE:64:D4:B8:74:FE:A2:60:11:C7:41:47:25:FA:BD:3B:E7:2A:C2","sha256":"D6:D5:91:E1:82:D7:96:4A:FF:C6:E6:68:32:E5:56:77:AD:D3:CF:CE:F8:AE:6C:DA:E1:35:B0:90:EB:2F:F1:5B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.video01.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: referer, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wC4BAoAPwkmkJdoTccjQtfyjNkOx8jvRD5u7BpxXVgjhlF%2B2IDEhQ4jBYjZkz8TbixaiPANGun7Ls6kttfD6ys3T0pMPA0hoippdpGZ6xA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b82f16bcd97a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filmesporno.xxx/wp-content/uploads/2022/03/young-brother-sister-incest.jpg","fqdn":"filmesporno.xxx","domain":"filmesporno.xxx","tld":"xxx"},"ip":{"addr":"80.82.65.89","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filmesporno.xxx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 15:03:23 GMT","end":"Sun, 15 Mar 2026 15:03:22 GMT"},"fingerprint":{"sha1":"A5:4E:7D:6C:2F:EC:FD:8F:30:EB:DA:9D:5B:1D:31:90:55:D6:BB:84","sha256":"E9:C5:FD:9B:5F:F4:33:3A:2B:0D:66:76:46:D7:72:45:5F:A4:6B:51:4F:64:46:4B:FF:20:8F:AB:5D:7C:BB:6A"}}},"request":{"raw":"GET /wp-content/uploads/2022/03/young-brother-sister-incest.jpg HTTP/1.1\r\nHost: filmesporno.xxx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 41281\r\netag: \"622a3a51-a141\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\nexpires: Sun, 04 Jan 2026 00:30:00 GMT\r\ncache-control: max-age=38613\r\nx-served-by: filmesporno.xxx\r\nx-proxy-cache-status: HIT\r\nx-proxy-cache-skip: 1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41281,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x337, components 3","md5":"da44b3a57e3f4a925895755d4025d78e","sha1":"e335b67c5ac423491f601378ab0cdb671ff709ed","sha256":"61247c41a6149f8ed032ef9be77946f1eb88fb5851f3cfac196530a7d37ecda3","sha512":"eac84e68cad82b767ed68df71bfa092560f14bb45599d0d53c4bea38d89e6f4dcd31e321a5cf0ba824388a4f923541f8faab236bc09bbc0411b991df1c7d38bb","ssdeep":"768:78oY+ITcllS+Q3iIJnwm9xZIdCJOY1fmwPvQqPkdsx5JKBkX:7ZY1g+hFOu/Wsx5J3","tlshash":"d0030279cf1210ec947dade7bce4871e3a3edf16081327012b69d412a391dc5ae6d8b9","first_seen":"2026-01-03T13:47:52.45672Z","last_seen":"2026-03-03T08:08:10.217209Z","times_seen":3,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":93,"dns":30,"connect":24,"send":0,"wait":48,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ru-trah.net/types/engine/template/jquery.rating/images/stars.png","fqdn":"ru-trah.net","domain":"ru-trah.net","tld":"net"},"ip":{"addr":"78.40.116.51","port":80,"asn":200019,"as":"Alexhost Srl","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.077Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /types/engine/template/jquery.rating/images/stars.png HTTP/1.1\r\nHost: ru-trah.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sat, 03 Jan 2026 13:46:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 4437\r\nLast-Modified: Wed, 19 Jun 2024 12:15:53 GMT\r\nConnection: keep-alive\r\nETag: \"6672cbf9-1155\"\r\nExpires: Sun, 03 Jan 2027 13:46:31 GMT\r\nCache-Control: max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":4437,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 96, 8-bit/color RGBA, non-interlaced","md5":"779411641e57e8e6d32079e9748688b5","sha1":"898618140c7af5a10fab56beb912b3d3a7c3be19","sha256":"b18d4d12aa3f61803a158a9416410b0efb94a3e136cef8850b42f7a49691c2b8","sha512":"d88f16bc590bdf6a2b5903abf56fb63aec9929d36bd74bcd1e26b48c282ff5fb1bf7cce19453c5168c472dcff378f968150a65ced62585472acf5bfb7a45b597","ssdeep":"96:f6ea3AT0OvKPKvbGpDwky+SbT+mf6LEsZh7nzUi83rmuB9nETlP:fBT0OifpDwxbtf6V7I93yuPnEp","tlshash":"4491afbf64d69e31bbe40a7a0799451712ae42055cb43b087150a83e3e8f9ef57f1411","first_seen":"2023-05-04T23:04:56Z","last_seen":"2026-04-27T08:09:47.711703Z","times_seen":37,"resource_available":false,"data":null}},"time_used":3651,"timings":{"blocked":3421,"dns":1,"connect":103,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sexsex2.com/favicon.ico","fqdn":"sexsex2.com","domain":"sexsex2.com","tld":"com"},"ip":{"addr":"27.124.42.183","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sex83.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Dec 2025 11:56:06 GMT","end":"Wed, 04 Mar 2026 11:56:05 GMT"},"fingerprint":{"sha1":"62:15:D0:4F:44:F8:F8:4E:EB:1C:8C:5D:5B:6C:03:3A:EC:61:66:78","sha256":"E2:4B:7E:3F:65:EB:1A:17:67:6A:30:C4:46:A1:06:E7:37:DB:6C:BC:29:8D:B2:69:0E:32:F5:66:3A:4E:DB:52"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sexsex2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 406\r\ndate: Sat, 03 Jan 2026 13:46:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":6337,"timings":{"blocked":-1,"dns":5011,"connect":321,"send":0,"wait":1326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"twitter.yandex.com.tr/favicon.ico","fqdn":"twitter.yandex.com.tr","domain":"yandex.com.tr","tld":"com.tr"},"ip":{"addr":"87.250.255.11","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:42.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 26 Aug 2025 08:03:35 GMT","end":"Mon, 23 Feb 2026 20:59:59 GMT"},"fingerprint":{"sha1":"7B:FF:02:81:48:EF:11:E9:F6:FD:BE:76:15:A5:57:2F:B5:AB:4D:B8","sha256":"CB:F2:F4:82:42:0E:5A:DA:F9:FA:58:F7:47:D8:16:57:DF:1D:5D:62:E0:76:47:38:38:20:65:93:68:B1:24:F8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: twitter.yandex.com.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 12209\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\ncontent-type: text/html; charset=utf-8\r\ncontent-security-policy: img-src 'self' yastatic.net data: yandex.com.tr favicon.yandex.net avatars.mds.yandex.net yabs.yandex.ru mc.admetrica.ru mc.yandex.com *.mc.yandex.ru adstat.yandex.ru mc.yandex.com.tr mc.yandex.ru;default-src 'none';script-src yastatic.net yandex.com.tr mc.yandex.ru *.mc.yandex.ru adstat.yandex.ru mc.yandex.com.tr 'nonce-Jqo4/jai92bXCJ12sX5wGA==';style-src yastatic.net 'unsafe-inline';connect-src yandex.com.tr yabs.yandex.ru mc.yandex.ru *.mc.yandex.ru adstat.yandex.ru mc.admetrica.ru mc.yandex.md mc.yandex.com.tr;child-src mc.yandex.ru mc.yandex.md mc.yandex.com.tr;report-uri https://csp.yandex.net/csp?project=morda\u0026from=morda.error404.com.tr\u0026showid=1767448002548105-16506187945984741617-balancer-l7leveler-kubr-yp-sas-236-BAL\u0026h=home-any-stable-backend-70.klg.yp-c.yandex.net\u0026yandexuid=8847416171767448002\u0026version=2025-12-22-183\r\nx-content-type-options: nosniff\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: is_gdpr_b=CObTWxCg7AIYASgB; Path=/; Domain=.yandex.com.tr; Expires=Mon, 03 Jan 2028 13:46:42 GMT; SameSite=None; Secure\n_yasc=v+r+wn3g3Er20+9i/9JSrDHxNMqdswEjb4+cGFbpm9pceQF0eo8gYlFP+SwWimKw; Path=/; Domain=.yandex.com.tr; Expires=Mon, 03 Jan 2028 13:46:42 GMT; Secure\nis_gdpr=1; Path=/; Domain=.yandex.com.tr; Expires=Mon, 03 Jan 2028 13:46:42 GMT; SameSite=None; Secure\nis_gdpr_b=CObTWxCg7AIYAQ==; Path=/; Domain=.yandex.com.tr; Expires=Mon, 03 Jan 2028 13:46:42 GMT; SameSite=None; Secure\n_yasc=6eBRDgPEYfe/Ru2xgls7QQp0rUVRoYYeThdBgxgm5MwH2HpGgsx59RpyJn1OXOIi; domain=.yandex.com.tr; path=/; expires=Tue, 01 Jan 2036 13:46:42 GMT; secure\ni=mQlehyFTNAZwCi2RdhcF4fskNCD07HcoB4/B3zc1UQbrrK4nTRNwGOCE5UkW/GAj1/TYGktykJ/9bK3tttWxuNsZqgg=; Expires=Mon, 03-Jan-2028 13:46:42 GMT; Domain=.yandex.com.tr; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=8847416171767448002; Expires=Mon, 03-Jan-2028 13:46:42 GMT; Domain=.yandex.com.tr; Path=/; Secure; SameSite=None\nyashr=9951919741767448002; Path=/; Domain=.yandex.com.tr; Expires=Sun, 03 Jan 2027 13:46:42 GMT; SameSite=None; Secure; HttpOnly; Partitioned\nbh=YMK75MoGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com.tr; Expires=Sun, 07 Feb 2027 13:46:42 GMT; SameSite=None; Secure\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.01, \"failure_fraction\": 1.0}\r\ndate: Sat, 03 Jan 2026 13:46:42 GMT\r\nx-xss-protection: 1; mode=block\r\nx-yandex-req-id: 1767448002548105-16506187945984741617-balancer-l7leveler-kubr-yp-sas-236-BAL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":541,"timings":{"blocked":140,"dns":168,"connect":47,"send":0,"wait":91,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/47/55/89/47558908cd61a0341a57d965ff682937/47558908cd61a0341a57d965ff682937.22.jpg","fqdn":"cdn77-pic.xvideos-cdn.com","domain":"xvideos-cdn.com","tld":"com"},"ip":{"addr":"185.76.9.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideos.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 15 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3C:93:93:D2:61:40:5B:B9:F9:EB:A2:B0:78:48:57:C0:F2:41:42:42","sha256":"D9:3E:6D:83:C8:0E:74:42:32:A1:4F:A3:9B:CA:3A:9D:E0:D2:60:38:FF:BF:EB:0E:36:AA:3E:41:44:D5:A7:59"}}},"request":{"raw":"GET /videos/thumbs169ll/47/55/89/47558908cd61a0341a57d965ff682937/47558908cd61a0341a57d965ff682937.22.jpg HTTP/1.1\r\nHost: cdn77-pic.xvideos-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13204\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Thu, 06 Jun 2019 13:40:35 GMT\r\ncache-control: max-age=10368000, public\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBuUwJBgH3eBpEAAwBnJIhIwH3UH0JAAwBj/Q62AH3iwIBAA\r\nx-77-nzt-ray: 5451992d3ed7dc5bb71d5969abfa480a\r\nx-accel-expires: @1768014472\r\nx-accel-date: 1762984767\r\nx-accel-date-max: 1745929921\r\nx-77-cache: HIT\r\nx-77-age: 4463224\r\nserver: CDN77-Turbo\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":13204,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 352x198, components 3","md5":"4fec223246991a4a467aaf44741c32d4","sha1":"d9c2d528818a7992445210d22da229d4b24239cc","sha256":"85b331b47930e7cccb56dc8ff0c54300fbc8d2f6944dd72a8e01350088d04459","sha512":"f9c85e3c6a8a8b0c3a536176b278e79aedf75f2e21ff80eb4df0eb400c87ce2962a913268a85e8b3e0fc4af4a8ca3bc90300be27d45e7d28c7f4d453c775b63d","ssdeep":"384:y06CdGGis/WXJfVeqABDV13vXhyt1OlO6:y/CzYlVeqCnsGD","tlshash":"6552bf6b13b96bf5b5fe5cf34ea1a87364d7d91070cb061c0b6124af7386e05e84c54a","first_seen":"2025-03-25T21:53:49.941279Z","last_seen":"2026-01-24T20:33:37.443724Z","times_seen":65,"resource_available":false,"data":null}},"time_used":3560,"timings":{"blocked":253,"dns":0,"connect":8,"send":0,"wait":9,"receive":9,"ssl":3281},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nlt05.videosection.com/e/3/8/e38a2072eba0f195f3897f493ec6bedb/thumbs/1280x720/1.webp","fqdn":"nlt05.videosection.com","domain":"videosection.com","tld":"com"},"ip":{"addr":"104.26.12.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"videosection.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 23:43:58 GMT","end":"Thu, 19 Mar 2026 00:43:56 GMT"},"fingerprint":{"sha1":"1B:DE:EF:B4:F2:A0:0F:26:0E:AD:58:28:FB:6A:6D:74:AB:51:69:21","sha256":"6B:3B:55:6F:D5:82:0E:82:D9:63:B8:F7:29:98:D5:93:29:6A:16:82:14:79:4D:A0:37:E2:3A:5B:D1:35:9E:34"}}},"request":{"raw":"GET /e/3/8/e38a2072eba0f195f3897f493ec6bedb/thumbs/1280x720/1.webp HTTP/1.1\r\nHost: nlt05.videosection.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 86162\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Metrics-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nlast-modified: Fri, 23 May 2025 12:02:27 UTC\r\naccept-ranges: bytes\r\nage: 2008\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OBegPQxZwMCbkQcfaoRrm3MRqYXflAjxVIDtWnPvlBrbJFpPdrgePmHHAvcqWYISxS3AH%2BklOhdIx0pcmuJ57jsz84fnLf1Ze%2FAMHgGCnVZME7Q%3D\"}]}\r\ncf-ray: 9b82f15cdc945699-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86162,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"02890218b8b1f09c2088c7317fdc41ec","sha1":"377de83cdbc75349825e159d88c4bef88def6373","sha256":"c6c17d58ef504460a25e05af2951d2bf36ba24565f7292b0bab7f7e2fbf551f8","sha512":"6ecd7f4d5a041370a61f96929d40b6e07e641ac251b2e719a07db536a968e4f8cfdb68b0592598caedf607c399e21c488ae395dd3ae6434e9442a9a6c34f49ed","ssdeep":"1536:wkEA9WAXzQxYXLuNLcwHG8FhpU00V71n7OHpLqYntjLqG7i73hOuk:wZkWADQxwLuG8bexnwYAqGVuk","tlshash":"2b831218e59029f9bb22b7d3dcc8f95095f74e38eb17a72ea920571086c74e64ad0373","first_seen":"2025-06-04T07:13:46.915687Z","last_seen":"2026-01-08T04:21:04.276476Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3792,"timings":{"blocked":3476,"dns":1,"connect":3,"send":0,"wait":11,"receive":2,"ssl":250},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudflare-br-pic.kwai.net/upic/2023/12/30/19/BMjAyMzEyMzAxOTE3MDlfOTg0MjMzNTEyXzE1MDEwNDkxMDg1NTYyMl8yXzM=_oscn2_B112a3c2f5c9789b9256a7359938b021f.webp","fqdn":"cloudflare-br-pic.kwai.net","domain":"kwai.net","tld":"net"},"ip":{"addr":"3.164.230.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kwai.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 13 Oct 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4F:8D:56:E3:EA:C4:5F:B0:F9:60:8D:78:D5:FD:CB:4C:99:D3:38:2D","sha256":"3E:29:EB:07:58:BD:CA:36:F6:B5:08:14:90:FF:CC:CF:51:D0:3D:69:04:24:ED:22:DE:46:CB:B0:90:E2:4E:31"}}},"request":{"raw":"GET /upic/2023/12/30/19/BMjAyMzEyMzAxOTE3MDlfOTg0MjMzNTEyXzE1MDEwNDkxMDg1NTYyMl8yXzM=_oscn2_B112a3c2f5c9789b9256a7359938b021f.webp HTTP/1.1\r\nHost: cloudflare-br-pic.kwai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 25836\r\ndate: Thu, 01 Jan 2026 17:49:54 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\netag: \"04D12CDB248B5986B54603989AFFFD84\"\r\nx-bs-hash-crc64ecma: 12359608684385368614\r\nx-bs-object-status: 0\r\nlast-modified: Sat, 30 Dec 2023 11:17:44 GMT\r\nx-nws-log-uuid: 1690999483093627249\r\nexpires: Fri, 01 Jan 2027 17:49:54 GMT\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3ed36d9549564152ef96812502a86608.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: YwyD_KFsWXPKdjHOg0dLOxEGbmMlFPjPlaZ3uGSKJCkc7kM9-nT2Og==\r\nage: 158198\r\ntiming-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":25836,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 480x848, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"04d12cdb248b5986b54603989afffd84","sha1":"23cdfd95034e09fd159ba7d272e884a329f22cbd","sha256":"44222f4d112e9817cf1057cdfae03fe6c61a97d779d0813ce30a856ecabbbfa6","sha512":"ea6d4a9e649170094f5e0db7f214e01a1f30e924516f640d2d7590091973c08ad8b577f537b8e8e70c264097fef1fd0425cf70ff2829cd7ae5155ee755556ece","ssdeep":"384:TDlaeWbFmcvG8NI1Bl6jsFCIHqJVYEn2lrIRTO82/uJYlqFRwQZH9kWOefA3zQ:IeWXe9TRxiLKcTO5gYlqks9gU","tlshash":"08c2e195e5ab9112ac08889f1403cc90d7bd03498669eec57c2ceb8555c2cdcb7f598f","first_seen":"2026-01-03T13:47:52.47079Z","last_seen":"2026-03-03T09:47:10.914271Z","times_seen":7,"resource_available":false,"data":null}},"time_used":4051,"timings":{"blocked":3419,"dns":1,"connect":13,"send":0,"wait":12,"receive":1,"ssl":580},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.twi-videos.net/favicon.ico","fqdn":"www.twi-videos.net","domain":"twi-videos.net","tld":"net"},"ip":{"addr":"172.67.181.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twi-videos.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 10:50:26 GMT","end":"Sun, 15 Mar 2026 11:47:50 GMT"},"fingerprint":{"sha1":"B5:B9:48:51:BC:7F:B0:FE:05:2F:AB:85:59:0B:25:83:10:20:74:06","sha256":"6A:B9:1D:65:6A:C8:96:78:AD:B0:8D:7F:7E:09:8D:76:3F:A3:AD:CC:5F:3F:83:1A:F8:D4:28:AC:D6:DE:37:6A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.twi-videos.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-length: 0\r\nlocation: https://www.twi-dl.net/favicon.ico\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SHTS8a9n9FEWc6J4nZQxPvelyH4tsWvXYO8a3eMFBCDxxIYfWAlGloz77K5Jr%2BdKCjeF98PopUJk3GHoe%2FbHJeelIofnmxlEGr7hm0k1lnN3mw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b82f16b9f7db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":23,"connect":1,"send":0,"wait":3,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.vidmo.pro/thumbs_320/4c/52/4c52f4fe2731c1c37703f4e6fd47914d/12796175.jpg","fqdn":"en.vidmo.pro","domain":"vidmo.pro","tld":"pro"},"ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"en.vidmo.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 20:48:10 GMT","end":"Thu, 19 Feb 2026 20:48:09 GMT"},"fingerprint":{"sha1":"B8:8B:9C:2B:E9:53:D3:85:0E:57:74:8D:32:07:72:DF:38:F3:91:DA","sha256":"9B:B3:9F:DD:FB:1B:36:C3:04:60:BF:DF:87:AA:AB:5D:F6:0D:45:20:77:9B:29:19:5F:C4:B6:F1:04:C9:23:3E"}}},"request":{"raw":"GET /thumbs_320/4c/52/4c52f4fe2731c1c37703f4e6fd47914d/12796175.jpg HTTP/1.1\r\nHost: en.vidmo.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11423\r\nlast-modified: Sat, 09 Jan 2021 13:30:23 GMT\r\nexpires: Wed, 17 Apr 2024 10:36:49 GMT\r\ncache-control: max-age=604800, public, no-transform\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11423,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 826x825, segment length 16, comment: \"Lavc58.35.100\", baseline, precision 8, 320x240, components 3","md5":"67002aea52a01a7c0d03102c7fe8c024","sha1":"4291de2badfaef14a5b62f0bda43a0ff8b9d4c55","sha256":"b795e580479cf0cf6f21c2a00def52448694352ec4cc4368b60758b33586b91c","sha512":"f80a1865957699d380e56d79fcba8f80b08d8ac73da108fa337328ed12cb6d66bc733eb8d1013bf46c4ee71478c5fef0202cb6f52eeb4931fdf4e10d92eeeb45","ssdeep":"192:gN5TXysC9czmHyTxG6opf57L7JGQhSTRGETecGW3BhhhCGnnnrSxFa1CB6A/KMJx:S5T/jzmHUp67JyQETJGqhOgnz1cNSGdP","tlshash":"3732b08e3094c4ad5e5619b51e9cba6d4013e8a067c302f0ac897bf028af79f345727f","first_seen":"2024-08-19T22:12:17.15138Z","last_seen":"2026-03-01T19:27:35.683624Z","times_seen":26,"resource_available":false,"data":null}},"time_used":3638,"timings":{"blocked":3489,"dns":1,"connect":94,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"en.vidmo.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rtgallery.net/tb/amazonia-savages.jpg","fqdn":"rtgallery.net","domain":"rtgallery.net","tld":"net"},"ip":{"addr":"5.63.144.84","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtgallery.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 17:00:08 GMT","end":"Tue, 17 Feb 2026 17:00:07 GMT"},"fingerprint":{"sha1":"5D:8A:5C:FE:24:B0:28:D3:1B:23:AE:94:5D:BC:79:7D:DD:8F:20:3F","sha256":"7A:EB:AE:AA:18:8B:DF:0F:6B:03:FE:39:39:5C:2D:B6:E1:64:4C:4E:FC:EF:35:B2:E5:8E:27:F9:70:BF:DB:C3"}}},"request":{"raw":"GET /tb/amazonia-savages.jpg HTTP/1.1\r\nHost: rtgallery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Sat, 03 Jan 2026 13:46:31 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 94960\r\nLast-Modified: Wed, 04 Mar 2020 20:01:28 GMT\r\nConnection: keep-alive\r\nETag: \"5e600918-172f0\"\r\nCache-Control: private, max-age=600, must-revalidate\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":94960,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: \"Created with GIMP\", progressive, precision 8, 480x360, components 3","md5":"218e2882ffb27db93eaf5c6ba5a9a193","sha1":"28b935dcf147546735b3ca92da3a8d24bf9ad988","sha256":"259de0c00b96b0246cd923be6afb803a870f93de39dbfc6863f406c2762dcfc1","sha512":"e995d33d56e7e997b5da7c7d309a4ac290f41936a576af23f7b90cda7a87b6540b03fb225e4c390c1c871e1ae221eacf6aaac92cda3bd3000d64d23c4166018f","ssdeep":"1536:HZTUaEGorHdiQCFr2vuATsWCq9QdlX8dqz9vayvpanJvmHXPFcE9hxXLukatXus5:GQT0oqOdlEqzdaZwfl9hxCtXpysYXe","tlshash":"8493121367aa478aecc2427e11546f9b63df8e38e30547cc93cdb967a2b11f4a908247","first_seen":"2024-12-06T08:18:00.276136Z","last_seen":"2026-01-16T22:49:50.116613Z","times_seen":28,"resource_available":false,"data":null}},"time_used":3870,"timings":{"blocked":3441,"dns":1,"connect":100,"send":0,"wait":37,"receive":39,"ssl":216},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/favicon.ico","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.vidmo.pro/thumbs_320/91/6b/916b9f559ee1cfdf7bb94d8643a9d677/15433400.jpg","fqdn":"en.vidmo.pro","domain":"vidmo.pro","tld":"pro"},"ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"en.vidmo.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 20:48:10 GMT","end":"Thu, 19 Feb 2026 20:48:09 GMT"},"fingerprint":{"sha1":"B8:8B:9C:2B:E9:53:D3:85:0E:57:74:8D:32:07:72:DF:38:F3:91:DA","sha256":"9B:B3:9F:DD:FB:1B:36:C3:04:60:BF:DF:87:AA:AB:5D:F6:0D:45:20:77:9B:29:19:5F:C4:B6:F1:04:C9:23:3E"}}},"request":{"raw":"GET /thumbs_320/91/6b/916b9f559ee1cfdf7bb94d8643a9d677/15433400.jpg HTTP/1.1\r\nHost: en.vidmo.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9883\r\nlast-modified: Fri, 24 Feb 2023 20:24:01 GMT\r\nexpires: Mon, 03 Feb 2025 20:47:06 GMT\r\ncache-control: max-age=604800, public, no-transform\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9883,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3","md5":"138a410e62483cd58bddae3ec441aca8","sha1":"04c22dc24a5fbe66d4777be50247d89c26830415","sha256":"bcf489e4b1d12631e5ff698008372daa6949dfc13a2f9afe03df8b913b6694c3","sha512":"2054aa5d46ff9851140057572d773b8b4d0469f4c02b7a762b4109e7c0b2e95d0800f4a8cedb1449ff0853de9ef72eacee49b450c9c9321480e9a6ee8e5491f2","ssdeep":"192:mio5PXSdeSsdNiniR94m6UD/+KO5EusyplqLme85tYF9/463:mCeFiniRWMD/qplqLS6n3","tlshash":"ff127d231b658392da6d83f2bd631ca74ecacb74f695b5de05320d872740b726e0f026","first_seen":"2025-06-13T21:52:21.175186Z","last_seen":"2026-01-31T10:39:20.893238Z","times_seen":17,"resource_available":false,"data":null}},"time_used":3574,"timings":{"blocked":3419,"dns":1,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"en.vidmo.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.imghuo.cfd/nb/tmb/000/000/333/2.jpg","fqdn":"img.imghuo.cfd","domain":"imghuo.cfd","tld":"cfd"},"ip":{"addr":"185.53.178.99","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:32.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.imghuo.cfd","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Dec 2025 14:59:28 GMT","end":"Mon, 23 Mar 2026 14:59:27 GMT"},"fingerprint":{"sha1":"00:9C:65:3E:87:85:26:0F:B6:58:D3:F2:6F:B7:DA:06:3E:4C:47:26","sha256":"A0:FF:38:A4:88:31:FA:C6:40:D3:03:3E:F0:7D:C8:DB:E6:05:16:5E:C3:9B:B8:C8:47:82:D3:37:51:C1:01:CF"}}},"request":{"raw":"GET /nb/tmb/000/000/333/2.jpg HTTP/1.1\r\nHost: img.imghuo.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\nalt-svc: h3=\":8443\"; ma=2592000\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 03 Jan 2026 13:46:32 GMT\r\nstatus: 400 Bad Request\r\nvia: 1.1 Caddy, 0.0 Caddy\r\nx-blocked: 11015.10\r\ncontent-length: 20\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn1.hotmoza.tv/thumb/fb/63/72/fb6372fde0d0208286b402652b160e23.jpg","fqdn":"cdn1.hotmoza.tv","domain":"hotmoza.tv","tld":"tv"},"ip":{"addr":"104.21.70.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotmoza.tv","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 22:14:18 GMT","end":"Wed, 18 Mar 2026 23:10:42 GMT"},"fingerprint":{"sha1":"13:95:73:49:25:9B:A5:9F:37:DA:EB:FC:66:4B:44:80:9D:54:03:8B","sha256":"68:BC:DA:3E:17:C2:7E:93:BC:49:E4:F4:F9:30:6C:D0:23:D1:05:BE:99:82:2C:AD:E9:F9:64:D2:CE:D4:B7:12"}}},"request":{"raw":"GET /thumb/fb/63/72/fb6372fde0d0208286b402652b160e23.jpg HTTP/1.1\r\nHost: cdn1.hotmoza.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8206\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2020 17:02:16 GMT\r\netag: 9f4d12c88124721478e491985f84cf5f\r\nx-timestamp: 1581267735.35617\r\nx-object-meta-mtime: 1581267730.680514\r\nx-trans-id: tx03222ce0435d4eb3bd273-005e64fff3\r\nx-openstack-request-id: tx03222ce0435d4eb3bd273-005e64fff3\r\ncache-control: max-age=172800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Sat, 03 Jan 2026 14:21:31 GMT\r\nx-cdn-host-id: DS9225\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nage: 170696\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AriL8HWJAOEQpAGxl83Qm0EPlgte259GVfUYQF0kc%2FQ80jbWHhgnCZct5kn1b4sHjzs4HtvQaPYm%2FZdiMjaRycxUO5MgU9YhkKA9p34%3D\"}]}\r\ncf-ray: 9b82f144aa2856cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8206,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 320x180, components 3","md5":"9f4d12c88124721478e491985f84cf5f","sha1":"7891a2224e59c17fe6356c354c401c5ce40125bb","sha256":"cb8cc660ac6b25a737d6984dc71b65e36a9aee195b1710092f3422c311fc4d86","sha512":"42fd6e2df41883ac3166ccf3e027840995e305fa3634ef50dc017ce701b5d455769c4c2957bef10906066b3e598dad92beef149a1fcbeff89d0c187ee816f130","ssdeep":"192:22nEvl/US0rtV4iHv1TjYgTs+UiwLHXfbGWOLYpsLvsuY:22nCld0ZHtTXTs+UNTjGWOspYsZ","tlshash":"d602a046a908edfdbc7fdbb6d6080d1986c6ddac04624e6607c027c668870be6c91711","first_seen":"2026-01-03T13:47:52.483101Z","last_seen":"2026-01-08T04:21:04.426144Z","times_seen":3,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.com/favicon.ico","fqdn":"www.9188porn.com","domain":"9188porn.com","tld":"com"},"ip":{"addr":"172.67.220.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9188porn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 09:28:02 GMT","end":"Mon, 02 Mar 2026 10:23:10 GMT"},"fingerprint":{"sha1":"A6:75:08:AB:20:D7:2A:E6:2B:50:C1:DA:59:F5:40:7B:7D:28:9E:C5","sha256":"83:9C:6B:2B:35:92:4D:96:4D:22:2B:45:AC:B4:E7:32:B2:F7:DA:26:69:E8:C4:BF:67:0F:41:0C:14:74:D9:09"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.9188porn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sat, 03 Jan 2026 13:46:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f2r9K38a%2B7LAc5v6%2BsfAdC3gjyROyYCN4syUsVLS7SJi%2B5fn2nD4iCE2KmlLmdHeU%2BnC78%2BIz%2BaFFrVTqZ8RBmu70wYFjWWR%2FR5%2F1hbyYO4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b82f16a2b2a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornodrochka.org/favicon.ico","fqdn":"pornodrochka.org","domain":"pornodrochka.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.294Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pornodrochka.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":328,"timings":{"blocked":188,"dns":140,"connect":89,"send":0,"wait":0,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.effedupmovies.com/wp-content/uploads/2025/09/cropped-favicon-32x32.png","fqdn":"www.effedupmovies.com","domain":"effedupmovies.com","tld":"com"},"ip":{"addr":"45.138.107.14","port":443,"asn":208414,"as":"WEDOS Internet, a.s.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effedupmovies.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 02:09:26 GMT","end":"Wed, 28 Jan 2026 02:09:25 GMT"},"fingerprint":{"sha1":"A0:38:95:81:F9:B6:07:3A:91:08:79:94:2C:37:D0:A0:70:E0:C9:8A","sha256":"E1:0C:A5:0E:23:DF:97:60:D8:03:51:23:22:3C:F6:70:39:50:68:A8:83:61:4D:49:EE:12:D9:F3:7E:BB:F4:45"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/cropped-favicon-32x32.png HTTP/1.1\r\nHost: www.effedupmovies.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 12890\r\nlast-modified: Sat, 13 Dec 2025 14:12:03 GMT\r\netag: \"693d7433-325a\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-protocol: HTTP/2.0\r\nx-request-id: e15f30b4dfb3e86787152bba973f90ae\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12890,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"ab96da12d8312559415480d1f3036eb0","sha1":"1d014a2419e02827bd13334af29578b1c9b4d6bf","sha256":"1cca498904b87c8b14e4100203f31d6bd9b9cac47da3b99ec80f6042c91b47f9","sha512":"4fc3dc1aac1efb54e7877b0bfbd23ea2db2e4f65d9fd4e5039435635caaf167f05df17cee77dbd4d44aa1d2f0911aa6384b34eb8372920dc05fa84b98acf905f","ssdeep":"384:hqhkHlVJH8TaseXN+yXLnFnbrFF7E162qFuU4Khaz5:AOr8TyI4VX2qKV","tlshash":"5042bffbdbc7842102ba18ea5ded053750b294bc0e0b1ac1e6f8634228d36810d5ef4d","first_seen":"2023-05-04T19:26:02Z","last_seen":"2026-04-25T09:48:56.391825Z","times_seen":163,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"www.effedupmovies.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.apian088.sbs/sp/media/videos/tmb/5021/6.jpg","fqdn":"img.apian088.sbs","domain":"apian088.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apian088.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 12:00:16 GMT","end":"Sat, 14 Feb 2026 12:44:47 GMT"},"fingerprint":{"sha1":"81:62:5B:8E:F8:D6:89:63:71:73:E3:18:57:53:27:65:B5:AD:00:32","sha256":"1E:DA:15:FE:0A:FF:52:03:D1:A0:EE:60:AD:2A:3A:55:0D:CD:56:3F:75:52:A1:90:E2:E7:70:D3:2A:15:12:5E"}}},"request":{"raw":"GET /sp/media/videos/tmb/5021/6.jpg HTTP/1.1\r\nHost: img.apian088.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10891\r\nserver: cloudflare\r\nlast-modified: Sat, 23 Mar 2024 12:20:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65fec915-2a8b\"\r\naccept-ranges: bytes\r\nage: 2522417\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BAXbh70tC2akZn8ROFHKG3Ssl8EKH9iHQbHZXIFdECQToZ7MIUM7yqjIfbLEbGawCwDCsw7YYZFHRosNNUAqhOAMQCa4apz4oebfsrjv\"}]}\r\ncf-ray: 9b82f144ad4756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10891,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 384x216, components 3","md5":"fb26939eaf6a0e6ae7cd27ae5c9a0e50","sha1":"60ccc9e766f4dc3bf340dfbd0882859e51bd3996","sha256":"69e01ee123e49d1ed814ffbdaee78da99556d8ea7264326c07e225a90d64c850","sha512":"8a08c6650129c354b22f097547576112023c9f81f5d46d3bec6915f64354a7d696b03c2179fa77c87a899257a509aceb44684c18fdf5bb44a05d7b57ac5a584e","ssdeep":"192:4QAVKR05w1wGtiP6h2DSvjvW+ecVqsk2KWfvf93awK42PygxobbIBYfsLpDIPpbs:4w05wyTI2micVvKWf9qzPxqbIBYOZM4","tlshash":"1822bf09557600c03ce795bf4b032d96b3c6e4b233ea4bc9a1e51864c7f0b9a967a52a","first_seen":"2025-02-21T07:37:56.160471Z","last_seen":"2026-03-02T07:55:32.749872Z","times_seen":46,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/25/fb/81/25fb81980ac730bb6d0220c3c200a2cd/25fb81980ac730bb6d0220c3c200a2cd.3.jpg","fqdn":"cdn77-pic.xvideos-cdn.com","domain":"xvideos-cdn.com","tld":"com"},"ip":{"addr":"185.76.9.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideos.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 15 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3C:93:93:D2:61:40:5B:B9:F9:EB:A2:B0:78:48:57:C0:F2:41:42:42","sha256":"D9:3E:6D:83:C8:0E:74:42:32:A1:4F:A3:9B:CA:3A:9D:E0:D2:60:38:FF:BF:EB:0E:36:AA:3E:41:44:D5:A7:59"}}},"request":{"raw":"GET /videos/thumbs169ll/25/fb/81/25fb81980ac730bb6d0220c3c200a2cd/25fb81980ac730bb6d0220c3c200a2cd.3.jpg HTTP/1.1\r\nHost: cdn77-pic.xvideos-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21192\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Thu, 26 Aug 2021 03:06:49 GMT\r\ncache-control: max-age=10368000, public\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBuUwJBgH3HkMTAAwBJRPCQAH3v9MRAAwBj/Q63QH3c6IJAA\r\nx-77-nzt-ray: 5451992d3ed7dc5bb71d5969b65c4c0a\r\nx-accel-expires: @1770133913\r\nx-accel-date: 1766185625\r\nx-77-cache: HIT\r\nx-77-age: 1262366\r\nx-accel-date-max: 1704609025\r\nserver: CDN77-Turbo\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":21192,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", progressive, precision 8, 352x198, components 3","md5":"a9d3f608f20914058ae8ee5554bb04f3","sha1":"6b24b5a96e10f2e5934c39389e99b44b0e7d2638","sha256":"197bc55eefbaf7db3fed1acfbcb3d82447e00f5e10ec0e7c97148a9cb5f43ce1","sha512":"c9bb84b55913c66de4c4fcf732dd49e2cfd80b1a65bc38f88aecf191370a4286279bec6e84c0109bcc757d459c4314b9d9c9cdb4a93168a9543fa2c044e6f7aa","ssdeep":"384:+QMoLghnM6U3hXZ0GinLEB3i10Zvp478TWC3Ji0I6jv2mc:2thnM62aGi0O0T44Va6jv7c","tlshash":"cd92e0622c3f4123c13c5239753493ba0f8a765691ef6a1c62044ae6be4d3da60bddd9","first_seen":"2023-10-01T00:22:56Z","last_seen":"2026-01-03T13:47:52.49345Z","times_seen":13,"resource_available":false,"data":null}},"time_used":3113,"timings":{"blocked":3087,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ds2.obmenvsemfiles.net/fo/files_attachments/651/ccd/651ccd537e7ef58950ebab547b4143fc.jpg","fqdn":"ds2.obmenvsemfiles.net","domain":"obmenvsemfiles.net","tld":"net"},"ip":{"addr":"85.17.28.50","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ds2.obmenvsemfiles.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 20:51:10 GMT","end":"Thu, 02 Apr 2026 20:51:09 GMT"},"fingerprint":{"sha1":"8D:D5:BF:CF:E1:F5:A5:6B:23:93:49:76:48:F5:FA:00:03:06:23:96","sha256":"C7:A1:07:F1:31:23:B9:24:9F:02:F9:B9:6F:67:A0:02:66:CC:35:EC:E0:22:69:FA:D1:6D:93:97:A7:7D:23:79"}}},"request":{"raw":"GET /fo/files_attachments/651/ccd/651ccd537e7ef58950ebab547b4143fc.jpg HTTP/1.1\r\nHost: ds2.obmenvsemfiles.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18124\r\nlast-modified: Sat, 16 Apr 2016 09:30:48 GMT\r\netag: \"57120648-46cc\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18124,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x259, components 3","md5":"651ccd537e7ef58950ebab547b4143fc","sha1":"a9f29be01028476ced669085d4b79f03ee559a9b","sha256":"dfa65ad07bc8df7b84798c735859127d5681880730108e1f77079131e7f555db","sha512":"d721c1dbd62de07897f1e8ddc3d3232b4bd76df527b12d44a4805061aa99cbadef482298c219de28b2de1407e806a8c75f5156517d5e1238045d202f38217fdd","ssdeep":"384:nYyyPg2zUDA/ioHz9Tmms7YSEIrcsbdBnQJ9KcO05T/Xu+F2q:Y74ogNYNEcsbdlQJ9nO0VPPF2q","tlshash":"7582d146a3469ddeac8ada808f032f3b56c8e3d90867c19e319477181b5ccce5e50b67","first_seen":"2024-08-19T16:37:07.480151Z","last_seen":"2026-01-15T05:39:21.004785Z","times_seen":20,"resource_available":false,"data":null}},"time_used":3873,"timings":{"blocked":3450,"dns":1,"connect":98,"send":0,"wait":61,"receive":4,"ssl":223},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ds2.obmenvsemfiles.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"en.vidmo.pro/thumbs_320/3c/d1/3cd1bcdc10f65b6722856ea12b8417be/13654225.jpg","fqdn":"en.vidmo.pro","domain":"vidmo.pro","tld":"pro"},"ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"en.vidmo.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 20:48:10 GMT","end":"Thu, 19 Feb 2026 20:48:09 GMT"},"fingerprint":{"sha1":"B8:8B:9C:2B:E9:53:D3:85:0E:57:74:8D:32:07:72:DF:38:F3:91:DA","sha256":"9B:B3:9F:DD:FB:1B:36:C3:04:60:BF:DF:87:AA:AB:5D:F6:0D:45:20:77:9B:29:19:5F:C4:B6:F1:04:C9:23:3E"}}},"request":{"raw":"GET /thumbs_320/3c/d1/3cd1bcdc10f65b6722856ea12b8417be/13654225.jpg HTTP/1.1\r\nHost: en.vidmo.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13102\r\nlast-modified: Mon, 06 Dec 2021 01:26:19 GMT\r\nexpires: Fri, 22 Nov 2024 14:04:58 GMT\r\ncache-control: max-age=604800, public, no-transform\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13102,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3","md5":"66b86ce675b8df5ced3b78e70dd7f045","sha1":"a033be39f3487c05233c3ba8f2710755e53ec8bb","sha256":"8cdee0da748258997798f352f89523a2ab3b7ed2cc3aad5a37afa7028eb1ee0d","sha512":"1fafbffe453e4dfb0c6992debb68d58dd210b2f0b3319a033448330b3d86496d2d98a1c68a706ccf286624e95b0c595cc6c568f0e5934b2edba9f1f38467fe3a","ssdeep":"192:mVH+WkRMRXpzMB7C/wc/JKcRhxU589Gm9K1WiT0c1WgDOsJ+VkU2bEEQFzMV:mVe9Wpojc/JZwjmuEcPDOsJZUOSzq","tlshash":"ad42d0a36a72834c1a6dcba76958339403fbaf6b53b3bf500110119c5e70fe21a82c05","first_seen":"2025-06-07T06:19:16.139246Z","last_seen":"2026-03-01T22:32:14.091623Z","times_seen":15,"resource_available":false,"data":null}},"time_used":3565,"timings":{"blocked":3399,"dns":1,"connect":94,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"en.vidmo.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"page.phic4.top/myda.php","fqdn":"page.phic4.top","domain":"phic4.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:32.227Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /myda.php HTTP/1.1\r\nHost: page.phic4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":6836,"timings":{"blocked":-1,"dns":5075,"connect":1516,"send":0,"wait":0,"receive":0,"ssl":244},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"page.phic4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250719-1/72efd9f4c86159e600e83a8e04555be8.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"142.248.99.81","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 09:53:21 GMT","end":"Fri, 06 Mar 2026 09:53:20 GMT"},"fingerprint":{"sha1":"55:92:B5:BC:78:CB:75:63:3B:0F:C6:A3:DD:2D:2F:7C:FA:07:B7:4A","sha256":"02:67:5F:F2:7D:A5:B6:59:8F:77:98:9C:EF:94:84:1A:E6:C9:FC:6E:A7:27:06:47:BB:16:5D:BE:A9:91:90:79"}}},"request":{"raw":"GET /upload/vod/20250719-1/72efd9f4c86159e600e83a8e04555be8.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 151008\r\nlast-modified: Sat, 19 Jul 2025 03:46:19 GMT\r\nvary: Accept-Encoding\r\netag: \"687b150b-24de0\"\r\nexpires: Wed, 28 Jan 2026 10:30:14 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 443774\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":151008,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x360, components 3","md5":"7a3def8e138975fbc85c941b7e325396","sha1":"f0e18847e2022444329ba605e473d6cefd1c0b9d","sha256":"ed79dfc407d01fc459f24bf2ab6996e98830bbc0146e9ca3e23e251ae2217104","sha512":"7675ba1b475d92f877ef90861fa8ff8d990ef93c44a8862e0fc9dca46c9d923c52781708b9899954e1606b871e01d6c925f78601f372f0b312d6618986f07a69","ssdeep":"3072:ErhwRTqgrNimBV1va5Gedf/atPEuDlVgA36UO7AiSQziMl:+wBqSLBVCGelSt8klrlOvUMl","tlshash":"97e3122c4e028fb2fdc0a2b2566fac4775cccac97bee612458e5a564c74136d8c2ed53","first_seen":"2025-07-29T16:40:28.9511Z","last_seen":"2026-02-06T15:51:51.626757Z","times_seen":186,"resource_available":false,"data":null}},"time_used":982,"timings":{"blocked":115,"dns":0,"connect":0,"send":0,"wait":651,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xvideosporno.blog/wp-content/uploads/2022/09/video-porno-de-incesto-com-historia.jpg","fqdn":"xvideosporno.blog","domain":"xvideosporno.blog","tld":"blog"},"ip":{"addr":"104.21.43.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideosporno.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 11:32:38 GMT","end":"Wed, 11 Feb 2026 12:31:13 GMT"},"fingerprint":{"sha1":"67:FC:CD:61:8C:B9:3F:02:17:52:DF:8A:E8:69:61:78:45:0B:31:97","sha256":"AA:6E:E4:F3:C4:CA:F1:D4:12:58:99:71:19:06:33:E2:8F:AE:67:08:5E:98:22:F4:88:28:F0:A9:25:2E:70:FA"}}},"request":{"raw":"GET /wp-content/uploads/2022/09/video-porno-de-incesto-com-historia.jpg HTTP/1.1\r\nHost: xvideosporno.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22666\r\nserver: cloudflare\r\netag: \"633256e1-588a\"\r\nversion: MS25061701\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nx-served-by: xvideosporno.blog\r\nage: 281370\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nnCViKm%2BW2P9Oo67hi9JFiLcth575Ch2Sdtdt0O7k8mpPA7QW%2FWyfLznbcOvcuboxfD7N0nBHlnyK%2Fzl3lqopJ6VPhL6%2FUIRZOvvmGMRNLAa\"}]}\r\ncf-ray: 9b82f163ebc6dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22666,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x337, components 3","md5":"8da8a55453e75f8e33a8bfecef044b64","sha1":"97f67d9887b4ec127504a03afe07393a2fbddd4b","sha256":"73887eee5a66ca9b883cd0b76c867965b3919aa9f5aaeddc2ffc8799c0d27484","sha512":"40761aca7906a15c9574c0ac6211a2fde698cc844edafe6e8d000e36f0c8e1ef954bb15f7c1348f5af63e19e4831f08dd41913ec9ad6a2329b4b29fce6f92600","ssdeep":"384:7XlY6fRFCBCvaAWcuwymC1VGyHJnqfEPjP+sjwoa6gz:7HjACvIcqZPGypn+KPBjwoI","tlshash":"eca2d192174ef2198dbf19a739f3425fda0fdd4725d6941889c3901f3770a4e1706543","first_seen":"2025-03-12T03:11:58.102713Z","last_seen":"2026-03-03T14:10:03.609396Z","times_seen":35,"resource_available":false,"data":null}},"time_used":4946,"timings":{"blocked":114,"dns":4811,"connect":3,"send":0,"wait":7,"receive":1,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haha888.xyz/video/data-setup","fqdn":"haha888.xyz","domain":"haha888.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.003Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /video/data-setup HTTP/1.1\r\nHost: haha888.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ekkofilm.dk/media/dyn/film/still/generated/378_1200x630.png","fqdn":"www.ekkofilm.dk","domain":"ekkofilm.dk","tld":"dk"},"ip":{"addr":"65.109.19.181","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ekkofilm.dk","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Nov 2025 07:37:52 GMT","end":"Tue, 24 Feb 2026 07:37:51 GMT"},"fingerprint":{"sha1":"44:1E:0F:83:75:53:2B:9E:80:14:CB:39:D1:0B:58:52:E6:46:A3:75","sha256":"4A:7A:21:06:B2:E6:55:C4:59:3C:32:C6:44:3A:38:90:65:63:30:CA:BE:1D:7F:3E:75:88:74:99:0E:37:A8:C7"}}},"request":{"raw":"GET /media/dyn/film/still/generated/378_1200x630.png HTTP/1.1\r\nHost: www.ekkofilm.dk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Sat, 03 Jan 2026 13:46:31 GMT\r\nContent-Type: image/png\r\nContent-Length: 489610\r\nLast-Modified: Mon, 03 Mar 2014 09:14:17 GMT\r\nConnection: keep-alive\r\nETag: \"531447e9-7788a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":489610,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1001 x 547, 8-bit/color RGB, non-interlaced","md5":"4b84d8e2197e6c4615fa2d59f85ac26f","sha1":"ba5384af55885fa041133aea6e02d75d50d7abe1","sha256":"585d5b906cd31c76346ddc21ca89b7eacd38de2de457442de161c2f793af61db","sha512":"b3024c5f8c0d88f904af8f56b20b7fef952e7a93c83b7e09a9ad57a49276b45d7205607c14c0f306479240ef7a91c96d1fee093662166658c6ad80a7371f9d92","ssdeep":"12288:4SRDsOTkd24aBiJ+N9ygkPWOTYzwppifmYXKimUw:4e4wkfxJpg+0Xbrmh","tlshash":"63a4235f60ccaac929093435a1046a7b1a30cbc559a70bd4e19ce8dc3abdcf93fad553","first_seen":"2024-04-18T20:55:23Z","last_seen":"2026-03-02T07:55:32.855238Z","times_seen":33,"resource_available":false,"data":null}},"time_used":3900,"timings":{"blocked":3485,"dns":1,"connect":52,"send":0,"wait":28,"receive":62,"ssl":223},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lsbzytp.com:3519/upload/vod/20231030-1/a5e391c9de653cdd7ca6f172cfac7f13.jpg","fqdn":"lsbzytp.com","domain":"lsbzytp.com","tld":"com"},"ip":{"addr":"142.248.99.61","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:32.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 09:53:21 GMT","end":"Fri, 06 Mar 2026 09:53:20 GMT"},"fingerprint":{"sha1":"55:92:B5:BC:78:CB:75:63:3B:0F:C6:A3:DD:2D:2F:7C:FA:07:B7:4A","sha256":"02:67:5F:F2:7D:A5:B6:59:8F:77:98:9C:EF:94:84:1A:E6:C9:FC:6E:A7:27:06:47:BB:16:5D:BE:A9:91:90:79"}}},"request":{"raw":"GET /upload/vod/20231030-1/a5e391c9de653cdd7ca6f172cfac7f13.jpg HTTP/1.1\r\nHost: lsbzytp.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 03 Jan 2026 13:46:32 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nage: 0\r\ncache-status: MISS\r\nserver: HyperCDN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ptt.sex/favicon.ico","fqdn":"www.ptt.sex","domain":"ptt.sex","tld":"sex"},"ip":{"addr":"104.21.24.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ptt.sex","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 15:44:30 GMT","end":"Sat, 14 Mar 2026 16:40:35 GMT"},"fingerprint":{"sha1":"DC:69:C9:01:4C:2E:0A:17:30:DB:30:B6:BF:0B:68:71:D0:18:96:6D","sha256":"30:2F:1C:32:4F:71:A7:64:61:71:E5:19:58:57:6B:7E:E1:09:A7:1E:AE:D9:03:91:F9:7A:44:FE:62:C1:60:60"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.ptt.sex\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: referer, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TWTnx51o4v1XpHuXd2O7xIFDXzVoTNRNAiN8QJX%2F2HJYG%2FPmYI3kFl4eAVoxnOlzDOl3Cr6i83dPOU%2Bn9eqd%2FM%2BJtNEVyiZwrY%2Bu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b82f16d9cf4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":128,"dns":86,"connect":1,"send":0,"wait":4,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lsbzytp.com:3519/upload/vod/20230910-1/595eaf631143256f32d0a01bf9a37dd3.jpg","fqdn":"lsbzytp.com","domain":"lsbzytp.com","tld":"com"},"ip":{"addr":"142.248.99.61","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 09:53:21 GMT","end":"Fri, 06 Mar 2026 09:53:20 GMT"},"fingerprint":{"sha1":"55:92:B5:BC:78:CB:75:63:3B:0F:C6:A3:DD:2D:2F:7C:FA:07:B7:4A","sha256":"02:67:5F:F2:7D:A5:B6:59:8F:77:98:9C:EF:94:84:1A:E6:C9:FC:6E:A7:27:06:47:BB:16:5D:BE:A9:91:90:79"}}},"request":{"raw":"GET /upload/vod/20230910-1/595eaf631143256f32d0a01bf9a37dd3.jpg HTTP/1.1\r\nHost: lsbzytp.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 70252\r\nlast-modified: Wed, 22 Nov 2023 12:54:36 GMT\r\nvary: Accept-Encoding\r\netag: \"655dfa0c-1126c\"\r\nexpires: Thu, 29 Jan 2026 06:35:27 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 371461\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":70252,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 980x550, components 3","md5":"a27cf5b3068951bef314eda193fdac2a","sha1":"252320b43b5ddadb458b43abf8daa7cf5e786780","sha256":"4db658906db3b6682b185f14a9b59b66cced999fb7dba694e13352c595d6a996","sha512":"79aa5f98127f4ddc19fd364efdd9543685b593468ac26fb33633e9a455de3857d4d4498276eb15950db5e251bdca5175a9fe0804852c415f1e5c374bbdb15779","ssdeep":"1536:UjMCf2IiuZHN7mwagggWV6vSoQUyviu2zZq1:UjMC2ruZHN7m/zgvz/yvipq1","tlshash":"7663020ea7cd8d8aa9c7d066d75fc174cb18e4f29f52c9242442ad134d8ba01ee57acd","first_seen":"2026-01-02T15:38:17.607288Z","last_seen":"2026-01-16T01:24:57.912888Z","times_seen":8,"resource_available":false,"data":null}},"time_used":966,"timings":{"blocked":13,"dns":9,"connect":144,"send":0,"wait":292,"receive":210,"ssl":298},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.apian088.sbs/sp/media/videos/tmb/3379/2.jpg","fqdn":"img.apian088.sbs","domain":"apian088.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apian088.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 12:00:16 GMT","end":"Sat, 14 Feb 2026 12:44:47 GMT"},"fingerprint":{"sha1":"81:62:5B:8E:F8:D6:89:63:71:73:E3:18:57:53:27:65:B5:AD:00:32","sha256":"1E:DA:15:FE:0A:FF:52:03:D1:A0:EE:60:AD:2A:3A:55:0D:CD:56:3F:75:52:A1:90:E2:E7:70:D3:2A:15:12:5E"}}},"request":{"raw":"GET /sp/media/videos/tmb/3379/2.jpg HTTP/1.1\r\nHost: img.apian088.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15480\r\nserver: cloudflare\r\nlast-modified: Sat, 23 Mar 2024 12:20:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65fec90d-3c78\"\r\naccept-ranges: bytes\r\nage: 2780030\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UO9TPoN8rikukfUzXD2u75mJFqjNzAquNOMvCqOEFkm%2FeDsg4wWxyUOslOCaBeDBUJQwzOQ0Nj2aXxB9t%2F8oGAVNQ0wW2h4di1UtURJI\"}]}\r\ncf-ray: 9b82f144ad4456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15480,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 384x214, components 3","md5":"0d4c6d941cc70e575d18482e698c906d","sha1":"c7896206ff8277e69318886588ac7b2457e4d340","sha256":"a21554d4a7ef094fb7e45b10d9a770dda467093818f11909e9a1a83897293da6","sha512":"68ee05bc67121fe3e732f1d26cabaa6a474338953157f0bd69a86dcffc37efd5f498796efbb3bab45ac16370297de66d2520debe13650ef36218b849a7b6339e","ssdeep":"384:i4O/0u0bLncPJO2/3hR4gZjfe96SKPNPqSJMZbBi0ivT:iZ0rLnchOk3hR44feW9RMdBBivT","tlshash":"e762c0256ac2a9c4b47ce5568970ec100ad6c36875c146d32cf4b5ca27701fa78ed5fe","first_seen":"2024-04-30T21:19:06Z","last_seen":"2026-03-01T22:30:17.170507Z","times_seen":30,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumb.aporntv.com/thumbs/5/c/7/f/9/5c740fce4a140cupcake-be-mine-artofzoo_720p.mp4/5c740fce4a140cupcake-be-mine-artofzoo_720p.mp4-3.jpg","fqdn":"thumb.aporntv.com","domain":"aporntv.com","tld":"com"},"ip":{"addr":"104.26.1.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aporntv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Dec 2025 20:17:34 GMT","end":"Sat, 14 Mar 2026 20:17:33 GMT"},"fingerprint":{"sha1":"9D:78:6E:E7:87:A1:D6:C8:DF:57:DC:5B:73:AB:6A:E5:9F:AD:26:EA","sha256":"C1:29:AA:89:1A:D5:B1:EA:BC:3A:90:73:1F:73:C9:77:CF:50:6D:E6:2A:8C:3A:DC:89:6D:F0:A9:B6:E8:E8:0F"}}},"request":{"raw":"GET /thumbs/5/c/7/f/9/5c740fce4a140cupcake-be-mine-artofzoo_720p.mp4/5c740fce4a140cupcake-be-mine-artofzoo_720p.mp4-3.jpg HTTP/1.1\r\nHost: thumb.aporntv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8441\r\nserver: cloudflare\r\nlast-modified: Wed, 06 Mar 2019 10:26:57 GMT\r\netag: \"5c7fa071-20f9\"\r\nexpires: Sat, 10 Jan 2026 13:46:27 GMT\r\ncache-control: max-age=16070400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gzsQ6NpQtQUEQjNwSwf22iplJzqB5imD3aT68lHMH6sZfF%2Bzk%2FUxvKgYiiC2vXmpVf0%2BauBbt5qcZWen2ZFTayFBVcP8Un3nVS1WJPVs\"}]}\r\ncf-ray: 9b82f1449cd156b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8441,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 4x3, segment length 16, baseline, precision 8, 200x150, components 3","md5":"564a5cdb44a19170f9e3e888b9eeef89","sha1":"6146a1f831412d1b5399e280c5aee454264aeeac","sha256":"132ee815d6dde2deba08551a203610d2e084af1d0041f66a4d3722dad3042aad","sha512":"c220d14760576c9b096305396840d598910eb0a1cd8588d89f15c160042e51cc285091a840649ac8fc35a2f89316bf441a0602301bfcf435e990b39b4a3324a7","ssdeep":"192:hH8EnXYHOraG1sCQBP+n8MajJV6wvTFM2XB7vWTemB6IJzATuuLY:V8uIurd1rGnJVJTFMGpWN6MzuM","tlshash":"5a029fdb8a9ad90bf0c07e2e8e2ef9585b018275a517089cfe52fa01a551404f2f72f4","first_seen":"2025-12-18T19:08:12.948856Z","last_seen":"2026-01-08T04:21:04.465001Z","times_seen":5,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidcdn.123rf.com/450nwm/stryjekk/stryjekk1709/stryjekk170900167.jpg","fqdn":"vidcdn.123rf.com","domain":"123rf.com","tld":"com"},"ip":{"addr":"65.9.46.15","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123rf.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sat, 08 Mar 2025 00:00:00 GMT","end":"Mon, 06 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F6:36:7A:1D:6B:64:06:84:8B:E1:86:3C:2F:42:B6:A9:0B:8D:1F:8D","sha256":"95:F0:3B:5D:6A:15:1A:62:D3:FE:38:20:4A:D0:4B:4B:47:01:0C:F5:07:89:CC:D3:6B:E5:E1:6C:EA:CD:EC:4B"}}},"request":{"raw":"GET /450nwm/stryjekk/stryjekk1709/stryjekk170900167.jpg HTTP/1.1\r\nHost: vidcdn.123rf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 6610\r\ndate: Tue, 16 Dec 2025 21:18:52 GMT\r\nlast-modified: Fri, 26 Apr 2019 12:13:05 GMT\r\netag: \"8965bc1fb34595e95d2cb84b998855fc\"\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 62fb1997c40a03e325a22b812f7b7e10.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: JzbV3vrxuPFTC9ZwmVOyHAWtYyXMLRmG_TFjFIs9tmof_e0Y_1PlNg==\r\nage: 1528061\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":6610,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc58.18.100\", baseline, precision 8, 450x252, components 3","md5":"8965bc1fb34595e95d2cb84b998855fc","sha1":"052d128a5c54fc7cfb874ce2a590f53ac9421516","sha256":"2bd6abaeb49c3e94a3a4ee4de123b3ea55a25a6ff377e56fa42cce49bfd4b9cc","sha512":"6d1179a9b4384c3e261f8c88d7ebcf3f0d75ae6348348a327965d1db9c3886ad424460c74a9c436fa7fe16f0be0aeeb3dfbabd8ed33e30fb93fc6ff166601c04","ssdeep":"192:7fRa5g4crBhoGQ1Bn+xGs/P57FGkK05VUxuNSFQ:7fRsg4eBhzQL+M6BFVt3UxuNN","tlshash":"6cd18d5570609e01eff07265bdb3013b4e746e756bca88274b74e360b92bf3ab52a314","first_seen":"2024-04-19T05:22:29Z","last_seen":"2026-01-03T13:47:52.5249Z","times_seen":5,"resource_available":false,"data":null}},"time_used":4289,"timings":{"blocked":3397,"dns":1,"connect":31,"send":0,"wait":49,"receive":1,"ssl":756},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex.ucoz.ru/favicon.ico","fqdn":"ex.ucoz.ru","domain":"ucoz.ru","tld":"ru"},"ip":{"addr":"193.109.247.20","port":443,"asn":204343,"as":"Compubyte Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.ucoz.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 28 Aug 2025 16:33:31 GMT","end":"Tue, 29 Sep 2026 16:33:30 GMT"},"fingerprint":{"sha1":"DC:8D:2C:72:F6:72:AD:2A:A7:0D:DA:D2:B5:A2:3C:D0:A7:C8:D1:98","sha256":"75:11:9A:D5:B3:DD:F4:55:DE:65:FF:41:95:44:25:35:BD:E8:D3:44:6A:18:46:A0:1E:66:B8:77:9B:43:15:BC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ex.ucoz.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 13:46:34 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 859\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nLast-Modified: Sun, 28 Jun 2020 11:48:20 GMT\r\nETag: \"5ef88384-35b\"\r\nX-Frame-Options: SAMEORIGIN\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":859,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced","md5":"5a6a542bc40875a71ea16e9b514ddab5","sha1":"2c0937d6ab9a1a47f73e23a371a8aae7731e2533","sha256":"8ecbdceaa983c4b17c0a199b3e171e729f3516cef9876972803fae874d4421d3","sha512":"81f02768e1ae84a6bea321f83196bc29b74c6e15aa55c4252793d269543eadc07a017fae2db02f4e45a16124cc7b96c89769d0057034eba1419ae82e99cbf91f","ssdeep":"","tlshash":"a9119657378caa5843370c1112870655f463c6975d920e5a126e8c5a4d2a610ebd07a5","first_seen":"2025-07-08T22:56:54.205742Z","last_seen":"2026-03-03T14:10:03.733644Z","times_seen":22,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":499,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"naturismv.com/images/junior-miss-pageant-contest-2003-nc12.jpg","fqdn":"naturismv.com","domain":"naturismv.com","tld":"com"},"ip":{"addr":"104.21.44.17","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.010Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/junior-miss-pageant-contest-2003-nc12.jpg HTTP/1.1\r\nHost: naturismv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sat, 03 Jan 2026 13:46:31 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://naturismv.com/images/junior-miss-pageant-contest-2003-nc12.jpg\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UV7T3Vd6z927FWUotBED5iFGt53OWBZZxwNvKQGlQuzPkPs%2BYzGGvGNZ%2FFG8wDNCTWRiVBLtufyFvs0go43QPef31EJp%2FKEDiltU\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9b82f15adc4056a8-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69234,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":3503,"timings":{"blocked":3488,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20240609-1/cbaaf920d4f483e9b79e5f93b1dab7ee.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"142.248.99.81","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 09:53:21 GMT","end":"Fri, 06 Mar 2026 09:53:20 GMT"},"fingerprint":{"sha1":"55:92:B5:BC:78:CB:75:63:3B:0F:C6:A3:DD:2D:2F:7C:FA:07:B7:4A","sha256":"02:67:5F:F2:7D:A5:B6:59:8F:77:98:9C:EF:94:84:1A:E6:C9:FC:6E:A7:27:06:47:BB:16:5D:BE:A9:91:90:79"}}},"request":{"raw":"GET /upload/vod/20240609-1/cbaaf920d4f483e9b79e5f93b1dab7ee.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 573073\r\nlast-modified: Sun, 09 Jun 2024 05:12:12 GMT\r\nvary: Accept-Encoding\r\netag: \"666539ac-8be91\"\r\nexpires: Sun, 11 Jan 2026 02:13:17 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 1942391\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":573073,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 840x566, components 3","md5":"1699941fc31651f2388742a7d80cb859","sha1":"d957af95f899299779ed0a7970668c48cdaf71c9","sha256":"d0ed7c971287afcdf09f6b63010a330335faa246609571f6ba59eccf23ba14fa","sha512":"5a32ca30fad7310205ebf1b00166e2b556896abc1746ac576d7c8df7ead72a456960c8e0286824a06869712319316b675c7af75c3956756e6d7a27d9d27f1aaf","ssdeep":"12288:MolgU/1+PfkALXZnpPRSL8o+YZHhcBlsyA4fohPCjZdjJBo:FlF9YhPRS4o+YrklJfDjJBo","tlshash":"c1c423ebfca67433d179238b3cb66c900216c52aa9d9748922052049f6dde3f465d2ff","first_seen":"2026-01-03T13:47:52.530513Z","last_seen":"2026-01-08T04:21:04.515652Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1181,"timings":{"blocked":123,"dns":0,"connect":0,"send":0,"wait":674,"receive":384,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idolerotic.net/favicon.ico","fqdn":"idolerotic.net","domain":"idolerotic.net","tld":"net"},"ip":{"addr":"153.122.86.155","port":443,"asn":131921,"as":"GMO GlobalSign Holdings K.K.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"idolerotic.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 20:51:46 GMT","end":"Mon, 16 Mar 2026 20:51:45 GMT"},"fingerprint":{"sha1":"17:18:52:B8:E4:3F:30:B3:F8:EB:7F:2A:33:97:B3:83:AB:44:29:5F","sha256":"B6:0E:1F:AA:C6:B7:39:2B:7D:23:19:54:89:1E:15:F8:15:B2:7F:E7:92:C0:34:3F:F9:8F:DB:25:85:5C:3C:EB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: idolerotic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Sat, 03 Jan 2026 13:46:34 GMT\r\nServer: Apache\r\nLink: \u003chttps://idolerotic.net/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nX-Redirect-By: WordPress\r\nLocation: https://idolerotic.net/wp-content/uploads/2022/04/cropped-favicon-32x32.png\r\nX-Powered-By: PHP/8.2.29, PleskLin\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":84,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn1.hotmoza.tv/thumb/22/b5/d2/22b5d2436648f4b44130af525c675b6f.jpg","fqdn":"cdn1.hotmoza.tv","domain":"hotmoza.tv","tld":"tv"},"ip":{"addr":"104.21.70.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotmoza.tv","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 22:14:18 GMT","end":"Wed, 18 Mar 2026 23:10:42 GMT"},"fingerprint":{"sha1":"13:95:73:49:25:9B:A5:9F:37:DA:EB:FC:66:4B:44:80:9D:54:03:8B","sha256":"68:BC:DA:3E:17:C2:7E:93:BC:49:E4:F4:F9:30:6C:D0:23:D1:05:BE:99:82:2C:AD:E9:F9:64:D2:CE:D4:B7:12"}}},"request":{"raw":"GET /thumb/22/b5/d2/22b5d2436648f4b44130af525c675b6f.jpg HTTP/1.1\r\nHost: cdn1.hotmoza.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9605\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-object-meta-mtime: 1581197164.075405\r\netag: 7b5fd6891a10dda3f50d77da849a6f66\r\nlast-modified: Sat, 08 Feb 2020 21:26:06 GMT\r\nx-timestamp: 1581197165.64732\r\nx-trans-id: txde24cf7b573a452498dcb-0068dd1fec\r\nx-openstack-request-id: txde24cf7b573a452498dcb-0068dd1fec\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\ncache-control: max-age=172800\r\nexpires: Sat, 03 Jan 2026 20:48:27 GMT\r\nx-cdn-host-id: DS8140,DS9225\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nage: 147480\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MS1TqWKnUwsCo0pkwK%2BfI%2B8eHYZjMDWYQKhHhH28wGEjv8kY%2BZbHLi4sjoWVNcIRSSsKa6a1rJlSA6mgHKU3ecXWB7yeLXPnNXVh%2FnM%3D\"}]}\r\ncf-ray: 9b82f144299d56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9605,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", progressive, precision 8, 320x180, components 3","md5":"7b5fd6891a10dda3f50d77da849a6f66","sha1":"1f70819940b44cf87ae253fb98c889043bcc21ae","sha256":"0dd6783c3cb4a93ab0e767301d2c0799bcce1f4803682ad63e63f0529372ef81","sha512":"2ce4b47c527f166d4bb4ea4a70ac8cbe035c07a26e6af3a810e07751447758c2d4a831d57608b66625ad8fce7229c4e10ac0410d07db3f445abffc9d2166ac7c","ssdeep":"192:+cOsHxJ+b3yUXk/yp+iKrYloCWOESM4/0Vi3bnIhvQ1iBDR+uqiaa1BF6wXQRm:/OsRAb1k/n9YCNdViLI5XB6oBvIm","tlshash":"f212aec36ae90411ccec38365a9da3d9e747ff4e33c226574ade74b33b6689011d6251","first_seen":"2026-01-03T13:47:52.534971Z","last_seen":"2026-01-03T13:47:52.534971Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg4.top/upload/vod/20240914-5/20c5e738ffc39bcc394a1b16e3ceb5eb.jpg","fqdn":"fqjpg4.top","domain":"fqjpg4.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.062Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /upload/vod/20240914-5/20c5e738ffc39bcc394a1b16e3ceb5eb.jpg HTTP/1.1\r\nHost: fqjpg4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":3806,"timings":{"blocked":3436,"dns":1,"connect":151,"send":0,"wait":0,"receive":0,"ssl":211},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"fqjpg4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cos.tv/favicon.ico","fqdn":"cos.tv","domain":"cos.tv","tld":"tv"},"ip":{"addr":"108.157.229.92","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cos.tv","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 26 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"01:7D:2B:26:31:1A:16:74:E4:83:B5:3D:05:BC:5C:77:13:E8:0D:3C","sha256":"FB:7B:F7:98:69:A3:91:86:AA:79:E2:52:23:F6:2D:11:69:6C:28:78:82:B0:C3:05:E1:DA:C1:1E:3E:67:48:91"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cos.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/x-icon\r\ncontent-length: 15086\r\naccept-ranges: bytes\r\nserver: nginx\r\nlast-modified: Wed, 24 Dec 2025 03:35:07 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ndate: Sat, 03 Jan 2026 04:25:20 GMT\r\netag: \"694b5f6b-3aee\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 2ec95fe7e41d4394d0fc48587428057e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: NC2wl0jQYCjC85P8Z5dFbFr0Ma0WC6xu7DzJjolYxTdIZf-CWIygtg==\r\nage: 33674\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"6a846442ae66a8b43e521e92c8ee81e4","sha1":"7c590cbb0485ec0006da361d7cc17181e3488323","sha256":"c21d5d73768fe5fb3d93058183191579b00c880b11021fbaa69f6cc84d1bae56","sha512":"a53057ea2f3d74b9b23a3ebae8d993433074f7e42c56b6422cf03eae547e77bc67a0eb570234401e00c7f94bb644aa728fd0ea852ab9190b3efe8463eb0b5ec5","ssdeep":"192:jy6g9hS8n7tcKeZvysSsW8F2MMVSuc8X0eDJjmQ:ji9Q8nxReZvyAWy2TVSuc8/JCQ","tlshash":"d962c7407982d6d6fe964db8271d84f817f77c61d542e3b62090f76f2eeac3aa1b1480","first_seen":"2025-01-24T08:58:41.572618Z","last_seen":"2026-04-12T19:29:51.683124Z","times_seen":274,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":32,"connect":10,"send":0,"wait":12,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/f.fcbyti.sbs/upload/vod/20240106-1/e186da0dd83262c14de12e6fbc1300b7.jpg","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Dec 2025 19:44:46 GMT","end":"Wed, 04 Mar 2026 19:44:45 GMT"},"fingerprint":{"sha1":"27:15:6B:56:D5:57:D8:9D:BB:24:1A:00:42:B9:FF:7B:FB:85:BB:C7","sha256":"30:10:00:03:5C:E3:9D:A7:31:82:FD:6C:3D:2C:DA:83:28:7A:23:1D:63:EE:03:7A:3A:67:6B:B8:94:7D:16:FC"}}},"request":{"raw":"GET /f.fcbyti.sbs/upload/vod/20240106-1/e186da0dd83262c14de12e6fbc1300b7.jpg HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: EXPIRED arn 12\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=EXPIRED;dur=23.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":6799,"timings":{"blocked":3443,"dns":1,"connect":14,"send":0,"wait":31,"receive":0,"ssl":3276},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"css.jpg4.icu/mycss/av4.css?33","fqdn":"css.jpg4.icu","domain":"jpg4.icu","tld":"icu"},"ip":{"addr":"172.67.183.25","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.222Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /mycss/av4.css?33 HTTP/1.1\r\nHost: css.jpg4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 03 Jan 2026 13:46:31 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nVary: accept-encoding\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Cake\r\nCache-Control: public, max-age=360000\r\nX-Proxy-Cache-192g-LA: MISS\r\nXkey-192LA: css.jpg4.icu/mycss/av4.css?33--css.jpg4.icu-css.jpg4.icu-myzone---no\r\nX-Proxy-Cache-tot-vt: HIT\r\nXkey-TOT-VT: css.jpg4.icu/mycss/av4.css?33--css.jpg4.icu--my_zone\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ULsqZ2NYsUZRztyeEmhjmz6aBcVnjwi4qfHzxjHZFGN2FICpyy2pG4akh3OIfcX97qarg6t3h%2BI5xGqq%2F1y3lXJTFT%2Ba7zWHul0%3D\"}]}\r\nAge: 170242\r\ncf-cache-status: HIT\r\netag: W/\"103e-62edbddabc000\"\r\nContent-Encoding: gzip\r\nCF-RAY: 9b82f15aa91c56c0-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4158,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"e05d356eb3c9cb0366e5491f098c5b66","sha1":"9c82f99795bf55512147a0bd629e9775446291bf","sha256":"7c7a5f32e5c6a2e6e1f3e71112f35691714019685cc4c7d567e158cb32d1579c","sha512":"94dd9b84614bae349bcaa9dafea12a08589b4b899cf59c1228cf9bf70d657a715b49cfc18748b2d174dac63a6df076828bfa8da9b25c686d74bc742ddbe9283c","ssdeep":"96:Uq6qw2a3Alqiqq7rShmo3NxlIAFrQH+42+F2fFB:+eYXih/SMoHlIAFkHL2+F2fFB","tlshash":"ca813f729b550141b51b92946f62b79123369013d907cf79bafa217ccf891ec21e2f4e","first_seen":"2025-04-08T05:19:22.565686Z","last_seen":"2026-02-10T20:33:51.228745Z","times_seen":840,"resource_available":false,"data":null}},"time_used":3256,"timings":{"blocked":-1,"dns":3246,"connect":1,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pornlulu.com/favicon.ico","fqdn":"www.pornlulu.com","domain":"pornlulu.com","tld":"com"},"ip":{"addr":"104.21.34.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornlulu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 02:28:25 GMT","end":"Sun, 15 Mar 2026 03:26:05 GMT"},"fingerprint":{"sha1":"21:3C:EB:41:61:4C:C0:6F:23:6D:03:4C:C0:05:64:E3:E7:CF:76:88","sha256":"4F:C5:D0:1A:A3:61:D0:60:E7:1B:A3:7D:20:4B:DF:41:88:1F:B0:8A:19:A0:8C:8C:2C:85:A1:22:29:BB:C5:F5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.pornlulu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: referer, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3RDxqyGiE31KAlYamYsXJOtJaQGl1rFJOc8xBlrOYNzBapTHQmPjLICZ1ekT0JymQCNSYkkP7vGmOcbQBlCutF0TCieFDnZ4iWAjDXd2zC4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b82f16bbabd4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/8/8b916302a92c4635942ec6d9b2eaa920596482a8_2_604x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/optimized/2X/8/8b916302a92c4635942ec6d9b2eaa920596482a8_2_604x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 85960\r\nlast-modified: Tue, 12 Aug 2025 05:14:26 GMT\r\nexpires: Sun, 03 Jan 2027 13:46:27 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85960,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 604x1024, components 3","md5":"877823654e6f1cae9d21383ad064b8f5","sha1":"d82bb695ae82a9df8236ba827f46c8d8e6b01576","sha256":"7e5dc91fce1f2be851e8af7c2e085ec46bc574e0b127acf1f49969e6be562933","sha512":"09181f3f970813d76681ea4e9f788e00b24a61ef1d2e3057dfe881e5d34898bfb340983ad1e81807c122d5dfcfec5395a4d1339a0915bc7c95649139b5332ab3","ssdeep":"1536:0Sx6o0N32Ey0e7+acQwGSoGoq2wY7m8mSrDEmSvp4IqpN7+L:0cxd37+XoSK+D4IqpR+L","tlshash":"498312d2b808f4e65c1359239b01448d73d341e5e319e8da8e7dee12e437ee24667fa2","first_seen":"2025-12-02T18:54:01.800135Z","last_seen":"2026-01-13T03:01:30.692428Z","times_seen":23,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"muy-porno.com/favicon.ico","fqdn":"muy-porno.com","domain":"muy-porno.com","tld":"com"},"ip":{"addr":"172.67.220.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"muy-porno.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 18:16:32 GMT","end":"Sun, 01 Mar 2026 19:14:53 GMT"},"fingerprint":{"sha1":"63:AC:0E:77:BB:74:1D:A3:BE:84:A7:72:A2:4A:8A:6A:9C:3A:76:1E","sha256":"72:79:B5:C3:F7:8F:EE:8F:8C:CF:CA:1D:8F:31:01:54:4F:AC:E9:3D:6F:F9:D1:BA:C3:4E:5A:7D:12:4A:58:DF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: muy-porno.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LEqlzkNb1nSALUCyebABKP5vsQ%2FEs23NDHk9h3trLXSFYdZ9kksme7DIaZO7%2FHgStipjLsftsy4HCrHf0L0pCrI%2FXZm8vE6UPSM4\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9b82f16b5b9856c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumb.aporntv.com/thumbs/5/d/7/4/4/5d74051bd8987Little%20Sister%20fucked%20while%20DSDS%20is%20on%20TV.mp4/5d74051bd8987Little%20Sister%20fucked%20while%20DSDS%20is%20on%20TV.mp4-3.jpg","fqdn":"thumb.aporntv.com","domain":"aporntv.com","tld":"com"},"ip":{"addr":"104.26.1.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aporntv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Dec 2025 20:17:34 GMT","end":"Sat, 14 Mar 2026 20:17:33 GMT"},"fingerprint":{"sha1":"9D:78:6E:E7:87:A1:D6:C8:DF:57:DC:5B:73:AB:6A:E5:9F:AD:26:EA","sha256":"C1:29:AA:89:1A:D5:B1:EA:BC:3A:90:73:1F:73:C9:77:CF:50:6D:E6:2A:8C:3A:DC:89:6D:F0:A9:B6:E8:E8:0F"}}},"request":{"raw":"GET /thumbs/5/d/7/4/4/5d74051bd8987Little%20Sister%20fucked%20while%20DSDS%20is%20on%20TV.mp4/5d74051bd8987Little%20Sister%20fucked%20while%20DSDS%20is%20on%20TV.mp4-3.jpg HTTP/1.1\r\nHost: thumb.aporntv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6041\r\nserver: cloudflare\r\nlast-modified: Sun, 08 Sep 2019 00:33:07 GMT\r\netag: \"5d744c43-1799\"\r\nexpires: Sat, 10 Jan 2026 13:46:28 GMT\r\ncache-control: max-age=16070400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xwn3QeLcDcILmhWNKablQs1T%2FPSKErF39Co%2FTF2lMAvpEnOwNDOVZxvVIXhYoaZ59EajqB%2F%2FvxOFIN75X4VqijvAO%2F%2FL0RDfe0r1JEx3\"}]}\r\ncf-ray: 9b82f144ed2656b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6041,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x150, components 3","md5":"2d43dfd43b0084b7e3d24631a48da99a","sha1":"4d3b987e9eaa9f2df5b859a87fe3895d5c8df53d","sha256":"47199ac483a19fe32b774b60c611c8d6820af1d12e9e158bbeb07c956acae367","sha512":"6aa70e533b14bb78cef0a005bfe37c521245a0a0f96a301d3bdf1dde4f05ab9316bbfe6fcfa4335d149d82c97eb63d557c31140c250c5cb5ceb4b3027354a00a","ssdeep":"96:5YUGfdKRS7e0Jzyf27gzvbRBn8EWLClCrgYr2R1R2dfqqhXcpoU1/dhqRvAER:nGfwRQhzo27q9Bn8EWLCuIz2dNh2oUlU","tlshash":"58c19f7eff45f83110818cb19c3373fa1a7e6a86dfc91c15d1e2331de458aa5b914641","first_seen":"2025-12-22T08:22:21.916402Z","last_seen":"2026-01-06T02:11:17.625602Z","times_seen":5,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img2.russkoeporno.tv/ruxp/img/1/1106_r2.jpg","fqdn":"img2.russkoeporno.tv","domain":"russkoeporno.tv","tld":"tv"},"ip":{"addr":"172.67.180.196","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"russkoeporno.tv","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 08:15:31 GMT","end":"Mon, 09 Feb 2026 09:13:57 GMT"},"fingerprint":{"sha1":"1C:4F:61:DF:25:96:5A:5E:2E:2E:28:CF:41:9B:AD:26:9B:71:3F:55","sha256":"54:6F:AD:F5:D0:22:36:E9:39:7F:56:8D:0A:28:CE:1C:22:3A:93:47:77:A6:94:3A:8E:63:CB:1C:62:CF:B6:EC"}}},"request":{"raw":"GET /ruxp/img/1/1106_r2.jpg HTTP/1.1\r\nHost: img2.russkoeporno.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21984\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Feb 2025 15:28:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67aa1b04-55e0\"\r\nexpires: Mon, 19 Jan 2026 02:27:34 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccept-ranges: bytes\r\nage: 1250333\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vc5RE7IoYvQMugp3TG88FwVD7yMfRgOuxO4azPxhfet2ZqYQO1GTu8G34DTps%2F%2BHoxVmzblD1zPSdWobAookpF0HJzuVlFHx4kZS5P8RnLpYyg%3D%3D\"}]}\r\ncf-ray: 9b82f144ff1e568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21984,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x224, components 3","md5":"1d159aa5320ad73f29f7a4681b8055d8","sha1":"a274cb263cbe8e932bed27fd4b691f8ba3d1f95b","sha256":"c6fd50c614eaa302f0e8dcb485f074b67fceba5d749bbcb35a7763cb3fd3a222","sha512":"105d5ef0331d99e9f4e84adf7e7c6de486d1ed6b1807729c28867a00fd95911ae496c16470bce659a9f5911a678e7689cecc5b6ad4910a67134e74de084cfe11","ssdeep":"384:ev88WKU47ALNKHUKluj0VAzXyhJlfTLRnGyxoyr1un2Pqnavb+x:e88DU47ALNJ9/XybNRGApun2Ck+x","tlshash":"94a2e133b1d06054c89dc1f5eeb63e20a93dc171160aeed854ddd99240644fd73d76a6","first_seen":"2024-05-01T00:04:54Z","last_seen":"2026-01-19T20:25:46.305859Z","times_seen":52,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/favicon.ico","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theav.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Nov 2025 14:42:00 GMT","end":"Wed, 04 Feb 2026 15:39:44 GMT"},"fingerprint":{"sha1":"72:06:01:93:87:31:5B:EA:61:96:BD:46:B2:D6:6B:6E:31:7F:41:2D","sha256":"E1:D9:A6:23:7F:37:1F:CC:3C:EC:D6:FE:4C:0F:4F:A2:47:5D:CE:6B:A2:F9:93:F3:A8:0F:5B:37:14:4A:16:D8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: theav.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 115958\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bIBqmOPG94zqa2Dqv3uK0A1YUMrRhp8ZchrBkwvhyjs6rULoBBcdhiU7wfy2ZWvVoOKqKrPDnkj44J%2BjKk%2FYHShVPgdQ6x5UMQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9b82f16d492ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":108,"dns":63,"connect":1,"send":0,"wait":8,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"erota2.com/favicon.png","fqdn":"erota2.com","domain":"erota2.com","tld":"com"},"ip":{"addr":"104.26.4.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erota2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 03:57:39 GMT","end":"Tue, 24 Mar 2026 04:57:35 GMT"},"fingerprint":{"sha1":"61:A4:B3:51:5C:84:0C:7A:D6:B2:9C:95:F5:8A:8A:BB:32:1E:BF:0A","sha256":"12:B6:23:F5:45:4E:9E:2F:9E:1C:EB:B6:30:A1:C5:0D:C3:06:A5:27:4C:CA:54:E7:0E:95:E5:38:6A:78:13:97"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: erota2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2262\r\nserver: cloudflare\r\nlast-modified: Tue, 23 Jul 2024 10:36:28 GMT\r\netag: \"669f87ac-3907\"\r\nvary: accept, accept-encoding\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jHczXY9LzCMWiIa7Qbo5pTPw3URRa8y7GGs7eavIQzzmoeMgJuNW0A1SGliVmytg%2FuSgUINBIJTV56c7%2FJqwkieCui3dreg%3D\"}]}\r\ncf-bgj: h2pri,imgq:85\r\ncf-polished: ok\r\npriority: u=4;i=?0,cf-chb=(111;u=4;i=?0)\r\nage: 2126\r\ncache-control: max-age=691200\r\ncf-cache-status: HIT\r\ncf-ray: 9b82f16d097756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2262,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 94x94, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3fc164666ca1ef365aed51927a87300e","sha1":"8312eec4bb50f1ade811f113dd47209940f01450","sha256":"7ac5fdceb15374e3bbf8613bd5674c660983cc2b8f000cf004c71be3ed363cbe","sha512":"667ddf82e5b6b136e61357b9eb03d73aa10bac5616048ee57fe996f636ad0bd3259e4bbd73b52d679638a70a2544053a78dc27f04361a1dcdf7cc48c6db894b5","ssdeep":"","tlshash":"b74118369b18c8bc829acdb291587659b93c2a05890b27793b1c692473c9d7cb2201ef","first_seen":"2025-12-02T18:54:01.660649Z","last_seen":"2026-02-25T10:38:27.034913Z","times_seen":17,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obmenvsemfilesec.com/fo/files_attachments/598/fe6/598fe6dbfaea88c2aeef0eeda4407f9c.jpg","fqdn":"obmenvsemfilesec.com","domain":"obmenvsemfilesec.com","tld":"com"},"ip":{"addr":"82.192.80.149","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"obmenvsemfilesec.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 20:51:21 GMT","end":"Tue, 17 Mar 2026 20:51:20 GMT"},"fingerprint":{"sha1":"EC:0E:18:C8:DC:12:1C:2F:3B:D0:6A:77:44:E8:AF:5E:1F:66:67:6E","sha256":"68:ED:02:03:40:F5:BA:A4:10:6D:DE:43:54:71:09:FE:0A:5F:0F:B0:10:AB:10:64:0A:05:87:AD:1C:76:EC:40"}}},"request":{"raw":"GET /fo/files_attachments/598/fe6/598fe6dbfaea88c2aeef0eeda4407f9c.jpg HTTP/1.1\r\nHost: obmenvsemfilesec.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\nlocation: http://ds.nashobmenfiles.com/fo/files_attachments/598/fe6/598fe6dbfaea88c2aeef0eeda4407f9c.jpg\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13381,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":3837,"timings":{"blocked":3465,"dns":1,"connect":94,"send":0,"wait":23,"receive":0,"ssl":222},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filmesporno.xxx/wp-content/uploads/2021/08/periscope-teen.jpg","fqdn":"filmesporno.xxx","domain":"filmesporno.xxx","tld":"xxx"},"ip":{"addr":"80.82.65.89","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filmesporno.xxx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 15:03:23 GMT","end":"Sun, 15 Mar 2026 15:03:22 GMT"},"fingerprint":{"sha1":"A5:4E:7D:6C:2F:EC:FD:8F:30:EB:DA:9D:5B:1D:31:90:55:D6:BB:84","sha256":"E9:C5:FD:9B:5F:F4:33:3A:2B:0D:66:76:46:D7:72:45:5F:A4:6B:51:4F:64:46:4B:FF:20:8F:AB:5D:7C:BB:6A"}}},"request":{"raw":"GET /wp-content/uploads/2021/08/periscope-teen.jpg HTTP/1.1\r\nHost: filmesporno.xxx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sat, 03 Jan 2026 13:46:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14726\r\netag: \"6116c6e1-3986\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\nexpires: Sun, 04 Jan 2026 00:30:00 GMT\r\ncache-control: max-age=38612\r\nx-served-by: filmesporno.xxx\r\nx-proxy-cache-status: HIT\r\nx-proxy-cache-skip: 1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14726,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x337, components 3","md5":"919499e26f0aa18e439b10ba1bc16a20","sha1":"cc7ee501d4821437073485702e45fcca1945a412","sha256":"0228231130f6294f22bcd54d2bcad988fb68a368976540128afbbc78a0d28c86","sha512":"a16c7c496fb8c80ed4d6bd39d4f8ed25de5115e853624819a1429395353371e70881834e02ab10a9075878a867bf387d035aada302915e075fa37ded7bef8a68","ssdeep":"192:7gvJijIrmlJu5Br43hOuvOAjq873aCcIB1JonLe9lsGupCxz2iTM0LTeJ6msPzSk:7N0Cl+wNmAjn7q4B1MLe9Iw2ijnznOk","tlshash":"79627c5bc82497c6a46e53b8bc530ea83f2a1b0cf5926cfe40631ddbbe506625d1d02e","first_seen":"2025-02-15T18:15:16.856356Z","last_seen":"2026-01-20T15:34:37.890038Z","times_seen":21,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.clporn.com/thumbs/1359/007_curly.jpg","fqdn":"www.clporn.com","domain":"clporn.com","tld":"com"},"ip":{"addr":"104.21.25.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clporn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Dec 2025 07:39:21 GMT","end":"Sat, 07 Mar 2026 08:37:01 GMT"},"fingerprint":{"sha1":"EC:09:BE:71:63:35:4D:8B:B1:E0:5C:B2:23:8E:83:C4:54:7F:CF:CD","sha256":"F1:A5:50:B6:E8:9E:33:CD:CC:5E:60:58:B7:AE:F6:3D:6C:98:25:6D:F9:E3:B6:BB:ED:A9:20:17:B5:C8:F1:01"}}},"request":{"raw":"GET /thumbs/1359/007_curly.jpg HTTP/1.1\r\nHost: www.clporn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19381\r\nserver: cloudflare\r\nlast-modified: Sun, 03 Oct 2021 07:46:52 GMT\r\netag: \"61595fec-4bb5\"\r\nexpires: Mon, 21 Dec 2026 06:50:56 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1148135\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FBdXLI2x4Kf0Gs8dVJggb9EJQVC9tE8mu8XhvjAXtzePB%2FAAn97Q9WknTGL%2BwFg7oWmlk7eDK7vShyL8C5ANBmsnkdViixeZ3meOhw%3D%3D\"}]}\r\ncf-ray: 9b82f15c2d76b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19381,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 312x208, components 3","md5":"88e81997315a8dcbff76772ce4879a2e","sha1":"44c59fa5eab00e05da28f47e336df8aadf0959f0","sha256":"db6bb68e61ce719baed9f5bbd324a92e3eeb16c2ecbff3f9015ea7bf9079f049","sha512":"61f05bb8c7a2bf161bdc9225b70109083de12b194479c62b312b86c9e2b031f2a180a4c04eaaac1a029fa9bdf9e977eceaa5e36ea994703d3d5118907f8db35d","ssdeep":"384:1ONYsooKc7woEZtgYY0vvYZYmAkDJCCSv2wXx0hctbm:1BpxtgY6KmAkFNSvTXx0SQ","tlshash":"5992d1556aea40eb3936f636ed3c6f9bb8f361b026e750080ec05d582ebbb1553702d1","first_seen":"2025-01-24T07:24:38.505101Z","last_seen":"2026-01-28T23:13:27.036353Z","times_seen":53,"resource_available":false,"data":null}},"time_used":3621,"timings":{"blocked":3406,"dns":1,"connect":12,"send":0,"wait":16,"receive":0,"ssl":177},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"motherless.com/favicon.ico","fqdn":"motherless.com","domain":"motherless.com","tld":"com"},"ip":{"addr":"185.107.81.233","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.motherless.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Wed, 02 Apr 2025 00:00:00 GMT","end":"Sun, 03 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BC:66:10:ED:31:C2:E1:48:61:92:BF:BD:98:9C:71:7C:41:97:BB:15","sha256":"DC:4B:D9:73:E2:0F:70:E0:0F:00:83:14:04:82:39:70:D2:DC:F4:3D:ED:56:CB:DA:C8:73:69:B1:19:73:4A:D9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: motherless.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 1150\r\nlast-modified: Thu, 20 Apr 2023 06:59:04 GMT\r\netag: \"6440e2b8-47e\"\r\nx-server-w: web805\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"71fed71dccb91a13bdf68a6444f25ce4","sha1":"38da7202842147ecda5521d50f094a54d1381f2c","sha256":"18f6675d329e6cb3bb7d7d1e546a1c68c5cc599f1b3ae98c2abbd21a53dc42c2","sha512":"5026edac9534773d52080439a13fe7dd5de5516c7813e062d25501d90ee67cf4cc01cf721070b90fc47f2d164a33a968c475d511c09fa528850a6294bb54795a","ssdeep":"","tlshash":"fc213e8ad700d86cc57456bce13a31f73e88ce40da20286b6f1a3c007c3522178ecc84","first_seen":"2023-05-25T17:44:41Z","last_seen":"2026-04-22T17:21:34.203799Z","times_seen":798,"resource_available":false,"data":null}},"time_used":1393,"timings":{"blocked":637,"dns":25,"connect":27,"send":0,"wait":26,"receive":0,"ssl":676},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidmo.pro/favicon.ico","fqdn":"vidmo.pro","domain":"vidmo.pro","tld":"pro"},"ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"en.vidmo.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 20:48:10 GMT","end":"Thu, 19 Feb 2026 20:48:09 GMT"},"fingerprint":{"sha1":"B8:8B:9C:2B:E9:53:D3:85:0E:57:74:8D:32:07:72:DF:38:F3:91:DA","sha256":"9B:B3:9F:DD:FB:1B:36:C3:04:60:BF:DF:87:AA:AB:5D:F6:0D:45:20:77:9B:29:19:5F:C4:B6:F1:04:C9:23:3E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: vidmo.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 5430\r\nlast-modified: Sun, 14 Oct 2012 21:41:38 GMT\r\netag: \"507b3192-1536\"\r\ncache-control: public, no-transform\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"6b6734885d5e4ff9dbb7d82ba6023598","sha1":"3c454d68a346b375ed7b59a131699061e7393b1f","sha256":"0f8e5edd4348eaa11881bf6150baf7b3182b1c3e29c6378e0e921afce7d91819","sha512":"e3d4562da250a2096981bd9a211efa643400ebe18a2d0765e750454b4cf75cb31e9594d8fccfa61a4c86e1c08bbf130dbc635c2974996838444cef029bf3eb50","ssdeep":"96:12lbcmeAscXXZCGv56cOtAe8CKfMibd+tLMiWMyuFa:0muCQpBQ6d+ti","tlshash":"a9b173c151c1e587e0274f38e237d750b1fa2c13bab0ea85156b7a555a731898317b1e","first_seen":"2023-05-05T08:02:57Z","last_seen":"2026-04-12T19:29:51.616695Z","times_seen":690,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ds.nashobmenfiles.com/fo/files_attachments/598/fe6/598fe6dbfaea88c2aeef0eeda4407f9c.jpg","fqdn":"ds.nashobmenfiles.com","domain":"nashobmenfiles.com","tld":"com"},"ip":{"addr":"85.17.28.58","port":80,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:32.262Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /fo/files_attachments/598/fe6/598fe6dbfaea88c2aeef0eeda4407f9c.jpg HTTP/1.1\r\nHost: ds.nashobmenfiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://en.av2.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 13:46:32 GMT\r\nContent-Type: text/html\r\nContent-Length: 138\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nLocation: http://ds2.nashobmenfiles.com/fo/files_attachments/598/fe6/598fe6dbfaea88c2aeef0eeda4407f9c.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13381,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":2,"connect":22,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ds.nashobmenfiles.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8zoo.net/favicon.ico","fqdn":"8zoo.net","domain":"8zoo.net","tld":"net"},"ip":{"addr":"172.67.146.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8zoo.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 16:34:39 GMT","end":"Sun, 08 Feb 2026 17:33:09 GMT"},"fingerprint":{"sha1":"60:48:85:89:C9:1D:16:89:4A:E2:81:87:84:4C:C9:71:BF:EF:FD:1F","sha256":"C1:11:21:AA:F3:1A:63:18:2E:03:F5:4D:E5:50:1A:41:0E:8F:64:79:A4:EA:44:1C:17:A1:35:59:CD:48:CC:84"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 8zoo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JDomrBkm%2FRLJuCH0ER55gUHi9zLfpNgA23rxNEi7%2BXPXhI7Qa22rEzo49SObYMMKu2my1wOgOAcunF311avYAcdhNW2vTkmS\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: 9b82f16c5bc35a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":20,"dns":24,"connect":2,"send":0,"wait":21,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumb.aporntv.com/thumbs/6/1/0/d/9/610d0d929f49bzo%20amat%20(154).mp4/610d0d929f49bzo%20amat%20(154).mp4-3.jpg","fqdn":"thumb.aporntv.com","domain":"aporntv.com","tld":"com"},"ip":{"addr":"104.26.1.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aporntv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Dec 2025 20:17:34 GMT","end":"Sat, 14 Mar 2026 20:17:33 GMT"},"fingerprint":{"sha1":"9D:78:6E:E7:87:A1:D6:C8:DF:57:DC:5B:73:AB:6A:E5:9F:AD:26:EA","sha256":"C1:29:AA:89:1A:D5:B1:EA:BC:3A:90:73:1F:73:C9:77:CF:50:6D:E6:2A:8C:3A:DC:89:6D:F0:A9:B6:E8:E8:0F"}}},"request":{"raw":"GET /thumbs/6/1/0/d/9/610d0d929f49bzo%20amat%20(154).mp4/610d0d929f49bzo%20amat%20(154).mp4-3.jpg HTTP/1.1\r\nHost: thumb.aporntv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5593\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Aug 2021 20:05:24 GMT\r\netag: \"610d9604-15d9\"\r\nexpires: Thu, 08 Jan 2026 06:46:44 GMT\r\ncache-control: max-age=16070400\r\naccept-ranges: bytes\r\npriority: u=5;i,cf-chb=(108;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: webp_bigger\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 197983\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JuwKnb1YZYsvDjl5iR6Gzb1fbquCcHrO%2BxLh57dw6kC%2B9LusXJo8%2BJ5o%2Bm3iDYdxHj8ty85MQQ4y0PHdeeUJYMBCY%2BZBDatoeloQTYIU\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b82f142fb9b56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5593,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 18x13, segment length 16, baseline, precision 8, 200x150, components 3","md5":"d9000dfd8635f6184d92e60fc7fd07fa","sha1":"e06fa1b46d720e199e23dac15a8a5d5f11b5c8e3","sha256":"31bf63bc759cb04110cecae52b691afa7e6245fb3d7eac74ad8ae61b0cb67d80","sha512":"6e9079a781fcadcf1e9f2e072c2e744736a069d603e060e6b5e85e5acf2b18e26e7ea0e6f4d6f08146630638402621c0c4a95737337107386d04c6ae4d7a6959","ssdeep":"96:5dGTtF0XUaDSd+6fnjjvRcEobaiRnkR3N4+XIX2qF/T7zh3xIr2iA:XyFe5cfjjT4RnkFCUIX24/znE2J","tlshash":"beb15e16ba322a16cf9f98b79a87ef594917f76c1d039c71fc009781d57c151c2a5f20","first_seen":"2025-06-02T22:11:56.674105Z","last_seen":"2026-01-20T15:34:37.855729Z","times_seen":14,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":37,"dns":42,"connect":1,"send":0,"wait":7,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/content/b/a/babylipss13/1000/babylipss13_0020.jpg","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 04:36:04 GMT","end":"Wed, 25 Mar 2026 05:35:57 GMT"},"fingerprint":{"sha1":"BC:E7:75:C9:BB:9B:AD:D7:E0:2E:DC:F0:A4:C8:05:1C:B7:B6:92:B1","sha256":"B2:D9:1D:E8:B9:C0:58:D2:30:D4:54:94:BC:FE:BF:BD:43:9E:C4:AF:71:CA:4A:6B:75:1A:1A:75:52:04:3E:7D"}}},"request":{"raw":"GET /content/b/a/babylipss13/1000/babylipss13_0020.jpg HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14788\r\nserver: cloudflare\r\nlast-modified: Wed, 06 Jul 2022 20:35:16 GMT\r\nvary: accept-encoding\r\netag: \"62c5f204-39c4\"\r\nexpires: Wed, 07 Jan 2026 07:14:28 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 282723\r\ncf-cache-status: HIT\r\ncf-ray: 9b82f15cc91256be-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14788,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc58.54.100\", baseline, precision 8, 360x480, components 3","md5":"50badc7c71f4d19f8796902fb037fc86","sha1":"290d2eaca4b76c97ac6ae30eae7c8f667817c018","sha256":"4e138d192f6b66f7ac5f8d11e03b1cbc778722b70581bab3e332a3bbdf5e501c","sha512":"aa39f33f855f35ab8affad7afd681038465d4976bb69f1799bdaa8f674b2c4cc7fdc46eb488b8222529a91991af2087ee810f7498b19da13d3288be2b919d4bd","ssdeep":"384:HBaY+ECK/ksDkDQzmMJrvO76gqpb5Kl+A9tN89VB53nuIoCMzw:HBD+ECK/HgDQzby2lU4Y09VRoCME","tlshash":"5962cfbe40c0c597b20f4e769455bd4f7622dbb0ad954a6c80b0827c1bd05b71a3b53f","first_seen":"2025-08-11T10:41:32.27355Z","last_seen":"2026-01-26T09:09:13.836843Z","times_seen":37,"resource_available":false,"data":null}},"time_used":3761,"timings":{"blocked":3441,"dns":1,"connect":14,"send":0,"wait":10,"receive":1,"ssl":257},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250710-1/4aee7a0308291371cae719502841163c.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"142.248.99.81","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 09:53:21 GMT","end":"Fri, 06 Mar 2026 09:53:20 GMT"},"fingerprint":{"sha1":"55:92:B5:BC:78:CB:75:63:3B:0F:C6:A3:DD:2D:2F:7C:FA:07:B7:4A","sha256":"02:67:5F:F2:7D:A5:B6:59:8F:77:98:9C:EF:94:84:1A:E6:C9:FC:6E:A7:27:06:47:BB:16:5D:BE:A9:91:90:79"}}},"request":{"raw":"GET /upload/vod/20250710-1/4aee7a0308291371cae719502841163c.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 49350\r\nlast-modified: Thu, 10 Jul 2025 02:47:26 GMT\r\nvary: Accept-Encoding\r\netag: \"686f29be-c0c6\"\r\nexpires: Sat, 10 Jan 2026 10:26:11 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 1999217\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":49350,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 500x280, components 3","md5":"6fceaefad759da41c8643fb7951f01e8","sha1":"a5ffbfa51da665af7a5ff1e9e94f1084998dd3c9","sha256":"f972724881341d0501cbfa9f900023860d8e684a76d3304fe55aa463f394892c","sha512":"9765f3ca4418ec6b15f74817171ef798f2e340cc626c2922f1213f45fbf32b7125daeb781c5da3941d5930482b613986c44dbab35818be60f7808a1ee5b5031d","ssdeep":"768:LgK0Fh/L+kRr+qtMffBqO38RXabZqJVvUul6VmzR4pF7YQ9+rM4dt4fpW:L1Ch/jpuZVWdqjMzR7zA4duRW","tlshash":"7c23017db699bee4b693437ea1d5eec523d009947b80728d39eba292ca5040de518ccc","first_seen":"2025-08-13T22:25:15.119525Z","last_seen":"2026-01-03T13:47:52.584715Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1234,"timings":{"blocked":100,"dns":0,"connect":0,"send":0,"wait":673,"receive":461,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"davalka.online/favicon.ico","fqdn":"davalka.online","domain":"davalka.online","tld":"online"},"ip":{"addr":"51.75.34.66","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkporno.com.davalka.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Oct 2025 23:12:45 GMT","end":"Mon, 26 Jan 2026 23:12:44 GMT"},"fingerprint":{"sha1":"11:FC:1B:B5:15:4B:0D:9A:49:00:80:F0:52:C4:F7:73:C9:30:9A:DF","sha256":"04:73:1E:0C:39:EE:41:F2:D1:A5:22:21:A6:12:2B:48:D3:6C:35:5B:D8:F1:80:B2:87:13:6A:15:5A:DE:15:52"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: davalka.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15086\r\nlast-modified: Thu, 09 Jun 2022 20:53:54 GMT\r\netag: \"62a25de2-3aee\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=*, usb=()\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"0cb663020346a1b90603ab232fca38dd","sha1":"f2bf734677eaf20176ea4827df8baeafca3ee924","sha256":"d122ded4e02df5e35a242a5b9d4228755cc839f6984d668c3bda4d8b68bb6049","sha512":"4f1c2acd30936d8957d3e2e9baddb80b0ab78c8cdfd79bbadfcc19b144af4ff4e3108f9a3d528c1cd5d867599275f353c7a8c01c89b5b2ea71dccf4e6444d105","ssdeep":"96:jGwPqHwXco10jDKYDf88888888888888qHNq:jjPqHwXcO0jDLf88888888888888qHE","tlshash":"95629b3051cec5ecf984cdf8103a51d07ce216dacca24d41f107aade6a6c2d5a366ddb","first_seen":"2025-09-24T19:45:49.135602Z","last_seen":"2026-04-12T19:29:51.638865Z","times_seen":83,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooporner.com/faviconico/","fqdn":"zooporner.com","domain":"zooporner.com","tld":"com"},"ip":{"addr":"104.21.72.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooporner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Nov 2025 02:12:50 GMT","end":"Thu, 19 Feb 2026 03:11:36 GMT"},"fingerprint":{"sha1":"B3:56:06:32:90:21:12:D0:8C:12:A6:88:5F:3F:70:C0:82:C5:66:88","sha256":"3B:AA:33:56:81:2D:26:BB:5E:09:6A:DE:73:A2:D5:57:34:77:D0:06:66:30:48:13:E2:60:49:12:23:D0:59:9F"}}},"request":{"raw":"GET /faviconico/ HTTP/1.1\r\nHost: zooporner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nset-cookie: ASPro_1382933ca042bef776e8100bd5eb8ac5=6q8afs30ss9fm1g79b9eukkipm; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2F5eyz%2BzHSDHmGeXCrv%2BdSSjvyywffo6g45LxOovTQRbrvpd9l8vsna3jbFmtDoawEA14MgZMUhQtxkushyWHwMRCFrRXJ2XFxMNOno%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b82f16d0b03b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"159i.net/uploads/allimg/2412/D-121ZU31cac59a25159.jpg","fqdn":"159i.net","domain":"159i.net","tld":"net"},"ip":{"addr":"104.21.68.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"159i.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 10:41:42 GMT","end":"Wed, 11 Feb 2026 11:39:18 GMT"},"fingerprint":{"sha1":"B3:A5:30:B2:B7:22:58:8C:B7:42:E3:BE:DB:E3:E6:CC:4E:D9:F1:76","sha256":"1F:28:A1:B8:F6:B6:FA:3A:44:F5:D0:2A:BA:55:AE:E1:3A:D4:B8:27:F2:0C:FC:32:BE:39:46:72:C2:57:6F:8D"}}},"request":{"raw":"GET /uploads/allimg/2412/D-121ZU31cac59a25159.jpg HTTP/1.1\r\nHost: 159i.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4836\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 19 Dec 2024 00:53:19 GMT\r\naccept-ranges: bytes\r\nage: 3137\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WNVLYShU%2BdDUypmfAEkUxClbvlVsfQPUAoVtCzYOS3RL6oaKthfM%2BmmBB4%2FRdMJ%2FTYtQingMyW4zD3A%2BBVqs8cnz3aRLWGy%2F\"}]}\r\ncf-ray: 9b82f15c58a88deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4836,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x240, components 3","md5":"15226fef147b0820fca87825bf9dd739","sha1":"d62978aec1ef72571e8da309f4dfb510e79a9f3f","sha256":"2ad0c6df51b25ed30328a3a2d5a2125017b11fd1763c76979a0cff8ca22606f2","sha512":"40454581eb7b033ec89ab70e647abee525bec417b3d2c7b34b51eb02981450271db3870a4613394777604612027260c75edb698bed956ec661bdd81f09685ae7","ssdeep":"96:emvV7QZS/lQ17z4CPDpAiVCqOGokKE5Cz1mdCFx+CA9XnbqXYnyXSOqhJ9iohzEy:5VMQNQCCrui0qIT1mdoSS1XSOciohwy","tlshash":"d0a18da3db9658c5d22e5c3246e03b3ca8c7a07b75d1932ea921a448447905e4be0acd","first_seen":"2025-08-14T16:14:37.270267Z","last_seen":"2026-03-03T14:10:03.871641Z","times_seen":13,"resource_available":false,"data":null}},"time_used":3722,"timings":{"blocked":3476,"dns":1,"connect":12,"send":0,"wait":16,"receive":0,"ssl":201},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241028-15/9c12b30a74a56b7ff6b019ea9275c352.jpg","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:32.207Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241028-15/9c12b30a74a56b7ff6b019ea9275c352.jpg HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.vidmo.pro/favicon.ico","fqdn":"en.vidmo.pro","domain":"vidmo.pro","tld":"pro"},"ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"en.vidmo.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 20:48:10 GMT","end":"Thu, 19 Feb 2026 20:48:09 GMT"},"fingerprint":{"sha1":"B8:8B:9C:2B:E9:53:D3:85:0E:57:74:8D:32:07:72:DF:38:F3:91:DA","sha256":"9B:B3:9F:DD:FB:1B:36:C3:04:60:BF:DF:87:AA:AB:5D:F6:0D:45:20:77:9B:29:19:5F:C4:B6:F1:04:C9:23:3E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: en.vidmo.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 5430\r\nlast-modified: Sun, 14 Oct 2012 21:41:38 GMT\r\netag: \"507b3192-1536\"\r\ncache-control: public, no-transform\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"6b6734885d5e4ff9dbb7d82ba6023598","sha1":"3c454d68a346b375ed7b59a131699061e7393b1f","sha256":"0f8e5edd4348eaa11881bf6150baf7b3182b1c3e29c6378e0e921afce7d91819","sha512":"e3d4562da250a2096981bd9a211efa643400ebe18a2d0765e750454b4cf75cb31e9594d8fccfa61a4c86e1c08bbf130dbc635c2974996838444cef029bf3eb50","ssdeep":"96:12lbcmeAscXXZCGv56cOtAe8CKfMibd+tLMiWMyuFa:0muCQpBQ6d+ti","tlshash":"a9b173c151c1e587e0274f38e237d750b1fa2c13bab0ea85156b7a555a731898317b1e","first_seen":"2023-05-05T08:02:57Z","last_seen":"2026-04-12T19:29:51.616695Z","times_seen":690,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"en.vidmo.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ansuko.net/wp-content/uploads/2024/12/poster-393.jpg","fqdn":"ansuko.net","domain":"ansuko.net","tld":"net"},"ip":{"addr":"104.21.54.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansuko.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:34:35 GMT","end":"Fri, 06 Mar 2026 14:32:54 GMT"},"fingerprint":{"sha1":"F4:E3:EF:30:48:D7:B3:40:2B:D3:E1:F5:14:F6:72:5B:FB:0B:94:DF","sha256":"1D:46:63:21:32:DB:DE:81:F7:49:23:17:0A:76:2A:6E:F6:89:3C:51:B8:65:66:A9:DA:9E:D5:EA:3A:BB:08:D7"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/poster-393.jpg HTTP/1.1\r\nHost: ansuko.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1063915\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nlast-modified: Mon, 22 Dec 2025 06:14:36 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Jz7BiezLLy9QvY4%2Fg58Jpfkw5U8uxKJ5H88gsruqX1fPfc%2Fe9F0nrSKXMHnNr99z1DLC%2FcQuRZCqwvxnduNFxyISJ4eW9NQ\"}]}\r\ncf-ray: 9b82f15c786156cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23496,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 480x270, components 3","md5":"de9507f69cf82ea5e40c1663ffc80e2f","sha1":"aa0a5604f9bc5d0bee45cbe919064e70e4907af1","sha256":"98e1d2728853f6f2ea5029899a16ed26b297270db75fcdfda2d25d543dbdd94c","sha512":"0f09fd0f9bbf100ad25794ef522bb09e1cea7e9d41263d5f4a54bb867d7e9a64fa981eea5ce9d3fecd4975b9e8b8fe3fb750dd58afd452cdacf934c2b1d9d914","ssdeep":"384:pxuNR286TgKYyxeptwbRtJ6cTt0pzQNoIGOT7C24la42HmuTq7E+sE2aEHn2u:pxdfEtkUQt0poo724A4MhTqw+sxpn2u","tlshash":"b0b2e1679702b6d9f4e6d03ae3f96cdbf1fa44c0929093003899f8388811b6a0e94f1d","first_seen":"2025-11-13T05:34:52.781327Z","last_seen":"2026-04-03T21:47:16.485746Z","times_seen":21,"resource_available":false,"data":null}},"time_used":3733,"timings":{"blocked":3464,"dns":1,"connect":13,"send":0,"wait":16,"receive":0,"ssl":218},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20240522-1/a4490af55f7133691820ae5cae4a601b.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"142.248.99.81","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 09:53:21 GMT","end":"Fri, 06 Mar 2026 09:53:20 GMT"},"fingerprint":{"sha1":"55:92:B5:BC:78:CB:75:63:3B:0F:C6:A3:DD:2D:2F:7C:FA:07:B7:4A","sha256":"02:67:5F:F2:7D:A5:B6:59:8F:77:98:9C:EF:94:84:1A:E6:C9:FC:6E:A7:27:06:47:BB:16:5D:BE:A9:91:90:79"}}},"request":{"raw":"GET /upload/vod/20240522-1/a4490af55f7133691820ae5cae4a601b.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 33726\r\nlast-modified: Wed, 22 May 2024 07:10:59 GMT\r\nvary: Accept-Encoding\r\netag: \"664d9a83-83be\"\r\nexpires: Thu, 29 Jan 2026 06:35:48 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 371440\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33726,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Intel(R) JPEG Library, version 1,5,4,36\", baseline, precision 8, 960x544, components 3","md5":"7261d1b2459bfa082b6fd676296d3672","sha1":"b547ad5f1257b8a2429f863844ce9231ca00a98e","sha256":"25bf0ca26955cc17d5b78dc0a527cb430cd00c760c8b91ac66f1de64364bb157","sha512":"a3b5d13bdc859ac65cf5e27e0a09a4322afe691bf4787879ed01dddf914ba4e0a5abbf45f7a8af32381ad4e4872d0dd115380453579e1caa5de9ce2adb820f70","ssdeep":"768:bG1UXkphu/5M/fJLWT0bYLYsosnFlQq6/GrA9:bGuXx/clWA2YsLF6/Grc","tlshash":"24e2e0026b579a41bf171630cd8e7ebf806005adb5987d7e00121f7faa625e948885be","first_seen":"2025-08-15T16:30:03.16582Z","last_seen":"2026-01-21T02:46:11.894087Z","times_seen":15,"resource_available":false,"data":null}},"time_used":994,"timings":{"blocked":172,"dns":0,"connect":0,"send":0,"wait":294,"receive":528,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20240826-1/781f04bf84fcda41978239578ef39cbb.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"142.248.99.81","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 09:53:21 GMT","end":"Fri, 06 Mar 2026 09:53:20 GMT"},"fingerprint":{"sha1":"55:92:B5:BC:78:CB:75:63:3B:0F:C6:A3:DD:2D:2F:7C:FA:07:B7:4A","sha256":"02:67:5F:F2:7D:A5:B6:59:8F:77:98:9C:EF:94:84:1A:E6:C9:FC:6E:A7:27:06:47:BB:16:5D:BE:A9:91:90:79"}}},"request":{"raw":"GET /upload/vod/20240826-1/781f04bf84fcda41978239578ef39cbb.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 100760\r\nlast-modified: Mon, 26 Aug 2024 12:19:56 GMT\r\nvary: Accept-Encoding\r\netag: \"66cc72ec-18998\"\r\nexpires: Thu, 29 Jan 2026 06:35:47 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 371441\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":100760,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 718 x 404, 8-bit colormap, non-interlaced","md5":"f0c39e1c395041f24404b93bcae81499","sha1":"d8daae99305f6163a34659c00e30f7e0d2c42c09","sha256":"bd4d365dfc3ae9267db0116080ba5004cee8abe17b5511f0fafd670404b7033d","sha512":"9f1c0ef0beae593f0ea17e3bb3555cd95188b3d1d50b6c8b3392abd48f02c87becb19afd27707dcbe1ebde986d9889cd25c3c6cf9de9561fbdcc49bbda9198f1","ssdeep":"3072:13WwxoHyfBmW2eDpp59m0SGOwBBPOxG4eSyURdc3tX:13LxMyfIQpk0SGOoBPf4hP0","tlshash":"13a3122e025b56dfe75d0ee07193dc30b5c42b26ccb412d778bde6b22673d24a909e89","first_seen":"2024-04-18T20:55:20Z","last_seen":"2026-02-18T06:57:00.583528Z","times_seen":80,"resource_available":false,"data":null}},"time_used":1272,"timings":{"blocked":124,"dns":0,"connect":0,"send":0,"wait":673,"receive":475,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.syougakuseijridol.com/wp/wp-content/uploads/2018/04/dcd9590862eb162b3bf86db543e91366.png","fqdn":"www.syougakuseijridol.com","domain":"syougakuseijridol.com","tld":"com"},"ip":{"addr":"153.122.205.7","port":80,"asn":131921,"as":"GMO GlobalSign Holdings K.K.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.010Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp/wp-content/uploads/2018/04/dcd9590862eb162b3bf86db543e91366.png HTTP/1.1\r\nHost: www.syougakuseijridol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 03 Jan 2026 13:46:31 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 19 Apr 2018 12:29:25 GMT\r\nETag: \"2ee09-56a32b8d1f87d\"\r\nAccept-Ranges: bytes\r\nContent-Length: 192009\r\nKeep-Alive: timeout=2, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":192009,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 460 x 345, 8-bit/color RGB, non-interlaced","md5":"87d20fee0531e923846e8fd0f09290c9","sha1":"3b215b8365af28f0be5e05db5a833dfffc516a82","sha256":"ac30e9f61d8f0e191aaad2bc58db38ff6cf2e072fe26399ca43274b24e28f8f3","sha512":"4147bed359e20435327b3d431f311932c0b33d8dc625c4cceafa77303bf0533501c211e3a6d48a4cd66cfb16fd644fdc30291c38531e797bfe6fbc3400c3d366","ssdeep":"3072:510uWJ+uW6vk1yp01MSuir0LpjiQoU2S+sR6yhgVTVIUL90R7gzfv:PJitvbpSMSuk0U/U2S+p/VTV50R7gzH","tlshash":"4d1423c97d24727cfe1424a46ba1f0478e5c758aee93da68ced44e9477a3e80139c3d8","first_seen":"2024-12-16T19:48:51.997572Z","last_seen":"2026-01-03T13:47:52.612121Z","times_seen":7,"resource_available":false,"data":null}},"time_used":12909,"timings":{"blocked":3488,"dns":350,"connect":267,"send":0,"wait":1054,"receive":4797,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/original/2X/5/5d67feee2cfe9ad78fd717e2e916fb50040ede54.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/original/2X/5/5d67feee2cfe9ad78fd717e2e916fb50040ede54.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.clporn.com/favicon.ico","fqdn":"www.clporn.com","domain":"clporn.com","tld":"com"},"ip":{"addr":"104.21.25.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clporn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Dec 2025 07:39:21 GMT","end":"Sat, 07 Mar 2026 08:37:01 GMT"},"fingerprint":{"sha1":"EC:09:BE:71:63:35:4D:8B:B1:E0:5C:B2:23:8E:83:C4:54:7F:CF:CD","sha256":"F1:A5:50:B6:E8:9E:33:CD:CC:5E:60:58:B7:AE:F6:3D:6C:98:25:6D:F9:E3:B6:BB:ED:A9:20:17:B5:C8:F1:01"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.clporn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 1150\r\nserver: cloudflare\r\nlast-modified: Sun, 21 May 2023 03:45:32 GMT\r\netag: \"646993dc-47e\"\r\nexpires: Sun, 03 Jan 2027 02:53:00 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 39213\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IPH53hAznmzib%2BfrcRJ3Y2xZ2FMeqyAKMQhaomF0GO%2Bse2L9ZjgZMEIsX2x1ImUBA8JIOui2ba10%2BigrwCiQqeZftxcG4QM9%2FN5DTg%3D%3D\"}]}\r\ncf-ray: 9b82f16c1c87b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"7bce878d4d59681219dd7ee7b31d501f","sha1":"8078782a63dd8997b9537de46f1c19c0b60737ce","sha256":"19658bac1ca076be044dc8e1289ae869efd6847cc8d61405f1f6aeea11904dcf","sha512":"020763d535f44dfca6aa362c79c6f6a58bbaac6251264c36cb7277bdd3ef928122030d0f7ae12d5cc2b6b186ff8ad21d9d4019c9f51aed340720ce8a9a0802c3","ssdeep":"","tlshash":"ed217d82954145a8eda50f312233181893bfbf97fe74f30ead50b1705b372e400759a6","first_seen":"2024-05-18T21:25:43Z","last_seen":"2026-04-03T21:47:16.44898Z","times_seen":399,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_7389623920.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"169.150.247.33","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 09:11:23 GMT","end":"Sat, 21 Feb 2026 09:11:22 GMT"},"fingerprint":{"sha1":"C4:B8:4F:E1:DF:D2:C1:E4:47:DE:DB:2C:FB:82:70:B1:F6:80:A8:31","sha256":"E4:77:2E:6A:AF:E5:36:3A:73:69:75:71:99:21:01:C5:EC:C8:ED:DD:47:CD:32:8E:89:B6:C6:50:AB:DF:CB:B9"}}},"request":{"raw":"GET /ext/pre_7389623920.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10665\r\nserver: BunnyCDN-DE1-1076\r\ncdn-pullzone: 4336709\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=7776000\r\netag: \"666984e0-29a9\"\r\nexpires: Fri, 27 Mar 2026 10:10:00 GMT\r\nlast-modified: Wed, 12 Jun 2024 11:22:08 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-cache-status: HIT\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 12/27/2025 10:10:00\r\ncdn-edgestorageid: 1334\r\ncdn-requestid: e16e823816f853a6f4fa1a36310b6b6d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":10665,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 8215x8236, segment length 16, progressive, precision 8, 300x226, components 3","md5":"14b3e37c97fd1a64458e8d97ef304cff","sha1":"6fdbbbbddbc6f03c7b9e00a02732478cf96ceff4","sha256":"63289a18d56afff797d0efa001638a230c14b992bfbd18b506ffc869ec1dd62c","sha512":"bb7e40f0145f1c0040c59a10bdcb69f463a2bbfed653312aa96a589639b5fd0f2791ae10314aa2ed934eebc6af726c0126d30f974d973e2d10a1072d41364771","ssdeep":"192:WmYq6+WbKnlIxsVLB2AHurkocj8iChxq+VC3z2PI7a8pOOi46n:fNLK2lIy1QAHurIg3NC3w8fps","tlshash":"4122afbba2901ca9d8ffec3a441d3f587310646b6d410351ef544f25a32da888d9437a","first_seen":"2025-10-04T11:36:14.712103Z","last_seen":"2026-01-03T13:47:52.618077Z","times_seen":4,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":279,"dns":0,"connect":23,"send":0,"wait":37,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/original/2X/1/1012a318bd0ca58c70d438bdd2f84bbedf9b6f3f.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/original/2X/1/1012a318bd0ca58c70d438bdd2f84bbedf9b6f3f.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 76257\r\nlast-modified: Thu, 11 Dec 2025 04:13:43 GMT\r\nexpires: Sun, 03 Jan 2027 13:46:27 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76257,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x848, components 3","md5":"bca2525cb61968d18247448dc703e040","sha1":"1012a318bd0ca58c70d438bdd2f84bbedf9b6f3f","sha256":"3802850d0c6d13f40ccbd172cb7376b63d9e12a54ad815e6104b4d380a3a3ac8","sha512":"5909baa10f296b8664ffe8c6b064920f3baf5e1f9b91ada23231c787661acd4e9f11b5e7535a2c33a37ff216937838416c743fd03e8d552652bc3e6f269b8c73","ssdeep":"1536:wqHWM5odd43OEVbOqet3LrUPQk1hB8Jn3pSitTmHuCFCY3kdEIq:55TOzqQ8hBKTaHuCFl4Ef","tlshash":"94730252fc20fe26a9c6c414557ccb8032cce569131fd0ab09beae53bc8e7e6e942c05","first_seen":"2026-01-01T07:51:02.740591Z","last_seen":"2026-02-25T12:46:35.578698Z","times_seen":17,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img2.russkoeporno.tv/ruxp/img/1/1190_r2.jpg","fqdn":"img2.russkoeporno.tv","domain":"russkoeporno.tv","tld":"tv"},"ip":{"addr":"172.67.180.196","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"russkoeporno.tv","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 08:15:31 GMT","end":"Mon, 09 Feb 2026 09:13:57 GMT"},"fingerprint":{"sha1":"1C:4F:61:DF:25:96:5A:5E:2E:2E:28:CF:41:9B:AD:26:9B:71:3F:55","sha256":"54:6F:AD:F5:D0:22:36:E9:39:7F:56:8D:0A:28:CE:1C:22:3A:93:47:77:A6:94:3A:8E:63:CB:1C:62:CF:B6:EC"}}},"request":{"raw":"GET /ruxp/img/1/1190_r2.jpg HTTP/1.1\r\nHost: img2.russkoeporno.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10911\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Feb 2025 15:42:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67aa1e53-2a9f\"\r\nexpires: Mon, 19 Jan 2026 04:24:43 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccept-ranges: bytes\r\nage: 1243304\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kjenNz5IiLvIax2CA%2BFWNwIq2zpziFhVe1VdGUlQFNP5cnzktc4p9XpuEo91gMpwjfOTn4Zu8w1B4NP3L%2FJWsSEkrMN%2FFse7YVHzbgSWL7udVg%3D%3D\"}]}\r\ncf-ray: 9b82f144ef0e568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10911,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x224, components 3","md5":"838d14b7275d2c220e51c88ff1c2833b","sha1":"1ac69d631cdfb6cc297b825eb3035a97f9bddd12","sha256":"780e0eab981fafe987ed6133e49401069df8c3ea6e6e887023d74f9e447500bc","sha512":"91cedf2503dc604ab6b5d130602c33b85e37d4f5c05f3052cad6d56ba8eae67679b32c095b74399c77f72cbef3e127b2f350700123f7f6676ff61b3813388a7f","ssdeep":"192:yowFurLKbkGIm5pOOm5mDkl74E3IH6mcAMaA35UQOVOPPeYKr0/FuiL28LVX8ci2:YFSLAkIpOOLgZ3lmcnqQbV/DL28L+sys","tlshash":"7f32cf2f30931c53ce9dfe7314a71144cb020a75a42fb8e86065248fa6f9ae2436fd57","first_seen":"2025-10-02T14:12:53.647969Z","last_seen":"2026-01-20T01:37:03.462227Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/45f6ca65e30a9b5125b9f03978714478eb247865/cover/5_505_259?ih=1","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"104.20.25.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:42:58 GMT","end":"Sat, 28 Feb 2026 05:41:39 GMT"},"fingerprint":{"sha1":"B4:BA:DA:BD:C3:AB:12:42:98:CF:30:EE:AC:A0:FA:D3:F0:9F:B6:F3","sha256":"52:F0:DB:63:D9:15:13:E1:B0:3F:18:E2:A8:9B:90:97:13:68:24:71:E9:DC:7B:CA:D9:C3:17:79:92:27:EE:B7"}}},"request":{"raw":"GET /videos/45f6ca65e30a9b5125b9f03978714478eb247865/cover/5_505_259?ih=1 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 26008\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Mar 2025 11:12:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"67c6e02b-6598\"\r\nexpires: Thu, 30 Oct 2025 07:25:32 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=7200\r\nt-cache: LHIT\r\naccept-ranges: bytes\r\nage: 8230858\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yqtO1m5hBlFhVcaHfj1RmO%2B%2F3VVeAajOzm%2BrdPI%2FSDgVAhC3RLRPExxDQH%2FGKn%2FZfHTMHBu9dXBnau3sVk%2FIvaCmiAjh8v3n0IeN\"}]}\r\ncf-ray: 9b82f15c59d20daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26008,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.107.100\", baseline, precision 8, 505x259, components 3","md5":"f4c61c949a7a672778b77698e9288d6b","sha1":"e8904ddf90a934aa1266456d414c4073dee42edc","sha256":"d86b96a42a0388930cc2dabeec4b08d745d3ba8c91e058ebe84cc90699b2262a","sha512":"8ba55889e51afa30d784ee4dc1ff848fadf149b587f9f9e7ea253a764f84a72c5440b0a341449fcff901708bacf48a74c6d3e1ccd310cec9a920b27a23a304c5","ssdeep":"384:Qo923r2ImqpgEkdQ4s3FQS9QY5ofeWheBC+yZHKq1nF3nFVVW231/9Y8:eiImqtkPmQY5Wege4+ydKqnh1FV","tlshash":"06c29e07dd084b83581c87bcbe074cfd6b0d5b0d6a957afb00728e83fa207ab4c5a569","first_seen":"2025-06-06T07:13:00.482556Z","last_seen":"2026-03-02T10:40:01.239839Z","times_seen":84,"resource_available":false,"data":null}},"time_used":3724,"timings":{"blocked":3486,"dns":1,"connect":12,"send":0,"wait":7,"receive":1,"ssl":203},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"timg216.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cavporn.com/contents/videos_screenshots/6000/6082/preview.jpg","fqdn":"cavporn.com","domain":"cavporn.com","tld":"com"},"ip":{"addr":"45.150.227.99","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cavporn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 08:56:41 GMT","end":"Fri, 06 Feb 2026 08:56:40 GMT"},"fingerprint":{"sha1":"A0:72:15:62:CE:E5:F4:B5:6B:FD:1C:8F:26:A7:3A:6D:4E:36:7D:FF","sha256":"54:EF:BF:E8:53:76:24:BD:D0:D2:52:7F:DE:34:93:D3:8B:29:F4:AB:64:C2:17:F4:96:2A:75:2D:C5:B7:97:55"}}},"request":{"raw":"GET /contents/videos_screenshots/6000/6082/preview.jpg HTTP/1.1\r\nHost: cavporn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":6833,"timings":{"blocked":3471,"dns":1847,"connect":168,"send":0,"wait":336,"receive":0,"ssl":1011},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.jxjav.com/favicon.ico","fqdn":"www.jxjav.com","domain":"jxjav.com","tld":"com"},"ip":{"addr":"38.225.209.250","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jxjav.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 02:59:45 GMT","end":"Fri, 27 Feb 2026 02:59:44 GMT"},"fingerprint":{"sha1":"CA:7F:18:3B:BD:5C:D4:0C:FB:12:0B:20:90:57:AC:5E:7F:EE:14:01","sha256":"E4:A3:F9:D4:77:DF:44:65:4F:35:BB:9B:8F:70:5B:07:00:1B:8C:95:6D:20:8C:77:89:54:7F:83:85:C9:39:48"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.jxjav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/x-icon\r\ndate: Fri, 02 Jan 2026 14:40:45 GMT\r\netag: \"6933481e-fc4\"\r\nlast-modified: Fri, 02 Jan 2026 14:40:45 GMT\r\nserver: nginx\r\nx-cache: HIT, server, disk\r\ncontent-length: 4036\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4036,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"8e59ad0a9aefea690d92ffc6266516c6","sha1":"f82e7a5e38ad362b54a94522fd99963bc1515d27","sha256":"fa3958fb852fab1c92b41cbb3a1ad0c4487ee1cd1ef4712e6817fab8b8fde0eb","sha512":"3b4c28339115ca408dd153651ca8a2447b50788ff8499e51986f4062a8124e3145ef0d0ee9dbc36515be338d7cd0a21e1d6eb9725e9905454911af9c6d8827e0","ssdeep":"","tlshash":"a8817e69280b2a67e7f9a51b07360117ddf1a0ad62d7a88dc909c037bdee2b73086414","first_seen":"2025-12-05T22:31:48.407286Z","last_seen":"2026-02-14T16:06:52.824936Z","times_seen":254,"resource_available":false,"data":null}},"time_used":598,"timings":{"blocked":288,"dns":210,"connect":30,"send":0,"wait":30,"receive":1,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"www.jxjav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"erota2.com/files/thumbnail/c4/if/c4ifxs5utjumshuhdclw3rin.jpg","fqdn":"erota2.com","domain":"erota2.com","tld":"com"},"ip":{"addr":"104.26.4.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erota2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 03:57:39 GMT","end":"Tue, 24 Mar 2026 04:57:35 GMT"},"fingerprint":{"sha1":"61:A4:B3:51:5C:84:0C:7A:D6:B2:9C:95:F5:8A:8A:BB:32:1E:BF:0A","sha256":"12:B6:23:F5:45:4E:9E:2F:9E:1C:EB:B6:30:A1:C5:0D:C3:06:A5:27:4C:CA:54:E7:0E:95:E5:38:6A:78:13:97"}}},"request":{"raw":"GET /files/thumbnail/c4/if/c4ifxs5utjumshuhdclw3rin.jpg HTTP/1.1\r\nHost: erota2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7806\r\nserver: cloudflare\r\nlast-modified: Thu, 25 Mar 2021 05:36:14 GMT\r\netag: \"605c214e-2c9a\"\r\nvary: accept, accept-encoding\r\naccept-ranges: bytes\r\ncache-control: max-age=7200\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ftlUR3e3j4o1nFXJM%2F%2FaYxQSQpWb7QgnoS3N6I6iKrPWuNVAUlp8jkojRlWOzhhQn25rXRpd89Yh7zkFN%2BDQ2xEhNtaefc0%3D\"}]}\r\npriority: u=1;i=?0,cf-chb=(258;u=3;i=?0 1386;u=5;i=?0 5789;u=6;i=?0)\r\ncf-polished: ok\r\ncf-bgj: h2pri,imgq:85\r\nage: 2744\r\ncf-cache-status: HIT\r\ncf-ray: 9b82f15c9ac656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7806,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x169, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2d1e10851a5f675b542be6c072317580","sha1":"fecffe4d64d63ed8846037253d6a15b6aa298797","sha256":"1c3bf3ce9ed9ef61966d2ed11173d72edb31b029f0213bee86779e1250ac7614","sha512":"a33d70161548047283f6d0cc7080a6abf409353ef1f6c18d63ed42796912db14ba4b8819053949ea55cd1ef9c9a591f212fbf76367640e981c59ae9bac1a42cd","ssdeep":"192:NsxIHfKEVQg47+MY8FeQNJqKIJ7uQXt8egTBIcJ/Rju2S:ya/9l2e1DoQXtRgdIK42S","tlshash":"11f1c020b0b1ee252db2b027a2852f821651bfe0fec2f1f186667f510a1ed124f7f244","first_seen":"2025-05-21T07:12:06.527767Z","last_seen":"2026-01-19T21:59:48.109761Z","times_seen":18,"resource_available":false,"data":null}},"time_used":3693,"timings":{"blocked":3400,"dns":1,"connect":13,"send":0,"wait":21,"receive":0,"ssl":233},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn1.hotmoza.tv/thumb/4b/a0/0f/4ba00ff9e0ee81ae63c2cea8686ff612.jpg","fqdn":"cdn1.hotmoza.tv","domain":"hotmoza.tv","tld":"tv"},"ip":{"addr":"104.21.70.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotmoza.tv","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 22:14:18 GMT","end":"Wed, 18 Mar 2026 23:10:42 GMT"},"fingerprint":{"sha1":"13:95:73:49:25:9B:A5:9F:37:DA:EB:FC:66:4B:44:80:9D:54:03:8B","sha256":"68:BC:DA:3E:17:C2:7E:93:BC:49:E4:F4:F9:30:6C:D0:23:D1:05:BE:99:82:2C:AD:E9:F9:64:D2:CE:D4:B7:12"}}},"request":{"raw":"GET /thumb/4b/a0/0f/4ba00ff9e0ee81ae63c2cea8686ff612.jpg HTTP/1.1\r\nHost: cdn1.hotmoza.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10687\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-object-meta-mtime: 1581339858.918418\r\netag: 0ea121caf8bc287adb376302098c289d\r\nlast-modified: Mon, 10 Feb 2020 13:04:22 GMT\r\nx-timestamp: 1581339861.47246\r\nx-trans-id: tx6ebd0bf1ac574240a0530-006634109d\r\nx-openstack-request-id: tx6ebd0bf1ac574240a0530-006634109d\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\ncache-control: max-age=172800\r\nexpires: Mon, 05 Jan 2026 07:24:51 GMT\r\nx-cdn-host-id: ds9225\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nage: 22896\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JGVJ0PVLMayHuKCyFl8TmqHq3Y3uF%2FChbiqlCWVNltppcJJxtXkLBPyMFTpVXQW8Tr%2FguEgXgqtuwE6JbJeSpD0efPKsPUjfSDVFGY4%3D\"}]}\r\ncf-ray: 9b82f1448a0556cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10687,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85\", progressive, precision 8, 320x180, components 3","md5":"0ea121caf8bc287adb376302098c289d","sha1":"f46c266306fd436f933e705aeca49a9f3f4b8641","sha256":"f3778ed37fc2bce93934f65751014bf9c64c0c5460d04ebbd7a78e5e85669e82","sha512":"f1fdbf3e21e3fa9128da85fcf014fb44cca8de76d58bec4a128b9f83d9512966a9aa76907c36411b2bf51c15040a9a620d5af4e7594795667f73d283536b3287","ssdeep":"192:vP3ImoFh0xA3vqNHFI7fpgeYwxqPZ+pw2mfrkTEmIBy2CPmA5IPFhSICt:n3ImoFh0WCFI7f1Yr4D2rkIj8PVcFhct","tlshash":"9822af5133210c08f47d9b78e7e68e8737a9e5d3502a4a1e3d741a64e3792e54cb8e2f","first_seen":"2024-05-10T14:32:48Z","last_seen":"2026-01-24T19:30:50.822548Z","times_seen":39,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.aisan-porn.org/favicon.ico","fqdn":"www.aisan-porn.org","domain":"aisan-porn.org","tld":"org"},"ip":{"addr":"192.243.50.111","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aisan-porn.org","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Thu, 26 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:6E:14:6E:FA:4F:6D:84:1F:20:3C:89:B1:57:6F:F8:F7:20:3C:60","sha256":"B4:E8:61:EA:53:14:5C:60:C3:83:59:E1:12:89:2B:A0:3E:6F:FB:AC:1E:D6:36:63:AF:64:4A:D9:22:EC:75:19"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.aisan-porn.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: openresty\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":152,"connect":91,"send":0,"wait":92,"receive":0,"ssl":193},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdocac.4vid.top/av4usimage.png","fqdn":"pdocac.4vid.top","domain":"4vid.top","tld":"top"},"ip":{"addr":"172.67.181.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:42.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4vid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 04:08:57 GMT","end":"Fri, 13 Feb 2026 05:05:33 GMT"},"fingerprint":{"sha1":"99:1F:D8:6E:39:72:6F:D5:11:7F:B0:79:4D:F6:40:0E:A5:37:9F:9A","sha256":"F4:87:3F:1A:B8:E5:52:39:3C:56:29:BB:B7:CD:E0:20:DE:45:F2:30:28:80:C4:8D:AB:CA:AE:DC:24:7C:14:56"}}},"request":{"raw":"GET /av4usimage.png HTTP/1.1\r\nHost: pdocac.4vid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 2619\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"a3b-6437702003080\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\ncache-control: public, max-age=360000\r\nx-proxy-cache-192g-la: HIT\r\nxkey-192la: pdocac.4vid.top/av4usimage.png--pdocac.4vid.top--myzone---yes\r\naccept-ranges: bytes\r\nage: 132483\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FYMo4DzZmTFfqLlpzae89aTIZh7g2poyeTE6zPpHaqbn5YBPSzjQRnjjIHjGy8pX9RKJTmWq3U9NUXCiUHUaJQFZpJJh1SiWa53RQVo%3D\"}]}\r\ncf-ray: 9b82f19f0eec7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2619,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 339 x 89, 8-bit/color RGB, non-interlaced","md5":"8267aaadeeeb8c9fa7482f2f9db2d4e3","sha1":"a2ef23d3b5f9d9bb3102c855a8ace072884ba60c","sha256":"998cf9d427c2e322904e89a056ba823b56078fb199b7395883f3eafabaadbea8","sha512":"719215d8ec70b8b36b24277a80e7876be2fa1afe3698c05bbff013b6a2936701f266e694c221756e7306d1a945013986a53e41af0bc90bdd4bbf0dcbe33f7637","ssdeep":"","tlshash":"f5513ccb05b2fdbc657d79976105a79ef3a896c72982b872565c38c14243a0096c1fe1","first_seen":"2025-11-13T21:07:01.541567Z","last_seen":"2026-04-22T17:26:51.423965Z","times_seen":363,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":7,"connect":1,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"pdocac.4vid.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"image.beckybelike.com/upload/vod/20240909-1/60ce45db0d81643b3b2c6d5ecc0af3f4.jpg","fqdn":"image.beckybelike.com","domain":"beckybelike.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.096Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20240909-1/60ce45db0d81643b3b2c6d5ecc0af3f4.jpg HTTP/1.1\r\nHost: image.beckybelike.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":11647,"timings":{"blocked":3403,"dns":3989,"connect":4255,"send":3950,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornyc.com/thumbs/68/115_busty-teen-hairbrush.jpg","fqdn":"pornyc.com","domain":"pornyc.com","tld":"com"},"ip":{"addr":"104.21.2.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornyc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 19:39:00 GMT","end":"Wed, 18 Mar 2026 20:36:40 GMT"},"fingerprint":{"sha1":"7B:B7:DF:49:67:23:E0:82:20:CE:9D:4E:C7:A4:09:D7:82:1E:EC:88","sha256":"BA:70:35:10:49:49:25:95:FF:81:51:BC:50:EC:E9:46:9D:FA:05:57:69:E5:D4:A3:6B:29:9D:0A:53:56:A5:BD"}}},"request":{"raw":"GET /thumbs/68/115_busty-teen-hairbrush.jpg HTTP/1.1\r\nHost: pornyc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6804\r\nserver: cloudflare\r\nlast-modified: Fri, 17 Sep 2021 16:45:52 GMT\r\netag: \"6144c640-1a94\"\r\nexpires: Tue, 22 Dec 2026 06:15:16 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1063875\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ru0JeLd2ADu6pSCpcSUxCYkS7vY2Qr%2Bi60WBC2HCMLiSFi798ke1IMZ941XjYtXbFR6J2S9zjJUg01WAidMvqF9RpC04ZP6s2PE%3D\"}]}\r\ncf-ray: 9b82f15cc9c9120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6804,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 312x208, components 3","md5":"2cd7b43b3a2981886a88f942edf15d9e","sha1":"d3521992a848e3171f06bd62cbaa6876d34e990f","sha256":"6c864c5ae27a141e8e2c233efb7a3d766057df4827dec386a280e144c540a692","sha512":"81266e7dedf74e71dd6ab6cdc576303a6423603a16ac6e97e9e4f6e2687c82f4b76ca2b4e26ee797cef0251a2003e9013d0579feebcb8a66b758cb84bf8e3d8b","ssdeep":"96:egT6ySIyu5JBAiIZO+uQ8vBKZF93J/+ec7CxAW8vrc3m92xDDnleVlDzNfE:/HjRfZ+ubKhULSAW8vrcW92xDTwu","tlshash":"1ae19e82234f8dc9ff6e29f4d1359f1699fa795298d4c62f26c01f4899620b1295b0f1","first_seen":"2024-08-20T03:51:59.200454Z","last_seen":"2026-03-03T09:47:10.815498Z","times_seen":6,"resource_available":false,"data":null}},"time_used":3713,"timings":{"blocked":3394,"dns":1,"connect":14,"send":0,"wait":12,"receive":0,"ssl":254},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"pornyc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.porn100.tv/thumbs/270/6287470828_0.jpg","fqdn":"www.porn100.tv","domain":"porn100.tv","tld":"tv"},"ip":{"addr":"172.67.211.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:32.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"porn100.tv","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 18:45:19 GMT","end":"Wed, 01 Apr 2026 19:42:53 GMT"},"fingerprint":{"sha1":"CC:92:8F:1F:5C:6E:DC:72:05:D6:C2:59:6B:AA:B6:E7:CB:EE:BE:ED","sha256":"50:84:9E:0B:0B:79:18:89:32:96:1F:BC:1D:5A:B8:A1:8C:C6:B1:CD:B6:99:D6:C4:62:99:A6:21:88:0B:C5:56"}}},"request":{"raw":"GET /thumbs/270/6287470828_0.jpg HTTP/1.1\r\nHost: www.porn100.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-location: 404.php\r\ntcn: choice\r\nexpires: Wed, 04 Mar 2026 13:46:32 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4BLcrsxyOy7E%2Fz0QRpIS7UIrRXlxuRNqf2lauRYd774PfccuE55WMiyGy0MHiePl3J3qqU2gbNbqgfOehENv3eOLbz6UKyExCupCmg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b82f15ef91956c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cdne-pics.youjizz.com/6/4/c/0/b/64c0b36a01841f5d3ec89608ec01eb1b1661832969-3.jpg","fqdn":"cdne-pics.youjizz.com","domain":"youjizz.com","tld":"com"},"ip":{"addr":"64.210.135.118","port":80,"asn":30361,"as":"SWIFTWILL2","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.054Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /6/4/c/0/b/64c0b36a01841f5d3ec89608ec01eb1b1661832969-3.jpg HTTP/1.1\r\nHost: cdne-pics.youjizz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 14601\r\nlast-modified: Wed, 31 Aug 2022 00:05:08 GMT\r\netag: \"3909-5e77e3ffaacb8\"\r\nexpires: Wed, 25 Sep 2024 18:25:51 GMT\r\ncache-control: max-age=10377451\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\nAccept-Ranges: bytes\r\nalt-svc: h3=\":443\"; ma=300\r\nx-cdn-diag: ams5-7846-1-69385-h-0-0---;6249-125-1941589----0-0-0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14601,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc58.106.100\", baseline, precision 8, 308x232, components 3","md5":"7d06b63576c64abdeac458a2d47b9292","sha1":"61a15ed750b77f79dd0a7e9c5bdbd295a75d8c1c","sha256":"7f87468eac6df2f406ffde862e32603053aa3ab8610b700bedcb9f76a0280a0e","sha512":"f9faae3c73106b51f02ff6ad09475a0c5eb7ab4ae42bd4cce3fcef60daddec786406677a74b0b5385ec8e05473cba1fcfaaa56752473be719e69233b06f74354","ssdeep":"384:iDDVsaCEwkUG5GmZEKxjAZwd1ppbrOhGg:CqlkYHKQ41/brvg","tlshash":"c862c07a44bcc7b6c82a0d3a08182b639d93f72f417172d1856bdcec65ace836b60645","first_seen":"2025-12-25T16:44:02.328049Z","last_seen":"2026-01-10T00:34:52.355696Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3670,"timings":{"blocked":3444,"dns":1,"connect":86,"send":0,"wait":48,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filmesporno.xxx/wp-content/uploads/2021/05/negras-novinhas-anal-jpg.jpg","fqdn":"filmesporno.xxx","domain":"filmesporno.xxx","tld":"xxx"},"ip":{"addr":"80.82.65.89","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filmesporno.xxx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 15:03:23 GMT","end":"Sun, 15 Mar 2026 15:03:22 GMT"},"fingerprint":{"sha1":"A5:4E:7D:6C:2F:EC:FD:8F:30:EB:DA:9D:5B:1D:31:90:55:D6:BB:84","sha256":"E9:C5:FD:9B:5F:F4:33:3A:2B:0D:66:76:46:D7:72:45:5F:A4:6B:51:4F:64:46:4B:FF:20:8F:AB:5D:7C:BB:6A"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/negras-novinhas-anal-jpg.jpg HTTP/1.1\r\nHost: filmesporno.xxx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sat, 03 Jan 2026 13:46:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22595\r\netag: \"6097838e-5843\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\nexpires: Sun, 04 Jan 2026 00:30:00 GMT\r\ncache-control: max-age=38612\r\nx-served-by: filmesporno.xxx\r\nx-proxy-cache-status: HIT\r\nx-proxy-cache-skip: 1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22595,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 352x198, components 3","md5":"e5f43ec1a7bb9d9eedbd76c42db4853d","sha1":"c72bc52916b8d57b0bdf025b22b065fc3555f02f","sha256":"fdad77f123afa56ef25f969163863ad4d1516971f48ffc9dd00f8f9a244148c4","sha512":"166d80c44fb3f47a9f2f2bd16c4c58902a8e3806463c215a7f3ab5ab4b3f5a83eadab71764d7a4ea045e4016f5efe944bc894395dc1854e6f5342f6d43277237","ssdeep":"384:4fbqi2+Ddan4FNGBXT3WHSWVfolS91Jd+Cf5jxAe+KkwRga:4fjNFNGBXdmJZlh+KtRga","tlshash":"aba2d0760116b004d1bef439c842a4c025ce4b593e1a6dda9be01b8897bb7b269f771f","first_seen":"2026-01-03T13:47:52.665099Z","last_seen":"2026-03-01T22:30:17.303096Z","times_seen":5,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lsbzytp.com:3519/upload/vod/20230910-1/f6ff03b627332765c66b042e33571888.jpg","fqdn":"lsbzytp.com","domain":"lsbzytp.com","tld":"com"},"ip":{"addr":"142.248.99.61","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 09:53:21 GMT","end":"Fri, 06 Mar 2026 09:53:20 GMT"},"fingerprint":{"sha1":"55:92:B5:BC:78:CB:75:63:3B:0F:C6:A3:DD:2D:2F:7C:FA:07:B7:4A","sha256":"02:67:5F:F2:7D:A5:B6:59:8F:77:98:9C:EF:94:84:1A:E6:C9:FC:6E:A7:27:06:47:BB:16:5D:BE:A9:91:90:79"}}},"request":{"raw":"GET /upload/vod/20230910-1/f6ff03b627332765c66b042e33571888.jpg HTTP/1.1\r\nHost: lsbzytp.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 59723\r\nlast-modified: Wed, 22 Nov 2023 12:54:43 GMT\r\nvary: Accept-Encoding\r\netag: \"655dfa13-e94b\"\r\nexpires: Thu, 29 Jan 2026 06:35:27 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 371461\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":59723,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 980x550, components 3","md5":"a399136fbef92b74f7094020e7ef6dd8","sha1":"698f4228e5a02ca4f005cb17191713eece1391fa","sha256":"3812e04daaba40df8f0a9904a207445ea3816422b1909d87828e3137b52d3f01","sha512":"56d91476c5094136199efa6ca2794fe24abe172db75e46945bb7d3a139ac2d8d2d27f0fdc706bf20d8b4c554b0a882f5420909d65ac8a838e8e088b4654d3a50","ssdeep":"1536:rfF9KEpkj4i/oL/XI5qXpPEhbbYVjKHrEjHJq1Q:xRkb/47pcheaIjH8Q","tlshash":"f04302835bc5ce1954bb842cd8fe01e244d4751f43f0e5a306ae1da2aada15daf52ccb","first_seen":"2025-05-20T07:09:21.254715Z","last_seen":"2026-03-02T16:55:39.735983Z","times_seen":36,"resource_available":false,"data":null}},"time_used":1082,"timings":{"blocked":3,"dns":9,"connect":146,"send":0,"wait":533,"receive":86,"ssl":303},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.vidmo.pro/thumbs_320/28/e6/28e69cdd2f3c53235cc992564f1cc624/12702406.jpg","fqdn":"en.vidmo.pro","domain":"vidmo.pro","tld":"pro"},"ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"en.vidmo.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 20:48:10 GMT","end":"Thu, 19 Feb 2026 20:48:09 GMT"},"fingerprint":{"sha1":"B8:8B:9C:2B:E9:53:D3:85:0E:57:74:8D:32:07:72:DF:38:F3:91:DA","sha256":"9B:B3:9F:DD:FB:1B:36:C3:04:60:BF:DF:87:AA:AB:5D:F6:0D:45:20:77:9B:29:19:5F:C4:B6:F1:04:C9:23:3E"}}},"request":{"raw":"GET /thumbs_320/28/e6/28e69cdd2f3c53235cc992564f1cc624/12702406.jpg HTTP/1.1\r\nHost: en.vidmo.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24357\r\nlast-modified: Thu, 24 Dec 2020 03:04:16 GMT\r\nexpires: Wed, 17 Apr 2024 16:42:07 GMT\r\ncache-control: max-age=604800, public, no-transform\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24357,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 93\", baseline, precision 8, 320x240, components 3","md5":"3b2fab690c34351308c49de243353bdf","sha1":"880117c7906177eaf0191ab09e94b76f86bd1ea4","sha256":"c4e6e37fcecd05baf67ca494b7d1434bad021603c881d489aa3a6386da794608","sha512":"af6d5eff9506ff8ad3ae7bb991e85c1d69f79a91871c48aa68bc529836eeb8cfa05ca83ce5109322e6fe9825d8cf8dfcba345fb79dd7a6b0c45800b035d7c7ca","ssdeep":"384:4jWumPiDvbX3Ziu1nNf4QiapFUsi4ef9BWKh2f64ZKo0bTst0jpqr31:4jlmPU7ZPn5fpbTi4ef9BWKh2hZGbZNG","tlshash":"72b2f178ed022179c14d281a9c8dd4ef738a48e5a7631d36e5623312d75cbfdb469388","first_seen":"2024-12-27T06:21:25.972461Z","last_seen":"2026-03-03T14:10:03.587061Z","times_seen":22,"resource_available":false,"data":null}},"time_used":3473,"timings":{"blocked":3411,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"en.vidmo.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"de.chezcathy.com/favicon.ico","fqdn":"de.chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"185.111.111.160","port":443,"asn":212238,"as":"Datacamp Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"de.chezcathy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 09:11:24 GMT","end":"Sat, 21 Feb 2026 09:11:23 GMT"},"fingerprint":{"sha1":"99:97:19:2A:E1:04:8A:B0:57:F1:97:A8:0F:CC:35:0E:7B:5B:81:29","sha256":"7D:E3:52:1E:66:C0:F6:4E:B7:83:44:2B:5D:5E:F4:34:9C:33:D8:B3:9D:92:4A:73:E6:D1:2E:F5:CD:73:22:BB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: de.chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-length: 1406\r\nserver: BunnyCDN-DE1-1334\r\ncdn-pullzone: 4336721\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\ncache-control: max-age=7776000\r\netag: W/\"1406-1766141067476\"\r\nexpires: Fri, 20 Mar 2026 19:51:23 GMT\r\nlast-modified: Fri, 19 Dec 2025 10:44:27 GMT\r\nx-powered-by: Express\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-cache-status: HIT\r\ncdn-proxyver: 1.41\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 12/20/2025 19:51:23\r\ncdn-edgestorageid: 1055\r\ncdn-requestid: d835f28bef15046e3cad651e54afbba3\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel","md5":"8851a1b28ebe567b927c9ae6600a8fc6","sha1":"113da6a02dff45d4b9c0d3c9ae531445a8c7b687","sha256":"b545a5091485f5dd485f0e9d2abcd55a06b22f9359c6da8955b8da7b1d3c9212","sha512":"f438008028a354d1600c8af6a136e3991dcbaa188759f20c22a6c76a3170390c14578561d886272741f029f6f161b3711afb959385bbf49166ccf170e3edf95d","ssdeep":"","tlshash":"2121e1213397e353db451ef532244b944243d32906f79b9411e80685aa4f3301fbc373","first_seen":"2025-05-02T17:12:40.010154Z","last_seen":"2026-04-22T17:26:51.386234Z","times_seen":631,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":25,"connect":24,"send":0,"wait":28,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.porn100.tv/thumbs/270/6287470828_0.jpg","fqdn":"www.porn100.tv","domain":"porn100.tv","tld":"tv"},"ip":{"addr":"172.67.211.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"porn100.tv","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 18:45:19 GMT","end":"Wed, 01 Apr 2026 19:42:53 GMT"},"fingerprint":{"sha1":"CC:92:8F:1F:5C:6E:DC:72:05:D6:C2:59:6B:AA:B6:E7:CB:EE:BE:ED","sha256":"50:84:9E:0B:0B:79:18:89:32:96:1F:BC:1D:5A:B8:A1:8C:C6:B1:CD:B6:99:D6:C4:62:99:A6:21:88:0B:C5:56"}}},"request":{"raw":"GET /thumbs/270/6287470828_0.jpg HTTP/1.1\r\nHost: www.porn100.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-location: 404.php\r\ntcn: choice\r\nexpires: Wed, 04 Mar 2026 13:46:27 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wP3IVx39WF7jGqnkuMi1vlKMSLIF7s88z9hRj%2FOaNf%2BIXhy3f%2F70ld2nrnPLMWSX3ppR16v23CojDavF0dZ%2B8G%2FEZJG0Ou8t76xEPg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b82f1435bb056c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":80,"dns":2,"connect":1,"send":0,"wait":48,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filmesporno.xxx/wp-content/uploads/2021/04/stickam-jpg.jpg","fqdn":"filmesporno.xxx","domain":"filmesporno.xxx","tld":"xxx"},"ip":{"addr":"80.82.65.89","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filmesporno.xxx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 15:03:23 GMT","end":"Sun, 15 Mar 2026 15:03:22 GMT"},"fingerprint":{"sha1":"A5:4E:7D:6C:2F:EC:FD:8F:30:EB:DA:9D:5B:1D:31:90:55:D6:BB:84","sha256":"E9:C5:FD:9B:5F:F4:33:3A:2B:0D:66:76:46:D7:72:45:5F:A4:6B:51:4F:64:46:4B:FF:20:8F:AB:5D:7C:BB:6A"}}},"request":{"raw":"GET /wp-content/uploads/2021/04/stickam-jpg.jpg HTTP/1.1\r\nHost: filmesporno.xxx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10009\r\netag: \"6097b08a-2719\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\nexpires: Sun, 04 Jan 2026 00:30:00 GMT\r\ncache-control: max-age=38613\r\nx-served-by: filmesporno.xxx\r\nx-proxy-cache-status: HIT\r\nx-proxy-cache-skip: 1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":10009,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 352x198, components 3","md5":"39bc6108d174b4c5c16f4b0447fe502f","sha1":"222a5e34343f610c55d27c840df3f4abe797fb80","sha256":"eda938534332a86b7fb1aff1506663cc15e5ebbf369b8a7bdd5b9ef35613aa71","sha512":"26e951ad45aef91e280d123ec79cddfdb85b811f4531809da21fe997d3fe7a309a3e7b5c7a744baa2e575402d46ef039e2470903b891e6e22c4bf1861a17ef8d","ssdeep":"192:ZSa+9jt88aEroqJQBggfG7JNH2dQDuIAXXQXlQOCXrAdY3j5Pssi2sxp:ZAjtFNrvQagfENiQyFXQXlQOArMY310F","tlshash":"1422b0994d40a443ed1c0670607532f2763bcf009db33f2aaed72a94ef5a5f5467329a","first_seen":"2026-01-03T13:47:52.685335Z","last_seen":"2026-01-08T04:21:04.378785Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sexsex61.com/favicon.ico","fqdn":"sexsex61.com","domain":"sexsex61.com","tld":"com"},"ip":{"addr":"27.124.42.183","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sex83.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Dec 2025 11:56:06 GMT","end":"Wed, 04 Mar 2026 11:56:05 GMT"},"fingerprint":{"sha1":"62:15:D0:4F:44:F8:F8:4E:EB:1C:8C:5D:5B:6C:03:3A:EC:61:66:78","sha256":"E2:4B:7E:3F:65:EB:1A:17:67:6A:30:C4:46:A1:06:E7:37:DB:6C:BC:29:8D:B2:69:0E:32:F5:66:3A:4E:DB:52"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sexsex61.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 406\r\ndate: Sat, 03 Jan 2026 13:46:36 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":2347,"timings":{"blocked":-1,"dns":43,"connect":325,"send":0,"wait":1326,"receive":0,"ssl":653},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oedy9.com/favicon.ico","fqdn":"oedy9.com","domain":"oedy9.com","tld":"com"},"ip":{"addr":"38.225.209.250","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oedy9.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 12:19:19 GMT","end":"Thu, 26 Feb 2026 12:19:18 GMT"},"fingerprint":{"sha1":"69:7B:3D:0C:13:0E:79:59:85:79:6C:9F:CC:02:E7:C6:0C:DB:09:6B","sha256":"CD:1C:CE:88:E8:D4:C6:2F:12:8F:68:0A:04:29:1A:D5:09:16:39:90:F4:A1:9B:08:35:6D:A8:0F:8C:54:E1:96"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: oedy9.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 448\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":708,"timings":{"blocked":-1,"dns":263,"connect":113,"send":0,"wait":100,"receive":0,"ssl":231},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"oedy9.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sexsex10.com/favicon.ico","fqdn":"sexsex10.com","domain":"sexsex10.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.256Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sexsex10.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"degustibusbread.co.uk/wp-includes/images/w-logo-blue-white-bg.png","fqdn":"degustibusbread.co.uk","domain":"degustibusbread.co.uk","tld":"co.uk"},"ip":{"addr":"172.67.198.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"degustibusbread.co.uk","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:44:16 GMT","end":"Sun, 08 Feb 2026 14:41:37 GMT"},"fingerprint":{"sha1":"DA:87:4C:5A:BA:B0:88:36:F2:65:AE:25:66:E6:D3:69:D9:D9:E6:40","sha256":"38:5E:8A:77:1E:C1:52:72:19:91:07:9F:BA:BF:35:8A:07:82:3E:D8:21:18:4F:B1:CE:8C:94:84:91:08:74:54"}}},"request":{"raw":"GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1\r\nHost: degustibusbread.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 16 Nov 2021 00:04:01 GMT\r\ncache-control: max-age=14400\r\nage: 7105\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HTcfd5j%2B1v0vciO%2FP8mH20rGUwKARn3NxO%2F0aEjKtBAtyjaUfAQGSgCSW59HVNr59wj6Q8OtrjRxSj%2BlVuLWUHFJknj3Hy4dTzSvuDnCOm6ROFnhew%3D%3D\"}]}\r\ncf-ray: 9b82f16eba9e5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4119,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"000bf649cc8f6bf27cfb04d1bcdcd3c7","sha1":"d73d2f6d74ec6cdcbae07955592962e77d8ae814","sha256":"6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0","sha512":"73d2ea5ffc572c1ae73f37f8f0ff25e945afee8e077b6ee42ce969e575cdc2d8444f90848ea1cb4d1c9ee4bd725aee2b4576afc25f17d7295a90e1cbfe6edfd5","ssdeep":"96:h3bdWfcmTY+aRF1pXWZL2+42HGhIUc8KeLEd:hgXTY+as02mOB8XLEd","tlshash":"00814b63df38c566e66a2b189ff6bca56b290fd50ca1194c0eecb025632c06d1065089","first_seen":"2023-04-08T12:31:37Z","last_seen":"2026-04-27T16:17:41.666771Z","times_seen":58722,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"degustibusbread.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.geefap.com/uploads/posts/2018-01/thumbs/744199429_355942999.jpg","fqdn":"cdn2.geefap.com","domain":"geefap.com","tld":"com"},"ip":{"addr":"31.10.5.97","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn2.geefap.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV SSL CA 2","organization":"GoGetSSL"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:E2:65:92:08:22:4C:77:09:5B:C9:25:35:0E:A2:CD:89:EA:8C:7C","sha256":"82:2A:A8:8F:E2:B8:A2:CA:01:FD:DC:F1:C1:AD:8F:F7:85:8D:42:56:12:56:8B:70:B2:FD:44:15:88:B2:59:F4"}}},"request":{"raw":"GET /uploads/posts/2018-01/thumbs/744199429_355942999.jpg HTTP/1.1\r\nHost: cdn2.geefap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 13:46:32 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 26277\r\nLast-Modified: Sun, 21 Jan 2018 08:27:05 GMT\r\nConnection: keep-alive\r\nETag: \"5a644ed9-66a5\"\r\nExpires: Thu, 08 Jan 2026 13:46:32 GMT\r\nCache-Control: max-age=432000\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26277,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 300x400, components 3","md5":"0fcc66e672d485b99064796645198ad8","sha1":"a85a7728e66e4871458f9d20b6d0c1e59ca1b501","sha256":"8f6153d3df8c3eed603dd64e4e723376e7c0ea0303b3f53bdd3eb0b850ef185d","sha512":"5f79eaacb91fad049e3d53d81029e180287cd9d608d0f323e04f7e612661f7f407f4a2f39d7d08e9bb480923e36f974ea86ca0b06cc8a2149fc26a8bb65f1616","ssdeep":"384:3GHhzYdEf665qIAAoKEOjqiXWhxzFo6cwktTyCgHG0a2ihuWfGLI6wc0Fw4j:3wydEh5qIAdKZ2iIo6zG0OhusGE6dGDj","tlshash":"e4c2e016ca271bd375a312911eb35fefc9e98421998ce71411c361b397f04cd5519eac","first_seen":"2025-02-11T14:50:24.083183Z","last_seen":"2026-03-01T22:30:17.225656Z","times_seen":40,"resource_available":false,"data":null}},"time_used":4086,"timings":{"blocked":3410,"dns":1,"connect":71,"send":0,"wait":40,"receive":3,"ssl":512},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ekkofilm.dk/favicon.ico","fqdn":"ekkofilm.dk","domain":"ekkofilm.dk","tld":"dk"},"ip":{"addr":"65.109.19.181","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ekkofilm.dk","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Nov 2025 07:37:52 GMT","end":"Tue, 24 Feb 2026 07:37:51 GMT"},"fingerprint":{"sha1":"44:1E:0F:83:75:53:2B:9E:80:14:CB:39:D1:0B:58:52:E6:46:A3:75","sha256":"4A:7A:21:06:B2:E6:55:C4:59:3C:32:C6:44:3A:38:90:65:63:30:CA:BE:1D:7F:3E:75:88:74:99:0E:37:A8:C7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ekkofilm.dk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx/1.18.0\r\nDate: Sat, 03 Jan 2026 13:46:34 GMT\r\nContent-Type: text/html\r\nContent-Length: 169\r\nConnection: keep-alive\r\nLocation: https://www.ekkofilm.dk/favicon.ico\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":260,"connect":14,"send":0,"wait":15,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pornlulu.com/images/node/430/4304092.avif?1753302994","fqdn":"www.pornlulu.com","domain":"pornlulu.com","tld":"com"},"ip":{"addr":"104.21.34.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornlulu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 02:28:25 GMT","end":"Sun, 15 Mar 2026 03:26:05 GMT"},"fingerprint":{"sha1":"21:3C:EB:41:61:4C:C0:6F:23:6D:03:4C:C0:05:64:E3:E7:CF:76:88","sha256":"4F:C5:D0:1A:A3:61:D0:60:E7:1B:A3:7D:20:4B:DF:41:88:1F:B0:8A:19:A0:8C:8C:2C:85:A1:22:29:BB:C5:F5"}}},"request":{"raw":"GET /images/node/430/4304092.avif?1753302994 HTTP/1.1\r\nHost: www.pornlulu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/avif\r\ncontent-length: 2461\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"688147d2-99d\"\r\nexpires: Sat, 03 Jan 2026 14:30:06 GMT\r\nlast-modified: Wed, 23 Jul 2025 20:36:34 GMT\r\nnow-time: Sunday, 28-Dec-2025 14:55:03 GMT\r\nserver: cloudflare\r\nx-cache: BYPASS\r\nx-date: Sunday, 28-Dec-2025 14:55:03 GMT\r\nx-host: www.pornlulu.com\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 985\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=murZY4byPBBrUgU0Mp%2FZh%2BVtX1YnUPizOCA3ToknHqHabbtQ4JUIIo7NAf88FoIsnz5SDltlTIFcSCXmbZ%2BuAkQ9mVZTg5WFh2IBX6Fh2ks%3D\"}]}\r\ncf-ray: 9b82f15c29724e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2461,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"578a81b9607c4bce903df5e2ddfa882c","sha1":"25545ab723eb73ae17ff7556953e64c1e176a4d6","sha256":"0a7ffc7fe635cb5352163c12481a499fcfd150f598b854edd2678335b5001906","sha512":"f31005f4fb4bb28bf712224b9a168e07a342a11b3a1a86684fcf74ec2328ee595cab191ef92f07a9019268fafd181e44719ee8e62d0c46c354d62f0ca3fc7f24","ssdeep":"","tlshash":"54512a3eff6169c6ec2143364d0743361ba4cb3806ed379e95d4a58644681f09077e9f","first_seen":"2026-01-02T09:22:28.291097Z","last_seen":"2026-01-15T23:30:06.812214Z","times_seen":10,"resource_available":false,"data":null}},"time_used":3656,"timings":{"blocked":3439,"dns":1,"connect":12,"send":0,"wait":9,"receive":0,"ssl":179},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cavporn.com/favicon.ico","fqdn":"cavporn.com","domain":"cavporn.com","tld":"com"},"ip":{"addr":"45.150.227.99","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cavporn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 08:56:41 GMT","end":"Fri, 06 Feb 2026 08:56:40 GMT"},"fingerprint":{"sha1":"A0:72:15:62:CE:E5:F4:B5:6B:FD:1C:8F:26:A7:3A:6D:4E:36:7D:FF","sha256":"54:EF:BF:E8:53:76:24:BD:D0:D2:52:7F:DE:34:93:D3:8B:29:F4:AB:64:C2:17:F4:96:2A:75:2D:C5:B7:97:55"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cavporn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Mon, 25 Jul 2022 15:38:39 GMT\r\netag: \"62deb8ff-10be\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"79ca959796fd758988aa0acfb9952640","sha1":"8a8e7fa57c016b5cbc943faefc7c651e8959b0ce","sha256":"01d4884a0070a4804680dc80361b4695aa48ca7b37eb6768127b17d9763464cb","sha512":"93862024062645f7a461f4d8b7fac1304642d17c8017d03643a9a20a069437950f2716ec736198b7e201fef0d0d0e3e420e564790e6f8337c8579b87ed530e0f","ssdeep":"24:sueJWJ6kDtRzPzXsComfXGUDe6WSCWn6/+GXG7oJ32n:YkDtRz7XsCn/he9SZU+s2n","tlshash":"899155bbaa7ff1cdec74fe32629006024f2f5d3c46e661838716bd948630c106d8e10a","first_seen":"2024-02-24T21:02:43Z","last_seen":"2026-04-12T19:29:51.617586Z","times_seen":300,"resource_available":false,"data":null}},"time_used":581,"timings":{"blocked":245,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdig.com/faviconico/","fqdn":"fapdig.com","domain":"fapdig.com","tld":"com"},"ip":{"addr":"172.67.154.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdig.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 09:32:52 GMT","end":"Mon, 09 Feb 2026 10:31:27 GMT"},"fingerprint":{"sha1":"C4:DB:94:8D:E6:69:2A:BC:4F:96:2F:A7:2C:6D:5E:24:BC:7B:D1:D1","sha256":"32:61:1B:62:E9:0D:26:3D:9E:5D:F7:A8:06:CB:3A:85:4C:61:0C:8D:36:4A:51:FF:6B:37:BD:CF:B1:27:A0:E3"}}},"request":{"raw":"GET /faviconico/ HTTP/1.1\r\nHost: fapdig.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nset-cookie: ASPro_1382933ca042bef776e8100bd5eb8ac5=m75sq0vv57v497moi9v81nthno; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MF2izf4Ldyn4G9DlT77SrcmyzhVUBGnhN%2BPcowJriYX%2FnOZtSlnOVBvrBOsru1NtEoBDeZ11HMQSgZZHwn6ZQg5Wh%2BIO0A9n98g%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b82f16d0c4b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn1.hotmoza.tv/thumb/ae/30/f4/ae30f4d06589f5b1743c56b1ff3b65a3.jpg","fqdn":"cdn1.hotmoza.tv","domain":"hotmoza.tv","tld":"tv"},"ip":{"addr":"104.21.70.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotmoza.tv","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 22:14:18 GMT","end":"Wed, 18 Mar 2026 23:10:42 GMT"},"fingerprint":{"sha1":"13:95:73:49:25:9B:A5:9F:37:DA:EB:FC:66:4B:44:80:9D:54:03:8B","sha256":"68:BC:DA:3E:17:C2:7E:93:BC:49:E4:F4:F9:30:6C:D0:23:D1:05:BE:99:82:2C:AD:E9:F9:64:D2:CE:D4:B7:12"}}},"request":{"raw":"GET /thumb/ae/30/f4/ae30f4d06589f5b1743c56b1ff3b65a3.jpg HTTP/1.1\r\nHost: cdn1.hotmoza.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12678\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-object-meta-mtime: 1581307590.140687\r\netag: 5c09b42a9aeef6e27a982369e7c193f5\r\nlast-modified: Mon, 10 Feb 2020 04:06:35 GMT\r\nx-timestamp: 1581307594.07566\r\nx-trans-id: txd40b777a536a46a4af8b1-00665486b6\r\nx-openstack-request-id: txd40b777a536a46a4af8b1-00665486b6\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\ncache-control: max-age=172800\r\nexpires: Sun, 04 Jan 2026 05:32:07 GMT\r\nx-cdn-host-id: ds9225\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nage: 116059\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Xv6hnbvJM1%2BCa0YAq8KAaNeWrcq2r5rpGXKNW3xpM8fzzCzpQdCD%2B6C7hEMSKbMy%2B%2BQ0jga5lognRhooTdIwc3xBX6yo9h%2B4Qmg2hQ%3D\"}]}\r\ncf-ray: 9b82f14328be56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12678,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x71, segment length 16, baseline, precision 8, 320x180, components 3","md5":"5c09b42a9aeef6e27a982369e7c193f5","sha1":"c0c6b0b8c33740dce4e169ae9335eba378461ddc","sha256":"a4272e763abf2ee48fea9dca337386e10242e2f8edbb06858ae263c3b4067e22","sha512":"3d752c478c214c7884bc3f29f6f99e47afec4b41c319ee83895315170ee09c043a556517de5b597f1109f9d2a7bdf8a02c24ce178fd7a883461979d79e8fa580","ssdeep":"384:Gmf5BhWuk6yybmaViGw4l1nDDrqC//0vWp:JDZ3maVifWpDr9/v","tlshash":"9342c130ac0309d2736b61b265d7757905cbbf4ab6c005e918f6b4a204fd7e37e70116","first_seen":"2024-04-20T16:00:03Z","last_seen":"2026-01-20T14:01:03.860497Z","times_seen":45,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":39,"dns":14,"connect":2,"send":0,"wait":8,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.nudegirls.wiki/uploads8/posters/1/69/amateur-beautiful-girl-not-from-periscope-TC44sU.jpg","fqdn":"cdn2.nudegirls.wiki","domain":"nudegirls.wiki","tld":"wiki"},"ip":{"addr":"213.152.173.82","port":443,"asn":49453,"as":"Global Layer B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn2.nudegirls.wiki","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 23:47:52 GMT","end":"Thu, 19 Mar 2026 23:47:51 GMT"},"fingerprint":{"sha1":"CF:5B:42:A9:64:53:56:81:41:6C:2C:9E:AD:CD:E6:73:37:30:1C:28","sha256":"95:E3:2D:22:84:5D:9F:6C:02:91:40:E4:AE:5E:F7:87:6D:BF:AC:92:9D:23:65:3D:3B:6B:57:39:BA:46:EC:46"}}},"request":{"raw":"GET /uploads8/posters/1/69/amateur-beautiful-girl-not-from-periscope-TC44sU.jpg HTTP/1.1\r\nHost: cdn2.nudegirls.wiki\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 55843\r\nlast-modified: Sat, 04 Jul 2020 08:44:59 GMT\r\netag: \"5f00418b-da23\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55843,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 720x1280, components 3","md5":"3ea1c87f5155fba465f268c8187cc101","sha1":"9c2ff732b8e675ea64d7fe190ce766bf24da975b","sha256":"5af17452804d4964afd91bd626914d20923ebf85b20dbf747327a6a8e97ce494","sha512":"f22bf0238a4d5a68e25169b1521df3bb93252e4f7d9b25a0965d0e10c7151e403e76adf1a7481de63b1b14934ef80e52a33f270c1990037e83c67719fd1c2c20","ssdeep":"768:yK1JFKL/VptwNmoXh/jyxAbsP5rlykniLcfMUDkm8ZFI4sEyX1tI:yKUrV7wNHryu4plBiIkykmCvsi","tlshash":"47430141f2d79243db52c7a241781489aee13335d847f4e629c828827fd48ea7a1fb7d","first_seen":"2026-01-03T13:47:52.698475Z","last_seen":"2026-01-08T04:21:04.313512Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3838,"timings":{"blocked":3410,"dns":1,"connect":87,"send":0,"wait":37,"receive":45,"ssl":220},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darkvod.com/favicon.ico","fqdn":"darkvod.com","domain":"darkvod.com","tld":"com"},"ip":{"addr":"104.21.15.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:33.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkvod.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 21:08:06 GMT","end":"Tue, 24 Feb 2026 22:08:03 GMT"},"fingerprint":{"sha1":"BE:9E:B0:53:26:CB:BC:D1:20:B1:FC:C4:21:9F:3B:53:E9:00:37:1D","sha256":"88:84:9A:7E:95:A9:DD:A3:C6:C8:9A:04:BC:7F:EB:BB:D8:17:59:AF:26:EA:37:AB:3C:6B:10:74:E8:16:7D:83"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: darkvod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sat, 03 Jan 2026 13:46:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=VfMt0dWH4NJ4nPOz0t%2BCGC0PtavcsHfskESoO0bhGaS1fTLpIGxqKHFzlw894ylAsa6KmH1eqYP%2BmjjPY5%2F2S%2ByiCE9WQDS0DVi9d3mm5pJ3iQDL9MwdKwzDTZiA3w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\ncf-ray: 9b82f169ed7256be-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: chlray;desc=\"9b82f169ed7256be\", cfL4;desc=\"?proto=TCP\u0026rtt=1943\u0026min_rtt=1075\u0026rtt_var=745\u0026sent=24\u0026recv=17\u0026lost=0\u0026retrans=0\u0026sent_bytes=14736\u0026recv_bytes=1293\u0026delivery_rate=3935881\u0026cwnd=256\u0026unsent_bytes=0\u0026cid=047f764063f37e20\u0026ts=6325\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"darkvod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"darkvod.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"degustibusbread.co.uk/wp-includes/images/w-logo-blue-white-bg.png","fqdn":"degustibusbread.co.uk","domain":"degustibusbread.co.uk","tld":"co.uk"},"ip":{"addr":"172.67.198.229","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.419Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1\r\nHost: degustibusbread.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sat, 03 Jan 2026 13:46:34 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://degustibusbread.co.uk/wp-includes/images/w-logo-blue-white-bg.png\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4EHjbuBPnlzVMdZM0txs31%2BHWfggg9aXUxZ7JUg2ACXIje9ScDUj%2BIoeJsMCybMv9lmjvUxzVpN4CiUcU1zA0PwxkFakyUX77iIinkiRR8NM%2B2E%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9b82f16eac15569d-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4119,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":242,"connect":1,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"degustibusbread.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/2/2575f6ef45a0c27f83e8d09f362675baed9ee8b1_2_1024x576.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/optimized/2X/2/2575f6ef45a0c27f83e8d09f362675baed9ee8b1_2_1024x576.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 74427\r\nlast-modified: Mon, 08 Dec 2025 05:08:16 GMT\r\nexpires: Sun, 03 Jan 2027 13:46:27 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74427,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x576, components 3","md5":"5cfc7841f6d8e7e3f08091450852b5f6","sha1":"f25960ccc6aeafa70b7c75e4fe8d75bfcc058f83","sha256":"dd6bb44514f0f9e2df6e60f76ba955aef3c4b8b8f30367d1e68292833df04470","sha512":"55f6e5177521797fbc94589b8ef61071697c3237c31029c0383eed0d0260187b2cb9532fdd77e332e873b410d459400aa0dbbe42844ff8c7d6a3e6aaa599e5df","ssdeep":"1536:nrLjeEdhSOk/DNqQcij/8BI/e8Us8NlRuno6ZTuZIqlFoU21:PqE7SfZqVUMI/Qs8cNBwg","tlshash":"6e730263f26840cdb6bef8739454dc7064ea3964fe8df94da7c8521105dbe84da00aeb","first_seen":"2025-12-20T22:38:54.469302Z","last_seen":"2026-01-21T08:47:17.622014Z","times_seen":31,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"naturismv.com/images/merry-pool-naturist-freedom.jpg","fqdn":"naturismv.com","domain":"naturismv.com","tld":"com"},"ip":{"addr":"104.21.44.17","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.625Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/merry-pool-naturist-freedom.jpg HTTP/1.1\r\nHost: naturismv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sat, 03 Jan 2026 13:46:27 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://naturismv.com/images/merry-pool-naturist-freedom.jpg\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UrflqAw2pGnrheztaygPLpS3O2DP5blrKBsUwr1GIy3ybjSUlOUMmhIAHLZcVR6%2BVNkogKdj7NdSRaLhU8%2BpPfA%2F%2FAZEmjbqQZLC\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9b82f143af0356a8-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62012,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":153,"dns":0,"connect":1,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/original/2X/3/3e127cd23af7d6b6250882f48465ab3ac9d2bde5.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/original/2X/3/3e127cd23af7d6b6250882f48465ab3ac9d2bde5.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 56224\r\nlast-modified: Wed, 10 Sep 2025 00:06:50 GMT\r\nexpires: Sun, 03 Jan 2027 13:46:27 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56224,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x848, components 3","md5":"c78cde7dd35ffc35f5d86b5fedeab734","sha1":"3e127cd23af7d6b6250882f48465ab3ac9d2bde5","sha256":"e82eb1549980ce7b34de3951e72a0994c88596a16de35d8ad4828282cba58961","sha512":"093dca15b9f18068bb4c2fe9e171b24621ae836be077b3f1dae4632c6144f0a177c947f2eee55d0d4dfb8c8ee7ae83a94f3637259a2809eabac7c035aff81e70","ssdeep":"1536:KsTxJ1Mh7hisHzjVLiv65Z+zPXZP5vnl1yLla21j:r8PTjMdzPXZP9lAJaej","tlshash":"b443f2b2b601fc463d8013f215fed17716ab90c62c621fa99445fe85fc6ca619fe43a4","first_seen":"2025-11-19T07:30:03.387196Z","last_seen":"2026-03-03T14:10:03.883624Z","times_seen":53,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/original/2X/f/fe2179d1feb4e81656233b86a06835fac06edd6b.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:32.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/original/2X/f/fe2179d1feb4e81656233b86a06835fac06edd6b.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:32 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xvideosrei.com/wp-content/uploads/2021/07/novinha-gravida-nua.jpg","fqdn":"xvideosrei.com","domain":"xvideosrei.com","tld":"com"},"ip":{"addr":"54.38.46.215","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xvideosrei.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 15:43:28 GMT","end":"Sun, 15 Mar 2026 15:43:27 GMT"},"fingerprint":{"sha1":"FD:95:23:36:47:33:25:61:BE:F2:AF:59:55:D2:67:E4:8D:31:E7:3A","sha256":"2A:C6:21:8D:B3:18:DE:A4:68:63:F5:A4:A3:FA:F4:1E:F4:04:23:36:7E:4C:EC:00:28:2A:35:4A:FA:46:4A:F6"}}},"request":{"raw":"GET /wp-content/uploads/2021/07/novinha-gravida-nua.jpg HTTP/1.1\r\nHost: xvideosrei.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40305\r\netag: \"60e3902f-9d71\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\nexpires: Sun, 04 Jan 2026 00:30:00 GMT\r\ncache-control: max-age=38609\r\nx-served-by: xvideosrei.com\r\nx-proxy-cache-status: HIT\r\nx-proxy-cache-skip: 1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40305,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x337, components 3","md5":"cd6cf1f8ed32b5130957c1dc6208696b","sha1":"bf0ae50750ad536c7068aaa8df5f5e29196a3b2f","sha256":"60d296323198220cbb6e18f83d2a85a6d6d2ad87373d90bf0dc98d90ef16de6c","sha512":"e4a3e248749e3b79746a9ff17637a0d810732bcdb4f5eea8af19a557e407e5c9f3ec2d08e4c1a6f374778ccbcbef222bfd82bc86357c3d3c0b3ebf17b78a5a7f","ssdeep":"768:7tmimwVk+5hJU5mqW+r0Zl5uFE6gZK3tTrDXX+u1CP07Yh1krl4JHbFqUUwBr414:7tmilhJupW+rOPB6oKxrjXz1CP00Ul4J","tlshash":"2603f16ffedc2ef82c6d7610fd24425391490985c8c1106aba22c9fddf566e4b6062fa","first_seen":"2025-07-16T14:08:10.614488Z","last_seen":"2026-03-02T07:55:32.603325Z","times_seen":14,"resource_available":false,"data":null}},"time_used":3849,"timings":{"blocked":3424,"dns":1,"connect":104,"send":0,"wait":26,"receive":37,"ssl":221},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b.pornodrochka.club/uploads/posts/2018-04/medium/1524821295_00_04_15.jpg","fqdn":"b.pornodrochka.club","domain":"pornodrochka.club","tld":"club"},"ip":{"addr":"91.194.110.9","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"b.pornodrochka.club","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 22:34:43 GMT","end":"Sat, 28 Feb 2026 22:34:42 GMT"},"fingerprint":{"sha1":"94:7C:87:92:3A:40:5B:42:E4:3A:BF:4F:82:3A:6F:FF:5B:09:77:D2","sha256":"4B:B2:2B:43:35:86:D1:57:B6:3D:15:48:F3:1B:44:DB:D0:9E:5C:BF:67:D6:3D:3C:82:BD:DE:1E:79:F4:3D:34"}}},"request":{"raw":"GET /uploads/posts/2018-04/medium/1524821295_00_04_15.jpg HTTP/1.1\r\nHost: b.pornodrochka.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.10.3\r\ndate: Sat, 03 Jan 2026 13:44:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 132531\r\nlast-modified: Sat, 29 Aug 2020 17:57:54 GMT\r\netag: \"5f4a9722-205b3\"\r\nexpires: Sat, 10 Jan 2026 13:44:15 GMT\r\ncache-control: max-age=604800\r\nstrict-transport-security: max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":132531,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 450x253, components 3","md5":"5c7255150f994c95e1715237ca6c8f1e","sha1":"994ea02a327cd784b7d6d16788b68645c0718980","sha256":"a96910d152e179d2297882e24d3d342457d54aa97e8e5646b63f1292fcdc7ee2","sha512":"6cc557e6f2db3a774e7c2d558a9948dc77cd53ae08068dbc837d0fa114236e50d7d0cf468224784602245dcf45e0f9669f6a5df91d1c58845e0d30100c9d78ad","ssdeep":"3072:rnZFUB6VD1DXawqjQUn0hZSPgQuiy3puxSxrrOpjGdd8kM5un6ta9my1aHRq:rZFTDBqwuQ80hZSPgbbJBrqjGddY506G","tlshash":"9fd312ea044f0b2171ea4f2425ee925f31d667cae7343419b73371e4c528c0ad79ab8e","first_seen":"2024-09-19T22:22:48.509109Z","last_seen":"2026-04-12T19:29:51.686972Z","times_seen":10,"resource_available":false,"data":null}},"time_used":4632,"timings":{"blocked":3402,"dns":1,"connect":94,"send":0,"wait":29,"receive":726,"ssl":346},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/b/b8c35ea14b8ed51a7f349c87bdb61bed4ef65e48_2_576x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/optimized/2X/b/b8c35ea14b8ed51a7f349c87bdb61bed4ef65e48_2_576x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 78100\r\nlast-modified: Sat, 08 Nov 2025 16:55:32 GMT\r\nexpires: Sun, 03 Jan 2027 13:46:27 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78100,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 576x1024, components 3","md5":"8cccc172d1b7834fefb955d27ce9f062","sha1":"8cc9e13a66a9531a830740428e90ea4741dfcbfc","sha256":"3839a3394e0d3df84b7848fa4076da4cdf4c8b7c87acfdfcd94e5cf019717da7","sha512":"e15db68f753c71f1e118a2dd30be19c6b2baa992bb68d40a42a78576f3c787554a83b591c1b50a728daa65af95a314c27b08b0c9ff62349482202427af15e37e","ssdeep":"1536:1axGttIwRvVyQs3hEwUVFbDHugfM7xseM65UMmv:5tIw1VyQs3GwiHHrfaRtC","tlshash":"9473128b94163787d07cf1b5d24a9aa0539cf807cb42ade700d2a3d7b718bcbd60b956","first_seen":"2025-12-02T23:08:54.773015Z","last_seen":"2026-01-28T23:13:27.059127Z","times_seen":36,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":131,"dns":0,"connect":0,"send":0,"wait":50,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"multicst.com/vs/38984760.jpg","fqdn":"multicst.com","domain":"multicst.com","tld":"com"},"ip":{"addr":"104.21.94.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"multicst.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:37:26 GMT","end":"Sun, 29 Mar 2026 23:35:02 GMT"},"fingerprint":{"sha1":"A4:B7:F2:DF:47:7D:C4:98:A8:7B:DC:B1:6F:E5:4A:C7:70:D0:6E:8B","sha256":"90:C3:8F:25:37:31:A3:C3:07:D9:E7:37:94:C2:F6:B3:86:0A:0B:7C:3F:B8:31:53:50:50:73:8C:0B:F1:D6:C2"}}},"request":{"raw":"GET /vs/38984760.jpg HTTP/1.1\r\nHost: multicst.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 55609\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 29 Aug 2018 23:33:14 GMT\r\netag: \"5b872d3a-d939\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-cache-status: HIT, HIT\r\naccept-ranges: bytes\r\nage: 1250326\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9I%2FHV1CHV2lSLD0EiqQ7OmWqW2AmtioMLb6nYldyV5aXDDg%2BTnVhxCrtuxIQgI9rmrEwRu38svcCjmJ%2B8On%2FhR148LImx13%2FAvMxoA%3D%3D\"}]}\r\ncf-ray: 9b82f1454867783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55609,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 801x800, segment length 16, comment: \"Lavc54.92.100\", baseline, precision 8, 640x360, components 3","md5":"842adccbe439ae425a47026435e6495b","sha1":"1e20b0c8aa08161796c18c82da808a1e2d2e18db","sha256":"adcf146e0475f2bf3beeae3403eccfee6a0ae83c48fdbb168d2357ce711a7a13","sha512":"1dad48ab8a4e0b2dacfedeed9c83d58cef8e286156ec172b4a1b25308be4d7f6656f870c1947af8e34ad7554a73da1ae066c880a95caf3e1e755a75f65aab585","ssdeep":"1536:Zst8CMAYg9gfx52VnUtcOsPFbznFOk6qpBE:Kt8CMAYg9kP2VUtch9MkvbE","tlshash":"dc4302dcc9ad870da4b8bbfd751242910f843c7cb8842b18bf906ff67d6a1d89968311","first_seen":"2024-04-30T01:16:03Z","last_seen":"2026-04-03T21:47:16.677372Z","times_seen":100,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":99,"dns":1,"connect":1,"send":0,"wait":5,"receive":2,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumb.aporntv.com/thumbs/5/d/7/4/2/5d74051bbfcefDad%20fucks%20daughter.mp4/5d74051bbfcefDad%20fucks%20daughter.mp4-3.jpg","fqdn":"thumb.aporntv.com","domain":"aporntv.com","tld":"com"},"ip":{"addr":"104.26.1.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aporntv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Dec 2025 20:17:34 GMT","end":"Sat, 14 Mar 2026 20:17:33 GMT"},"fingerprint":{"sha1":"9D:78:6E:E7:87:A1:D6:C8:DF:57:DC:5B:73:AB:6A:E5:9F:AD:26:EA","sha256":"C1:29:AA:89:1A:D5:B1:EA:BC:3A:90:73:1F:73:C9:77:CF:50:6D:E6:2A:8C:3A:DC:89:6D:F0:A9:B6:E8:E8:0F"}}},"request":{"raw":"GET /thumbs/5/d/7/4/2/5d74051bbfcefDad%20fucks%20daughter.mp4/5d74051bbfcefDad%20fucks%20daughter.mp4-3.jpg HTTP/1.1\r\nHost: thumb.aporntv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4362\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Sep 2019 21:35:01 GMT\r\netag: \"5d742285-110a\"\r\nexpires: Thu, 08 Jan 2026 16:00:47 GMT\r\ncache-control: max-age=16070400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=5;i,cf-chb=(108;u=5;i=?0)\r\ncf-polished: webp_bigger\r\nage: 164740\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fbgpS%2F3pZzKeMXd6luXLrUmXp%2Fn45zCiw17dJQ2inKWy9LhPPV4dvGTNhYmgiweGgQj0ycoFs4T8qad7chKIcm3mErbrc2QbQfdfP7cJ\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b82f1448cc256b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4362,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x150, components 3","md5":"f2cb56d8b6bd3801ea3d7ca48b8ccfd8","sha1":"7e6d668622df88bed165b80985ee3523804da59c","sha256":"93258be3a0da677edcc486c2baed0f97ca67a489a0db25e46060e3672bfa6840","sha512":"17fa7cbdbc2b92651bbee31f0788e9d294fe3d5661b15b89f7437360de36516e4de2156b30b02935dc555a95c8a5c0dd9aba87c45b2638fa3fb8a1869c451eed","ssdeep":"96:T5/Xpee8Y1loXowSMshnCjfy8NsRoXl5JT65ew4ZJIbp06O:F/Xh8wloXow881yRu3BHB","tlshash":"49918c0bc1e46ecddfdda2b51402002047e5e1ecab5837aada168978d95db836da801f","first_seen":"2026-01-03T13:47:52.725584Z","last_seen":"2026-01-08T04:21:04.456764Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fixedjs.4vid.top/av4usimage.png","fqdn":"fixedjs.4vid.top","domain":"4vid.top","tld":"top"},"ip":{"addr":"172.67.181.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:32.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4vid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 04:08:57 GMT","end":"Fri, 13 Feb 2026 05:05:33 GMT"},"fingerprint":{"sha1":"99:1F:D8:6E:39:72:6F:D5:11:7F:B0:79:4D:F6:40:0E:A5:37:9F:9A","sha256":"F4:87:3F:1A:B8:E5:52:39:3C:56:29:BB:B7:CD:E0:20:DE:45:F2:30:28:80:C4:8D:AB:CA:AE:DC:24:7C:14:56"}}},"request":{"raw":"GET /av4usimage.png HTTP/1.1\r\nHost: fixedjs.4vid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2619\r\nserver: cloudflare\r\netag: \"a3b-6437702003080\"\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\ncache-control: public, max-age=360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RtNELszWJgrGBye13bVgVIwO%2FKRJqPvflxFE1p22Q77Yv%2BQaYLqJoUAQmBJsIF%2F32yjSkQGypYOFl7Or7vuB0VMBAHbeE3feHQvjVmzO\"}]}\r\nage: 102359\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9b82f15f7e267127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2619,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 339 x 89, 8-bit/color RGB, non-interlaced","md5":"8267aaadeeeb8c9fa7482f2f9db2d4e3","sha1":"a2ef23d3b5f9d9bb3102c855a8ace072884ba60c","sha256":"998cf9d427c2e322904e89a056ba823b56078fb199b7395883f3eafabaadbea8","sha512":"719215d8ec70b8b36b24277a80e7876be2fa1afe3698c05bbff013b6a2936701f266e694c221756e7306d1a945013986a53e41af0bc90bdd4bbf0dcbe33f7637","ssdeep":"","tlshash":"f5513ccb05b2fdbc657d79976105a79ef3a896c72982b872565c38c14243a0096c1fe1","first_seen":"2025-11-13T21:07:01.541567Z","last_seen":"2026-04-22T17:26:51.423965Z","times_seen":363,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"fixedjs.4vid.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img22.sdratmue.com/i0/excision.jpg","fqdn":"img22.sdratmue.com","domain":"sdratmue.com","tld":"com"},"ip":{"addr":"45.138.107.48","port":443,"asn":208414,"as":"WEDOS Internet, a.s.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sdratmue.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 19:09:29 GMT","end":"Wed, 28 Jan 2026 19:09:28 GMT"},"fingerprint":{"sha1":"20:48:AB:58:09:A6:4F:9E:4F:46:4D:F4:4E:E1:D7:15:21:93:BA:87","sha256":"E7:97:F7:19:CB:FF:28:14:E7:90:63:C3:E6:AC:A0:F9:C6:4B:52:10:90:3E:4D:1A:AA:E8:D4:09:F9:CF:9F:D8"}}},"request":{"raw":"GET /i0/excision.jpg HTTP/1.1\r\nHost: img22.sdratmue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15913\r\nlast-modified: Sun, 14 Sep 2025 14:12:20 GMT\r\netag: \"68c6cd44-3e29\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-protocol: HTTP/2.0\r\nx-request-id: 1c541775a4914f43269f1fd5c24b95b4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":15913,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 270x402, components 3","md5":"b59f789afb73048bcf0d33a5a2682260","sha1":"77600375fbc7662b30220a8cf2f860598ba3d5a0","sha256":"b0c8b4c0dcb96cbb883c6051b22c5166fe5ccefe2d10586db7ff71c35ee00ee1","sha512":"cf0dfdbfc89829ec8dd91ea3946ea097fc33a7e7c1cae683b8f72959246720bfd7a5dbd45db5b614c1f88e8e5220e6bebe200d63fedb8e938e5ea65cb576d9a1","ssdeep":"384:5UucT3UvYM7+I/R2EVEwxNlrjdzeoRP8JjK:5UucT3G97J3PT","tlshash":"a462bf8b09331b4122ea5738b2450a028bc36d9567439e3f63c73bedaab2de64079545","first_seen":"2026-01-03T13:47:52.72814Z","last_seen":"2026-01-03T13:47:52.72814Z","times_seen":1,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":191,"dns":0,"connect":14,"send":0,"wait":89,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg4.top/upload/vod/20240914-9/bf29bb5b9696d3f995fcb4470da62f79.jpg","fqdn":"fqjpg4.top","domain":"fqjpg4.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.636Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /upload/vod/20240914-9/bf29bb5b9696d3f995fcb4470da62f79.jpg HTTP/1.1\r\nHost: fqjpg4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":555,"timings":{"blocked":4,"dns":224,"connect":108,"send":0,"wait":0,"receive":0,"ssl":219},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"fqjpg4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-620120-3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=UA-620120-3 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\nexpires: Sat, 03 Jan 2026 13:46:31 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 03 Jan 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 102674\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":289070,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3325)","md5":"ff6f1135da88b9ea5580cf5d4190a125","sha1":"89d781adfb620b1a24599c53baa58d5e3d7aacc3","sha256":"2c6b70c82b78e1051432d6152ba9c446e22a4734a7506ef790fcdbe6386d78e4","sha512":"c3b99bd208bbbfb50d569149648bee2e4075e3c762051210958638e11e2f175d22fb81b7fa517d2acb788a44647cd1f7a2ed203ff1f89c10c76f282e6f54d7b1","ssdeep":"6144:lIeJW2bulKYv9VGDmHYmyBFzfns9TWO4Baa5g:2Ebu7lEDns5WOmab","tlshash":"a95409c8b3da742683a36478503f114bb23b79d1f84cd894e186d8d42e74aaa4277f7d","first_seen":"2026-01-03T13:47:52.732177Z","last_seen":"2026-01-03T13:47:52.732177Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3516,"timings":{"blocked":-1,"dns":3249,"connect":9,"send":0,"wait":39,"receive":20,"ssl":198},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241028-15/9b8c17877ecfe6b1ded6c644e53569b9.jpg","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:32.218Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241028-15/9b8c17877ecfe6b1ded6c644e53569b9.jpg HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filmesporno.xxx/favicon.ico","fqdn":"filmesporno.xxx","domain":"filmesporno.xxx","tld":"xxx"},"ip":{"addr":"80.82.65.89","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filmesporno.xxx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 15:03:23 GMT","end":"Sun, 15 Mar 2026 15:03:22 GMT"},"fingerprint":{"sha1":"A5:4E:7D:6C:2F:EC:FD:8F:30:EB:DA:9D:5B:1D:31:90:55:D6:BB:84","sha256":"E9:C5:FD:9B:5F:F4:33:3A:2B:0D:66:76:46:D7:72:45:5F:A4:6B:51:4F:64:46:4B:FF:20:8F:AB:5D:7C:BB:6A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: filmesporno.xxx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: openresty\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html; charset=utf-8\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.apian088.sbs/sp/media/videos/tmb/1762/3.jpg","fqdn":"img.apian088.sbs","domain":"apian088.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apian088.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 12:00:16 GMT","end":"Sat, 14 Feb 2026 12:44:47 GMT"},"fingerprint":{"sha1":"81:62:5B:8E:F8:D6:89:63:71:73:E3:18:57:53:27:65:B5:AD:00:32","sha256":"1E:DA:15:FE:0A:FF:52:03:D1:A0:EE:60:AD:2A:3A:55:0D:CD:56:3F:75:52:A1:90:E2:E7:70:D3:2A:15:12:5E"}}},"request":{"raw":"GET /sp/media/videos/tmb/1762/3.jpg HTTP/1.1\r\nHost: img.apian088.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23596\r\nserver: cloudflare\r\nlast-modified: Sat, 23 Mar 2024 12:20:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65fec912-5c2c\"\r\naccept-ranges: bytes\r\nage: 2780626\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i5uMyuI8hmTotmYkyVDlseKHrKa6pZ0ljQsBWVT%2Fbdh7tadiJa8cbXsrDfw84zseEEiHhA5fU6woZPXJx%2Fa9MxDi6ukG8MRZxVN%2B6pZG\"}]}\r\ncf-ray: 9b82f144ed8256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23596,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 384x214, components 3","md5":"f7692d43f88cb4007019f0c4e94c807d","sha1":"452853119a8abe00f48e659068d9e8fdb2238504","sha256":"55e0e831c061b969306840035baa4690a48d97dae5520f8d9972a223b6e8f685","sha512":"dd7b8bccb9f47c501de09e46b8f003a8f907d2def277b5f2fc19ee83fe2d5858fa8a9a0a049f8040ce7176e7892facf72887569646ef7e25c84899481d605452","ssdeep":"384:TGZrUpGaziN7AmCnVNRdR1uTIWDWchhAA0sN423f8ilX3vDCgcfWnrKAn:T0YW5C1d3uc76ifsNvEiN3vDUAn","tlshash":"7cb2e1f9db1543f7791f4f981700dbb098ff48f235f9c202b1c209652461a568e1967a","first_seen":"2024-04-21T22:27:25Z","last_seen":"2026-02-14T16:06:52.911416Z","times_seen":21,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"pornodiler.com/imgs/66364893edb98.jpg","fqdn":"pornodiler.com","domain":"pornodiler.com","tld":"com"},"ip":{"addr":"91.227.144.56","port":80,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.940Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /imgs/66364893edb98.jpg HTTP/1.1\r\nHost: pornodiler.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Angie\r\nDate: Sat, 03 Jan 2026 13:46:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 39710\r\nLast-Modified: Wed, 18 Sep 2024 03:42:34 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=30\r\nETag: \"66ea4c2a-9b1e\"\r\nExpires: Fri, 03 Apr 2026 13:46:28 GMT\r\nCache-Control: max-age=7776000\r\nX-Request-ID: 7383e10dbdd600690d44f3a8469b856d\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":39710,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x360, components 3","md5":"36c163d378e82f94ad4a756c64a7af9a","sha1":"0d3e99e9a21242cabeeef198dcd9dc5ac91a38e0","sha256":"845f82bd658c1cf6c7e97f7aa541799c2404df0bdeb7d0a3e926e8c8b45fd8d4","sha512":"e9bf3690a9676f8754064b588255e0227c42d2ffdad794896094b4709945329f8a8406b944fcd5313dc6f34a44d2c4f39fc1a3d58141b8f10a4b28578d1e9b33","ssdeep":"768:PjQCgMJSq5psXzvOKQDi8PeiSSxX/O1WnAIg:VgMJSq5+S4idJ21g8","tlshash":"d603012dfd5cf32eda3eed6b45a82b3fdc41d54151c0b69ab04f60600e490685abd8bb","first_seen":"2025-07-22T04:45:31.799316Z","last_seen":"2026-04-03T21:47:16.512486Z","times_seen":20,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":103,"dns":1,"connect":24,"send":0,"wait":47,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"media.crazyshit.com/content/2021/01/84d53286.jpg","fqdn":"media.crazyshit.com","domain":"crazyshit.com","tld":"com"},"ip":{"addr":"45.133.44.4","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"media.crazyshit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Nov 2025 02:32:30 GMT","end":"Tue, 24 Feb 2026 02:32:29 GMT"},"fingerprint":{"sha1":"AA:2C:6E:22:E5:CC:C2:72:44:EA:F6:76:06:71:7E:52:9D:F6:3D:86","sha256":"F5:D6:0D:22:62:05:A3:C4:11:33:FD:98:73:8F:E6:73:83:85:12:E3:08:36:3E:FE:02:26:F9:AC:DC:2C:45:53"}}},"request":{"raw":"GET /content/2021/01/84d53286.jpg HTTP/1.1\r\nHost: media.crazyshit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 214913\r\nserver: nginx/1.24.0\r\nx-object-meta-mtime: 1611385559.652008404\r\netag: feb4d95db9cec53f77421e1c2e7dd3a1\r\nlast-modified: Mon, 05 Apr 2021 11:00:52 GMT\r\nx-timestamp: 1617620451.81490\r\nx-trans-id: txea2a3f376e274ff98fb41-0065cdc22d\r\nx-openstack-request-id: txea2a3f376e274ff98fb41-0065cdc22d\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Mon, 05 Jan 2026 13:46:33 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":214913,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 720x540, components 3","md5":"feb4d95db9cec53f77421e1c2e7dd3a1","sha1":"da3d6acdf04428720ffc156b851a5bbe336c6242","sha256":"80ffe8cea549d01a9d450941609d0294609be0c13be3098bb4b03b3afb450b22","sha512":"8f73f2a32cc890992ece5c6ad48de02a50e635be50a29dc50e6aa374bfacfcda11cd144cedcac475591ba19c56ab28dd29e7e7263b6ca623397c3fbe59c2c38e","ssdeep":"6144:sVJS7MSv/b5PeSyfXmjmQbaD57T1xKl3Hf:4S/b5WXqmQ2DNT1xs","tlshash":"142423885a40ea5cec58d121576ea2bed43f3eb0be1e59d1710c3342f928a57058df5f","first_seen":"2024-04-26T03:41:21Z","last_seen":"2026-04-03T21:47:16.52967Z","times_seen":37,"resource_available":false,"data":null}},"time_used":5151,"timings":{"blocked":126,"dns":4870,"connect":19,"send":0,"wait":39,"receive":73,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.video01.org/images/node/436/4366367.avif?1753302646","fqdn":"www.video01.org","domain":"video01.org","tld":"org"},"ip":{"addr":"172.67.222.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"video01.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 16:57:51 GMT","end":"Fri, 13 Mar 2026 17:55:23 GMT"},"fingerprint":{"sha1":"47:BE:64:D4:B8:74:FE:A2:60:11:C7:41:47:25:FA:BD:3B:E7:2A:C2","sha256":"D6:D5:91:E1:82:D7:96:4A:FF:C6:E6:68:32:E5:56:77:AD:D3:CF:CE:F8:AE:6C:DA:E1:35:B0:90:EB:2F:F1:5B"}}},"request":{"raw":"GET /images/node/436/4366367.avif?1753302646 HTTP/1.1\r\nHost: www.video01.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/avif\r\ncontent-length: 3894\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"68814676-f36\"\r\nexpires: Sat, 03 Jan 2026 10:47:27 GMT\r\nlast-modified: Wed, 23 Jul 2025 20:30:46 GMT\r\nnow-time: Monday, 22-Dec-2025 13:18:32 GMT\r\nserver: cloudflare\r\nx-cache: BYPASS\r\nx-date: Monday, 22-Dec-2025 13:18:32 GMT\r\nx-host: www.video01.org\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 14344\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BBPqNCGHIE%2Fk7BRILbvLQmQnyQuo8KEmwu5T%2BlN9UDH16f4LMIs3cSXtFQm%2F%2B1vjwLY7W%2F3rFpL1OrtRbhSHToV3gb0rUgaUZw3UbJQUNg%3D%3D\"}]}\r\ncf-ray: 9b82f15cbd59a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3894,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"0fb2b8fb9c35c7749c08463e292ef3d8","sha1":"5b1717e25d0cbbe90d73a7b505ad81fd86bd9652","sha256":"2ede187e699120ff25bee70349e35cf87f0df15d0e07e1f5587bab2e17beefa2","sha512":"7039b7e50493e2ff5f92503207a4bb4794fa9b66b2411a13edb968beb9ea06dfa123cf5ff1b6633fb9502f97f4a9a61f29b35d8d4d46037171cf7135bd3e756c","ssdeep":"","tlshash":"8d817c7713f3204bdf4a2abd8b955722ed40c834529f1566c65d7a4068f40f18022e0a","first_seen":"2025-12-25T16:44:02.36411Z","last_seen":"2026-03-03T14:10:03.730099Z","times_seen":54,"resource_available":false,"data":null}},"time_used":3779,"timings":{"blocked":3474,"dns":1,"connect":14,"send":0,"wait":8,"receive":0,"ssl":243},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pornlulu.com/images/node/575/5755667.avif?1753294373","fqdn":"www.pornlulu.com","domain":"pornlulu.com","tld":"com"},"ip":{"addr":"104.21.34.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornlulu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 02:28:25 GMT","end":"Sun, 15 Mar 2026 03:26:05 GMT"},"fingerprint":{"sha1":"21:3C:EB:41:61:4C:C0:6F:23:6D:03:4C:C0:05:64:E3:E7:CF:76:88","sha256":"4F:C5:D0:1A:A3:61:D0:60:E7:1B:A3:7D:20:4B:DF:41:88:1F:B0:8A:19:A0:8C:8C:2C:85:A1:22:29:BB:C5:F5"}}},"request":{"raw":"GET /images/node/575/5755667.avif?1753294373 HTTP/1.1\r\nHost: www.pornlulu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/avif\r\ncontent-length: 9700\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"68812625-25e4\"\r\nexpires: Sat, 03 Jan 2026 13:58:18 GMT\r\nlast-modified: Wed, 23 Jul 2025 18:12:53 GMT\r\nnow-time: Sunday, 28-Dec-2025 14:53:19 GMT\r\nserver: cloudflare\r\nx-cache: BYPASS\r\nx-date: Sunday, 28-Dec-2025 14:53:19 GMT\r\nx-host: www.pornlulu.com\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2892\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rgn9drYDALUH9WzvTASVEoK7k2jRUhE9MfO4a3IoGruvyJs9eW7P8YPNI98hWfelf0JFX5KM7S09YmFjk5jC7z2XHGQq%2BL5mpqsoSDm1GF8%3D\"}]}\r\ncf-ray: 9b82f15bf8d74e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9700,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"8fc101eba6afe3da98bde146deaac618","sha1":"12fb379aa464a2d51922789964394b26b401bd2d","sha256":"22436c2aaa7e0b9f1f1c5b2c50a6780927a1aa81f7caf1bfc6f8d36b13d1b7de","sha512":"272c7711eb7fcf94b7c4d008849ff99cbfb8729cc2dc7714fbd57afd9994b5b87c298939d6a28da8d90f0da8b9a828048d9ad5442aca73972af4a01b009e18c0","ssdeep":"192:+WzoKMri6NDNd81YM9vTMYAKl3rqVo8EQnkuSX/Qwgo7:grpDNdu9vTMYAKhrWo8Hkxes","tlshash":"5412af245546bf29f265a431b544374e3721d67c6ec5733be9977f0286786f4cd18c20","first_seen":"2025-12-20T19:06:24.546747Z","last_seen":"2026-01-31T10:39:20.910646Z","times_seen":83,"resource_available":false,"data":null}},"time_used":3580,"timings":{"blocked":3394,"dns":1,"connect":12,"send":0,"wait":10,"receive":0,"ssl":158},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdig.com/favicon.ico","fqdn":"fapdig.com","domain":"fapdig.com","tld":"com"},"ip":{"addr":"172.67.154.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdig.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 09:32:52 GMT","end":"Mon, 09 Feb 2026 10:31:27 GMT"},"fingerprint":{"sha1":"C4:DB:94:8D:E6:69:2A:BC:4F:96:2F:A7:2C:6D:5E:24:BC:7B:D1:D1","sha256":"32:61:1B:62:E9:0D:26:3D:9E:5D:F7:A8:06:CB:3A:85:4C:61:0C:8D:36:4A:51:FF:6B:37:BD:CF:B1:27:A0:E3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: fapdig.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://fapdig.com/faviconico/\r\nserver: cloudflare\r\nset-cookie: ASPro_1382933ca042bef776e8100bd5eb8ac5=7ajspquil0nqfloj8o1li4rfu9; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mPq5l1dWjJ0niqujksZGOsELh8tGPp7Ew7gWCKB%2BMpUTbWJUuveE03M7HssBhQXKbxbLoR3hu667qfk8mM7rth8CSwAsBrydjUU%3D\"}]}\r\ncf-ray: 9b82f16b88953181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/a/abf3342c1a7d32f5b2073412910413872940ba42_2_576x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/optimized/2X/a/abf3342c1a7d32f5b2073412910413872940ba42_2_576x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":126,"dns":53,"connect":30,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ex.ucoz.ru/_nw/58/00802007.jpg","fqdn":"ex.ucoz.ru","domain":"ucoz.ru","tld":"ru"},"ip":{"addr":"193.109.247.20","port":80,"asn":204343,"as":"Compubyte Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.107Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_nw/58/00802007.jpg HTTP/1.1\r\nHost: ex.ucoz.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 13:46:30 GMT\r\nContent-Type: text/html\r\nContent-Length: 178\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nLocation: https://ex.ucoz.ru/_nw/58/00802007.jpg\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38401,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":3545,"timings":{"blocked":3391,"dns":1,"connect":53,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kompoz2.com/favicon.ico","fqdn":"kompoz2.com","domain":"kompoz2.com","tld":"com"},"ip":{"addr":"172.67.206.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kompoz2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 07:14:15 GMT","end":"Wed, 11 Feb 2026 08:11:42 GMT"},"fingerprint":{"sha1":"4F:3A:BF:C4:26:DC:3E:D6:6F:EC:AC:D3:98:E9:55:36:AE:86:D9:73","sha256":"64:92:14:1C:04:BD:F4:CA:31:91:F5:46:FA:86:BC:25:04:3C:07:49:57:F1:13:CD:E2:DC:5E:55:D8:FD:77:5C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: kompoz2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.4.14\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ucBrPql3%2BITWWdQmlbrqVxoRcOqzAVwXEYEuwYFIfbBIYgGQcfVpRzdv3Ei4e9WBD8yYz3rBhJ%2FtiMcJUPM6p4IM8kbM5rAVyQ%3D%3D\"}]}\r\nage: 112\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9b82f16ffddc56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.14","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":550,"timings":{"blocked":421,"dns":105,"connect":2,"send":0,"wait":8,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.thisav.com/favicon.ico","fqdn":"www.thisav.com","domain":"thisav.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.341Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.thisav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":585,"timings":{"blocked":466,"dns":119,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-03T13:46:26.320Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: en.av2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":522,"timings":{"blocked":0,"dns":0,"connect":221,"send":0,"wait":0,"receive":0,"ssl":300},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"en.av2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkvod.com/upload/vod/20240309-11/d9a006eb5f6224ef8ace80a35b636de6.jpg","fqdn":"darkvod.com","domain":"darkvod.com","tld":"com"},"ip":{"addr":"104.21.15.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkvod.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 21:08:06 GMT","end":"Tue, 24 Feb 2026 22:08:03 GMT"},"fingerprint":{"sha1":"BE:9E:B0:53:26:CB:BC:D1:20:B1:FC:C4:21:9F:3B:53:E9:00:37:1D","sha256":"88:84:9A:7E:95:A9:DD:A3:C6:C8:9A:04:BC:7F:EB:BB:D8:17:59:AF:26:EA:37:AB:3C:6B:10:74:E8:16:7D:83"}}},"request":{"raw":"GET /upload/vod/20240309-11/d9a006eb5f6224ef8ace80a35b636de6.jpg HTTP/1.1\r\nHost: darkvod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hl8cnmvr5pYtAi8c7WJOZdhDSsrv0vBJWXmEZNRWJAqTqS4zL%2BdzIUTOpNw2%2BrEvopeEfYGReCDtIhvvW10wdmLOEqkjGaptWnE%2FSZIwesg0nJCkJTPsX04JowHpdg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\ncf-ray: 9b82f14289ad56be-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: chlray;desc=\"9b82f14289ad56be\", cfL4;desc=\"?proto=TCP\u0026rtt=1213\u0026min_rtt=1075\u0026rtt_var=267\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3182\u0026recv_bytes=1109\u0026delivery_rate=3022091\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=047f764063f37e20\u0026ts=28\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"darkvod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"darkvod.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250702-1/af4a0a88899bb6be5f368b701451b37a.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"142.248.99.81","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 09:53:21 GMT","end":"Fri, 06 Mar 2026 09:53:20 GMT"},"fingerprint":{"sha1":"55:92:B5:BC:78:CB:75:63:3B:0F:C6:A3:DD:2D:2F:7C:FA:07:B7:4A","sha256":"02:67:5F:F2:7D:A5:B6:59:8F:77:98:9C:EF:94:84:1A:E6:C9:FC:6E:A7:27:06:47:BB:16:5D:BE:A9:91:90:79"}}},"request":{"raw":"GET /upload/vod/20250702-1/af4a0a88899bb6be5f368b701451b37a.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 45796\r\nlast-modified: Wed, 02 Jul 2025 02:58:38 GMT\r\nvary: Accept-Encoding\r\netag: \"6864a05e-b2e4\"\r\nexpires: Thu, 29 Jan 2026 06:35:49 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 371439\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45796,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, software=www.meitu.com], baseline, precision 8, 500x281, components 3","md5":"8ca229cee4e13d28bf50863ee65965e1","sha1":"4fc187d1e6f0d2f4ef729c5729ef362caf053b33","sha256":"f73ac0fad83687488e38dade3c104f0e270630150af068cb6bf3159dd65a44c1","sha512":"4e1c0e2e37506698f10a9c57c3f5bd7b470bb6d0f7dd63cfe372e21517d63e685ad3e04f7d8cf2fa8cbf8e15de0fffb61737b23c7accfb06365b6110813015c3","ssdeep":"768:xx9I1FV2bJ6qOP4eW3NXBxqbgeeXXEb54f9ve/jtUpAxM0hj8cFS78LQB:xxe1FOcqOP4j5qbaX0b545K+pALhj8cC","tlshash":"162302bae7b729c47c05a93e8df24eca75df2cd773906dd98dd54990608290680f81e8","first_seen":"2025-10-22T05:41:27.095294Z","last_seen":"2026-03-01T19:27:35.460884Z","times_seen":40,"resource_available":false,"data":null}},"time_used":986,"timings":{"blocked":111,"dns":0,"connect":145,"send":0,"wait":294,"receive":140,"ssl":297},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"media.crazyshit.com/content/2020/01/a3c9ba9b.jpg","fqdn":"media.crazyshit.com","domain":"crazyshit.com","tld":"com"},"ip":{"addr":"45.133.44.4","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"media.crazyshit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Nov 2025 02:32:30 GMT","end":"Tue, 24 Feb 2026 02:32:29 GMT"},"fingerprint":{"sha1":"AA:2C:6E:22:E5:CC:C2:72:44:EA:F6:76:06:71:7E:52:9D:F6:3D:86","sha256":"F5:D6:0D:22:62:05:A3:C4:11:33:FD:98:73:8F:E6:73:83:85:12:E3:08:36:3E:FE:02:26:F9:AC:DC:2C:45:53"}}},"request":{"raw":"GET /content/2020/01/a3c9ba9b.jpg HTTP/1.1\r\nHost: media.crazyshit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 288418\r\nserver: nginx/1.24.0\r\nx-object-meta-mtime: 1579196525.968802558\r\netag: 2a2f0fddcc82e451109ae218c9dc5dc1\r\nlast-modified: Mon, 05 Apr 2021 10:41:29 GMT\r\nx-timestamp: 1617619288.42283\r\nx-trans-id: txdc42692d9a9c459a89000-0065ccde0d\r\nx-openstack-request-id: txdc42692d9a9c459a89000-0065ccde0d\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Mon, 05 Jan 2026 13:46:33 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":288418,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 720x540, components 3","md5":"2a2f0fddcc82e451109ae218c9dc5dc1","sha1":"f130c9f3d0942c6b83f3789c4a84b324a6f87568","sha256":"b0edff7ba447c4892b38fbb6e51771f11efd63ebf0bccc973f73ad904a08b4f1","sha512":"485c1c41a517c9756d6cbff1e50516694302562b6fd1e1ccb7d4b74ad1d69bf59ebb0e868ea1f6d002d037f4fcf746b8e5b357619cc2b362a56baa2dd1273389","ssdeep":"6144:TSBHQCKIdsnhrean3U1Sgh6DaMa+TJuZf:5TIihr73ySc6eCSf","tlshash":"99541250820dc255973f06dcbae6e341bad0f5864d1180bb9f9aa139d2a3ce7d1be84c","first_seen":"2024-08-20T01:29:22.698591Z","last_seen":"2026-01-17T01:52:05.741267Z","times_seen":18,"resource_available":false,"data":null}},"time_used":5105,"timings":{"blocked":3492,"dns":1449,"connect":19,"send":0,"wait":74,"receive":46,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.krudplug.net/video_thumbs/1603976589.jpg","fqdn":"www.krudplug.net","domain":"krudplug.net","tld":"net"},"ip":{"addr":"104.26.12.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krudplug.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 16:10:09 GMT","end":"Mon, 23 Mar 2026 17:10:04 GMT"},"fingerprint":{"sha1":"03:EC:F0:2A:2D:9D:39:BB:4A:D9:FA:68:D6:AE:5B:4C:7F:68:90:79","sha256":"A0:B9:C2:35:1E:89:76:31:12:C5:AB:85:99:4C:09:ED:88:5A:B0:5D:F3:E1:A8:2A:84:AC:AE:B0:FF:C1:27:F7"}}},"request":{"raw":"GET /video_thumbs/1603976589.jpg HTTP/1.1\r\nHost: www.krudplug.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 03 Jan 2026 13:46:29 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://krudplug.net/video_thumbs/1603976589.jpg\r\nserver: cloudflare\r\nage: 1066\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XyoOlRXxrrArlMfJI1pn0RBlDkDfIAy7S4ptZ%2BaaopQKuEYgDg95WXEP3cTZOsNqT8rRjoO6gwV4eR5ewh0oKU%2FmDA9rY3hJB0VmxxwTvg%3D%3D\"}]}\r\ncf-ray: 9b82f14d99158deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41010,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":1405,"timings":{"blocked":-1,"dns":1387,"connect":1,"send":0,"wait":6,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.twi-dl.net/favicon.ico","fqdn":"www.twi-dl.net","domain":"twi-dl.net","tld":"net"},"ip":{"addr":"104.21.2.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twi-dl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 21:28:29 GMT","end":"Thu, 26 Mar 2026 22:26:00 GMT"},"fingerprint":{"sha1":"40:60:5C:4F:1B:12:D4:78:49:7E:3D:EA:58:1D:6D:6D:17:63:4B:3E","sha256":"8F:D4:66:0C:C1:7B:4D:EE:92:93:A8:F2:48:BC:4C:E2:EC:9F:A0:76:44:00:3D:BF:22:3F:F0:3E:42:14:FD:D5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.twi-dl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZI6t8vQwed7YPKqXMMPo8Oen9P2m3%2B%2FNbWHVuZHCy7YAIxdkAhTC0yczbexV%2FnWglhvhX2rLRMjKhrgws0NQmvWg1OX2m70PVKRXGkhZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b82f16cfb974c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg4.top/upload/vod/20250124-1/18115c5b5465c1fe8e6ad7c48a6fd2a8.jpg","fqdn":"fqjpg4.top","domain":"fqjpg4.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:32.215Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /upload/vod/20250124-1/18115c5b5465c1fe8e6ad7c48a6fd2a8.jpg HTTP/1.1\r\nHost: fqjpg4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":56,"connect":108,"send":0,"wait":0,"receive":0,"ssl":112},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"fqjpg4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"avatars.mds.yandex.net/get-vthumb/3166868/6e45d0345a688414a396909c3fd8dd84/564x318_1","fqdn":"avatars.mds.yandex.net","domain":"yandex.net","tld":"net"},"ip":{"addr":"87.250.247.182","port":80,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.625Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /get-vthumb/3166868/6e45d0345a688414a396909c3fd8dd84/564x318_1 HTTP/1.1\r\nHost: avatars.mds.yandex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 13:46:27 GMT\r\nContent-Type: image/webp\r\nContent-Length: 16684\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nLast-Modified: Thu, 26 Dec 2024 16:13:45 GMT\r\nCache-Control: max-age=604800,immutable\r\nX-Request-Id: ec32d4471b705a23\r\nNEL: {\"report_to\": \"network-errors\", \"max_age\": 600, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nReport-To: {\"group\": \"network-errors\", \"max_age\": 600, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/s3_nel?datacenter=VLA\"}]}\r\nTiming-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16684,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 564x318, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fafb7f42518d696f87d00c6b7cef83dd","sha1":"7f7ab9c15d93785c62d6e1d92bc29728c0383b20","sha256":"627cd8e9fac9e0db5b07b8401f1ddb4e0176237e7fac414daa6133623c74cd06","sha512":"54ebd0b6bedebe988e3f0372595b4f49de8fdc9c8be21c96d53dec51173008404e42ed88778ed339621b5c3fda97b56da211826aad9cf3839872dd3a0bb1d609","ssdeep":"384:5EL4cdSX7EltXpga42tNDMfHN4KixEW8b7Jk:aLzAEltXpgD2tkG1n8HJk","tlshash":"ae72e0de50208f10cb0e21632a042f2793afa809f6ad47d56dc52ab001fa6d79da53cd","first_seen":"2025-12-18T05:23:28.857729Z","last_seen":"2026-01-21T00:43:43.257761Z","times_seen":16,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":241,"dns":1,"connect":45,"send":0,"wait":46,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn1.hotmoza.tv/thumb/e3/e2/bc/e3e2bc883fb8d1c5a716ce88811943c9.jpg","fqdn":"cdn1.hotmoza.tv","domain":"hotmoza.tv","tld":"tv"},"ip":{"addr":"104.21.70.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotmoza.tv","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 22:14:18 GMT","end":"Wed, 18 Mar 2026 23:10:42 GMT"},"fingerprint":{"sha1":"13:95:73:49:25:9B:A5:9F:37:DA:EB:FC:66:4B:44:80:9D:54:03:8B","sha256":"68:BC:DA:3E:17:C2:7E:93:BC:49:E4:F4:F9:30:6C:D0:23:D1:05:BE:99:82:2C:AD:E9:F9:64:D2:CE:D4:B7:12"}}},"request":{"raw":"GET /thumb/e3/e2/bc/e3e2bc883fb8d1c5a716ce88811943c9.jpg HTTP/1.1\r\nHost: cdn1.hotmoza.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16964\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-object-meta-mtime: 1581213382.718996\r\netag: d27a3a312e93cd35c67bc391cfbf0170\r\nlast-modified: Sun, 09 Feb 2020 01:56:28 GMT\r\nx-timestamp: 1581213387.25593\r\nx-trans-id: tx112d05ea5ae943cb96a66-00689c2b58\r\nx-openstack-request-id: tx112d05ea5ae943cb96a66-00689c2b58\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\ncache-control: max-age=172800\r\nexpires: Sat, 03 Jan 2026 21:41:21 GMT\r\nx-cdn-host-id: DS8140,DS9225\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nage: 144306\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nPiNRU0w6Ci7Aux3m2Z5DLjiiLiFD4RHfzU9XRnpCDN%2BGlkHP2OswalLqR4NLVRgJUo7KHRekE3izQy1%2B4FjYJAEfyQ7UhfuRKd%2FutY%3D\"}]}\r\ncf-ray: 9b82f144aa1b56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16964,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, comment: \"Lavc55.18.102\", baseline, precision 8, 320x180, components 3","md5":"d27a3a312e93cd35c67bc391cfbf0170","sha1":"5512a6dc117424034cd153bc3b7e365090cc7aa3","sha256":"821d508118d89f9d4f996f6a8d63f7d7015b8863b29eda7fe333a67b85d0bf9f","sha512":"d19340602dd8df33d43a848b00afaeaf3210eaa507c1e5c85180e0103f7dbc6407140ddb69fb49fa20bd728b67ca76c641e1edf3a8f624f282b9fd54aa8e1b75","ssdeep":"384:bIKYGLy1ALk1MK8+l3XyXME3eBcYAkaNLnZPzXorQBysT7STkDfD+gdqPcs:bDM1ALtK8yXoOipkaRZb5BfTckDqgOcs","tlshash":"b772cf4668a4ed878cfbfa604254c019accef4da7a1f1763896434383a417e11d7a69a","first_seen":"2026-01-03T13:47:52.760669Z","last_seen":"2026-01-17T01:52:05.920817Z","times_seen":3,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"degustibusbread.co.uk/wp-content/uploads/sites/50/2024/03/lisa-solo-star-sessions.jpg","fqdn":"degustibusbread.co.uk","domain":"degustibusbread.co.uk","tld":"co.uk"},"ip":{"addr":"172.67.198.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"degustibusbread.co.uk","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:44:16 GMT","end":"Sun, 08 Feb 2026 14:41:37 GMT"},"fingerprint":{"sha1":"DA:87:4C:5A:BA:B0:88:36:F2:65:AE:25:66:E6:D3:69:D9:D9:E6:40","sha256":"38:5E:8A:77:1E:C1:52:72:19:91:07:9F:BA:BF:35:8A:07:82:3E:D8:21:18:4F:B1:CE:8C:94:84:91:08:74:54"}}},"request":{"raw":"GET /wp-content/uploads/sites/50/2024/03/lisa-solo-star-sessions.jpg HTTP/1.1\r\nHost: degustibusbread.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 24 Mar 2024 13:40:52 GMT\r\ncache-control: max-age=14400\r\nage: 7105\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DvHw6FsEqRlY4TzHK6ZWLQizitSKC3J1ji3OPx3c62oE1ivHfmM4aZa0h3vEKn4P5ne2T47xBBNhnJ1y2fY6nM%2F2XFLsd3fqceZWq%2BMV5LrzCRyOTA%3D%3D\"}]}\r\ncf-ray: 9b82f15c5de25a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38323,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.55.103\", baseline, precision 8, 1280x720, components 3","md5":"9401a699f64656fbe059a7741bd40e58","sha1":"5d3b8c923c816aca6b18f4507c9ebe62dd2191b0","sha256":"d831cc7b40f2d320cb96c130f5193c033e61332fa588acfa904d9e6266ef4b9b","sha512":"9b5c90570b4de2aff4e93a52b511cab5c5c34147b554ef8c6c6f38e72d927f8ed0fa74c6837a910a5cb872998e75ba86ba25506f0e275a20d46484cf0acb0056","ssdeep":"768:LATYoGRcnSl8RDz+40FsImN745aAY5DDpAAM6ggVqEEx+KMfk4KuHJhtabZ:EkXUSWhzQU7saAY5DVAAM6br22keU1","tlshash":"5e03021e50bd98dc6e36533c6166b0d52cb72b61efbd2e35a40822d8d0f2f875ac24d1","first_seen":"2025-06-25T22:20:18.876687Z","last_seen":"2026-03-02T07:55:32.866027Z","times_seen":32,"resource_available":false,"data":null}},"time_used":3685,"timings":{"blocked":3439,"dns":1,"connect":12,"send":0,"wait":16,"receive":0,"ssl":202},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"degustibusbread.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sexsex13.com/favicon.ico","fqdn":"sexsex13.com","domain":"sexsex13.com","tld":"com"},"ip":{"addr":"27.124.42.183","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sex83.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Dec 2025 11:56:06 GMT","end":"Wed, 04 Mar 2026 11:56:05 GMT"},"fingerprint":{"sha1":"62:15:D0:4F:44:F8:F8:4E:EB:1C:8C:5D:5B:6C:03:3A:EC:61:66:78","sha256":"E2:4B:7E:3F:65:EB:1A:17:67:6A:30:C4:46:A1:06:E7:37:DB:6C:BC:29:8D:B2:69:0E:32:F5:66:3A:4E:DB:52"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sexsex13.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 406\r\ndate: Sat, 03 Jan 2026 13:46:36 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":2593,"timings":{"blocked":511,"dns":106,"connect":322,"send":0,"wait":1326,"receive":0,"ssl":327},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"en.av2.top/","fqdn":"en.av2.top","domain":"av2.top","tld":"top"},"ip":{"addr":"160.22.16.197","port":80,"asn":45899,"as":"VNPT Corp","country":"Vietnam","country_code":"VN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-03T13:46:26.847Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: en.av2.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sat, 03 Jan 2026 13:46:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\npdojs-line8: host-en.tube4us.top4.194.8.20-myhost-en.tube4us.top38.220.248/\r\nphost: en.tube4us.top\r\npdojs-line383: notjp-nojp-myhost-en.tube4us.top-filteron-\r\npdojs-line991: notjp-nojp-myhost-en.tube4us.top-filteron-/\r\nline1317: URI-/-myhost-en.tube4us.top-filteron-\r\nline1454: nojp\r\nline1489: -nojp\r\npdojs-line1500: 3862uuuuuuuuu: counted/dev/shm/hotthumnojpa\r\npdojs-line1501: host-138\r\npdojs-line1558: ibig--chname--filteron--txtlang--shows-1805\r\nCache-Control: max-age=60, public\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Cake\r\nX-Proxy-Cache-192g-LA: EXPIRED\r\nXkey-192LA: en/-A-en.tube4us.top-en.tube4us.top-myzone---yes\r\nX-Proxy-Cache-tot-vt: HIT\r\nXkey-TOT-VT: en./-A-en.av2.top--my_zone\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":181641,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (58814), with CRLF line terminators","md5":"34e707c81d1913a267b4b79487114a87","sha1":"55882d9663359d36fbc7a2d9d30aa631e3b439ac","sha256":"e18b1463a7a311c1f1c9d9a20792214bd518a6376712ef508e3a1675439be028","sha512":"f616f063dea37c50b067ea979d029a1a52cc4e87b1774ac07a0b27044de1f8f21c6b7f24c8c5fd7d4f0326e1e67e6622b45aacd3cef7773ddca0a4ba7bff0b44","ssdeep":"3072:Vsw/ocwMnMsM3lRvfA0AxQ2plCuP38aA8Fr:Gw/o/El4lRexQ2pJP38aA8Fr","tlshash":"2004b43b524478772ac342e3f19202bee93ba21dc6ca994cb86e31d173c7e7d9536164","first_seen":"2026-01-03T13:47:52.773713Z","last_seen":"2026-01-03T13:47:52.773713Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1134,"timings":{"blocked":229,"dns":2,"connect":227,"send":0,"wait":449,"receive":227,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"en.av2.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20240629-1/b6dd7be3877810b1a08682f2399a8ad1.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"142.248.99.81","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 09:53:21 GMT","end":"Fri, 06 Mar 2026 09:53:20 GMT"},"fingerprint":{"sha1":"55:92:B5:BC:78:CB:75:63:3B:0F:C6:A3:DD:2D:2F:7C:FA:07:B7:4A","sha256":"02:67:5F:F2:7D:A5:B6:59:8F:77:98:9C:EF:94:84:1A:E6:C9:FC:6E:A7:27:06:47:BB:16:5D:BE:A9:91:90:79"}}},"request":{"raw":"GET /upload/vod/20240629-1/b6dd7be3877810b1a08682f2399a8ad1.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 105175\r\nlast-modified: Sat, 29 Jun 2024 06:29:10 GMT\r\nvary: Accept-Encoding\r\netag: \"667fa9b6-19ad7\"\r\nexpires: Thu, 29 Jan 2026 06:35:49 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 371440\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":105175,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 718 x 404, 8-bit colormap, non-interlaced","md5":"1242363e1be6c8d46d5016fb3797e77f","sha1":"b889ec4e8201fa512126b03b6e7a9e93380ead94","sha256":"83add68ae8eff1618e6bfd21c285cee3c08428cff751a6c0f80780d798828308","sha512":"b8037c23695b44dcc4f4d180299a90ef3dc6117c3cb4a5833f5b7f1a5e28add844648d8c85e3fa8a1f1c6a0b667ed1a80ff4ae8c6ac9911d51d52882df061b37","ssdeep":"3072:1sw4UK/2J4SibaJ8ex2zcDkoOHgArxeDmy6ayjiYq:1bK/2ibexXDkoDmTaTYq","tlshash":"45a312f1abedeaa972635916c2c0926467fc359eb29f08068dc8f92b5df2f4147013c5","first_seen":"2025-06-15T23:41:16.062492Z","last_seen":"2026-01-03T13:47:52.780699Z","times_seen":6,"resource_available":false,"data":null}},"time_used":975,"timings":{"blocked":99,"dns":0,"connect":0,"send":0,"wait":674,"receive":202,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornyc.com/favicon.ico","fqdn":"pornyc.com","domain":"pornyc.com","tld":"com"},"ip":{"addr":"104.21.2.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornyc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 19:39:00 GMT","end":"Wed, 18 Mar 2026 20:36:40 GMT"},"fingerprint":{"sha1":"7B:B7:DF:49:67:23:E0:82:20:CE:9D:4E:C7:A4:09:D7:82:1E:EC:88","sha256":"BA:70:35:10:49:49:25:95:FF:81:51:BC:50:EC:E9:46:9D:FA:05:57:69:E5:D4:A3:6B:29:9D:0A:53:56:A5:BD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pornyc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 1150\r\nserver: cloudflare\r\nlast-modified: Tue, 21 Sep 2021 08:49:38 GMT\r\netag: \"61499ca2-47e\"\r\nexpires: Sun, 03 Jan 2027 02:48:01 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 39513\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0L%2FVdKB%2FZaj5HlCZ3SDrl4VrX4cEje39r13QfVEUuwx4%2FPfy2BcwSBF015FN06p41quMSVRd3xrwTXiV0jALtY5wwy6HA5rz0NI%3D\"}]}\r\ncf-ray: 9b82f16bcf89120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"76a87b9c0965503d64dc4f0a9b73e3cb","sha1":"b2a7bea1303bb39aea20f3f05b820c8c388efcdf","sha256":"98734b691a87d139a39c2cf171a653311834a47bb9f7aeef888a26b0fc579837","sha512":"cb6b1b18513db2530ed7ffda6f6d84fc9082b205d23a0442f2bbce9711c2df2d541fcf385be4bc0c957e23987efd6cc1def5bdf25b154af90afc5138f1ebb5bb","ssdeep":"","tlshash":"a82168d1b849e91dd338e9fa03edce05a19511007c7850a69b601aa0672a36cf8d91ff","first_seen":"2024-10-22T15:18:10.975603Z","last_seen":"2026-04-12T19:29:51.696721Z","times_seen":291,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"pornyc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sasisa.ru/favicon.ico","fqdn":"sasisa.ru","domain":"sasisa.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.291Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sasisa.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":398,"timings":{"blocked":178,"dns":220,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nudegirls.wiki/favicon.ico","fqdn":"nudegirls.wiki","domain":"nudegirls.wiki","tld":"wiki"},"ip":{"addr":"109.202.99.24","port":443,"asn":49453,"as":"Global Layer B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nudegirls.wiki","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 23:45:41 GMT","end":"Thu, 19 Mar 2026 23:45:40 GMT"},"fingerprint":{"sha1":"03:46:3C:E7:46:FC:61:D1:3A:77:12:9D:D6:23:2B:AF:51:F2:01:DE","sha256":"D5:BF:AE:39:F6:26:B7:47:8D:66:41:0B:5F:30:2C:5A:B5:78:24:04:89:6F:C7:7C:E2:1B:64:F6:30:2B:ED:B2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: nudegirls.wiki\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":587,"timings":{"blocked":385,"dns":85,"connect":21,"send":0,"wait":45,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"erota2.com/favicon.ico","fqdn":"erota2.com","domain":"erota2.com","tld":"com"},"ip":{"addr":"104.26.4.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erota2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 03:57:39 GMT","end":"Tue, 24 Mar 2026 04:57:35 GMT"},"fingerprint":{"sha1":"61:A4:B3:51:5C:84:0C:7A:D6:B2:9C:95:F5:8A:8A:BB:32:1E:BF:0A","sha256":"12:B6:23:F5:45:4E:9E:2F:9E:1C:EB:B6:30:A1:C5:0D:C3:06:A5:27:4C:CA:54:E7:0E:95:E5:38:6A:78:13:97"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: erota2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nlocation: /favicon.png\r\nage: 770\r\ncache-control: max-age=691200\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zwZigaawUEMQ3bhHgftZ8FCYwjUUkNQwm3L0vBDcPoss2XMl8sYw7q4NAGriyksw6cBUtc1V4jG4QxyOYhkCU8gKTFJzxnA%3D\"}]}\r\ncf-ray: 9b82f16c189556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2262,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn5-thumbs.motherlessmedia.com/thumbs/C9184B4.jpg","fqdn":"cdn5-thumbs.motherlessmedia.com","domain":"motherlessmedia.com","tld":"com"},"ip":{"addr":"185.107.92.224","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.motherlessmedia.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV SSL CA 2","organization":"GoGetSSL"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 22 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1C:9C:A7:64:1D:50:C4:66:FC:B5:AE:9C:CB:DF:AC:1E:1F:4B:A0:83","sha256":"FD:6F:CF:79:47:AA:EF:54:72:2A:60:E2:1B:57:6B:D6:33:60:E2:67:DA:83:68:95:02:34:5B:66:53:45:A1:0E"}}},"request":{"raw":"GET /thumbs/C9184B4.jpg HTTP/1.1\r\nHost: cdn5-thumbs.motherlessmedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty/1.21.4.1\r\ndate: Sat, 03 Jan 2026 13:46:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23459\r\nvary: x-s-token\r\nlast-modified: Sat, 06 Oct 2018 23:10:55 GMT\r\netag: \"5ba3-5779780066675\"\r\nx-cache: HIT\r\nx-whom: cdn06\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":23459,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 1000x999, segment length 16, baseline, precision 8, 640x480, components 3","md5":"c5d8c4e3307e651f528fcdf1f8d766db","sha1":"3d62a193d9bcde540a2c904b5aaf0dba23777430","sha256":"ed43bb2cd136c561f8b222d41af463a7cf9ae6ee1fa19edc8ea2f226e0f6fe0c","sha512":"154ff5a928a13f7af5c14792a14121db8c2a8cd9d51376ad806118c6e4348c37cba57b4ddf2cb96539252f1965fed7996aa1f4f96a3663486f5915b76f56c06e","ssdeep":"384:jcH4coNyRCr2yYf4KCHagTLhiijdV11ZQS8uvDumwz/rT0bY3uhnI23r1qYxpXah:4YcuyRCrYAKCHagvhiijdVeS8XXvk4uQ","tlshash":"3ab2e05a3f7326fccedad5fa7219824622f0902a9884b57c91a120ff395df209d44da1","first_seen":"2024-08-19T23:09:06.49105Z","last_seen":"2026-03-03T08:08:10.363018Z","times_seen":31,"resource_available":false,"data":null}},"time_used":4188,"timings":{"blocked":3475,"dns":1,"connect":50,"send":0,"wait":72,"receive":11,"ssl":532},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ansuko.net/wp-content/uploads/2024/12/iie54zbr_header.jpg","fqdn":"ansuko.net","domain":"ansuko.net","tld":"net"},"ip":{"addr":"104.21.54.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansuko.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:34:35 GMT","end":"Fri, 06 Mar 2026 14:32:54 GMT"},"fingerprint":{"sha1":"F4:E3:EF:30:48:D7:B3:40:2B:D3:E1:F5:14:F6:72:5B:FB:0B:94:DF","sha256":"1D:46:63:21:32:DB:DE:81:F7:49:23:17:0A:76:2A:6E:F6:89:3C:51:B8:65:66:A9:DA:9E:D5:EA:3A:BB:08:D7"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/iie54zbr_header.jpg HTTP/1.1\r\nHost: ansuko.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1327465\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 19 Dec 2025 05:02:05 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qKKiBVvBp1UGex6blTTFr73Tmf4NxX804HW8%2BQEIZ5ydyeIj72K3%2F3YD%2F39L7sw6Ohi0ABvCusDvtCsRnKYLjfo6Txvr98Qx\"}]}\r\ncf-ray: 9b82f15c786356cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102075,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 650x782, components 3","md5":"19ccb76e7e09f6dd177c46adeff35cce","sha1":"fc97258ec888b8e5ea5922542f15df7671635527","sha256":"82f35eb0fa2e4bca0c8a928e9dc29046b9beb7b466641ed4151cabcc6b0b1f67","sha512":"adff4c432397a806ed4f79570c56e73537ec9b24d907c746071d0c0ee32864c60083b988a014f64b3ca273ea06c80beffc87db27bf7588a75a31b1d2b3cf628e","ssdeep":"3072:fp3daxdC1/6SdimslIIhD0TP89rBh1w5j:B3daxC6QYl7hD0z8fhS5j","tlshash":"c5a312ac09583bdebad82042945bdd07c862813a64a41f5f4cec57a0b156ad3e8cfc7f","first_seen":"2025-07-17T06:33:28.467557Z","last_seen":"2026-04-03T22:52:06.896161Z","times_seen":87,"resource_available":false,"data":null}},"time_used":4143,"timings":{"blocked":4130,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_6929121866.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"169.150.247.33","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Nov 2025 09:11:23 GMT","end":"Sat, 21 Feb 2026 09:11:22 GMT"},"fingerprint":{"sha1":"C4:B8:4F:E1:DF:D2:C1:E4:47:DE:DB:2C:FB:82:70:B1:F6:80:A8:31","sha256":"E4:77:2E:6A:AF:E5:36:3A:73:69:75:71:99:21:01:C5:EC:C8:ED:DD:47:CD:32:8E:89:B6:C6:50:AB:DF:CB:B9"}}},"request":{"raw":"GET /ext/pre_6929121866.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14640\r\nserver: BunnyCDN-DE1-1076\r\ncdn-pullzone: 4336709\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=7776000\r\netag: \"666b5d34-3930\"\r\nexpires: Fri, 27 Mar 2026 10:09:43 GMT\r\nlast-modified: Thu, 13 Jun 2024 20:57:24 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-cache-status: HIT\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 12/27/2025 10:09:43\r\ncdn-edgestorageid: 865\r\ncdn-requestid: d7ce27fd26d0b9d1bca5651f29426ea6\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":14640,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"bdeb3f4506b0c92c1c91520a8affca5f","sha1":"68805637bde9c19fba459469bf1f466d1e02d739","sha256":"edbe781bf527ebe7707a26e883511b0761a6ef231d4af356da389ab6932922bc","sha512":"b96d589fc3576e819c6bb142b52c22f2dfc966fe952ebff8d0defdd50f0b55faa51cdf803b71858d879b286497baa00b500abbaea9bc3ed4621bd286167301d8","ssdeep":"384:tSSRQJaGFl5qDpn9UQ+2vDdeHv/csS8Q2LUCLzwBWYcrl:tFR+nKpnCQXLdeHHBpUIzNd","tlshash":"8a62c0d8636c8ed1fc2d29b3592c9c257b28dbb15299b2076cd0b91cbb3f411830346d","first_seen":"2025-06-24T07:11:14.991372Z","last_seen":"2026-01-28T23:13:27.078403Z","times_seen":25,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":257,"dns":1,"connect":23,"send":0,"wait":25,"receive":21,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.po-kaki-to.com/wp-content/uploads/2022/02/1644030326.jpg","fqdn":"www.po-kaki-to.com","domain":"po-kaki-to.com","tld":"com"},"ip":{"addr":"104.21.10.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"po-kaki-to.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Dec 2025 11:44:44 GMT","end":"Sat, 07 Mar 2026 12:43:23 GMT"},"fingerprint":{"sha1":"8B:A7:EE:7F:07:6B:14:0C:C1:CC:6D:9C:E1:ED:85:B4:23:DE:44:1C","sha256":"3D:DB:6F:F4:0A:73:5B:D9:61:20:A4:26:CE:9E:D9:8D:10:C8:46:63:FF:5D:D3:2A:99:A3:74:4A:39:83:D8:03"}}},"request":{"raw":"GET /wp-content/uploads/2022/02/1644030326.jpg HTTP/1.1\r\nHost: www.po-kaki-to.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 52356\r\nserver: cloudflare\r\nlast-modified: Sat, 05 Feb 2022 03:05:26 GMT\r\netag: \"61fde976-cc84\"\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nexpires: Thu, 19 Mar 2026 02:18:13 GMT\r\ncache-control: max-age=7776000\r\naccept-ranges: bytes\r\nage: 1337298\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WeDRopQZtrIyGaULJdfiLP1BRnMfSF6iXIIgl6o5cnP3Ns89Y4IaQohTqh1Vsl8joq5y%2FgAkK1fdav%2FwTllk%2FIJv1C2WrJIW4Oe5spcbEog%3D\"}]}\r\ncf-ray: 9b82f15cca807129-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52356,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 650x500, components 3","md5":"32bfaf40234c91932ae0700052bfbfa9","sha1":"da154364fefb9cd2fc0bd7a4ae74eddf88c30174","sha256":"b4c85ba31782f842fc507673bdc3d16345c9dcf9ad9ad512fe371bfa6fdc7d14","sha512":"2ce1a9d79500be50f9a1c09f79087b620c87245710da215e02a420abcc7787d88701f96f9b7b0319dbae3468be16a74f8667fd3a26586ba42989f19423206985","ssdeep":"1536:YbG+zuCevHSTXYJJhDhfQ9QUR3VJy6kVgx5A1C/qX:Y7YH95yNRdwC/qX","tlshash":"3e33024d36bad72932286d3d99128235fa8fc8242b4d4d1fd3a47d2785543e26bb7b0c","first_seen":"2025-09-13T05:56:21.970418Z","last_seen":"2026-03-01T22:32:14.175466Z","times_seen":49,"resource_available":false,"data":null}},"time_used":3801,"timings":{"blocked":3478,"dns":1,"connect":14,"send":0,"wait":15,"receive":1,"ssl":253},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realincestvideos.org/thumbs/970/3824942639621101970_0.jpg","fqdn":"realincestvideos.org","domain":"realincestvideos.org","tld":"org"},"ip":{"addr":"104.21.1.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realincestvideos.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 04:52:41 GMT","end":"Sun, 08 Feb 2026 04:55:53 GMT"},"fingerprint":{"sha1":"14:6E:55:97:20:69:A0:95:6E:D4:F4:9B:ED:F9:7F:AE:F2:C7:00:6B","sha256":"22:8B:AD:95:0B:BF:16:8C:B0:03:EF:6E:77:63:3E:F4:B0:73:C8:77:6F:19:CA:CF:68:62:45:F2:72:D8:D1:8D"}}},"request":{"raw":"GET /thumbs/970/3824942639621101970_0.jpg HTTP/1.1\r\nHost: realincestvideos.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:37 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10272\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Feb 2020 16:27:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"5e554af4-2820\"\r\nexpires: Tue, 06 Jan 2026 02:19:41 GMT\r\ncache-control: max-age=259200\r\naccept-ranges: bytes\r\nage: 41216\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ea1uuFNKdFPuflq4bwcN8TJXrEICo%2Bx5Eiyl4ZazyypTLhOfLhuMeQ1GBILXRQx0OxG42HbtQ3iDJ1QkNccrc3CMD9TOxhdoDc2HzvYrabGzfQ%3D%3D\"}]}\r\ncf-ray: 9b82f1832a95b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10272,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 240x180, components 3","md5":"df9640571f32a92ca04af356412a71f4","sha1":"e7426a31be23115259796c21fe764d98111f7803","sha256":"63da2d279b00f8b0ab8fbdd6ba41f3e4551b3ea92ac5de759111c16cf8debfb8","sha512":"10112dd8324d420dbb1402a7bbb9c5169d71ab3dbb9d3368ff341739b8ad590478547a2f1389df0212a0cba8b8aca8578a67897a6f5c6e77f49f2b56833ac2f1","ssdeep":"192:ETLk+9dnui+ZdqnzG6zPSol+KkcFmfxOBqFC5ZOQ8t3k/:EPk+j+3qnL0SF+sqqZOQ8t3k/","tlshash":"6122b01d3f554e7ef4afd630ed5780596a2e75a43d02b3c944c35088db7ad69a0ca2e0","first_seen":"2024-04-21T01:09:15Z","last_seen":"2026-04-26T08:04:53.799215Z","times_seen":154,"resource_available":false,"data":null}},"time_used":9870,"timings":{"blocked":3414,"dns":1,"connect":13,"send":0,"wait":7,"receive":0,"ssl":6415},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naturismv.com/images/junior-miss-pageant-contest-2003-nc12.jpg","fqdn":"naturismv.com","domain":"naturismv.com","tld":"com"},"ip":{"addr":"104.21.44.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:31.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naturismv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 08:45:50 GMT","end":"Wed, 25 Mar 2026 09:44:26 GMT"},"fingerprint":{"sha1":"0D:53:B5:5B:52:F7:E4:1B:37:F9:A9:28:44:FE:7E:59:88:06:5B:6C","sha256":"41:5B:87:91:5F:9E:1B:18:06:51:AC:8C:91:92:B1:92:A4:96:CA:4A:A5:06:A6:48:CE:CC:31:03:8A:E5:DB:1C"}}},"request":{"raw":"GET /images/junior-miss-pageant-contest-2003-nc12.jpg HTTP/1.1\r\nHost: naturismv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://en.av2.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 69234\r\nserver: cloudflare\r\nlast-modified: Fri, 19 May 2023 12:04:52 GMT\r\netag: \"646765e4-10e72\"\r\nexpires: Sat, 19 Dec 2026 06:52:52 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 1320819\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0nalDwwiUqf4T5eRk%2F4pXfs%2BTe3v8n9hxZA5tvn43RvwmiFs6GoIpteknkC8EDMtDhr45fKhJueYhT8OaVdUQtRfS5eYKBNKigfh\"}]}\r\ncf-ray: 9b82f15d1bf80b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69234,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 400x300, components 3","md5":"c9f83ac4be5a64bf260ea8758319fcd3","sha1":"dc6b9e57f000507c7d2b4f7c45ce0540e87f86ca","sha256":"98da200d248fd1edd7c8a3ce1c3211cb9361ba9345037c609ecf4b070e315e74","sha512":"1f17a6e2087985333489fa67d5dc710a37c82790743ea96a25196cbc811d2ad568bf0d26aaa0df7450d1b81393b559a5de0da4dd1c20f3ddfdf89249ac9e16f9","ssdeep":"1536:QsxBZBQ1ZNaPAzQabN3Bu+22m9/6aVJDjakPsmmXtXb:QCz6laPMQf+22m9FJDjakP5Ub","tlshash":"de6312a35c22ee96f79f7f9d12c8efc56830f90eb20e621450799674dc9cc9002e065b","first_seen":"2024-04-18T20:55:21Z","last_seen":"2026-01-28T23:13:27.073891Z","times_seen":229,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":25,"dns":50,"connect":14,"send":0,"wait":6,"receive":2,"ssl":187},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornovrach.com/favicon.ico","fqdn":"pornovrach.com","domain":"pornovrach.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.231Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pornovrach.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":708,"timings":{"blocked":-1,"dns":708,"connect":688,"send":0,"wait":0,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cataphractarii.com/favicon.ico","fqdn":"cataphractarii.com","domain":"cataphractarii.com","tld":"com"},"ip":{"addr":"104.21.38.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cataphractarii.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Nov 2025 13:43:37 GMT","end":"Wed, 25 Feb 2026 14:41:02 GMT"},"fingerprint":{"sha1":"13:25:89:20:91:D6:EC:41:8B:40:57:59:CD:EC:8A:4E:26:19:A8:75","sha256":"D3:44:C0:74:6A:2E:57:13:DA:55:D1:68:A7:29:7B:7A:AA:10:AB:70:F1:DF:2D:CE:7C:E3:BE:EA:D0:4D:92:B2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cataphractarii.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2pP4IDVWn0tnhqArIe%2F4DShFqSPt5dVkzW3kKhOqD1CnuIXzuIEBPKB6ZH788DLDWie2GGZNbFYrirWKIA1QepW3W%2BFBZVG4BK3GOJnwhaQ%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: 9b82f16d1fd756a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":96,"dns":42,"connect":1,"send":0,"wait":29,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdig.com/media/videos/tmb/000/037/066/player.jpg","fqdn":"fapdig.com","domain":"fapdig.com","tld":"com"},"ip":{"addr":"172.67.154.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdig.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 09:32:52 GMT","end":"Mon, 09 Feb 2026 10:31:27 GMT"},"fingerprint":{"sha1":"C4:DB:94:8D:E6:69:2A:BC:4F:96:2F:A7:2C:6D:5E:24:BC:7B:D1:D1","sha256":"32:61:1B:62:E9:0D:26:3D:9E:5D:F7:A8:06:CB:3A:85:4C:61:0C:8D:36:4A:51:FF:6B:37:BD:CF:B1:27:A0:E3"}}},"request":{"raw":"GET /media/videos/tmb/000/037/066/player.jpg HTTP/1.1\r\nHost: fapdig.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14086\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jul 2019 03:51:07 GMT\r\netag: \"5d1d77ab-3706\"\r\naccept-ranges: bytes\r\nage: 606\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UeqR%2F6b2V0J1as62meVTDajInD5Rcy6E70kM3CbcqlwfutizlmOFVjLWuuLoXK2Xf56QuqOatIRq7PCE2x1U3DIYss4qLKPqzcs%3D\"}]}\r\ncf-ray: 9b82f1466fa33181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14086,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.28.103\", baseline, precision 8, 480x360, components 3","md5":"72e199497d4dfb34b78bd72828502265","sha1":"f547efa367af89b629ac1912a1d97b5a468aad65","sha256":"99b02a1b6dd15f4a0c4c23ef6730880929ea3918a04efc0b1540c8d7bdd14b11","sha512":"a54881f673c3eab9af4a03a24b4fcb6a962d1432f278e2972c6878db27c5c2843e6e6a27087d381f2a53186218a10cd872c902a9e3a74890d8226c6ddffc00f3","ssdeep":"384:wC9GveinNiCvSd4470IReqmxxUBl04k/BGF12yxFb:f9Gv5IeSd447gNBmlFb","tlshash":"7252cf56af068bd1dd6c10f1d85f12e81f8a0387f5a66ccf1e700b1efa65ab7540c62a","first_seen":"2025-05-06T03:47:00.257505Z","last_seen":"2026-01-08T04:21:04.497674Z","times_seen":4,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":198,"dns":2,"connect":3,"send":0,"wait":8,"receive":1,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornyc.com/thumbs/71/902_brother.jpg","fqdn":"pornyc.com","domain":"pornyc.com","tld":"com"},"ip":{"addr":"104.21.2.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornyc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 19:39:00 GMT","end":"Wed, 18 Mar 2026 20:36:40 GMT"},"fingerprint":{"sha1":"7B:B7:DF:49:67:23:E0:82:20:CE:9D:4E:C7:A4:09:D7:82:1E:EC:88","sha256":"BA:70:35:10:49:49:25:95:FF:81:51:BC:50:EC:E9:46:9D:FA:05:57:69:E5:D4:A3:6B:29:9D:0A:53:56:A5:BD"}}},"request":{"raw":"GET /thumbs/71/902_brother.jpg HTTP/1.1\r\nHost: pornyc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13183\r\nserver: cloudflare\r\nlast-modified: Fri, 17 Sep 2021 16:49:37 GMT\r\netag: \"6144c721-337f\"\r\nexpires: Mon, 21 Dec 2026 06:54:05 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1147946\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QBeqc66CtzR13C5g7Jsmc3PT%2B2K0HKCDEkOz6Ins6z8a9oPPj3EMCaHST5Ngrx%2F3ikvf6UFVxwNhC5oDmNaUy%2FUe78Kc%2Bg%2FEQ%2B0%3D\"}]}\r\ncf-ray: 9b82f15cc9cc120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13183,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 312x208, components 3","md5":"ed5dcacb2752e393d6c4867a7f5365ba","sha1":"0c14fe4a3344271b96a43ec3ca3d1eac5dcbe08a","sha256":"015fa1feed920397ad6445028fa81709a56830d6300e8377fd0ef22d6bfdd448","sha512":"f465edfd45371d64bf0c84e86088bfa8c58f8aa1e5fad9885bda9b2071c984b5ba984db53777726d9f580e3c3b78d5e97c1d188bc761ecafc7e1d8e2fdb65142","ssdeep":"384:Sz6AkeRd6S37yyU7Fn/8zTiZ3hmh6sZxTlcT:S2U8Q7Q7FCTiZs5GT","tlshash":"3742c1c34d086bc3f0bf40a827d55eb46dc82ac5b3d4254587ffc65a47baa47045e92b","first_seen":"2026-01-03T13:47:52.81468Z","last_seen":"2026-01-08T04:21:04.302514Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3783,"timings":{"blocked":3467,"dns":1,"connect":14,"send":0,"wait":9,"receive":0,"ssl":254},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"pornyc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241010-10/c242b8e4f3f014e9f72e148d12aadb48.png","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:32.217Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241010-10/c242b8e4f3f014e9f72e148d12aadb48.png HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.vidmo.org/favicon.ico","fqdn":"en.vidmo.org","domain":"vidmo.org","tld":"org"},"ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vidmo.org","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Mon, 02 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5A:F1:73:5E:65:04:62:81:77:0D:E9:30:2A:1C:AD:D5:01:9C:EB:EA","sha256":"0B:B8:D8:59:9D:1C:FB:70:0B:B7:41:7B:8D:14:0C:20:7A:72:1E:79:FB:DA:ED:19:76:A7:FE:38:A5:4F:84:5B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: en.vidmo.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:35 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 5430\r\nlast-modified: Sun, 14 Oct 2012 21:41:38 GMT\r\netag: \"507b3192-1536\"\r\ncache-control: public, no-transform\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"6b6734885d5e4ff9dbb7d82ba6023598","sha1":"3c454d68a346b375ed7b59a131699061e7393b1f","sha256":"0f8e5edd4348eaa11881bf6150baf7b3182b1c3e29c6378e0e921afce7d91819","sha512":"e3d4562da250a2096981bd9a211efa643400ebe18a2d0765e750454b4cf75cb31e9594d8fccfa61a4c86e1c08bbf130dbc635c2974996838444cef029bf3eb50","ssdeep":"96:12lbcmeAscXXZCGv56cOtAe8CKfMibd+tLMiWMyuFa:0muCQpBQ6d+ti","tlshash":"a9b173c151c1e587e0274f38e237d750b1fa2c13bab0ea85156b7a555a731898317b1e","first_seen":"2023-05-05T08:02:57Z","last_seen":"2026-04-12T19:29:51.616695Z","times_seen":690,"resource_available":false,"data":null}},"time_used":876,"timings":{"blocked":68,"dns":174,"connect":32,"send":0,"wait":94,"receive":0,"ssl":507},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtgallery.net/favicon.ico","fqdn":"rtgallery.net","domain":"rtgallery.net","tld":"net"},"ip":{"addr":"5.63.144.84","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtgallery.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 17:00:08 GMT","end":"Tue, 17 Feb 2026 17:00:07 GMT"},"fingerprint":{"sha1":"5D:8A:5C:FE:24:B0:28:D3:1B:23:AE:94:5D:BC:79:7D:DD:8F:20:3F","sha256":"7A:EB:AE:AA:18:8B:DF:0F:6B:03:FE:39:39:5C:2D:B6:E1:64:4C:4E:FC:EF:35:B2:E5:8E:27:F9:70:BF:DB:C3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rtgallery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Sat, 03 Jan 2026 13:46:34 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 894\r\nLast-Modified: Sat, 03 Jun 2017 05:36:38 GMT\r\nConnection: keep-alive\r\nETag: \"59324ae6-37e\"\r\nCache-Control: private, max-age=600, must-revalidate\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":894,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 24 bits/pixel","md5":"ecfa03337847c3b30c7c0c5c4bbb5c5f","sha1":"55457dd13b92fd876c253e3a74d46aec83429441","sha256":"903d49ac2a65b3e7452534fc61790a686d1be8b936e8e6bcd9f49b1739a746f9","sha512":"e05def7385dec8c99241ec00e4bf6fcfa023c9d2d0ea8a26d35f83831df14f4075c6d6fc8121d63de1387869a354af6664b6fe33101342709d0e4a7dd8f25d15","ssdeep":"","tlshash":"0b112b4aa11538a1d4f55575261a0ff95491c30ecdbed7d0c4f8f4f6e922924c738328","first_seen":"2024-05-20T05:01:42Z","last_seen":"2026-04-11T18:21:42.296402Z","times_seen":409,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cav10.com/favicon.ico","fqdn":"cav10.com","domain":"cav10.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.298Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cav10.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"cav10.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Content Category / Application Block","trigger":"cav10.com","verdict":"suspicious","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"cav10.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"degustibusbread.co.uk/favicon.ico","fqdn":"degustibusbread.co.uk","domain":"degustibusbread.co.uk","tld":"co.uk"},"ip":{"addr":"172.67.198.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"degustibusbread.co.uk","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:44:16 GMT","end":"Sun, 08 Feb 2026 14:41:37 GMT"},"fingerprint":{"sha1":"DA:87:4C:5A:BA:B0:88:36:F2:65:AE:25:66:E6:D3:69:D9:D9:E6:40","sha256":"38:5E:8A:77:1E:C1:52:72:19:91:07:9F:BA:BF:35:8A:07:82:3E:D8:21:18:4F:B1:CE:8C:94:84:91:08:74:54"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: degustibusbread.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: http://degustibusbread.co.uk/wp-includes/images/w-logo-blue-white-bg.png\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-redirect-by: WordPress\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NlID7XW2aoy1rNnRiNsAjRVFTUNNfnqF6BXONQFPusFkICo95srIN%2Fru6KAIVC%2F880KTKp%2BqOT2JjUI2b2NyluLr4wczV6bod2AAvNp86lXGW6hW2A%3D%3D\"}]}\r\ncf-ray: 9b82f16bea815a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4119,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"degustibusbread.co.uk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.redd.tube/favicon.ico","fqdn":"www.redd.tube","domain":"redd.tube","tld":"tube"},"ip":{"addr":"54.39.222.96","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"redd.tube","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 17:29:56 GMT","end":"Wed, 25 Mar 2026 17:29:55 GMT"},"fingerprint":{"sha1":"5A:F6:31:AF:6F:2E:0B:CE:98:C8:B4:5D:95:E0:14:93:2C:6B:A7:76","sha256":"A9:3A:C6:2B:28:43:7E:8B:29:91:D7:EC:88:9F:CA:DD:54:3A:28:DF:9C:9A:AD:26:CF:5D:1E:69:CE:3A:B0:97"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.redd.tube\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:35 GMT\r\ncontent-type: text/html\r\ncontent-length: 737\r\nlast-modified: Thu, 31 Oct 2019 10:30:48 GMT\r\netag: \"5dbab7d8-2e1\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":737,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"3cd2dc2fa3f65859bdde384930e5ebe8","sha1":"b87e6a19ab1c5492b075aed017b8a5e502e5b584","sha256":"fb1932fb1e5fe197a279db728c4d03c2f8b07dac065b5a37f4e265c4bc66506c","sha512":"1b8fad05711b59e2a42ebe3872ea3a319a3aad0a06c5a04e7b2f34f088e4471a5a20d2b015f23101bf94b9ce3abd00eaa906c5d90f41905ef2d40279ee798445","ssdeep":"","tlshash":"01011582c0d22006310b544438b8e784a95781cad9c587bd7179d876375c5b3fb2b15c","first_seen":"2024-08-19T21:51:14.227067Z","last_seen":"2026-04-13T16:22:59.748971Z","times_seen":184,"resource_available":true,"data":null}},"time_used":1266,"timings":{"blocked":475,"dns":305,"connect":96,"send":0,"wait":97,"receive":0,"ssl":292},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidmo.pro/thumbs_320/ff/60/ff600a92a0e10dfcd27bca4e6355bcf7/12319214.jpg","fqdn":"vidmo.pro","domain":"vidmo.pro","tld":"pro"},"ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"en.vidmo.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 20:48:10 GMT","end":"Thu, 19 Feb 2026 20:48:09 GMT"},"fingerprint":{"sha1":"B8:8B:9C:2B:E9:53:D3:85:0E:57:74:8D:32:07:72:DF:38:F3:91:DA","sha256":"9B:B3:9F:DD:FB:1B:36:C3:04:60:BF:DF:87:AA:AB:5D:F6:0D:45:20:77:9B:29:19:5F:C4:B6:F1:04:C9:23:3E"}}},"request":{"raw":"GET /thumbs_320/ff/60/ff600a92a0e10dfcd27bca4e6355bcf7/12319214.jpg HTTP/1.1\r\nHost: vidmo.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7327\r\nlast-modified: Thu, 01 Oct 2020 03:13:09 GMT\r\nexpires: Mon, 13 May 2024 00:21:37 GMT\r\ncache-control: max-age=604800, public, no-transform\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7327,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1728x1727, segment length 16, comment: \"Lavc58.35.100\", baseline, precision 8, 320x240, components 3","md5":"c0732e5173bee7a23d0bc11cc0ffc3b2","sha1":"120cdb02e3ec5f783e8251e71418f021175b6638","sha256":"d48d10c8e497c47926557151584b963c3aa45936600e7e0b8ec5eaef27a7f310","sha512":"4a75970f89c6c8fcf2733c890cf0fd0cbd9c24582d8829d58c15483d4bd5911932bbec59d342c521d33029203f555164a76f8874125303091daa3733e248c0f5","ssdeep":"96:IqdnQzZ9HOmwuIdAh8W/tM5yriS4fcwiA49xCNVxtVW3muMyzUF1To5hyGR1Hpky:IqdO6uIDWgyrBacHAWUHWmoYFl091W6","tlshash":"19e1af2270c6331bdf73403d49085a7782046d1c8f9833799ea24f89b5657d2e676dbb","first_seen":"2024-05-18T10:55:44Z","last_seen":"2026-01-28T23:13:27.065671Z","times_seen":29,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":179,"dns":85,"connect":21,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20240822-1/126a6821e8e4639eab7b2650896dd81b.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"142.248.99.81","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 09:53:21 GMT","end":"Fri, 06 Mar 2026 09:53:20 GMT"},"fingerprint":{"sha1":"55:92:B5:BC:78:CB:75:63:3B:0F:C6:A3:DD:2D:2F:7C:FA:07:B7:4A","sha256":"02:67:5F:F2:7D:A5:B6:59:8F:77:98:9C:EF:94:84:1A:E6:C9:FC:6E:A7:27:06:47:BB:16:5D:BE:A9:91:90:79"}}},"request":{"raw":"GET /upload/vod/20240822-1/126a6821e8e4639eab7b2650896dd81b.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 172748\r\nlast-modified: Thu, 22 Aug 2024 11:03:49 GMT\r\nvary: Accept-Encoding\r\netag: \"66c71b15-2a2cc\"\r\nexpires: Sun, 11 Jan 2026 06:56:28 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 1925400\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":172748,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 800x538, components 3","md5":"16f1583b8dd9b076f79718a696d03634","sha1":"d231ece59bf579b01873991382f2e7dd4fbb6f93","sha256":"07ae74409eb248ddd4b7263b9b092bcaeca6c0b9ddc4c893c8e923a25127991a","sha512":"f56c85a7ab79cb4c20294738c657d9545e7c4b9c625c8b0efb0e45b08f2b24aa8c74a0a71c65563dce5920363f76f1a12d15b3802f018b15cac8ac79c5811de6","ssdeep":"3072:erCJAeErmSSWjjxsKImrOBsKrqQZ0tf6+evkuxI/CkBzffuAYLd20Yez:a+AeErmS3PxsKImayK1ZOffevkumKkBY","tlshash":"62f31218a21ef35c64ce0b25ec0e298596d9ab13a635708ba5f707ef5fe638cc015c67","first_seen":"2026-01-03T13:47:52.829443Z","last_seen":"2026-03-03T09:47:10.868449Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1369,"timings":{"blocked":110,"dns":1,"connect":0,"send":0,"wait":673,"receive":455,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250504-1/7fb7c8364460519229a698eb6c41101d.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"142.248.99.81","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 09:53:21 GMT","end":"Fri, 06 Mar 2026 09:53:20 GMT"},"fingerprint":{"sha1":"55:92:B5:BC:78:CB:75:63:3B:0F:C6:A3:DD:2D:2F:7C:FA:07:B7:4A","sha256":"02:67:5F:F2:7D:A5:B6:59:8F:77:98:9C:EF:94:84:1A:E6:C9:FC:6E:A7:27:06:47:BB:16:5D:BE:A9:91:90:79"}}},"request":{"raw":"GET /upload/vod/20250504-1/7fb7c8364460519229a698eb6c41101d.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 243739\r\nlast-modified: Sun, 04 May 2025 04:32:58 GMT\r\nvary: Accept-Encoding\r\netag: \"6816edfa-3b81b\"\r\nexpires: Thu, 29 Jan 2026 06:35:47 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 371441\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":243739,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1039x519, components 3","md5":"9574cb27810662b417c809f2a4cc0311","sha1":"78272d8f15d23d9c8711c2c94226e9e4c3f4cdbd","sha256":"2344de17cb512a107f076e8f5678735c74e9d1f42dd69a571536a39911fb9c46","sha512":"cf49d9ea7205d31d5eb890d9732dc61ffe8d6a8a84193d8131b8b15537eef4ab216157e3fe1fe926c09c918d88696531f40b8658d367196f5cb62332bb9a807d","ssdeep":"6144:xN91p5+pVZVI27IVC3GvdVzE2LHdAjgTpXJvu5Zi:xxG3Eg3d2Lq8pXI5E","tlshash":"b13422d375248f08bf3998d309474949a4f2b59805b76e082bf469bede4df7e490b838","first_seen":"2023-05-21T10:12:10Z","last_seen":"2026-04-03T22:52:06.833254Z","times_seen":109,"resource_available":false,"data":null}},"time_used":1254,"timings":{"blocked":152,"dns":0,"connect":0,"send":0,"wait":675,"receive":427,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvideo.net/favicon.ico","fqdn":"zenvideo.net","domain":"zenvideo.net","tld":"net"},"ip":{"addr":"82.192.80.157","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zenvideo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 20:47:09 GMT","end":"Mon, 09 Feb 2026 20:47:08 GMT"},"fingerprint":{"sha1":"4F:38:B8:81:3D:2D:05:83:EA:D6:11:F4:91:36:7A:DD:5A:90:4D:62","sha256":"2D:9E:36:A8:C2:40:14:02:04:B5:63:7B:6D:7E:1A:FB:36:06:CC:DD:CB:1E:05:3A:DF:E2:3D:D1:A8:D8:E8:74"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: zenvideo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:35 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15086\r\nlast-modified: Wed, 13 Mar 2019 06:42:40 GMT\r\ncache-control: public,max-age=604800,immutable\r\nexpires: Sat, 10 Jan 2026 13:46:35 GMT\r\netag: \"5c88a660-3aee\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"03b7cf940ab3f32658cb0577bedc3d44","sha1":"8834997d6dde2aa153e81fe4035346563a58ce6f","sha256":"de557e9a785dc681246c4160a1662661e630216ef656bf45df1716009100f484","sha512":"c605cc22cf46e4a9dc3fbadbf1096d200b6faa6f9d74a60f53e849d03627768726fa945a91657c5103f04da9efed1b1180575db4f6173966b5c11c1e7ec66c0d","ssdeep":"48:j1jFiz/j34Oy0bq1Z1RZXl82CHCH4vcw0bHpETLhfSSSSSSSSSSSSSq55p30eqpW:jC/j34O41ZxXl82CxOHpsLj5pEexS9O","tlshash":"3e628a48e2f1a964d41744f3cc90edb14d143ca7b95e12c36d9afa6b2cf27d9422621e","first_seen":"2023-12-07T22:28:03Z","last_seen":"2026-04-22T17:26:51.463026Z","times_seen":148,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20251004-1/39876f9378a80986398147b2f9627e17.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"142.248.99.81","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 09:53:21 GMT","end":"Fri, 06 Mar 2026 09:53:20 GMT"},"fingerprint":{"sha1":"55:92:B5:BC:78:CB:75:63:3B:0F:C6:A3:DD:2D:2F:7C:FA:07:B7:4A","sha256":"02:67:5F:F2:7D:A5:B6:59:8F:77:98:9C:EF:94:84:1A:E6:C9:FC:6E:A7:27:06:47:BB:16:5D:BE:A9:91:90:79"}}},"request":{"raw":"GET /upload/vod/20251004-1/39876f9378a80986398147b2f9627e17.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11815\r\nlast-modified: Sat, 04 Oct 2025 04:20:48 GMT\r\nvary: Accept-Encoding\r\netag: \"68e0a0a0-2e27\"\r\nexpires: Thu, 29 Jan 2026 06:35:49 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 371439\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11815,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: \"Lavc61.3.100\", baseline, precision 8, 320x240, components 3","md5":"68f604560cdf7b41d9e4c69146919253","sha1":"e9f47378da654323fdc02e4feb1a462de5dd5253","sha256":"968b0ffd75224c74c6ba35fe0797a46686b6baa8186cb1c8282416a269c268af","sha512":"22961b2923930deeee1af25425dce424a364d0b82ba944a5e2f9fb180ceabae6df43daaf3cf98715980f67378429c4b55582e8843e531bf98c9fc7c331047bbd","ssdeep":"192:oLETo3eHGtnJ/sRJ+P0NedT1V59Qa9xk4BeIeVAiigbKAZl3448M:oL+oumBJERJ/8lj5aa9i4petLl34tM","tlshash":"cc32d01a93bf69cfedd0a2a175caa0353379e49017a57edb802b1458ae7c5c6f081433","first_seen":"2025-12-16T23:19:32.757869Z","last_seen":"2026-03-01T19:27:35.585247Z","times_seen":25,"resource_available":false,"data":null}},"time_used":1261,"timings":{"blocked":112,"dns":0,"connect":0,"send":0,"wait":673,"receive":476,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/0ef77719f0bbb119e4571076df3b4658/cover/5_505_259?ih=1","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"104.20.25.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:42:58 GMT","end":"Sat, 28 Feb 2026 05:41:39 GMT"},"fingerprint":{"sha1":"B4:BA:DA:BD:C3:AB:12:42:98:CF:30:EE:AC:A0:FA:D3:F0:9F:B6:F3","sha256":"52:F0:DB:63:D9:15:13:E1:B0:3F:18:E2:A8:9B:90:97:13:68:24:71:E9:DC:7B:CA:D9:C3:17:79:92:27:EE:B7"}}},"request":{"raw":"GET /videos/0ef77719f0bbb119e4571076df3b4658/cover/5_505_259?ih=1 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 23390\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Mar 2025 10:01:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"67c6cf96-5b5e\"\r\nexpires: Sat, 20 Dec 2025 05:10:59 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=7200\r\nt-cache: LHIT\r\naccept-ranges: bytes\r\nage: 3832532\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j4apUOlxq9wK3DFdGEYg9X6xGwx3n0HEj5fJ6sTLCNQjb31at1t%2BHVXI595f0tiJtginw7snO%2F%2F1jBGPHgxUyh5RxWZUa1dgXaNn\"}]}\r\ncf-ray: 9b82f15c28ea0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23390,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc56.60.100\", baseline, precision 8, 505x259, components 3","md5":"45a117ca6ed397fcfabf063acdd6d321","sha1":"fabd4c8148627abbe8075e3a8507886dae810faf","sha256":"094e512f2bed0fabb2a026f08053c3b25b3a8974c38c9758e4768a887eb3e1ed","sha512":"c9580f83dc8b30e2c16ea72716443dbb5a9ec0cda7c3fd587ea308da4937c2f2b43437cde069fb72ad0354b3ccc6c593b5cdc15c801c694dfde726b6accf263a","ssdeep":"384:992xP12FRVgOG1viFIM1jc21a7m9YITU5UMcXQwdrOvaq/oDnT3S6Q+29+H+5O1Q:Kr2pYeIOchmOI4yXFdCQTLzecK3","tlshash":"65b2af5b2d049587f12986a9fd87068d261d3a08f4577dff680b5ed6f6203ab1d4c02d","first_seen":"2025-05-21T16:17:32.682748Z","last_seen":"2026-03-02T07:55:32.786326Z","times_seen":90,"resource_available":false,"data":null}},"time_used":3625,"timings":{"blocked":3409,"dns":1,"connect":12,"send":0,"wait":16,"receive":0,"ssl":174},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"timg216.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.blacktowhite.net/favicon.ico","fqdn":"www.blacktowhite.net","domain":"blacktowhite.net","tld":"net"},"ip":{"addr":"192.243.63.82","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"blacktowhite.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Jul 2025 00:00:00 GMT","end":"Fri, 28 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"29:7F:D6:17:0A:55:E3:DB:E8:59:A0:3D:66:88:A5:35:86:B8:EF:80","sha256":"16:D2:4C:56:09:A6:4E:FB:DC:AF:6D:06:8A:B4:A7:96:B1:B5:E6:6B:82:A7:EE:D8:13:2C:AA:59:3C:FC:F0:43"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.blacktowhite.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.17.6\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 2951\r\nlast-modified: Mon, 21 Dec 2015 10:18:34 GMT\r\netag: \"5677d1fa-b87\"\r\nexpires: Sat, 17 Jan 2026 13:46:34 GMT\r\ncache-control: max-age=1209600\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.17.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2951,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"7f61d30e4ff36ab9f7cbc9e8b4e3feda","sha1":"54f81165e7d7130826fd6d87d85a39735c391698","sha256":"60e32d8ca6041d4eedc2e9abf1ef3f012e86a01ba7cccc3004ee934bafb22742","sha512":"42fa4ee29441191acee2ce05a65e79aeb40c77e94a7bfed5b9d45b7c0eb10e9f9abd245b06f7826eb052b70f0c8357b69aad9c4f461b4cbb031414a03b0c4bae","ssdeep":"","tlshash":"d2512ada37446612d76bb871ec1428736d9118cb096f6fa882774d346f795372814770","first_seen":"2024-06-16T03:37:38Z","last_seen":"2026-04-03T22:52:06.912979Z","times_seen":433,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenvideo.net/pixel.php?ads=1","fqdn":"zenvideo.net","domain":"zenvideo.net","tld":"net"},"ip":{"addr":"82.192.80.157","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zenvideo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 20:47:09 GMT","end":"Mon, 09 Feb 2026 20:47:08 GMT"},"fingerprint":{"sha1":"4F:38:B8:81:3D:2D:05:83:EA:D6:11:F4:91:36:7A:DD:5A:90:4D:62","sha256":"2D:9E:36:A8:C2:40:14:02:04:B5:63:7B:6D:7E:1A:FB:36:06:CC:DD:CB:1E:05:3A:DF:E2:3D:D1:A8:D8:E8:74"}}},"request":{"raw":"GET /pixel.php?ads=1 HTTP/1.1\r\nHost: zenvideo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":3821,"timings":{"blocked":3450,"dns":1,"connect":94,"send":0,"wait":23,"receive":0,"ssl":220},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg3.top/upload/vod/20240914-8/19d854ffbaf7ad180f4141885b48fe2f.jpg","fqdn":"fqjpg3.top","domain":"fqjpg3.top","tld":"top"},"ip":{"addr":"104.21.87.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fqjpg3.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 01:23:56 GMT","end":"Tue, 17 Feb 2026 02:21:34 GMT"},"fingerprint":{"sha1":"47:04:8A:FC:95:8E:AF:CA:2C:88:D4:F3:A4:B5:08:58:7E:71:14:DD","sha256":"D7:61:0E:39:39:38:53:AE:0D:C9:83:08:6B:D7:CC:57:B9:C1:33:2B:49:7D:B2:79:6D:7F:43:BB:63:B5:61:B2"}}},"request":{"raw":"GET /upload/vod/20240914-8/19d854ffbaf7ad180f4141885b48fe2f.jpg HTTP/1.1\r\nHost: fqjpg3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 521 No Reason Phrase\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6960\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9b82f15c2f505687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"521","status_text":"No Reason Phrase","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":3797,"timings":{"blocked":3428,"dns":1,"connect":12,"send":0,"wait":170,"receive":0,"ssl":178},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"fqjpg3.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg4.top/upload/vod/20250121-1/6286b8627628978ae223aa9708c84608.jpg","fqdn":"fqjpg4.top","domain":"fqjpg4.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.103Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /upload/vod/20250121-1/6286b8627628978ae223aa9708c84608.jpg HTTP/1.1\r\nHost: fqjpg4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":3765,"timings":{"blocked":3395,"dns":370,"connect":475,"send":0,"wait":0,"receive":0,"ssl":159},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"fqjpg4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"page.phic4.top/myda.php","fqdn":"page.phic4.top","domain":"phic4.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:32.228Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /myda.php HTTP/1.1\r\nHost: page.phic4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":5802,"timings":{"blocked":-1,"dns":5075,"connect":476,"send":0,"wait":0,"receive":0,"ssl":251},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"page.phic4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/favicon.ico","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"172.66.154.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 04:36:04 GMT","end":"Wed, 25 Mar 2026 05:35:57 GMT"},"fingerprint":{"sha1":"BC:E7:75:C9:BB:9B:AD:D7:E0:2E:DC:F0:A4:C8:05:1C:B7:B6:92:B1","sha256":"B2:D9:1D:E8:B9:C0:58:D2:30:D4:54:94:BC:FE:BF:BD:43:9E:C4:AF:71:CA:4A:6B:75:1A:1A:75:52:04:3E:7D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: accept-encoding\r\nage: 42\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9b82f16beee956be-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ru-trah.net/favicon.ico","fqdn":"ru-trah.net","domain":"ru-trah.net","tld":"net"},"ip":{"addr":"78.40.116.51","port":443,"asn":200019,"as":"Alexhost Srl","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ru-trah.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Nov 2025 02:34:43 GMT","end":"Wed, 18 Feb 2026 02:34:42 GMT"},"fingerprint":{"sha1":"64:07:3F:DF:D0:86:4C:78:9C:F1:4D:CC:B5:50:F7:52:89:43:1F:7D","sha256":"02:68:A9:33:C6:C3:56:13:C1:6E:89:A7:BB:49:3F:90:12:15:6B:8B:E4:D8:2C:74:E8:FC:EA:AB:87:CF:03:57"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ru-trah.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: openresty\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6ImtyLzlQdVpVOTUyWGU2YytQQ1hJS0E9PSIsInZhbHVlIjoiT01mTW1naDJ0ZEhxUElDZWhqNHdsY1FOOFc5NzRhNGNwMEFrSjVHUWhVSW5JbW95VlJvcC84dUErUCtIMVZtdFZqREtGZlNpZEl6YXozRTg4emFqRkZGQ3BCNHk2NVhNTmtpYmF2amlaT2V6K1VGeDEzb1VmYlBBLzhySUdsaFYiLCJtYWMiOiI0NThiNmE0MTFjM2IxNTVkOWFlNGQ1NzQ0YTY4NmQwODUwMDZiOWVhNjRhYzhmMWVhOTNiNjU3MWViZThjNDI4IiwidGFnIjoiIn0%3D; expires=Sat, 10 Jan 2026 13:46:34 GMT; Max-Age=604800; path=/; secure; samesite=lax\nlaravel_session=eyJpdiI6IjFXTE55cHl6NnRGMVc4dkRVeEZtNVE9PSIsInZhbHVlIjoiSG5WR2lIV2I1a1hibEYwUUlUeVhqbTFuOW9jTjZiQWZYcmJubUJuOUd1Q2JJNVMwQXhTMUJ5NzA5R2ZVVGZnNVdDK2FNRFhpclB4cSsxUERxUlRBaEFqRUxCd2Y0K1RiQ0FHM2FueFJ0L1lobW9aN0dwckMxNUIvbkl6NGtIaXUiLCJtYWMiOiIyZmNkOTE1NjY4YjI0MDc0ZjBmMTU4NzMwYTc0M2ZiNmIwMDM1Nzc1ZmY4ZjMwMTdhZWNhYjA3NDUwNThkYzRkIiwidGFnIjoiIn0%3D; expires=Sat, 10 Jan 2026 13:46:34 GMT; Max-Age=604800; path=/; secure; httponly; samesite=lax\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":594,"timings":{"blocked":314,"dns":59,"connect":18,"send":0,"wait":89,"receive":0,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241028-15/9c12b30a74a56b7ff6b019ea9275c352.jpg","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.628Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241028-15/9c12b30a74a56b7ff6b019ea9275c352.jpg HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.redd.it/5iborg64h0j21.jpg","fqdn":"i.redd.it","domain":"redd.it","tld":"it"},"ip":{"addr":"199.232.173.140","port":443,"asn":54113,"as":"FASTLY","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.redd.it","organization":"REDDIT, INC."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 24 Nov 2025 00:00:00 GMT","end":"Fri, 22 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"79:4C:DA:8B:18:9D:B5:BF:FE:65:BA:E5:6F:ED:02:CF:99:55:04:59","sha256":"FD:C1:DC:7D:59:C8:66:57:1A:A3:55:CF:41:73:AA:50:A1:1F:BC:7E:FB:AF:E1:8F:7F:E2:1D:38:C1:16:91:75"}}},"request":{"raw":"GET /5iborg64h0j21.jpg HTTP/1.1\r\nHost: i.redd.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 27 Feb 2019 01:10:03 GMT\r\netag: \"9dedb389c4b3daca1d6b15e6f2b1e6eb\"\r\nexpires: Thu, 31 Dec 2037 23:59:59 GMT\r\nx-amz-version-id: null\r\ncontent-type: image/jpeg\r\nx-canonical-filename-image-generation: 1\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\nserver: snooserv\r\nreport-to: {\"group\": \"w3-reporting-nel\", \"max_age\": 14400, \"include_subdomains\": true,  \"endpoints\": [{ \"url\": \"https://w3-reporting-nel.reddit.com/reports\" }]}, {\"group\": \"w3-reporting\", \"max_age\": 14400, \"include_subdomains\": true, \"endpoints\": [{ \"url\": \"https://w3-reporting.reddit.com/reports\" }]}, {\"group\": \"w3-reporting-csp\", \"max_age\": 14400, \"include_subdomains\": true, \"endpoints\": [{ \"url\": \"https://w3-reporting-csp.reddit.com/reports\" }]}\r\nnel: {\"report_to\": \"w3-reporting-nel\", \"max_age\": 14400, \"include_subdomains\": false, \"success_fraction\": 1.0, \"failure_fraction\": 1.0}\r\nx-reddit-cq: v=1,p=h2,rttm=8704,rtt=68605,rttv=51731\r\nalt-svc: h3=\":443\";ma=2592000;persist=1,h3-29=\":443\";ma=2592000;persist=1,h3-27=\":443\";ma=2592000;persist=1\r\ncontent-length: 135830\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":135830,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x1000, components 3","md5":"9dedb389c4b3daca1d6b15e6f2b1e6eb","sha1":"432afcc3b859cdaaf5b83cdf55c7945ca831bd5d","sha256":"9e91f757c62692cbccdc335b38d2e08b4415bd9ab0d50f3d6e5429f505f8c032","sha512":"2bb252dbd81ef3baa3245ef81fae6a9257f10a52a4e4598e5ac86f90fd733510423e7b71c2888b5d7b9064a6a939592e6eb9115919521ad11f2d2705f5271022","ssdeep":"3072:ZZsTz/a6pbCMHYqOMgIHqCPrF/BXQtv5OWVeeIw/tMZH:HsXLCM4igIKyrFiOClS","tlshash":"5bd312c9b936fe0adf882714057cce653a80d361b9a9ea1d57d0e4ab79c4c6d80dccc6","first_seen":"2024-12-10T06:27:48.794033Z","last_seen":"2026-01-08T04:21:04.500464Z","times_seen":39,"resource_available":false,"data":null}},"time_used":3861,"timings":{"blocked":3490,"dns":1,"connect":50,"send":0,"wait":11,"receive":36,"ssl":226},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/6/6139420f6bc5555f17be9796df6c8727a63e2ba0_2_606x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/optimized/2X/6/6139420f6bc5555f17be9796df6c8727a63e2ba0_2_606x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 101892\r\nlast-modified: Tue, 02 Sep 2025 05:10:39 GMT\r\nexpires: Sun, 03 Jan 2027 13:46:27 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":101892,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 606x1024, components 3","md5":"1aee78819ebc31a24a1a06819a12ef24","sha1":"32557dc15de38a3a8a6ae757023d40d53648e15b","sha256":"aa56259eb90e0768bdcd0e9410207961b21cf4482fc164a7788cb94d45b1c27e","sha512":"cc0bf2ee1ec6b239eaa9a40547b384dc5dd6803a694816f7a207858cfb466c3df8187e45660500cae394331306fbb5386e249c570cc05cfcb9508ec38865b461","ssdeep":"3072:wXMyGgVmg2yXbbSw0WCw3koka+cPcgso1eOG:iXV52ynSDkkla+P3o1DG","tlshash":"23a313ff3441e1b8b99794ddea5c0629c3db8c25280f6fe681d6d893f639b324834856","first_seen":"2025-10-07T20:08:38.49868Z","last_seen":"2026-03-01T19:27:35.398043Z","times_seen":39,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"fixedjs.4vid.top/av4usimage.png","fqdn":"fixedjs.4vid.top","domain":"4vid.top","tld":"top"},"ip":{"addr":"172.67.181.78","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.617Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /av4usimage.png HTTP/1.1\r\nHost: fixedjs.4vid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 03 Jan 2026 13:46:27 GMT\r\nContent-Type: image/png\r\nContent-Length: 2619\r\nConnection: keep-alive\r\nServer: cloudflare\r\nETag: \"a3b-6437702003080\"\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Cake\r\nCache-Control: public, max-age=360000\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jOFzhHxWNgXyLsuNdGHiddoKTEyV5BUwTV57NBbW%2F3ndClvN%2BvgmPMGGdxJ5v8PWL2VdF0jaHlwF7PUMpKugGwmZ%2BZ2kGQQ%2FK8rseicxdKo%3D\"}]}\r\nAge: 102354\r\ncf-cache-status: HIT\r\nVary: accept-encoding\r\nCF-RAY: 9b82f143ca5932fa-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2619,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 339 x 89, 8-bit/color RGB, non-interlaced","md5":"8267aaadeeeb8c9fa7482f2f9db2d4e3","sha1":"a2ef23d3b5f9d9bb3102c855a8ace072884ba60c","sha256":"998cf9d427c2e322904e89a056ba823b56078fb199b7395883f3eafabaadbea8","sha512":"719215d8ec70b8b36b24277a80e7876be2fa1afe3698c05bbff013b6a2936701f266e694c221756e7306d1a945013986a53e41af0bc90bdd4bbf0dcbe33f7637","ssdeep":"","tlshash":"f5513ccb05b2fdbc657d79976105a79ef3a896c72982b872565c38c14243a0096c1fe1","first_seen":"2025-11-13T21:07:01.541567Z","last_seen":"2026-04-22T17:26:51.423965Z","times_seen":363,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":187,"dns":30,"connect":2,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"fixedjs.4vid.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ds2.nashobmenfiles.com/fo/files_attachments/598/fe6/598fe6dbfaea88c2aeef0eeda4407f9c.jpg","fqdn":"ds2.nashobmenfiles.com","domain":"nashobmenfiles.com","tld":"com"},"ip":{"addr":"85.17.28.50","port":80,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:32.322Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /fo/files_attachments/598/fe6/598fe6dbfaea88c2aeef0eeda4407f9c.jpg HTTP/1.1\r\nHost: ds2.nashobmenfiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://en.av2.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 13:46:32 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 13381\r\nLast-Modified: Fri, 14 Jun 2024 05:25:05 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nETag: \"666bd431-3445\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13381,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"598fe6dbfaea88c2aeef0eeda4407f9c","sha1":"6a1bc1caa4866277044e443ce70d53f41fb315d6","sha256":"51a3c25cd0961d0648ccff58769503fc7b31d951d2ef1f3c8e5fa4e82478b359","sha512":"5bb8e393c8746b753fb6aebe6a3b7efdeb7b8506b260266f16619cf851d89ff80a778083c11dd9744d88f84dee176f4b5860f326b18e7e992104443b51fdf913","ssdeep":"384:dkCwHSXbOaoyXVZTw9eKBmKCX8vq8LGbRhgmu+:dkNHSbO27TKB4Efvml","tlshash":"b352c0b1722364fef8bd5ee2ba891ecda9c164043a6740cfebd4ac4f20487c5d419346","first_seen":"2024-05-04T17:08:11Z","last_seen":"2026-01-17T01:52:05.843648Z","times_seen":17,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":0,"dns":167,"connect":23,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ds2.nashobmenfiles.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mc.webvisor.org/watch/48140495/1?wmode=7\u0026page-url=http%3A%2F%2Fen.av2.top%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A1nmhispdoya1ro1ej5uutvpoh5pcv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2292%3Acn%3A1%3Adp%3A0%3Als%3A1639196238406%3Ahid%3A952214942%3Az%3A0%3Ai%3A20260103134631%3Aet%3A1767447992%3Ac%3A1%3Arn%3A549051279%3Arqn%3A1%3Au%3A1767447992351424928%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C226%2C450%2C0%2C%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1767447986843%3Afip%3A62236e752d3f7c5fd4f9360431331564-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-13a84b69804b2bddf31f36f8f1aa466f-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1767447992%3At%3AHot%20Videos%20%E4%BA%BA%E6%B0%97%E5%8B%95%E7%94%BB--VIDEOS%40AV4.us\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2842534404%29fip%281%29ti%281%29\u0026redirnss=1","fqdn":"mc.webvisor.org","domain":"webvisor.org","tld":"org"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:32.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.webvisor.com","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 18 Aug 2025 21:05:34 GMT","end":"Mon, 09 Feb 2026 20:59:59 GMT"},"fingerprint":{"sha1":"52:51:83:17:11:3C:6A:D0:47:28:FB:42:75:CF:6A:DA:48:B5:5A:C8","sha256":"69:B8:8D:9D:77:CB:F9:C7:48:04:E2:8C:99:28:7C:EF:5E:C7:2B:43:D6:52:7B:21:D2:99:F6:86:18:A6:0F:80"}}},"request":{"raw":"GET /watch/48140495/1?wmode=7\u0026page-url=http%3A%2F%2Fen.av2.top%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A1nmhispdoya1ro1ej5uutvpoh5pcv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2292%3Acn%3A1%3Adp%3A0%3Als%3A1639196238406%3Ahid%3A952214942%3Az%3A0%3Ai%3A20260103134631%3Aet%3A1767447992%3Ac%3A1%3Arn%3A549051279%3Arqn%3A1%3Au%3A1767447992351424928%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C226%2C450%2C0%2C%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1767447986843%3Afip%3A62236e752d3f7c5fd4f9360431331564-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-13a84b69804b2bddf31f36f8f1aa466f-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1767447992%3At%3AHot%20Videos%20%E4%BA%BA%E6%B0%97%E5%8B%95%E7%94%BB--VIDEOS%40AV4.us\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2842534404%29fip%281%29ti%281%29\u0026redirnss=1 HTTP/1.1\r\nHost: mc.webvisor.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://en.av2.top\r\nReferer: http://en.av2.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yabs-sid=1526310851767447992; i=p/CVqpA4GnsdqvTdT/8lED+szQUoaOsik2m6y3rbfTK8t1kw8QvsdTEGT0BgpUGjmXhdS6aDh4toNreIVY3nm5CWnYk=; yandexuid=1232065521767447992; yuidss=1232065521767447992; ymex=1798983992.yrts.1767447992#1798983992.yrtsi.1767447992; bh=YLi75MoGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 647\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Sat, 03-Jan-2026 13:46:32 GMT\r\npragma: no-cache\r\naccess-control-allow-origin: http://en.av2.top\r\nstrict-transport-security: max-age=31536000\r\ncontent-type: application/json; charset=utf-8\r\nx-content-type-options: nosniff\r\nexpires: Sat, 03-Jan-2026 13:46:32 GMT\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":647,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ecebcf9b8423c910dc33b1ab525edea4","sha1":"8679a62ea984507c26e95eedaca482369cf5125a","sha256":"04b5b7de2a5163a15a978e96352ad323c12ce8841193acc207cba383f96c8dda","sha512":"32901a380900650da3d4aa1196c563df4d540983f3e94dc2942ed322e3386767d6f85ad49e3372cced9621f9777079fb76e0dad7ed6f0afdfc8e515895825825","ssdeep":"","tlshash":"e6f0680ab81d41336a57251189af2669704d3015ee813bd03b02d141ec8fd1a3247220","first_seen":"2026-01-03T13:47:52.874464Z","last_seen":"2026-01-03T13:47:52.874464Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sex18.photos/favicon.ico","fqdn":"sex18.photos","domain":"sex18.photos","tld":"photos"},"ip":{"addr":"31.10.5.97","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sex18.photos","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV SSL CA 2","organization":"GoGetSSL"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F2:8D:82:A7:4F:67:09:54:3A:C7:FB:43:7F:FF:9F:1D:BA:6D:9D:FA","sha256":"A2:B9:7D:5C:92:40:0D:CE:9D:F9:A7:FC:6C:F7:23:A8:9A:37:75:1F:AA:82:DA:7A:74:16:31:83:47:40:01:B5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sex18.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 13:46:34 GMT\r\nContent-Type: text/html; charset=WINDOWS-1251\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=WINDOWS-1251","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":663,"timings":{"blocked":397,"dns":173,"connect":17,"send":0,"wait":17,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/e/e2e5a742c8037f8ff5a3ad634f0c692a91d93795_2_560x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/optimized/2X/e/e2e5a742c8037f8ff5a3ad634f0c692a91d93795_2_560x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 58390\r\nlast-modified: Tue, 26 Aug 2025 20:04:20 GMT\r\nexpires: Sun, 03 Jan 2027 13:46:28 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58390,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 560x1024, components 3","md5":"fa07f7d9aa40c0a68e679cc6f614d56d","sha1":"4d9e9ed7699ba9e8134cda229b0e2577f4834371","sha256":"9410c77f8942988455a4708ef4321086654a976ddd9493f6afdb2cd698211222","sha512":"3bcfc4f99c3a0cc2c014bc85b86d5f758f0ba8e02aac571ce92a9d8d58bff8c4f21f7a11bd1ba17e6a6e015c0411f2e6d55f2035dcc6a1d01c42b2a1966a4dd6","ssdeep":"1536:wnLewOVqEKbbagYG54jhTC7ARMsDesS0KGKVgYu:wLaVqXbba64Be/XUiDu","tlshash":"eb4302bb6672dd9f6ee5c2ee2db76f5874d611dc968b085b04eaa13aadc33031740201","first_seen":"2025-11-01T07:17:39.804226Z","last_seen":"2026-01-19T20:25:46.27534Z","times_seen":11,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ero-scen.ru/favicon.ico","fqdn":"ero-scen.ru","domain":"ero-scen.ru","tld":"ru"},"ip":{"addr":"193.163.7.2","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pornohub24.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 18:18:01 GMT","end":"Wed, 25 Mar 2026 18:18:00 GMT"},"fingerprint":{"sha1":"DC:D3:1F:AB:D2:14:DD:CF:05:41:E4:4A:16:4D:82:66:8C:25:19:81","sha256":"58:74:72:AB:E3:FF:EF:55:EE:BD:4C:F0:70:05:9C:9A:38:0E:53:11:6D:A8:DC:83:AF:4B:B1:F5:8A:F1:34:46"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ero-scen.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx/1.24.0\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 274\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blumpkintube.com/thumbs/384/444_nice_pot.jpg","fqdn":"blumpkintube.com","domain":"blumpkintube.com","tld":"com"},"ip":{"addr":"172.67.148.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blumpkintube.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:29:09 GMT","end":"Fri, 06 Mar 2026 22:25:31 GMT"},"fingerprint":{"sha1":"F0:75:18:71:3B:57:62:7E:D0:B3:6D:BB:CB:8B:B7:85:4A:62:A2:F9","sha256":"83:20:32:82:21:E4:38:2F:12:C3:85:A8:D6:B1:D1:E0:F4:EF:92:1B:D2:51:B1:35:BB:20:DF:AC:53:43:CA:F8"}}},"request":{"raw":"GET /thumbs/384/444_nice_pot.jpg HTTP/1.1\r\nHost: blumpkintube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16202\r\nserver: cloudflare\r\nlast-modified: Sun, 27 Sep 2020 07:25:31 GMT\r\netag: \"5f703e6b-3f4a\"\r\nexpires: Mon, 21 Dec 2026 06:51:01 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1148132\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P5m%2BPTYK2k78LeX7P3HGChaqdtuUUPN0CxHhnRKuo3EMU5cVgxx5fYSgyLG9vjWdAQxT0m3rgCUoatE3DrsLHnsZwuoJUuSgMHMXN3bf\"}]}\r\ncf-ray: 9b82f165abc9b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16202,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 312x208, components 3","md5":"f67b16e8b5a12e3c946499d029239c1b","sha1":"3a916169912777abb373d6ca9a4c70f63b98c2e2","sha256":"8af9b888ed7c9db0dbdb76ecf8c1d698678df5239db225e904cc46cd32bb9e4a","sha512":"c6b1aaf816140ad09083fe5ef972b517bb3b9f5d60e4ee2c6e553f1f984131d042b41a01ab7f77a3135bd3a1ec3dc51b17d7a67be9ecc1c1b05c44ee75a0a190","ssdeep":"384:UfuG0WRm9glM5Ta+vwBWD6t9VhwiA++ZGB0lAhk5:uu5Im9glM5p4cGVhwV+lB0v","tlshash":"b872c01646aed8c0fb843e34d8655df0538cb8f723d75b86ccca7e1442c42851faa269","first_seen":"2024-04-24T09:51:30Z","last_seen":"2026-03-01T22:32:14.151768Z","times_seen":56,"resource_available":false,"data":null}},"time_used":5294,"timings":{"blocked":-1,"dns":5271,"connect":1,"send":0,"wait":6,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.webvisor.org/watch/48140495?wmode=7\u0026page-url=http%3A%2F%2Fen.av2.top%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A1nmhispdoya1ro1ej5uutvpoh5pcv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2292%3Acn%3A1%3Adp%3A0%3Als%3A1639196238406%3Ahid%3A952214942%3Az%3A0%3Ai%3A20260103134631%3Aet%3A1767447992%3Ac%3A1%3Arn%3A549051279%3Arqn%3A1%3Au%3A1767447992351424928%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C226%2C450%2C0%2C%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1767447986843%3Afip%3A62236e752d3f7c5fd4f9360431331564-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-13a84b69804b2bddf31f36f8f1aa466f-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1767447992%3At%3AHot%20Videos%20%E4%BA%BA%E6%B0%97%E5%8B%95%E7%94%BB--VIDEOS%40AV4.us\u0026t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(42534404)fip(1)ti(1)","fqdn":"mc.webvisor.org","domain":"webvisor.org","tld":"org"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:32.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.webvisor.com","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 18 Aug 2025 21:05:34 GMT","end":"Mon, 09 Feb 2026 20:59:59 GMT"},"fingerprint":{"sha1":"52:51:83:17:11:3C:6A:D0:47:28:FB:42:75:CF:6A:DA:48:B5:5A:C8","sha256":"69:B8:8D:9D:77:CB:F9:C7:48:04:E2:8C:99:28:7C:EF:5E:C7:2B:43:D6:52:7B:21:D2:99:F6:86:18:A6:0F:80"}}},"request":{"raw":"GET /watch/48140495?wmode=7\u0026page-url=http%3A%2F%2Fen.av2.top%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A1nmhispdoya1ro1ej5uutvpoh5pcv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2292%3Acn%3A1%3Adp%3A0%3Als%3A1639196238406%3Ahid%3A952214942%3Az%3A0%3Ai%3A20260103134631%3Aet%3A1767447992%3Ac%3A1%3Arn%3A549051279%3Arqn%3A1%3Au%3A1767447992351424928%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C226%2C450%2C0%2C%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1767447986843%3Afip%3A62236e752d3f7c5fd4f9360431331564-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-13a84b69804b2bddf31f36f8f1aa466f-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1767447992%3At%3AHot%20Videos%20%E4%BA%BA%E6%B0%97%E5%8B%95%E7%94%BB--VIDEOS%40AV4.us\u0026t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(42534404)fip(1)ti(1) HTTP/1.1\r\nHost: mc.webvisor.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://en.av2.top/\r\nOrigin: http://en.av2.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nx-xss-protection: 1; mode=block\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nlocation: /watch/48140495/1?wmode=7\u0026page-url=http%3A%2F%2Fen.av2.top%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A1nmhispdoya1ro1ej5uutvpoh5pcv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2292%3Acn%3A1%3Adp%3A0%3Als%3A1639196238406%3Ahid%3A952214942%3Az%3A0%3Ai%3A20260103134631%3Aet%3A1767447992%3Ac%3A1%3Arn%3A549051279%3Arqn%3A1%3Au%3A1767447992351424928%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C226%2C450%2C0%2C%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1767447986843%3Afip%3A62236e752d3f7c5fd4f9360431331564-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-13a84b69804b2bddf31f36f8f1aa466f-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1767447992%3At%3AHot%20Videos%20%E4%BA%BA%E6%B0%97%E5%8B%95%E7%94%BB--VIDEOS%40AV4.us\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2842534404%29fip%281%29ti%281%29\u0026redirnss=1\r\nexpires: Sat, 03-Jan-2026 13:46:32 GMT\r\nset-cookie: yabs-sid=1526310851767447992; Path=/; SameSite=None; Secure\ni=p/CVqpA4GnsdqvTdT/8lED+szQUoaOsik2m6y3rbfTK8t1kw8QvsdTEGT0BgpUGjmXhdS6aDh4toNreIVY3nm5CWnYk=; Expires=Tue, 01-Jan-2036 13:46:32 GMT; Domain=.webvisor.org; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=1232065521767447992; Expires=Tue, 01-Jan-2036 13:46:32 GMT; Domain=.webvisor.org; Path=/; Secure; SameSite=None\nyuidss=1232065521767447992; Expires=Sun, 03-Jan-2027 13:46:32 GMT; Domain=.webvisor.org; Path=/; SameSite=None; Secure\nymex=1798983992.yrts.1767447992#1798983992.yrtsi.1767447992; Expires=Sun, 03-Jan-2027 13:46:32 GMT; Domain=.webvisor.org; Path=/; SameSite=None; Secure\nbh=YLi75MoGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.webvisor.org; Expires=Sun, 07 Feb 2027 13:46:32 GMT; SameSite=None; Secure\nbh=YLi75MoGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.webvisor.org; Expires=Sun, 07 Feb 2027 13:46:32 GMT; SameSite=None; Secure\r\naccess-control-allow-credentials: true\r\nlast-modified: Sat, 03-Jan-2026 13:46:32 GMT\r\naccess-control-allow-origin: http://en.av2.top\r\nstrict-transport-security: max-age=31536000\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":647,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":0,"dns":3,"connect":47,"send":0,"wait":49,"receive":0,"ssl":183},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"indianpornbase.com/favicon.ico","fqdn":"indianpornbase.com","domain":"indianpornbase.com","tld":"com"},"ip":{"addr":"192.243.50.110","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"indianpornbase.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 28 Nov 2025 00:00:00 GMT","end":"Thu, 26 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:68:68:0E:D5:B0:96:08:86:F7:E1:D8:1A:D1:D4:C1:0E:A3:4F:22","sha256":"AD:30:12:D7:EE:76:92:E2:07:EE:7F:85:35:A7:34:12:3E:AC:7A:3D:BC:4F:16:08:14:00:18:C6:A4:58:18:71"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: indianpornbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: openresty\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":652,"timings":{"blocked":198,"dns":164,"connect":93,"send":0,"wait":93,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xvideosrei.com/favicon.ico","fqdn":"xvideosrei.com","domain":"xvideosrei.com","tld":"com"},"ip":{"addr":"54.38.46.215","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xvideosrei.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 15:43:28 GMT","end":"Sun, 15 Mar 2026 15:43:27 GMT"},"fingerprint":{"sha1":"FD:95:23:36:47:33:25:61:BE:F2:AF:59:55:D2:67:E4:8D:31:E7:3A","sha256":"2A:C6:21:8D:B3:18:DE:A4:68:63:F5:A4:A3:FA:F4:1E:F4:04:23:36:7E:4C:EC:00:28:2A:35:4A:FA:46:4A:F6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xvideosrei.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: openresty\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html; charset=utf-8\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ansuko.net/wp-content/uploads/2024/12/2-3.jpg","fqdn":"ansuko.net","domain":"ansuko.net","tld":"net"},"ip":{"addr":"104.21.54.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansuko.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:34:35 GMT","end":"Fri, 06 Mar 2026 14:32:54 GMT"},"fingerprint":{"sha1":"F4:E3:EF:30:48:D7:B3:40:2B:D3:E1:F5:14:F6:72:5B:FB:0B:94:DF","sha256":"1D:46:63:21:32:DB:DE:81:F7:49:23:17:0A:76:2A:6E:F6:89:3C:51:B8:65:66:A9:DA:9E:D5:EA:3A:BB:08:D7"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/2-3.jpg HTTP/1.1\r\nHost: ansuko.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1409729\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nlast-modified: Thu, 18 Dec 2025 06:11:01 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z9qHgF9%2FO%2BcW5GBEEGotxgHvxfQ4yvH%2BqrRbdS3AtIDrTnB2dScOWj%2BHIPU%2FNOTKtJqokYAkrQwWft7LQ7RHoBMytfmcnDDJ\"}]}\r\ncf-ray: 9b82f15c886e56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20551,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 300x226, components 3","md5":"ba40a8a08c97558c6076219888f5ad91","sha1":"4e627e6da2f487774337c1ec85c67a011ddcff87","sha256":"99da6bdd6d1e63fa6fd834c1ad44ed73287113bc88e1e9886a30c8f17a89ddea","sha512":"1e9d59cf2e6bd8679670acfde3e44b849ed7642179457eede94893b7389aa54fbf87ed469080c51e581c1a2c27666b8499b1d106464c0e050734cda7e6d73e02","ssdeep":"384:yM40f3HgmVXoeKX2xYj+2DcWP6jNPR9kfY7wISH+GE6U25qR09Y2+wfCpuRCjZvn:y0Xf5fKX2xYj+2YWiZgY7faE6r5rY2+D","tlshash":"f992bfb565d7d2c0b757d0fb822e7d33e7a349c079e8028b26d36ca4284aab491074bc","first_seen":"2025-11-07T18:16:50.512581Z","last_seen":"2026-01-15T23:30:06.732337Z","times_seen":24,"resource_available":false,"data":null}},"time_used":3747,"timings":{"blocked":3478,"dns":1,"connect":13,"send":0,"wait":9,"receive":0,"ssl":217},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vq50.com/vs/97256577.jpg","fqdn":"vq50.com","domain":"vq50.com","tld":"com"},"ip":{"addr":"172.67.139.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vq50.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 12:44:06 GMT","end":"Mon, 09 Feb 2026 13:42:45 GMT"},"fingerprint":{"sha1":"92:49:4F:5C:FD:AA:B1:99:B5:32:2C:80:15:7B:38:7C:01:91:C6:E7","sha256":"5C:8B:5D:CD:E7:00:3C:A7:D4:8B:97:01:36:C0:19:F5:05:80:97:6A:7B:C5:7C:62:A4:4E:49:8B:E6:AB:17:63"}}},"request":{"raw":"GET /vs/97256577.jpg HTTP/1.1\r\nHost: vq50.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 95119\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Mar 2024 10:43:23 GMT\r\netag: \"65e848cb-1738f\"\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 5115\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OijpjrFCJXJ29Te0d3k%2BHnnKwrfjn1VkFZtpuABbMbyG1iFYxpsY9GGKk2Zhn3%2FY%2Bovz5y%2B7liW5PG6rIp9bqTWL18wNNzI9\"}]}\r\ncf-ray: 9b82f15c9e985a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95119,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1280x720, components 3","md5":"51804ab4d76a4d67f5fc81601a5249a6","sha1":"df59d4e43d609c4eb95f87821dc3a1db55bcac8f","sha256":"d0b0318c7cd784da0f10cdb9c41ca3ab82ee4558e1771e1742bfdf6402405ee1","sha512":"b78369a5921ed55de703e960bd31de883d213ed38e75afc8923683aa03ba747f34ce123ddb9e4f39ce35bc36c09b158895a86a1524fc1141ae700c0cc801c48f","ssdeep":"1536:VXxhvRkT7uHNvr0C/Ax8gtSWCQdEswNtl8j5alk3t37lyqW3TOjfTDC/bqb0DVO5:1ZBNv7QLpEdlkd3t37lyqW3TOjnQqwD4","tlshash":"f1931252c35b69a09c992132804ad7c4ad19cb9bfdf49489f01d9ab2c5733fd3a71c8a","first_seen":"2025-06-23T12:48:32.345841Z","last_seen":"2026-02-25T10:38:27.108233Z","times_seen":56,"resource_available":false,"data":null}},"time_used":3742,"timings":{"blocked":3451,"dns":1,"connect":14,"send":0,"wait":9,"receive":5,"ssl":233},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.apian088.sbs/sp/media/videos/tmb/2362/16.jpg","fqdn":"img.apian088.sbs","domain":"apian088.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apian088.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 12:00:16 GMT","end":"Sat, 14 Feb 2026 12:44:47 GMT"},"fingerprint":{"sha1":"81:62:5B:8E:F8:D6:89:63:71:73:E3:18:57:53:27:65:B5:AD:00:32","sha256":"1E:DA:15:FE:0A:FF:52:03:D1:A0:EE:60:AD:2A:3A:55:0D:CD:56:3F:75:52:A1:90:E2:E7:70:D3:2A:15:12:5E"}}},"request":{"raw":"GET /sp/media/videos/tmb/2362/16.jpg HTTP/1.1\r\nHost: img.apian088.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12554\r\nserver: cloudflare\r\nlast-modified: Sat, 23 Mar 2024 12:20:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65fec928-310a\"\r\naccept-ranges: bytes\r\nage: 2780702\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cwR04H46ysW2NN1sNfDUYmRWGlqMXYqkjzw2bf4fO3Wn9m9JUXNLioi95dAJIEcbTcWvc39GhV0rGaCk%2Fnz1HwQhUh%2BwpvRrm0I6rJS5\"}]}\r\ncf-ray: 9b82f144ed7e56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12554,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 384x214, components 3","md5":"cbe71119b0378551bf382b305c26f172","sha1":"ec13554454e4ae51f06fe40281e86852bd007a3e","sha256":"12943d3aa28513a622cf9932cf2810ca69abb8fd86f5fdcf6e56484ccc68015d","sha512":"5e35b296ca9d0f3b2b83bbd761e57dc2aaedc981f848825cd59911de51d47e3d5bbd113e627bcb1bf06b4eb92bec5fb31d5c6e04decc09b008a25313b578a128","ssdeep":"384:TrbbQ1ym+rfy2kvZ7YoFstUr5BLAgMWFOpCL:TnsZ++vHitKTPmC","tlshash":"c642bfc3566a03cafb20abdee54d9e0254db5b1a8cbcaf1d2ee128459d49292d80c55c","first_seen":"2024-04-18T22:19:43Z","last_seen":"2026-03-03T09:47:10.803202Z","times_seen":143,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidmo.pro/thumbs_320/b9/c5/b9c54afe8bc33bbc89b6116b0af402e2/13129133.jpg","fqdn":"vidmo.pro","domain":"vidmo.pro","tld":"pro"},"ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"en.vidmo.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 20:48:10 GMT","end":"Thu, 19 Feb 2026 20:48:09 GMT"},"fingerprint":{"sha1":"B8:8B:9C:2B:E9:53:D3:85:0E:57:74:8D:32:07:72:DF:38:F3:91:DA","sha256":"9B:B3:9F:DD:FB:1B:36:C3:04:60:BF:DF:87:AA:AB:5D:F6:0D:45:20:77:9B:29:19:5F:C4:B6:F1:04:C9:23:3E"}}},"request":{"raw":"GET /thumbs_320/b9/c5/b9c54afe8bc33bbc89b6116b0af402e2/13129133.jpg HTTP/1.1\r\nHost: vidmo.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2109\r\nlast-modified: Sun, 23 May 2021 10:13:20 GMT\r\nexpires: Wed, 28 Feb 2024 10:43:01 GMT\r\ncache-control: max-age=604800, public, no-transform\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2109,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 320 x 180","md5":"b821c47ee08f7fd51b6a722c9d26ffc8","sha1":"b8b9faf9973ffbf04a873bc074cf32fcd34808e0","sha256":"47bec154eccb056f2543630ad753926b273de0824ad923fbddda32c97459e94f","sha512":"635dac58d40715b94b070e382efaf349c768f92b47988924e0e8f38bcc9712fceef92c9646195dd48ac91c1ec87aeebbf5a67dd7e657089b7bdcfd0091535f2e","ssdeep":"","tlshash":"0b41092686ba8daaf92300b3fa9402f1ec1c8e3d43c155e0f854c0d67a5a35d55b62a4","first_seen":"2025-06-30T08:49:08.632611Z","last_seen":"2026-03-02T07:55:32.76293Z","times_seen":43,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pornlulu.com/images/node/377/3776471.avif?1753307098","fqdn":"www.pornlulu.com","domain":"pornlulu.com","tld":"com"},"ip":{"addr":"104.21.34.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornlulu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 02:28:25 GMT","end":"Sun, 15 Mar 2026 03:26:05 GMT"},"fingerprint":{"sha1":"21:3C:EB:41:61:4C:C0:6F:23:6D:03:4C:C0:05:64:E3:E7:CF:76:88","sha256":"4F:C5:D0:1A:A3:61:D0:60:E7:1B:A3:7D:20:4B:DF:41:88:1F:B0:8A:19:A0:8C:8C:2C:85:A1:22:29:BB:C5:F5"}}},"request":{"raw":"GET /images/node/377/3776471.avif?1753307098 HTTP/1.1\r\nHost: www.pornlulu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/avif\r\ncontent-length: 7472\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"688157da-1d30\"\r\nexpires: Sat, 03 Jan 2026 14:04:17 GMT\r\nlast-modified: Wed, 23 Jul 2025 21:44:58 GMT\r\nnow-time: Sunday, 28-Dec-2025 14:53:19 GMT\r\nserver: cloudflare\r\nx-cache: BYPASS\r\nx-date: Sunday, 28-Dec-2025 14:53:19 GMT\r\nx-host: www.pornlulu.com\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2533\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xTd7Ro%2FotRVX9ufv0buqhYoYuCRhGeXCRK4QDMjXoWxBkxxqGprYlQ3aUnUEhSnzWZkucriLqKY7oaQQAkdDer8LQy4tf3YmmNE8B9iurHU%3D\"}]}\r\ncf-ray: 9b82f15c49c34e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7472,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"0ec6f03352f6d3b4551e7310b03fa59d","sha1":"082dddc61a1220627ee4260149fb6e59299a89ac","sha256":"2faf4cf5a39de8d31d12e6dc296bf7de8d98169a01da3014181b8d24047946fc","sha512":"17b61ffb353819ccb7f68abb5a47854863c27a9cdf631bbb17a91a5d67095db6925b1e6709157c2bb6ee375da2898aa7f4a76b68b1c3f29019f4383fe4f95b5e","ssdeep":"192:+WINLsSJNJBALbblt8oiuCW27Ud/fAwo7SsRlgg+Jc:3SdWfblmP7U8JXgu","tlshash":"2cf1902835691e8ff206317c000985117686e2dba66fb77f4e3b420cc5dc59bcd55c5e","first_seen":"2025-12-30T08:48:51.974348Z","last_seen":"2026-03-03T14:10:03.990079Z","times_seen":55,"resource_available":false,"data":null}},"time_used":3716,"timings":{"blocked":3481,"dns":1,"connect":12,"send":0,"wait":11,"receive":0,"ssl":180},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.peppahub.com/thumbs/08/12/08122cdec03cd738468fd070361d50d7.0.jpg","fqdn":"st.peppahub.com","domain":"peppahub.com","tld":"com"},"ip":{"addr":"51.75.130.124","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"st.peppahub.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 21:53:48 GMT","end":"Sat, 28 Feb 2026 21:53:47 GMT"},"fingerprint":{"sha1":"5C:E4:C3:4C:3F:DC:78:13:D7:FE:13:55:FE:D6:90:73:F8:F2:9D:CD","sha256":"10:AE:42:0C:C1:6C:FF:1A:9B:7F:59:DF:D8:A8:E8:35:08:95:5E:C9:9E:9C:19:54:57:23:56:C1:BD:7C:7D:E1"}}},"request":{"raw":"GET /thumbs/08/12/08122cdec03cd738468fd070361d50d7.0.jpg HTTP/1.1\r\nHost: st.peppahub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 13:46:31 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 16577\r\nConnection: keep-alive\r\nLast-Modified: Sat, 28 Mar 2020 03:20:08 GMT\r\nETag: \"5e7ec268-40c1\"\r\nExpires: Sun, 03 Jan 2027 13:46:31 GMT\r\nCache-Control: max-age=31536000, public, immutable\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16577,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x180, components 3","md5":"cd4ef0873eb59f6f4e552021f2d3bef7","sha1":"4ac27ea4ab0d1c452c67e2fe6d3f315a7cc833ad","sha256":"ab640ec9ced55482775da4b28d5f9c98f74ee97af75f7dd93bc100fcf81b692c","sha512":"8208b255927950f260bff669f78598ff3f3b2e4573e5b7044dce1a2aa080568d55fc2f2e02e037588bcf4ad17f62bd75ebaf5366c67eae61002cfed6c79b12d4","ssdeep":"384:dqXnlV+PpQUqlAvEUB2cpj6tkv2tyZ5OlPal37U:EV+QlAv9jJ2O4lPalA","tlshash":"1e72b0997e051cc8f2254dbfe7147d8c33f6a2f260ae17920bc089dd6e2e1c89921f64","first_seen":"2024-06-04T02:45:51Z","last_seen":"2026-01-24T19:30:50.767453Z","times_seen":13,"resource_available":false,"data":null}},"time_used":3789,"timings":{"blocked":3402,"dns":1,"connect":84,"send":0,"wait":43,"receive":1,"ssl":219},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/original/1X/0a0c05d9fc15611b17270ca5a99d6da6de91fc23.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/original/1X/0a0c05d9fc15611b17270ca5a99d6da6de91fc23.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14266\r\nlast-modified: Mon, 14 Apr 2025 02:38:36 GMT\r\nexpires: Sun, 03 Jan 2027 13:46:27 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14266,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x178, components 3","md5":"bc2d4fb2972ad022c9fae76fdeb6d30c","sha1":"0a0c05d9fc15611b17270ca5a99d6da6de91fc23","sha256":"04ac0af1660e642fe29cf1157f1f7d907d3ca7d71ee7b50384e32ffb663ce952","sha512":"876460d46b570eb9ccc3dfac82d0142aa31c526eb31099a1681269e84c4350d8f46fb9bfa8050a742e3b152052b5d51b991c9f3afc1844f0f304510399831c88","ssdeep":"192:uV9g0KdOTWvZha7NucwOFkrlSFB1Nokj4lTwrTH5D7EoF7qHBJJGFSY6lgRJXWUi:uVi+UZha0ZOVB1Nokj8TiB1FAJzSIX9","tlshash":"fa52bf7642e319d4fdbb4072ff4a5f8b8af2974d4139e00a61c14592a6f862846f7a8c","first_seen":"2025-08-05T22:57:37.394461Z","last_seen":"2026-03-03T09:47:10.867145Z","times_seen":24,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"159i.net/uploads/allimg/2501/D-0101103310PaLc29595.jpg","fqdn":"159i.net","domain":"159i.net","tld":"net"},"ip":{"addr":"104.21.68.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"159i.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 10:41:42 GMT","end":"Wed, 11 Feb 2026 11:39:18 GMT"},"fingerprint":{"sha1":"B3:A5:30:B2:B7:22:58:8C:B7:42:E3:BE:DB:E3:E6:CC:4E:D9:F1:76","sha256":"1F:28:A1:B8:F6:B6:FA:3A:44:F5:D0:2A:BA:55:AE:E1:3A:D4:B8:27:F2:0C:FC:32:BE:39:46:72:C2:57:6F:8D"}}},"request":{"raw":"GET /uploads/allimg/2501/D-0101103310PaLc29595.jpg HTTP/1.1\r\nHost: 159i.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 60714\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 14 Mar 2025 16:33:15 GMT\r\naccept-ranges: bytes\r\nage: 4170\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LGRMIFy%2FAeJRflxf6MG1csZKjsrx54Q9uNaVRTbVtdjWRWXDXAg5sO%2B979Mb27wit4B2N6gqDRgW%2FTjTHstNqPmFUKkR%2Btej\"}]}\r\ncf-ray: 9b82f15c58b68deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60714,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 718x404, components 3","md5":"ae8dd44f78c311ecc3c3c6b1242a5af6","sha1":"f61be9d89a5b636010235fddb442a880e2a23318","sha256":"eba25bf577a6f8b8662be6274fe9567dd77f7d886b646b90a01569912ecd8dc8","sha512":"26cf4869e9d8dcd731ade5d7798a8fc115e7c103afe43b3bad23a4a3df91c1d6b94c73faaa48143cd0025ed15d17097c39a78f6ffacafe403c72ae9feba14a55","ssdeep":"1536:x1QFFxzR9z7dLFc2pYoSCpvgq48VnOFLtBl7:H0xzRt7fcdoXO5tv7","tlshash":"4353022f749701e781c8e683109852e53644264a7e739fde2862f919df900ebe374ef6","first_seen":"2025-06-06T21:49:11.291544Z","last_seen":"2026-04-03T21:47:16.517587Z","times_seen":86,"resource_available":false,"data":null}},"time_used":3691,"timings":{"blocked":3440,"dns":1,"connect":12,"send":0,"wait":16,"receive":1,"ssl":200},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumb.aporntv.com/thumbs/5/e/8/2/4/5e81bd92cabdeREAL%20Dad%20and%20Daughter%20Home%20Alone..mp4/5e81bd92cabdeREAL%20Dad%20and%20Daughter%20Home%20Alone..mp4-3.jpg","fqdn":"thumb.aporntv.com","domain":"aporntv.com","tld":"com"},"ip":{"addr":"104.26.1.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aporntv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Dec 2025 20:17:34 GMT","end":"Sat, 14 Mar 2026 20:17:33 GMT"},"fingerprint":{"sha1":"9D:78:6E:E7:87:A1:D6:C8:DF:57:DC:5B:73:AB:6A:E5:9F:AD:26:EA","sha256":"C1:29:AA:89:1A:D5:B1:EA:BC:3A:90:73:1F:73:C9:77:CF:50:6D:E6:2A:8C:3A:DC:89:6D:F0:A9:B6:E8:E8:0F"}}},"request":{"raw":"GET /thumbs/5/e/8/2/4/5e81bd92cabdeREAL%20Dad%20and%20Daughter%20Home%20Alone..mp4/5e81bd92cabdeREAL%20Dad%20and%20Daughter%20Home%20Alone..mp4-3.jpg HTTP/1.1\r\nHost: thumb.aporntv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3379\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Mar 2020 20:00:08 GMT\r\netag: \"5e824fc8-d33\"\r\nexpires: Wed, 07 Jan 2026 20:55:14 GMT\r\ncache-control: max-age=16070400\r\naccept-ranges: bytes\r\npriority: u=5;i,cf-chb=(108;u=5;i=?0)\r\ncf-polished: webp_bigger\r\ncf-bgj: imgq:100,h2pri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 233473\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hB5ilPtOnxi0gI6yJsSgRsh28WNSPpQUKS8U4p18P11XRWPkW1DLQ8rsYmJwU2SbknZW43zV%2FfvgW30kqhXx18V4A6f79RLq7J%2FYCX5k\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b82f144fd3956b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3379,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, baseline, precision 8, 200x150, components 3","md5":"e9b97344985ec3f08aaaa2c36e5cb7ca","sha1":"02f72895de9e93db3b70d553d7c958b188ff712b","sha256":"ff5bcf7a4d6a744a87dc115fa19d053e872c726a8862525e03ff2fa2850e0e34","sha512":"b975d07b9069a522146549d0228c9846cada294df8f27f7986bce6aabebc8d26b1dff900491f9956b2e6a3194e30fe37936e872cb87ff684aa405c89db29ed62","ssdeep":"","tlshash":"82615c2ebf904027cf15b1758304d948ad00667e24c1f3dfc9ea8cb976a14e01773729","first_seen":"2025-01-22T00:36:40.918224Z","last_seen":"2026-01-14T20:42:53.661059Z","times_seen":11,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.youtube.com/vi/JokyAJh-De4/0.jpg","fqdn":"img.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:42.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"47:99:FB:97:02:C2:03:A6:B6:60:07:03:D3:B7:37:4B:99:D1:7F:1F","sha256":"01:72:D6:C3:FA:E5:7E:F5:EF:15:83:1F:EE:A5:BF:37:4C:78:02:B4:CD:BF:8D:EF:62:9F:53:B1:B3:1A:B6:EB"}}},"request":{"raw":"GET /vi/JokyAJh-De4/0.jpg HTTP/1.1\r\nHost: img.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 17954\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 13:14:22 GMT\r\nexpires: Sat, 03 Jan 2026 15:14:22 GMT\r\ncache-control: public, max-age=7200\r\netag: \"1683182963\"\r\ncontent-type: image/jpeg\r\nage: 1940\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17954,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3","md5":"f2f34b1631366dca093aca27af76216e","sha1":"e7c1c1071c72a46ca236dfe1ba6f8ea14b72bb05","sha256":"0c2ae12f856c0f11342f270ce29b7f0506a82239285c6476a4e69a854e4d6508","sha512":"748bde6bcdd55aa6b1200efd17cb340d870c391add441f4b00823b25e643231d2ebbe979c7d4fd78c457261e5539715d9fd5b0afa4ddd7550312144393adea33","ssdeep":"384:wYVqlSB+XTAyGW1nCT5HWXkAkqfCgFik2UZ9EYc:TVqlSBITAyr1nC5QogF2UM","tlshash":"d882bf5690f33faadf9bc35ce60cc15bc76b102cb451d3e5a6c69c6e36b625c9b02118","first_seen":"2025-06-03T04:10:59.16222Z","last_seen":"2026-01-21T00:43:43.305411Z","times_seen":4,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":49,"dns":85,"connect":8,"send":0,"wait":9,"receive":2,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/be/b8/fd/beb8fd19c7d5c9d44d30e0e50bcade65/beb8fd19c7d5c9d44d30e0e50bcade65.2.jpg","fqdn":"cdn77-pic.xvideos-cdn.com","domain":"xvideos-cdn.com","tld":"com"},"ip":{"addr":"185.76.9.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideos.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 15 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3C:93:93:D2:61:40:5B:B9:F9:EB:A2:B0:78:48:57:C0:F2:41:42:42","sha256":"D9:3E:6D:83:C8:0E:74:42:32:A1:4F:A3:9B:CA:3A:9D:E0:D2:60:38:FF:BF:EB:0E:36:AA:3E:41:44:D5:A7:59"}}},"request":{"raw":"GET /videos/thumbs169ll/be/b8/fd/beb8fd19c7d5c9d44d30e0e50bcade65/beb8fd19c7d5c9d44d30e0e50bcade65.2.jpg HTTP/1.1\r\nHost: cdn77-pic.xvideos-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10915\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Fri, 29 Dec 2017 22:48:32 GMT\r\ncache-control: max-age=10368000, public\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBuUwJBgH323BfAAwBJRPCRgH3ZnpeAAgBj/Q6jAGB\r\nx-77-nzt-ray: 5451992d3ed7dc5bb71d5969ca2a640a\r\nx-accel-expires: @1771542890\r\nx-77-cache: HIT\r\nx-accel-date: 1761193180\r\nx-accel-date-max: 1730070688\r\nx-77-age: 6254811\r\nserver: CDN77-Turbo\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":10915,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 352x198, components 3","md5":"c1285457b35fb5a0aafb8fa5626e1806","sha1":"283e22015ae170998864be68fadb51a7e056c05f","sha256":"71389102ba5c1f8b0388597d48365f200107dada3dca7ffd121028a510826584","sha512":"644a72aa51a65a85cb3e961bace85d50536ad4dfcc22baadb1ba5a3f5a23ce0455efabfe071c35007b615b6434a7d12e5a050fbdb2c26d72cf5971cc475e93ba","ssdeep":"192:yvoGL5ou/tY9fSdhsBX8i4YMBdaVFKxYv6RmRKtQz73rD+24PhZLW9gzTacC4chr:yvx/sqEReYUdazCdQz73/bKShGy9","tlshash":"d332bf2bdf029690dc5dc3da6a51b9c9975307a0fdf14bad02232985eb132ddaf9804e","first_seen":"2026-01-03T13:47:52.914009Z","last_seen":"2026-01-08T04:21:04.311457Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3151,"timings":{"blocked":3118,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/1X/37b84a2172e2ef3d26ad763074b359be20fe25d2_2_707x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/optimized/1X/37b84a2172e2ef3d26ad763074b359be20fe25d2_2_707x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 93529\r\nlast-modified: Tue, 12 Aug 2025 05:24:44 GMT\r\nexpires: Sun, 03 Jan 2027 13:46:27 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93529,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 707x1024, components 3","md5":"138b434b5b356da8491780c399214b71","sha1":"31b8e783e4d6d06f08f3bbfef6b7241533a92aee","sha256":"243862cd766135991fd5befbc7dd6852a584c2666c0a8b216677a51957840bcb","sha512":"3922a77a6fd8d0be9eec19bbf22ecf4d398419bc0f33512f3a2fdbdf24cf3e4245bb3b6ebb675edbda4c1de3075c2ba8fab3565a880f7e71d393a9d11d97f697","ssdeep":"1536:hVs9LybA0kb2OapHJCOengC0GHJCoUWe1GnADZa0pd6CH9+czhaJ8skWHy0eL9Mp:h6yLw0GpCIQq8ZaKd60haJ8skWHn","tlshash":"0c9312a4462da2f5ff3a66b4cf1c143cee92640f6a4746e195c8705926ed3c42f708de","first_seen":"2025-10-02T07:34:11.159326Z","last_seen":"2026-01-03T13:47:52.916496Z","times_seen":5,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornoperso.com/favicon.ico","fqdn":"pornoperso.com","domain":"pornoperso.com","tld":"com"},"ip":{"addr":"172.67.166.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:33.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornoperso.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 15:40:20 GMT","end":"Sat, 14 Mar 2026 16:39:05 GMT"},"fingerprint":{"sha1":"64:F7:E0:D0:AD:D0:C7:5E:C7:39:92:52:EC:DD:E0:0F:65:0C:28:1C","sha256":"9F:C5:69:7A:EF:0A:0A:47:41:32:F6:AC:BE:72:AE:68:CA:05:63:EA:D2:1B:A3:DD:9D:E4:E5:E8:2E:73:99:AB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pornoperso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 03 Jan 2026 13:46:33 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7KO5yKmHWbkwyr8Z9XGFu7kFdt1kKORdjjAyKpGR%2FSasTbFcafkNFJMzGdYYV0zG%2BeEp2ZMaW56NCa0GVO2lA9eF7YfXaXIOo7PPRfcG\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9b82f169caad723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.effedupmovies.com/favicon.ico","fqdn":"www.effedupmovies.com","domain":"effedupmovies.com","tld":"com"},"ip":{"addr":"45.138.107.14","port":443,"asn":208414,"as":"WEDOS Internet, a.s.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effedupmovies.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 02:09:26 GMT","end":"Wed, 28 Jan 2026 02:09:25 GMT"},"fingerprint":{"sha1":"A0:38:95:81:F9:B6:07:3A:91:08:79:94:2C:37:D0:A0:70:E0:C9:8A","sha256":"E1:0C:A5:0E:23:DF:97:60:D8:03:51:23:22:3C:F6:70:39:50:68:A8:83:61:4D:49:EE:12:D9:F3:7E:BB:F4:45"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.effedupmovies.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nlocation: https://www.effedupmovies.com/wp-content/uploads/2025/09/cropped-favicon-32x32.png\r\nvary: Accept-Encoding,Cookie\r\nlink: \u003chttps://www.effedupmovies.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-redirect-by: WordPress\r\nx-powered-by: PHP/8.4.15, PleskLin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-protocol: HTTP/2.0\r\nx-request-id: a5753145d9d840324d6e0991c5f4585e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:8.4.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":12890,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":46,"connect":14,"send":0,"wait":139,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"www.effedupmovies.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20240609-1/cb14203b5d592acc155959f853153668.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"142.248.99.81","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 09:53:21 GMT","end":"Fri, 06 Mar 2026 09:53:20 GMT"},"fingerprint":{"sha1":"55:92:B5:BC:78:CB:75:63:3B:0F:C6:A3:DD:2D:2F:7C:FA:07:B7:4A","sha256":"02:67:5F:F2:7D:A5:B6:59:8F:77:98:9C:EF:94:84:1A:E6:C9:FC:6E:A7:27:06:47:BB:16:5D:BE:A9:91:90:79"}}},"request":{"raw":"GET /upload/vod/20240609-1/cb14203b5d592acc155959f853153668.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 03 Jan 2026 13:46:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nage: 0\r\ncache-status: MISS\r\nserver: HyperCDN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":1276,"timings":{"blocked":93,"dns":0,"connect":0,"send":0,"wait":801,"receive":382,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blumpkintube.com/thumbs/17/941_out_gets_creampie.jpg","fqdn":"blumpkintube.com","domain":"blumpkintube.com","tld":"com"},"ip":{"addr":"172.67.148.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blumpkintube.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:29:09 GMT","end":"Fri, 06 Mar 2026 22:25:31 GMT"},"fingerprint":{"sha1":"F0:75:18:71:3B:57:62:7E:D0:B3:6D:BB:CB:8B:B7:85:4A:62:A2:F9","sha256":"83:20:32:82:21:E4:38:2F:12:C3:85:A8:D6:B1:D1:E0:F4:EF:92:1B:D2:51:B1:35:BB:20:DF:AC:53:43:CA:F8"}}},"request":{"raw":"GET /thumbs/17/941_out_gets_creampie.jpg HTTP/1.1\r\nHost: blumpkintube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13646\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Apr 2019 06:25:04 GMT\r\netag: \"5ca30040-354e\"\r\nexpires: Mon, 21 Dec 2026 06:51:08 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1148124\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oV1haPQUz6Hns27geljMKPlKWgeKahW2JP8Yo0VPddVEVHJzZHwPwcdaAtU3zvXC%2BbnYgaFb2T9vGPXGKaBjkmmysVwc%2BRZr3ZSdNsti\"}]}\r\ncf-ray: 9b82f165abc4b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13646,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 312x208, components 3","md5":"623b1fad11dba7b0f1a503083162c670","sha1":"b31658777254a151a0221ca72008577d25940ca4","sha256":"7378a55e74a9a363a1c601f1554b10661bfd651b9fe9875815e90b120b4cf39b","sha512":"c700df52de5164792f33e7eb1280a748ee917ea584c6feb9e7fd785608bf88da4173b5d999082a11e45191e7ca6bf0ff6473288c9952affa3d1892b300c4e15b","ssdeep":"384:1ZjVzOb9vlD1z0mLTN2zc5VSiuK/lCs51hN:1VYBvNR0mLRlHfhN","tlshash":"e252d0e576146ec5705ee2db87317fdae6e913296247cba40fc275db0d19ec58ca0208","first_seen":"2024-04-26T00:29:07Z","last_seen":"2026-01-08T04:21:04.430133Z","times_seen":19,"resource_available":false,"data":null}},"time_used":5152,"timings":{"blocked":3417,"dns":1713,"connect":1,"send":0,"wait":8,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg4.top/upload/vod/20250420-1/6aa5ee27dd6bebaf86c4231736b5fed2.jpg","fqdn":"fqjpg4.top","domain":"fqjpg4.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.013Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /upload/vod/20250420-1/6aa5ee27dd6bebaf86c4231736b5fed2.jpg HTTP/1.1\r\nHost: fqjpg4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":3858,"timings":{"blocked":3485,"dns":1,"connect":151,"send":0,"wait":0,"receive":0,"ssl":213},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"fqjpg4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkvod.com/upload/vod/20240309-11/d9a006eb5f6224ef8ace80a35b636de6.jpg","fqdn":"darkvod.com","domain":"darkvod.com","tld":"com"},"ip":{"addr":"104.21.15.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:32.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkvod.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 21:08:06 GMT","end":"Tue, 24 Feb 2026 22:08:03 GMT"},"fingerprint":{"sha1":"BE:9E:B0:53:26:CB:BC:D1:20:B1:FC:C4:21:9F:3B:53:E9:00:37:1D","sha256":"88:84:9A:7E:95:A9:DD:A3:C6:C8:9A:04:BC:7F:EB:BB:D8:17:59:AF:26:EA:37:AB:3C:6B:10:74:E8:16:7D:83"}}},"request":{"raw":"GET /upload/vod/20240309-11/d9a006eb5f6224ef8ace80a35b636de6.jpg HTTP/1.1\r\nHost: darkvod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sat, 03 Jan 2026 13:46:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LUWSqTYqLjLkQTCw8A1gy04lhV1qX1tShrGf4ITitotQNdvE%2FclLMx21pc7Vpy3fD8cloJZa9YhUkBSP%2BCgJ%2BNZRSMmbhL%2By0ZJKQ88FpDCSUAHP%2BJOLEHO6h%2FLwCQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\ncf-ray: 9b82f15eeb1156be-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: chlray;desc=\"9b82f15eeb1156be\", cfL4;desc=\"?proto=TCP\u0026rtt=1912\u0026min_rtt=1075\u0026rtt_var=1175\u0026sent=17\u0026recv=14\u0026lost=0\u0026retrans=0\u0026sent_bytes=9712\u0026recv_bytes=1218\u0026delivery_rate=3022091\u0026cwnd=256\u0026unsent_bytes=0\u0026cid=047f764063f37e20\u0026ts=4562\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"darkvod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"darkvod.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vidmo.org/favicon.ico","fqdn":"vidmo.org","domain":"vidmo.org","tld":"org"},"ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vidmo.org","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Mon, 02 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5A:F1:73:5E:65:04:62:81:77:0D:E9:30:2A:1C:AD:D5:01:9C:EB:EA","sha256":"0B:B8:D8:59:9D:1C:FB:70:0B:B7:41:7B:8D:14:0C:20:7A:72:1E:79:FB:DA:ED:19:76:A7:FE:38:A5:4F:84:5B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: vidmo.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:35 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 5430\r\nlast-modified: Sun, 14 Oct 2012 21:41:38 GMT\r\netag: \"507b3192-1536\"\r\ncache-control: public, no-transform\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"6b6734885d5e4ff9dbb7d82ba6023598","sha1":"3c454d68a346b375ed7b59a131699061e7393b1f","sha256":"0f8e5edd4348eaa11881bf6150baf7b3182b1c3e29c6378e0e921afce7d91819","sha512":"e3d4562da250a2096981bd9a211efa643400ebe18a2d0765e750454b4cf75cb31e9594d8fccfa61a4c86e1c08bbf130dbc635c2974996838444cef029bf3eb50","ssdeep":"96:12lbcmeAscXXZCGv56cOtAe8CKfMibd+tLMiWMyuFa:0muCQpBQ6d+ti","tlshash":"a9b173c151c1e587e0274f38e237d750b1fa2c13bab0ea85156b7a555a731898317b1e","first_seen":"2023-05-05T08:02:57Z","last_seen":"2026-04-12T19:29:51.616695Z","times_seen":690,"resource_available":false,"data":null}},"time_used":971,"timings":{"blocked":-1,"dns":102,"connect":22,"send":0,"wait":93,"receive":1,"ssl":753},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornohub24.ru/favicon.ico","fqdn":"pornohub24.ru","domain":"pornohub24.ru","tld":"ru"},"ip":{"addr":"193.163.7.2","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pornohub24.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 18:18:01 GMT","end":"Wed, 25 Mar 2026 18:18:00 GMT"},"fingerprint":{"sha1":"DC:D3:1F:AB:D2:14:DD:CF:05:41:E4:4A:16:4D:82:66:8C:25:19:81","sha256":"58:74:72:AB:E3:FF:EF:55:EE:BD:4C:F0:70:05:9C:9A:38:0E:53:11:6D:A8:DC:83:AF:4B:B1:F5:8A:F1:34:46"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pornohub24.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: nginx/1.24.0\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html\r\ncontent-length: 169\r\nlocation: https://ero-scen.ru/favicon.ico\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":9,"dns":129,"connect":20,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"desiporn.me/thumbs/344/2705852731438414344_0.jpg","fqdn":"desiporn.me","domain":"desiporn.me","tld":"me"},"ip":{"addr":"172.67.218.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desiporn.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 22:54:02 GMT","end":"Fri, 06 Feb 2026 23:52:45 GMT"},"fingerprint":{"sha1":"13:6D:25:AB:2B:2D:5D:38:72:FE:96:06:41:D4:73:D3:AD:0C:9F:D5","sha256":"3A:2F:EC:99:0D:F2:3C:22:8B:AF:49:31:45:6E:16:CB:C0:12:80:8F:9D:60:45:ED:6F:CB:2D:37:27:7B:3E:95"}}},"request":{"raw":"GET /thumbs/344/2705852731438414344_0.jpg HTTP/1.1\r\nHost: desiporn.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6198\r\nserver: cloudflare\r\nlast-modified: Sun, 08 Mar 2020 11:21:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"5e64d54e-1836\"\r\nexpires: Sun, 04 Jan 2026 05:38:44 GMT\r\ncache-control: max-age=259200\r\naccept-ranges: bytes\r\nage: 202067\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DuE6ovl3Gkok8Jz35vzh6%2BGI2An%2F%2Bl0rLAwQ6wXuNjEEd%2FkWDzu9m%2BoiMXbUmxo%2F0PiMAxM%2FTznSmSVoKGErl2dFk51ZISMcew%3D%3D\"}]}\r\ncf-ray: 9b82f15caa13712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6198,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x180, components 3","md5":"71c323e48261fe4798a85564dfbe2dac","sha1":"40fd20dc8cb1b3d7bf038e4f0f7c38507285c2ab","sha256":"15bbb27ab88567418754cb7a200163ed318351afde23b30c0206159ff9fa3703","sha512":"37e67f204e44e5bd89c69ffe9e1771ababd57cee570e018633856add86db77d72b8a42b9662c7f41bef2084f8a2644df9cda4350e712859791c49eae20c400d1","ssdeep":"192:oQ1sFKyDX5+XeeQsv706fns4RVqBt5PBuDsfL81:oQ6FDX5+ue/s4RVA3PIDsfY","tlshash":"b7d1af4b2e1b3d5b9b043aff44fa8471664386fe09c51e7e9412d723337183a484b2ad","first_seen":"2025-02-02T18:13:52.474369Z","last_seen":"2026-03-02T18:15:30.511622Z","times_seen":27,"resource_available":false,"data":null}},"time_used":3766,"timings":{"blocked":3464,"dns":1,"connect":14,"send":0,"wait":15,"receive":0,"ssl":242},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.aosikaimge.com/20221004/FRuBhJPH/1.jpg","fqdn":"img.aosikaimge.com","domain":"aosikaimge.com","tld":"com"},"ip":{"addr":"64.112.78.82","port":443,"asn":6939,"as":"HURRICANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aosikaimge.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 24 Dec 2024 10:28:23 GMT","end":"Fri, 23 Jan 2026 10:28:22 GMT"},"fingerprint":{"sha1":"BC:19:8D:FF:22:32:94:8C:04:80:02:CE:1A:59:1C:91:24:15:5C:66","sha256":"F8:17:7C:E0:46:83:E7:7F:FB:CB:88:66:23:61:56:22:39:3A:23:8B:BF:3B:08:F3:37:F4:92:5C:72:1F:D8:B8"}}},"request":{"raw":"GET /20221004/FRuBhJPH/1.jpg HTTP/1.1\r\nHost: img.aosikaimge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 13:46:32 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6685\r\nConnection: keep-alive\r\nLast-Modified: Wed, 05 Oct 2022 00:06:38 GMT\r\nETag: \"633cca8e-1a1d\"\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nCache-Control: public, max-age=15768000\r\nCache: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6685,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 11x15, segment length 16, comment: \"Lavc57.89.100\", baseline, precision 8, 240x320, components 3","md5":"0dfea02a8a7d91dc6af8b7c5dbfbd80d","sha1":"4462c4f650a000fb2fcccdb3d79853b2fc99b813","sha256":"abb19f76665904096a45abde66fead1d0088ceceea5000336b8e91e28782c5fa","sha512":"24c9bb7912fefec6d178de6128a03fc10fc9600dadbac0de06673589232ad64327a7ae7112bd7cb91bfeb4a9344079f110613d1b9a4c9eacb0ecdc43c662b14d","ssdeep":"96:MmZzEe3AuO5Sos7WUiuYOpdTS8LpSwmuwgmu+FM/d3zvUWMfjZPfglltystdEkFN:Mc1AugSJKK1yL4+Fyl8f14tyszFsa/","tlshash":"2ed19d59a51990936c9e88fa59d974a3905acac869300bb09ee580fba324cb46065b8c","first_seen":"2025-07-01T22:44:13.311127Z","last_seen":"2026-01-14T06:47:35.958681Z","times_seen":17,"resource_available":false,"data":null}},"time_used":4325,"timings":{"blocked":3448,"dns":1,"connect":148,"send":0,"wait":165,"receive":0,"ssl":557},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumb.aporntv.com/thumbs/5/f/2/1/a/5f219b65ee120Brother%20Cums%20Inside%20Sisters%20Teen%20Pussy.mp4/5f219b65ee120Brother%20Cums%20Inside%20Sisters%20Teen%20Pussy.mp4-3.jpg","fqdn":"thumb.aporntv.com","domain":"aporntv.com","tld":"com"},"ip":{"addr":"104.26.1.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aporntv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Dec 2025 20:17:34 GMT","end":"Sat, 14 Mar 2026 20:17:33 GMT"},"fingerprint":{"sha1":"9D:78:6E:E7:87:A1:D6:C8:DF:57:DC:5B:73:AB:6A:E5:9F:AD:26:EA","sha256":"C1:29:AA:89:1A:D5:B1:EA:BC:3A:90:73:1F:73:C9:77:CF:50:6D:E6:2A:8C:3A:DC:89:6D:F0:A9:B6:E8:E8:0F"}}},"request":{"raw":"GET /thumbs/5/f/2/1/a/5f219b65ee120Brother%20Cums%20Inside%20Sisters%20Teen%20Pussy.mp4/5f219b65ee120Brother%20Cums%20Inside%20Sisters%20Teen%20Pussy.mp4-3.jpg HTTP/1.1\r\nHost: thumb.aporntv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4826\r\nserver: cloudflare\r\nlast-modified: Wed, 29 Jul 2020 16:32:45 GMT\r\netag: \"5f21a4ad-12da\"\r\nexpires: Wed, 07 Jan 2026 02:36:45 GMT\r\ncache-control: max-age=16070400\r\naccept-ranges: bytes\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=5;i,cf-chb=(108;u=5;i=?0)\r\ncf-polished: webp_bigger\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 299382\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hUjnD9mMpxkyR1lwxOB7vQ6t1zvn78QNK8eldR3jz4l1ogNIsF7Cp27YKCAKbVbKu36eaIAHlFY5%2Bp9NpQndl3EmYfZHYuCLGexUgD5p\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b82f144ed2d56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4826,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, baseline, precision 8, 200x150, components 3","md5":"cc0b66199394943e6c64a329e8b63b64","sha1":"6a167fa75f41b8f06c8fa2a04d6766a64621f2e0","sha256":"9c4b8e9d1ff943ad18a9b8fd783cd560dea4a62079c4b284e7f26e2e26c43765","sha512":"1a62bda8800635a5f66af136ce9dd3f3797fcd9fc65aa48a294d45ffef43c77dcc034ce8d17344ec895ffb4b919a2c3c41293e73bd69dba11084d7a8d57c15b2","ssdeep":"96:R1jhtjDjBDM8P/aI9/+U5aMnKuX4Kwr3mZXstTtCoLi+q9+i2AB:vjfvG8PiY/+bMKph3jtLi+q9+i2AB","tlshash":"29a16ca955e4fe06abc545b47a1ce76d9caf3a8719b2d6e300080f1503b485c4b1e6af","first_seen":"2025-05-22T17:21:52.143883Z","last_seen":"2026-01-24T10:59:54.269026Z","times_seen":49,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cav10.com/favicon.ico","fqdn":"www.cav10.com","domain":"cav10.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.315Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.cav10.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"www.cav10.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-03","alert":"Content Category / Application Block","trigger":"www.cav10.com","verdict":"suspicious","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"www.cav10.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20240824-1/3ca38c2abdb1a5ad6d614f90198387bb.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"142.248.99.81","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 09:53:21 GMT","end":"Fri, 06 Mar 2026 09:53:20 GMT"},"fingerprint":{"sha1":"55:92:B5:BC:78:CB:75:63:3B:0F:C6:A3:DD:2D:2F:7C:FA:07:B7:4A","sha256":"02:67:5F:F2:7D:A5:B6:59:8F:77:98:9C:EF:94:84:1A:E6:C9:FC:6E:A7:27:06:47:BB:16:5D:BE:A9:91:90:79"}}},"request":{"raw":"GET /upload/vod/20240824-1/3ca38c2abdb1a5ad6d614f90198387bb.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28053\r\nlast-modified: Sat, 24 Aug 2024 04:36:22 GMT\r\nvary: Accept-Encoding\r\netag: \"66c96346-6d95\"\r\nexpires: Thu, 29 Jan 2026 06:35:47 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 371441\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28053,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 718x404, components 3","md5":"f93bd17fe32a59b58e203775c9a89f61","sha1":"0794ec7d7c9f168bf15e511170af44df8216ae00","sha256":"1f6fddcfd2a17f20d1259a740e607ddaae3127f4a7d5f45cac2ab49140e00226","sha512":"7769566488477291bce893f32b06fa78182c6b2207921a5a3d5a5efc1652eda57e75467bd74f5f45dac034b5684ca689edba72f56f8f4fc71762a0beb4695522","ssdeep":"384:vVcFyAbUfoGxBdiIyidwuQ6/uBPt3gDMrzErZsp9Nm9zt+xc/mQmSf/Hp1vmVqNv:vVyyAYwWBdGidiPtQXZshCg2Lvuev","tlshash":"a8c2e01b17b3d04d982d03d0b78afeb05debb647391cb2c12f66518f0e198b8b825257","first_seen":"2023-12-15T21:10:03Z","last_seen":"2026-03-02T16:55:39.740123Z","times_seen":54,"resource_available":false,"data":null}},"time_used":703,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":612,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naturismv.com/images/merry-pool-naturist-freedom.jpg","fqdn":"naturismv.com","domain":"naturismv.com","tld":"com"},"ip":{"addr":"104.21.44.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naturismv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 08:45:50 GMT","end":"Wed, 25 Mar 2026 09:44:26 GMT"},"fingerprint":{"sha1":"0D:53:B5:5B:52:F7:E4:1B:37:F9:A9:28:44:FE:7E:59:88:06:5B:6C","sha256":"41:5B:87:91:5F:9E:1B:18:06:51:AC:8C:91:92:B1:92:A4:96:CA:4A:A5:06:A6:48:CE:CC:31:03:8A:E5:DB:1C"}}},"request":{"raw":"GET /images/merry-pool-naturist-freedom.jpg HTTP/1.1\r\nHost: naturismv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://en.av2.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 62012\r\nserver: cloudflare\r\nlast-modified: Fri, 19 May 2023 12:04:52 GMT\r\netag: \"646765e4-f23c\"\r\nexpires: Sat, 19 Dec 2026 06:45:22 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 1321269\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QLeF64jDvSZV8IhQHU8aEgV41yKV4W6ZsXuWdiaODsVkiHTFfxHT1otlU69RbhDiKj5Q81rGyZAdsdbFMv37bWj%2F3j05Wfegnkvy\"}]}\r\ncf-ray: 9b82f15c7b930b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62012,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 400x300, components 3","md5":"2ade02cec914f83397036f9d7a6a87c9","sha1":"01f86016205110c232e59cd70333cc92f80728df","sha256":"ab79eb821ba7a259391eec0994107ebe787a99b667da16928bdd912930dec9bd","sha512":"968a4f0e0dffb234e2fe2035181a8299e63b91e89080a2031df569a22a6c23b6303ff92ba84e722643748dcb384563e4825846e22d262202b3d277f2135d42af","ssdeep":"768:Wd2RsxPPL3C5sOeMndbmuRBrn5EmTWjCRxtHYNGqRpsO12/XVrn2nxVE6lTzV/t:+cndbRRxtHwR6OAclXVF","tlshash":"675301b25a5005c7f36c8da3cc91de207af4f6c6a71a8d6d90e839f33985421a5a4b4d","first_seen":"2024-04-21T18:54:08Z","last_seen":"2026-01-24T20:33:37.488881Z","times_seen":106,"resource_available":false,"data":null}},"time_used":3575,"timings":{"blocked":3309,"dns":1,"connect":12,"send":0,"wait":12,"receive":1,"ssl":220},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex.ucoz.ru/_nw/58/00802007.jpg","fqdn":"ex.ucoz.ru","domain":"ucoz.ru","tld":"ru"},"ip":{"addr":"193.109.247.20","port":443,"asn":204343,"as":"Compubyte Limited","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:32.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.ucoz.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 28 Aug 2025 16:33:31 GMT","end":"Tue, 29 Sep 2026 16:33:30 GMT"},"fingerprint":{"sha1":"DC:8D:2C:72:F6:72:AD:2A:A7:0D:DA:D2:B5:A2:3C:D0:A7:C8:D1:98","sha256":"75:11:9A:D5:B3:DD:F4:55:DE:65:FF:41:95:44:25:35:BD:E8:D3:44:6A:18:46:A0:1E:66:B8:77:9B:43:15:BC"}}},"request":{"raw":"GET /_nw/58/00802007.jpg HTTP/1.1\r\nHost: ex.ucoz.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://en.av2.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 13:46:31 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 38401\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nLast-Modified: Fri, 13 May 2016 11:12:08 GMT\r\nETag: \"5735b688-9601\"\r\nExpires: Fri, 23 Jan 2026 13:46:31 GMT\r\nCache-Control: max-age=1728000\r\nX-Frame-Options: SAMEORIGIN\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38401,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 350x500, components 3","md5":"9579796a4e912a7a04f3d9d36fdf5750","sha1":"da852c391e4367e1bb75ff564fff4c2b9d9235c4","sha256":"9e3641c9aa33ff687d1b52ed2020265997958804fd40d2117b4218cd948d4c57","sha512":"3765e3c1483e8f99ba37c3226144b40903769e6ce21986def0c7a9fdb509e7db3cc89a1a9b27ac7ab953518cc658a1558807701ad2f7f564b02ad48200bec987","ssdeep":"768:qIAIKxByHaLR8zfxTlhWv8B+gTe6pdHJBqBjR5u+Yq0rpBDCGNzdWymweIU7:qRozZrWMTe6pdH2TYq0nFeIU7","tlshash":"d303f1baa7ae4090dc49db6d765f86563a5d3b2cfe232f0e6fa152390e1c085035b252","first_seen":"2025-07-03T22:05:20.714857Z","last_seen":"2026-03-03T14:10:03.555504Z","times_seen":23,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":2,"connect":31,"send":0,"wait":62,"receive":61,"ssl":154},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/a/abf3342c1a7d32f5b2073412910413872940ba42_2_576x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:32.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/optimized/2X/a/abf3342c1a7d32f5b2073412910413872940ba42_2_576x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:32 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"videosection.com/favicon.ico","fqdn":"videosection.com","domain":"videosection.com","tld":"com"},"ip":{"addr":"190.2.144.120","port":443,"asn":49981,"as":"WorldStream B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"videosection.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Dec 2025 01:21:29 GMT","end":"Sun, 01 Mar 2026 01:21:28 GMT"},"fingerprint":{"sha1":"BC:38:4C:77:EC:24:C3:EC:68:B9:2E:B1:06:80:5C:74:8E:46:D0:DA","sha256":"AD:B9:72:C4:90:90:F4:8C:C3:B7:93:F0:41:27:A5:FB:1F:70:98:D2:C5:9D:DD:19:77:E1:F1:49:D7:67:B9:22"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: videosection.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: mw.not-found;dur=0.003232,mw.redirects;dur=0.377145,mw.user-country;dur=0.001475,mw.language;dur=0.014182,mw.niche;dur=0.000791,mw.meta;dur=0.000943,mw.utm;dur=0.00061,mw.referer;dur=0.032185,mw.request-vars;dur=0.018675,mw.data-processing;dur=0.001418,process-request;dur=0.810249,process-request_render;dur=0.803075\r\nx-envoy-upstream-service-time: 2\r\nx-envoy-decorator-operation: itube-gw-web.master.svc.cluster.local:8282/*\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":141,"dns":78,"connect":17,"send":0,"wait":21,"receive":1,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.peppahub.com/favicon.ico","fqdn":"www.peppahub.com","domain":"peppahub.com","tld":"com"},"ip":{"addr":"104.21.91.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"peppahub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 14:54:52 GMT","end":"Fri, 06 Mar 2026 15:51:24 GMT"},"fingerprint":{"sha1":"31:D7:E2:50:C2:EE:CC:D1:E5:CE:16:A3:C4:A5:84:7C:D0:0D:28:B9","sha256":"17:7F:62:CD:90:94:32:12:86:66:D7:3B:13:B5:C0:7F:76:39:F5:F4:DE:82:EA:1B:55:5A:49:B0:EE:C4:7A:68"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.peppahub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aBO25xCRbArf0hhuD0n3JT1udNjqTUc0a2Qgp%2B45GUbxByQNQLsZDgdTadKWt53fil9W614z06zcT525qrAreomMqKB%2Bq0XS%2F1o%2Fxg0o\"}]}\r\nage: 112\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9b82f170287a569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":575,"timings":{"blocked":442,"dns":102,"connect":1,"send":0,"wait":10,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornvideoq.com/thumbs/pqa77-cvp.kivqrbf-pqa.pbz/ivqrbf/guhzof169yy/88/42/nq/8842nq7pp1nqrq81054p4449471n191p-1/8842nq7pp1nqrq81054p4449471n191p.15.wct.jpg","fqdn":"pornvideoq.com","domain":"pornvideoq.com","tld":"com"},"ip":{"addr":"104.21.235.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornvideoq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 21:45:44 GMT","end":"Thu, 05 Feb 2026 22:44:19 GMT"},"fingerprint":{"sha1":"3D:99:38:53:3D:43:80:ED:58:14:DE:B8:83:E4:5B:9A:2B:60:17:66","sha256":"A5:56:2E:DD:98:DF:B6:BC:3E:05:41:FE:22:22:1D:65:27:A9:48:09:FB:9D:7A:5E:81:F2:7E:AD:CA:1D:86:A9"}}},"request":{"raw":"GET /thumbs/pqa77-cvp.kivqrbf-pqa.pbz/ivqrbf/guhzof169yy/88/42/nq/8842nq7pp1nqrq81054p4449471n191p-1/8842nq7pp1nqrq81054p4449471n191p.15.wct.jpg HTTP/1.1\r\nHost: pornvideoq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:33 GMT\r\ncontent-type: image/jpeg\r\nx-litespeed-cache-control: no-cache\r\ncache-control: public, max-age=2073600\r\nexpires: Fri, 09 Jan 2026 05:23:48 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 02 Jan 2026 05:23:48 GMT\r\nage: 116565\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2F5jCPLdHhH8fCi55IB6dAkwyVZaKi3EhSzBajY9Ldrna113dDfLrkGChMh1zx%2FPNB4xDZhcooSoSvJqe8pQ1R4sXGn565ok6UsGFsYP\"}]}\r\ncf-ray: 9b82f169dbf55a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11283,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 352x198, components 3","md5":"18ed36b9196165930cff3a564259c393","sha1":"cbccc30b31ac312c901ce01f94b95ad25c834e9f","sha256":"2060220d3480fb904afb4150a9722e297824c566ec3a2c4832d84f700b9a5473","sha512":"6adaffb5e03f002f3f4ab9e032e5404998f91a631195c07cf30643774cd181c12873078b45bee69b5f0ec0f628a37414faf927c66dfd2f001c828fca465e5910","ssdeep":"192:GQHofNcGQG7mUSI5jmET4uoA6g4aCSJM4QDJRRu8I9orFw4f1AQqWjF0ZBfjwB:GysiGQCB5jmET4tA6QQxXRuINoWuF8B","tlshash":"7232af50a70f8aca674335fd701a1d07f21f4651a500aaff40a2af362c26dbee206e1c","first_seen":"2025-10-31T20:59:40.65799Z","last_seen":"2026-01-19T22:06:02.701481Z","times_seen":27,"resource_available":false,"data":null}},"time_used":5843,"timings":{"blocked":3445,"dns":2379,"connect":1,"send":0,"wait":6,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/yandex-metrica-watch/watch.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/yandex-metrica-watch/watch.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 84645\r\ncf-ray: 9b82f15acae6569a-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.423.0\r\nx-jsd-version-type: version\r\netag: W/\"3451b-8YT7/aBJ5ZJSl0gbbvYqRHErHmA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220135-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 32270\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=oBXlzJ1gmFvuuNCw8Ht8Z%2Bko5QqMhs0yV1Lbavwb3b5muvDTDn0mNTX8cDvNXVmqMO1VXWP6yxfgWUG84NLAei9Vb35qPf8Qcdn4yHtmebGg7czqQeE5EaLmmc1gB05Sm3w%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":214299,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (675)","md5":"13874b43d7a0d16e9294fbd7769da715","sha1":"80021aaaf6d92a36a4c07b8a0aa92c828c0e88b4","sha256":"1997c1177df62b07fd1794d3a9f8ebdc72842e6cb20a1e1987e939065921f646","sha512":"403cf4d5c09cb01f3ffa12aab85665ed7f39d89ef43127cc982dc478cebc89f618228abadfdec1aeb9894324335fcd988df24cb715cbba168bdb398dd2dc7461","ssdeep":"6144:y49/+QUgRED0pera7677001NeCHO/SPon:/+gmS767Q01NeCuwon","tlshash":"2b24e7d976927062937334b4902f000fb2bea8a6f10c8955f1c9d9d97e78da89137f6c","first_seen":"2025-12-05T22:31:48.465207Z","last_seen":"2026-03-18T10:59:26.977539Z","times_seen":566,"resource_available":true,"data":null}},"time_used":3276,"timings":{"blocked":-1,"dns":3248,"connect":1,"send":0,"wait":13,"receive":2,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"99xing.cc/favicon.ico","fqdn":"99xing.cc","domain":"99xing.cc","tld":"cc"},"ip":{"addr":"104.21.38.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"99xing.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 15:41:19 GMT","end":"Thu, 26 Feb 2026 16:40:08 GMT"},"fingerprint":{"sha1":"F9:0E:A4:7B:82:6A:E1:24:3D:29:24:AF:E1:2F:B3:3E:48:E7:CF:1A","sha256":"04:F5:37:8A:77:A2:64:99:BF:91:F1:ED:0E:DC:49:4C:D3:D2:09:E7:D8:BA:7D:58:A9:7D:4B:04:AA:B8:C7:9B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 99xing.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 34431\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vPccLy9kZNklhRtYyCqjMitSnM8rkXOy7jtCcK7E9pLUweWnjc%2Fk%2B3r2ztznRc9tjJTqrgaLINQ1O2F4ZXIY46zRHJOXBnML6Q%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9b82f16fdccf4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":525,"timings":{"blocked":408,"dns":94,"connect":1,"send":0,"wait":8,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.javstar.mobi/thumbs/000/045/45978/45978_320x180.jpg","fqdn":"pic.javstar.mobi","domain":"javstar.mobi","tld":"mobi"},"ip":{"addr":"172.67.199.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javstar.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 16:04:24 GMT","end":"Fri, 06 Mar 2026 17:02:45 GMT"},"fingerprint":{"sha1":"CF:39:91:37:78:B1:21:8C:E2:77:F9:47:FC:5F:98:13:EF:0F:BF:13","sha256":"34:00:A3:28:3A:5B:2F:53:B7:3A:2A:0A:D3:E3:43:9A:83:ED:1B:8D:D5:22:01:A1:04:7E:F9:47:71:29:CA:6A"}}},"request":{"raw":"GET /thumbs/000/045/45978/45978_320x180.jpg HTTP/1.1\r\nHost: pic.javstar.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18701\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\netag: ef0c488b2d927a14363862715355a4d3\r\nlast-modified: Wed, 01 Jun 2022 17:51:07 GMT\r\nx-timestamp: 1654105866.82640\r\nx-trans-id: tx6093d00058b1417a966aa-00660ad328\r\nx-openstack-request-id: tx6093d00058b1417a966aa-00660ad328\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Sun, 04 Jan 2026 02:27:28 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: DS9225\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nage: 127143\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8o5cLL82V4yn3JxCb0Zdg0i5b2Sf2SkWJiuI%2Brt%2F8HN1D%2BGMEIiQN4jr%2Bor%2B%2BkHa4nk7Kn50cpkJRUlB6AOonRl9xFH1mkoJQXs1J5Zk\"}]}\r\ncf-ray: 9b82f15c9c2d5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18701,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"ef0c488b2d927a14363862715355a4d3","sha1":"c2c8fb8966fce8daac29f1b94713803323a11c41","sha256":"8f77b487a4e74f0ea056ce9dcbf79ed8a360d291f44c2647155c2cda7636b590","sha512":"ac4d0bfa29917f1867509b5e19e6338c2dd0fe9e9619d86d2c79f8da2e41c5c5fcf43a2efb038e2da298ab71adc5382f8414d61011c17b8bb2ca65e2131f735b","ssdeep":"384:R/kXC3s/8yxMJRI+h5w6e3eNJlD7zqSHVGDpzakQFV5rXmko:K/8Di+DwXenp7jADxaj6F","tlshash":"a482e1c7d9827c80c3648ab6132763627e7a2d22e09c9efcf71c563a82b21961164a4c","first_seen":"2025-06-17T01:30:47.791962Z","last_seen":"2026-03-03T08:08:10.270968Z","times_seen":25,"resource_available":false,"data":null}},"time_used":3728,"timings":{"blocked":3447,"dns":1,"connect":13,"send":0,"wait":10,"receive":0,"ssl":235},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.vidmo.pro/thumbs_320/e2/90/e29079411f9556060550b84219d477c1/14736926.jpg","fqdn":"en.vidmo.pro","domain":"vidmo.pro","tld":"pro"},"ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"en.vidmo.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 20:48:10 GMT","end":"Thu, 19 Feb 2026 20:48:09 GMT"},"fingerprint":{"sha1":"B8:8B:9C:2B:E9:53:D3:85:0E:57:74:8D:32:07:72:DF:38:F3:91:DA","sha256":"9B:B3:9F:DD:FB:1B:36:C3:04:60:BF:DF:87:AA:AB:5D:F6:0D:45:20:77:9B:29:19:5F:C4:B6:F1:04:C9:23:3E"}}},"request":{"raw":"GET /thumbs_320/e2/90/e29079411f9556060550b84219d477c1/14736926.jpg HTTP/1.1\r\nHost: en.vidmo.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13013\r\nlast-modified: Mon, 04 Jul 2022 15:01:15 GMT\r\nexpires: Tue, 11 Jun 2024 12:16:02 GMT\r\ncache-control: max-age=604800, public, no-transform\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13013,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3","md5":"466e390ac58f766c81624c6ac3971da2","sha1":"07d60d3e4166d924e85393ff5788e81ad3a983e8","sha256":"2a68369ddf4a88659a1cdfe42d9ca5a3c37f72488a4233010ad0e4b9447234b8","sha512":"567a0d7f61d1de713964314032f6a36fa3ec9b038a6a3d4b6403a9a46545b5b91fa076568dde9c8af883e7bde16fe40a30911d8735fca1571703357e223b8500","ssdeep":"384:m5aKrWojETej+IWcQH1piGAFtStL1oFenE:m5NWojETs+yQTiGAFtXJ","tlshash":"9942c007290281d09c7e48aaf86205ec938578a4f70763564b799cd0b7b5fdccfaf269","first_seen":"2024-11-02T00:01:26.243853Z","last_seen":"2026-01-24T19:30:50.799954Z","times_seen":17,"resource_available":false,"data":null}},"time_used":3592,"timings":{"blocked":3445,"dns":1,"connect":94,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"en.vidmo.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.blacktowhite.net/data/xfmg/thumbnail/551/551033-f3f5d3ebf7f3388dfda6ef0c74ba3065.jpg?1656804236","fqdn":"www.blacktowhite.net","domain":"blacktowhite.net","tld":"net"},"ip":{"addr":"192.243.63.82","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"blacktowhite.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Jul 2025 00:00:00 GMT","end":"Fri, 28 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"29:7F:D6:17:0A:55:E3:DB:E8:59:A0:3D:66:88:A5:35:86:B8:EF:80","sha256":"16:D2:4C:56:09:A6:4E:FB:DC:AF:6D:06:8A:B4:A7:96:B1:B5:E6:6B:82:A7:EE:D8:13:2C:AA:59:3C:FC:F0:43"}}},"request":{"raw":"GET /data/xfmg/thumbnail/551/551033-f3f5d3ebf7f3388dfda6ef0c74ba3065.jpg?1656804236 HTTP/1.1\r\nHost: www.blacktowhite.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.17.6\r\ndate: Sat, 03 Jan 2026 13:46:29 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 148730\r\nlast-modified: Sat, 02 Jul 2022 23:29:56 GMT\r\netag: \"62c0d4f4-244fa\"\r\nexpires: Sat, 17 Jan 2026 13:46:29 GMT\r\ncache-control: max-age=1209600\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.17.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":148730,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"6c52c1ca34a2f99f12074d3cb910f09d","sha1":"c88779689d30b30cb2601d421e2922d0030da82c","sha256":"76590b0c1ea2e5949c8ad7c4d67dcfec864309708ac8378eb7d12a20c9247e4a","sha512":"f85bc2dda3ff4e5c14333afd4227544766d7b201d58f7f82ca46a90777a09a2e1b6cc073228dbeca1814a16d69f56e969acb95672fb61b8f341f1642b536ac4c","ssdeep":"3072:xW/keKtAe8LIeGE8Jp4+f0xaciVp3tuuG3GeQS68FKa84zU+IeZrqQOg:U/30evxac614uG393Wn+1qa","tlshash":"48e312bbf7d4aef4a7dbbae54f142f58cff80de5d7a1010ca88aa500b359506845124f","first_seen":"2026-01-03T13:47:52.952553Z","last_seen":"2026-01-03T13:47:52.952553Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1275,"timings":{"blocked":898,"dns":0,"connect":0,"send":0,"wait":187,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/8/8b07d94e3a305010be35b5437267ba8fddb9b6a5_2_1024x576.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/optimized/2X/8/8b07d94e3a305010be35b5437267ba8fddb9b6a5_2_1024x576.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 85034\r\nlast-modified: Sun, 26 Oct 2025 04:29:34 GMT\r\nexpires: Sun, 03 Jan 2027 13:46:27 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85034,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x576, components 3","md5":"c9ed4bb5c4e3eb203c6867dd6c4e04f2","sha1":"c375f10de92a62391bbf530ed2e74c5ba782117d","sha256":"7db2f10329c899d2087ab02d5c30027f0b35469f5ff2723040d0513400aa2841","sha512":"75f5ab50cc7dde416b6f9ef7f96b5f04c019af86aab73e1fd7b1cb8e6c4ec472dde3e9a0977952a8818cee8ff7befc8f5e2e0fc6c303805c0d47c644c670d1a9","ssdeep":"1536:nkM1FTRaDsFhAllqsuhDnsVkDmDnLK48J6dQgVJ+PY1nUQ6BWfc7Q03tVx7:kSjyygnLK4DXyPY1nhUYcdfh","tlshash":"22831297e6cc25d2e271e7b0b71e8fb36b4058400774dac746b42d524dee337baa2501","first_seen":"2025-11-14T13:10:29.603287Z","last_seen":"2026-01-15T21:39:45.426775Z","times_seen":27,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg4.top/upload/vod/20240914-9/bf29bb5b9696d3f995fcb4470da62f79.jpg","fqdn":"fqjpg4.top","domain":"fqjpg4.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:32.213Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /upload/vod/20240914-9/bf29bb5b9696d3f995fcb4470da62f79.jpg HTTP/1.1\r\nHost: fqjpg4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":278,"connect":327,"send":0,"wait":0,"receive":0,"ssl":113},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"fqjpg4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sorkab.com/favicon.ico","fqdn":"sorkab.com","domain":"sorkab.com","tld":"com"},"ip":{"addr":"104.26.1.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sorkab.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 13:10:00 GMT","end":"Thu, 26 Mar 2026 14:07:40 GMT"},"fingerprint":{"sha1":"59:FC:A8:7C:F4:E5:97:97:15:84:9D:F7:64:A1:4B:40:AD:66:FE:DA","sha256":"E8:AD:DD:D2:77:5E:3E:F3:0B:93:19:3C:D5:02:69:D0:5A:74:86:15:7F:7B:38:36:F1:52:A0:9F:E6:1F:0E:F1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sorkab.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: referer, accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eNvFW4UPWKrmlMx7FXv8NwbbMrxFXQk9OXsSBaX1PnzWKPyS%2F0%2F4d0nUb6SJ%2BOJU4w1wLxnzHhnZJ0IWccPiCKWjGpygFa99%2FE8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b82f16bc87f0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pornlulu.com/images/node/436/4366361.avif?1753302646","fqdn":"www.pornlulu.com","domain":"pornlulu.com","tld":"com"},"ip":{"addr":"104.21.34.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornlulu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 02:28:25 GMT","end":"Sun, 15 Mar 2026 03:26:05 GMT"},"fingerprint":{"sha1":"21:3C:EB:41:61:4C:C0:6F:23:6D:03:4C:C0:05:64:E3:E7:CF:76:88","sha256":"4F:C5:D0:1A:A3:61:D0:60:E7:1B:A3:7D:20:4B:DF:41:88:1F:B0:8A:19:A0:8C:8C:2C:85:A1:22:29:BB:C5:F5"}}},"request":{"raw":"GET /images/node/436/4366361.avif?1753302646 HTTP/1.1\r\nHost: www.pornlulu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/avif\r\ncontent-length: 2436\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"68814676-984\"\r\nexpires: Sat, 03 Jan 2026 13:58:28 GMT\r\nlast-modified: Wed, 23 Jul 2025 20:30:46 GMT\r\nnow-time: Sunday, 28-Dec-2025 14:53:19 GMT\r\nserver: cloudflare\r\nx-cache: BYPASS\r\nx-date: Sunday, 28-Dec-2025 14:53:19 GMT\r\nx-host: www.pornlulu.com\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2883\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CfMZt7BTf28f5rGqv3fZqvrUA635x1RLxny%2F4NrtXygQxXS9Q2mK4OLb39Ouf8uFvbmrcV8tA%2F4Gyf38T6u62%2FkXGhI1TITqV4XT1AAcD4Y%3D\"}]}\r\ncf-ray: 9b82f15c08fe4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2436,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"407d963ed51387520ccc18edb0a3f74b","sha1":"be37cd11eb8792e541df6741cd5235ae837cc1b7","sha256":"71fc1d4645c88c9ef73da8542d1553e44ef7d7302e9297ca1af251abcd3f8c43","sha512":"c18f05bfd1e4e840a115e3ce06aa5d9928e0fa41d9807b013635c66207dbf30abdb6530f3b7e257bc486309db12053142dfeaed3682dd89da7e928f683925db0","ssdeep":"","tlshash":"a5413b1a2aeb0c0ae43e1074cc458a11733ab7fa42fac9073d0f61126cd92224b05b6e","first_seen":"2025-12-25T16:44:02.417819Z","last_seen":"2026-03-03T14:10:03.717204Z","times_seen":65,"resource_available":false,"data":null}},"time_used":3658,"timings":{"blocked":3464,"dns":1,"connect":12,"send":0,"wait":9,"receive":0,"ssl":158},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.pornorusskie.org/ruxp/img/1/1006_r2.jpg","fqdn":"img.pornorusskie.org","domain":"pornorusskie.org","tld":"org"},"ip":{"addr":"104.21.81.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pornorusskie.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 09:51:04 GMT","end":"Sat, 07 Feb 2026 10:49:51 GMT"},"fingerprint":{"sha1":"EC:56:C8:48:3E:53:78:FE:D1:60:06:91:3F:19:9B:0B:2E:7D:24:9C","sha256":"A2:D1:F9:68:F5:88:DA:1A:4F:0A:43:00:8E:89:9F:90:F3:F4:F4:49:EC:A5:A4:BF:B3:5A:C6:C0:3E:94:29:3E"}}},"request":{"raw":"GET /ruxp/img/1/1006_r2.jpg HTTP/1.1\r\nHost: img.pornorusskie.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17068\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Feb 2025 15:31:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67aa1bd7-42ac\"\r\nexpires: Sun, 18 Jan 2026 17:09:05 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccept-ranges: bytes\r\nage: 1283846\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BMnl2NJ50wkO6eiLLBJuMUx4pFfCREiyhyf5fJzKVr6gqU9Z6uNJElQToXY%2BAXWr4OqfOs%2FW%2FG2%2FbdDDvhqxJtNBuvYXq0LdORA88BhpmmwYPQ%3D%3D\"}]}\r\ncf-ray: 9b82f15cab35b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17068,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x224, components 3","md5":"4b798d0cbdb7d6bee7018927fae8f3f3","sha1":"c89d40c009a51baad382c48ada4e22ac41737f44","sha256":"76e2a93d830742bdf73776e921ea29e8158f45d986f9c1d95c8ed36b01ec57c5","sha512":"6d795db91c74625b166c820a2c94f6fdf037133c938f5b8055c00b7d69aae74d4011cd9c0813ee27ded86d78ffa4c54d18bab944185aa29fa7ebcbab9a9a450f","ssdeep":"384:IY9fqecfSFipW++H1dv6rC7RQ5qX2YqVjL1AQa:IOZcKFipW++HLv+C7RJQiB","tlshash":"a972d16270f9726eeffcf13c38925111f27abc13f46b6eddd165d9129a1ed81a821048","first_seen":"2025-07-28T19:46:15.160979Z","last_seen":"2026-01-03T13:47:52.959672Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3711,"timings":{"blocked":3415,"dns":1,"connect":14,"send":0,"wait":9,"receive":0,"ssl":244},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sorkab.com/wp-content/uploads/2022/03/0001232.jpg","fqdn":"sorkab.com","domain":"sorkab.com","tld":"com"},"ip":{"addr":"104.26.1.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sorkab.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 13:10:00 GMT","end":"Thu, 26 Mar 2026 14:07:40 GMT"},"fingerprint":{"sha1":"59:FC:A8:7C:F4:E5:97:97:15:84:9D:F7:64:A1:4B:40:AD:66:FE:DA","sha256":"E8:AD:DD:D2:77:5E:3E:F3:0B:93:19:3C:D5:02:69:D0:5A:74:86:15:7F:7B:38:36:F1:52:A0:9F:E6:1F:0E:F1"}}},"request":{"raw":"GET /wp-content/uploads/2022/03/0001232.jpg HTTP/1.1\r\nHost: sorkab.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: referer, accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m4bCbZhDfyRhcnWCoJw7Hi8kI53%2BTHFubvVLA64GF%2B7dLcEuuxkSl4XacxCMM8ntqzUwYmddVQRkHvDNvd%2BDFTbjNsxx3H4yoqE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b82f15c7a630daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":3739,"timings":{"blocked":3473,"dns":1,"connect":13,"send":0,"wait":13,"receive":0,"ssl":219},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/nosleep/0.11.0/NoSleep.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/nosleep/0.11.0/NoSleep.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3953\r\ncf-ray: 9b82f15abc67b515-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5ed16b69-29bf\"\r\nlast-modified: Fri, 29 May 2020 20:07:05 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1264238\r\nexpires: Thu, 24 Dec 2026 13:46:31 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9P%2F0uVWLsUldvKMz%2BKf%2FC6gWbhmptbadUw4PFn3wxg4ZJnW3rEp3R22CZFYzhjsi7QawVi4UuOYdCuzlOl84EjG2aPBg5GoS7KRCStzyZbBHRsLUND%2FPpsgOtujb2DwIlNCWciBo\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10687,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10613)","md5":"ea77f824de2ef57acb12e7cb6596365e","sha1":"10bad0dbdf30a0471c2c786b349daeb1dd19180e","sha256":"2b19d92ce83bf3b498f73103ba1240f09c84798b1f92aedf1491ccf0aa6f5e4c","sha512":"cf69dd76334b7318c829868da8a7e9c2097ef261555388132fc69f95d42e91420e2988056c3d93c830b20059422ae5a82e1109e3dce9127ccb0e23cc5ca27591","ssdeep":"192:N0rZbTPe+fl9SKRGyFgkw+wi+FrZJqbzr+5rA7wbUCzebIkm:N09voK7gzi+FrZJqbzrarAyUX5m","tlshash":"7a22f8b33133fd9f8fba085ac61d61045c7dbc6f4aa94091bb0884e86af4558ead5d34","first_seen":"2023-03-07T12:02:01Z","last_seen":"2026-04-26T04:37:41.979268Z","times_seen":2342,"resource_available":true,"data":null}},"time_used":3270,"timings":{"blocked":-1,"dns":3246,"connect":2,"send":0,"wait":13,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kompoz2.com/thumbs/eb/ca/a6/ebcaa64bf05f922f1fe19689bd95ba5f.webp","fqdn":"cdn.kompoz2.com","domain":"kompoz2.com","tld":"com"},"ip":{"addr":"172.67.206.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kompoz2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 07:14:15 GMT","end":"Wed, 11 Feb 2026 08:11:42 GMT"},"fingerprint":{"sha1":"4F:3A:BF:C4:26:DC:3E:D6:6F:EC:AC:D3:98:E9:55:36:AE:86:D9:73","sha256":"64:92:14:1C:04:BD:F4:CA:31:91:F5:46:FA:86:BC:25:04:3C:07:49:57:F1:13:CD:E2:DC:5E:55:D8:FD:77:5C"}}},"request":{"raw":"GET /thumbs/eb/ca/a6/ebcaa64bf05f922f1fe19689bd95ba5f.webp HTTP/1.1\r\nHost: cdn.kompoz2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:35 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 5844\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\netag: fe722c85999f28863958c82bcc0597f1\r\nlast-modified: Mon, 21 Apr 2025 12:27:00 GMT\r\nx-timestamp: 1745238419.92188\r\nx-trans-id: txe64f16356d9c46138b5f8-0068068ad3\r\nx-openstack-request-id: txe64f16356d9c46138b5f8-0068068ad3\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\ncache-control: max-age=31536000\r\nexpires: Sun, 04 Jan 2026 13:41:25 GMT\r\nx-cdn-host-id: ds8140,DS9225\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nage: 86710\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J%2FsB6PO7jbArYqtZbyd7EMfucOTcizkMg4LNjq0gC8eUgG8kDKAyv7IQaPQwonWg7tCXxG%2B4JmmBR%2BWtP6OUMpbLuItzFs9S1sviBss%3D\"}]}\r\ncf-ray: 9b82f1747b4a56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5844,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fe722c85999f28863958c82bcc0597f1","sha1":"11853e9c520d20ff76301dab05c01437323ed8d0","sha256":"2950e6dd7e958059190020fcfc0f1bdc2735a8dfddf473fedf5e5a8dfd7054cb","sha512":"c68b5dfc94d4cd7225610861a5c3da94354665260afb671a2b9f1bf61ad358fa2774e493a0e7e0efe0112bc1b495669fe44b2a488d20ad6a8889bdc69f76dc57","ssdeep":"96:C47RllVasjo6xoBR1/A2sdodx5SK6ysCO/m/mlBBy4PM12+PlLWP3hjdobsC/MKb:C47pQsjoTA2sd+S9rN/me70C3hWoC/MO","tlshash":"f6c1aeb2319220c5ac9b37b8bb457886efd30fa73652140e3d6acfc81ab6875f008c54","first_seen":"2026-01-03T13:47:52.964042Z","last_seen":"2026-01-08T04:21:04.557958Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7607,"timings":{"blocked":-1,"dns":7599,"connect":1,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preziktv.com/favicon.ico","fqdn":"preziktv.com","domain":"preziktv.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.291Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: preziktv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":166,"dns":64,"connect":25,"send":0,"wait":0,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kwai.com/favicon.ico","fqdn":"www.kwai.com","domain":"kwai.com","tld":"com"},"ip":{"addr":"23.215.2.149","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kwai.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 29 Jul 2025 08:23:35 GMT","end":"Sun, 30 Aug 2026 08:23:34 GMT"},"fingerprint":{"sha1":"4A:A1:45:2B:02:C8:86:65:84:02:D2:2B:EF:71:1F:70:E4:44:DF:B5","sha256":"CF:B9:73:AE:76:85:CD:63:FB:EE:A2:9A:2D:E7:B0:B4:2C:2B:CB:EB:4D:79:36:A4:4D:6C:98:85:76:5E:F4:DC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.kwai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/x-icon\r\ncontent-length: 2006\r\nlast-modified: Tue, 30 Dec 2025 08:34:47 GMT\r\netag: \"69538ea7-7d6\"\r\ncontent-security-policy-report-only: default-src 'self' 'unsafe-inline' 'unsafe-eval' *.mythad.com https://*.kwai-pro.com http://*.kwai-pro.com http://*.kwai.net https://*.kwai.net *.kwai.com *.snackvideo.in *.kwai.me *.kwai.app *.kwimgs.com *.yximgs.com *.cloudfront.net *.kuaishou.com https://*.gifshow.com http://*.gifshow.com https://log-sdk.ksapisrv.com https://www.googletagmanager.com https://gifshow-static.download.ks-cdn.com https://static3.avast.com https://translate.google.com https://www.gstatic.com https://fonts.gstatic.com https://connect.facebook.net www.google-analytics.com hm.baidu.com m.snackvideo.com http://*.ap4r.com https://*.ap4r.com https://*.typekit.net http://*.typekit.net ak-sgp-pic.snackvideo.in tx-sgp-pic.snackvideo.in ws-sgp-pic.snackvideo.in g-us-kampic.golden49.net g-us-kamcdn.golden49.net m.kwai.com sentry.kuaishou.com https://cdn.jsdelivr.net https://at.alicdn.com https://www.facebook.com https://snap.licdn.com https://px.ads.linkedin.com https://cdn.linkedin.oribi.io https://www.linkedin.com https://*.google.com https://*.google-analytics.com https://*.doubleclick.net asset: data: blob: android-webview-video-poster: ikwai: chrome-extension:;img-src http: https: asset: data: blob: android-webview-video-poster: ikwai: chrome-extension:;connect-src http: https: asset: data: blob: android-webview-video-poster: ikwai: chrome-extension:;report-uri https://csplog.kwai-pro.com/log/kwai/wwwkwai\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 13:46:40 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2006,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"8598787bb964772e7c58335630cd2184","sha1":"43bba31482ccfacc5e94cb05f7174ccfb22e1917","sha256":"45526cf4f38253c14eec86886eabcff170c500d7bbe04cda7e24db1a003fe4f3","sha512":"9755e5fbb5248ee9d09f0c32ac0f620829f61bdaf7d74fc6a31a45c60292e07e1241d7c64996474aac54ac2b326963b8ee6adfa61ab942b78264741e5862168d","ssdeep":"","tlshash":"d641e8ae8e969c4fa5c060169238c384b9b51c87e1447de350026d8ee06be98771b1eb","first_seen":"2025-07-25T08:09:31.5089Z","last_seen":"2026-04-12T19:29:51.679246Z","times_seen":456,"resource_available":false,"data":null}},"time_used":5891,"timings":{"blocked":268,"dns":5377,"connect":9,"send":0,"wait":205,"receive":9,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtgallery.net/tb/the-first-sex-exp.jpg","fqdn":"rtgallery.net","domain":"rtgallery.net","tld":"net"},"ip":{"addr":"5.63.144.84","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtgallery.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 17:00:08 GMT","end":"Tue, 17 Feb 2026 17:00:07 GMT"},"fingerprint":{"sha1":"5D:8A:5C:FE:24:B0:28:D3:1B:23:AE:94:5D:BC:79:7D:DD:8F:20:3F","sha256":"7A:EB:AE:AA:18:8B:DF:0F:6B:03:FE:39:39:5C:2D:B6:E1:64:4C:4E:FC:EF:35:B2:E5:8E:27:F9:70:BF:DB:C3"}}},"request":{"raw":"GET /tb/the-first-sex-exp.jpg HTTP/1.1\r\nHost: rtgallery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Sat, 03 Jan 2026 13:46:31 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 42978\r\nLast-Modified: Sun, 01 Sep 2019 11:50:05 GMT\r\nConnection: keep-alive\r\nETag: \"5d6bb06d-a7e2\"\r\nCache-Control: private, max-age=600, must-revalidate\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42978,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, comment: \"Created with GIMP\", progressive, precision 8, 480x360, components 3","md5":"883e3da645c0f8f71a5832429249df07","sha1":"f245c058c7dfcaaadacca8dec3efa69249e54d6b","sha256":"63de179c1c3cb9131e75111957615b1408c00c8f2c96be937e3147c89972664b","sha512":"bf533d9b674a148caaacc19455462d20a59b332317f269c02e6c8516698628ef8dc0d95b1a9409427f830ce02c7e4c1ad5cbce80bc12c835d9ff01df9016a308","ssdeep":"768:UVxn16NQ8AEtAhOx30nw7OZrFTzOPkyTgzxnJn74O+K3FtW/rs8dDHnP40p:q118FAPha3j7QrMGJn74O+CFtWBDA0p","tlshash":"3113f16cf72acfe4d63a5938127d8fbc4b53de00498dabb81cc61424174e6f1c8d1666","first_seen":"2024-04-22T00:01:58Z","last_seen":"2026-01-20T12:10:26.247066Z","times_seen":56,"resource_available":false,"data":null}},"time_used":3882,"timings":{"blocked":3467,"dns":1,"connect":100,"send":0,"wait":37,"receive":19,"ssl":222},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mymediaing.my/sdk/p/?zid=9801","fqdn":"cdn.mymediaing.my","domain":"mymediaing.my","tld":"my"},"ip":{"addr":"104.21.71.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mymediaing.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 13:10:30 GMT","end":"Mon, 23 Mar 2026 14:09:10 GMT"},"fingerprint":{"sha1":"F5:AF:59:F3:C7:A7:98:58:AF:01:DA:E8:14:01:49:7E:03:72:7D:E4","sha256":"55:43:8E:96:BC:AE:9C:D0:01:4C:2F:6C:1C:B7:7E:54:4A:21:21:A7:FF:47:5A:1D:8E:87:C6:4A:60:D9:BA:AD"}}},"request":{"raw":"GET /sdk/p/?zid=9801 HTTP/1.1\r\nHost: cdn.mymediaing.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:32 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YbvKfKWhtvWWRlMz21PeS5xzOOfyaEkFuFw34Aq9rNqkNkFumhwEyoXO2wngxEswdoxXSeaVgztOwIY%2FUsklINan%2BsJp1aDtTnLp8gabLFc1\"}]}\r\nx-time: 1767447992\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b82f15f78694c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52894,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (52408)","md5":"30ce9aa09dc3c57eb33877503ec95907","sha1":"dc550297c6a7afffe1476389995a1de9089f1114","sha256":"d36a0ef928f1c18e82fcac655c24f545c7d909ab16c593058d7f7152265153a0","sha512":"5a084e66e8f40f71752d39e9eba41ef1ebe7b80c470e161b6e7d62cf962ad85a6bad561e9ffdfffaf9ffdb4a4e6169bfb62bce1b0380c48d1bfabe35ae56cd66","ssdeep":"1536:nFiJtBRiqSJQUUBU1wpIbS0UboLxCSMzHUgNvFq:nDqSJQUUBU1wpIbS0UboLxCSMzHHC","tlshash":"e13392982fd0b94053dbab7b772fb4e5f4571c2f6a81484fe225bc20359071beaa5930","first_seen":"2026-01-03T13:47:52.974018Z","last_seen":"2026-01-03T13:47:52.974018Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4086,"timings":{"blocked":-1,"dns":4003,"connect":1,"send":0,"wait":71,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/original/2X/5/5d67feee2cfe9ad78fd717e2e916fb50040ede54.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:32.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/original/2X/5/5d67feee2cfe9ad78fd717e2e916fb50040ede54.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:32 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haha888.xyz/favicon.ico","fqdn":"haha888.xyz","domain":"haha888.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.234Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: haha888.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241028-15/9b8c17877ecfe6b1ded6c644e53569b9.jpg","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.048Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241028-15/9b8c17877ecfe6b1ded6c644e53569b9.jpg HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"avatars.mds.yandex.net/get-vthumb/4673302/f6161d6c26f561b98926373f61e81819/564x318_1","fqdn":"avatars.mds.yandex.net","domain":"yandex.net","tld":"net"},"ip":{"addr":"87.250.247.182","port":80,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.070Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /get-vthumb/4673302/f6161d6c26f561b98926373f61e81819/564x318_1 HTTP/1.1\r\nHost: avatars.mds.yandex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 13:46:28 GMT\r\nContent-Type: image/webp\r\nContent-Length: 6528\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nLast-Modified: Tue, 30 Sep 2025 10:25:36 GMT\r\nCache-Control: max-age=604800,immutable\r\nX-Request-Id: 96a8499ea5e4f391\r\nNEL: {\"report_to\": \"network-errors\", \"max_age\": 600, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nReport-To: {\"group\": \"network-errors\", \"max_age\": 600, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/s3_nel?datacenter=VLA\"}]}\r\nTiming-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6528,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 564x318, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"60ae032ac567876dbb0510687dbfa711","sha1":"f7af682de08e80c0314ba18c9ee508d1971a015f","sha256":"e8504dc8246e8d35a482b5968fa68ccbbf58f718b395bb516aa62be5c182f930","sha512":"605290a989f03f4f8bbce311f508fc8434c77a91ef22664e3405e09dd2c8e781670e5cfd1507215807e5a377bf242ea3894ebd7af1d27dc9bbbfc148ae009db9","ssdeep":"192:cXthiHyCCZn9jzFInk9AVZeAL6nIKfDvhXR/e:cXthiNCZR5InSAV05IC9e","tlshash":"38d1a033fec4cfb4421dd1e504d3fa4ca980598616bf5061484e5bbc15d40be2e364af","first_seen":"2026-01-01T07:51:02.722438Z","last_seen":"2026-01-08T04:21:04.257109Z","times_seen":3,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.vidmo.pro/thumbs_320/fe/f9/fef9ad028760029819ec06c9905fafce/13162992.jpg","fqdn":"en.vidmo.pro","domain":"vidmo.pro","tld":"pro"},"ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"en.vidmo.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 20:48:10 GMT","end":"Thu, 19 Feb 2026 20:48:09 GMT"},"fingerprint":{"sha1":"B8:8B:9C:2B:E9:53:D3:85:0E:57:74:8D:32:07:72:DF:38:F3:91:DA","sha256":"9B:B3:9F:DD:FB:1B:36:C3:04:60:BF:DF:87:AA:AB:5D:F6:0D:45:20:77:9B:29:19:5F:C4:B6:F1:04:C9:23:3E"}}},"request":{"raw":"GET /thumbs_320/fe/f9/fef9ad028760029819ec06c9905fafce/13162992.jpg HTTP/1.1\r\nHost: en.vidmo.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29144\r\nlast-modified: Sun, 23 May 2021 15:35:46 GMT\r\nexpires: Thu, 30 Jan 2025 22:24:56 GMT\r\ncache-control: max-age=604800, public, no-transform\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29144,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 320 x 180","md5":"813d6c1904e6b6c2bced58ae48237101","sha1":"64e4a4edaf8ae6e71b80d1d4ccee477a594aaa6e","sha256":"44c9b7a1e40a543f6cc7f990cd31b89f78ec56b5f6fd942e3bac7d8c047a1f7a","sha512":"27c2f0b64f47dc9e8d800500bc673c61e633bedd41a0e6507924297b23896f6a80591dfc090da44fe5f3e451f3edb2f3bd3e399613dab51c61fc0f534ee02f35","ssdeep":"768:EhgQDDGvu5Q/x9a94YpJmaosndlPexAWOPN0MyRCCCZ4bbnDaIt:EhgQDivuQ9aJptoudlAzQpZgb+K","tlshash":"9bd2f2cf9c294fd784b0a06d3df6f0aa72e7b31187a3154a82d8ab506951c137c98b0b","first_seen":"2025-03-21T10:58:41.305282Z","last_seen":"2026-01-21T05:47:16.485561Z","times_seen":18,"resource_available":false,"data":null}},"time_used":3515,"timings":{"blocked":3408,"dns":1,"connect":94,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"en.vidmo.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30399\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 11:02:00 GMT\r\nexpires: Sun, 03 Jan 2027 11:02:00 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 9871\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86927,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-27T16:18:26.397483Z","times_seen":123485,"resource_available":true,"data":null}},"time_used":3431,"timings":{"blocked":-1,"dns":3212,"connect":8,"send":0,"wait":40,"receive":0,"ssl":168},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.dailymail.co.uk/i/pix/2016/03/27/02/3296525300000578-0-image-m-1_1459042617818.jpg","fqdn":"i.dailymail.co.uk","domain":"dailymail.co.uk","tld":"co.uk"},"ip":{"addr":"96.6.16.210","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dailymail.co.uk","organization":"Associated Newspapers Limited"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sat, 24 May 2025 00:00:00 GMT","end":"Tue, 26 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F1:EE:A0:E8:EA:F2:ED:1C:6A:AC:0E:BD:56:37:A9:EB:79:5A:E7:6B","sha256":"A1:24:E1:38:B1:6D:B8:2B:F2:B8:20:2A:73:3D:80:50:B7:39:FE:72:EB:3E:BA:D1:41:AF:C3:A9:8B:EF:03:A3"}}},"request":{"raw":"GET /i/pix/2016/03/27/02/3296525300000578-0-image-m-1_1459042617818.jpg HTTP/1.1\r\nHost: i.dailymail.co.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\netag: \"ab2e206d5bffc87c277d0df0e2717798:1459084683\"\r\nlast-modified: Sun, 27 Mar 2016 13:18:03 GMT\r\nserver: AkamaiNetStorage\r\ncontent-length: 4540\r\nedge-cache-tag: /i/pix/2016/03/27/02/3296525300000578-0-image-m-1_1459042617818.jpg\r\ncache-control: max-age=2592000\r\nexpires: Mon, 02 Feb 2026 13:46:27 GMT\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4540,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, comment: \"Optimized by JPEGmini 3.11.5.0 0xd9c6b889\", baseline, precision 8, 154x115, components 3","md5":"ab2e206d5bffc87c277d0df0e2717798","sha1":"70a9c17b12eafbd68edbf38979470c606209c17f","sha256":"db6c20ce6e3d7a6d790676135a42cb513f99363fce7471f5611fd70f9f561e48","sha512":"eb32c1947e8218d38f8c0ef854cbfe6a7cd9fe01b48fe30d19bffd31d3c10d207efb784f64b97581d9889dd6ad8c0b8973e9a36764879b807c9d0c72374e6e9f","ssdeep":"96:5pG37jR6fmLaZipKogRYoL4splohMTKDy5yAtJAu:5o37J+ZiplKLhpuS9yAtJAu","tlshash":"c8918e622e8b9f76ce917ab286f42d7931867c4024695dfc8d34aa96fc31ac603187c0","first_seen":"2024-08-20T01:33:09.427825Z","last_seen":"2026-01-24T19:30:50.808718Z","times_seen":12,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":56,"dns":0,"connect":2,"send":0,"wait":10,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js?1","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:42.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /ajax/libs/jquery/3.3.1/jquery.min.js?1 HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30399\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 28 Dec 2025 18:07:43 GMT\r\nexpires: Mon, 28 Dec 2026 18:07:43 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 502739\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86927,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-27T16:18:26.397483Z","times_seen":123485,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"im2.mediacont.net/xxxzooporn/thumbs/13/117-on.jpg","fqdn":"im2.mediacont.net","domain":"mediacont.net","tld":"net"},"ip":{"addr":"104.160.9.33","port":443,"asn":63119,"as":"Angelnet Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mediacont.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 03:04:33 GMT","end":"Fri, 03 Apr 2026 03:04:32 GMT"},"fingerprint":{"sha1":"E0:8B:9C:49:A4:13:05:86:F9:23:3C:A0:64:1D:A9:3C:C2:06:91:8D","sha256":"E0:00:CD:0F:30:B4:55:FF:74:4A:36:9E:39:E4:8D:71:E3:BC:4B:8F:F1:92:53:95:9B:55:54:DC:6D:33:A9:6E"}}},"request":{"raw":"GET /xxxzooporn/thumbs/13/117-on.jpg HTTP/1.1\r\nHost: im2.mediacont.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 13:46:31 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 12305\r\nLast-Modified: Thu, 03 Nov 2022 16:49:08 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=30\r\nETag: \"6363f104-3011\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nX-Request-ID: da4d24cdfc2560137ff2c07e60dce9a5\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12305,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x175, components 3","md5":"e2b94f208d695df098726f5777865ebe","sha1":"87ef0e31aaed2dfaacd1e349bb3403b892aba57e","sha256":"455273d060d09841de8b4393cb45b41d4519c510f2adfa47b8954f305fe842d4","sha512":"3131c1b3bcf8ef21f8e9233cf8a1ae498532e48327be94e3d2f6f5047b9f3fb3702ecc0bc0c1744f86bb29c70df875a5f31f68b5348c43a44ae6e1d8c388937e","ssdeep":"384:jF7s5WKHjuRclVPummwEPRctrYHOBSe0YbXi:SVDHlVPump8qKu/0Y2","tlshash":"8142c03d6d98d51e6b7f3c32331c522161cde432e31135ad8baa798853be78553c909b","first_seen":"2025-06-29T13:38:06.909395Z","last_seen":"2026-01-20T03:25:23.311089Z","times_seen":42,"resource_available":false,"data":null}},"time_used":3804,"timings":{"blocked":3408,"dns":1,"connect":50,"send":0,"wait":46,"receive":0,"ssl":251},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooporner.com/favicon.ico","fqdn":"zooporner.com","domain":"zooporner.com","tld":"com"},"ip":{"addr":"104.21.72.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooporner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Nov 2025 02:12:50 GMT","end":"Thu, 19 Feb 2026 03:11:36 GMT"},"fingerprint":{"sha1":"B3:56:06:32:90:21:12:D0:8C:12:A6:88:5F:3F:70:C0:82:C5:66:88","sha256":"3B:AA:33:56:81:2D:26:BB:5E:09:6A:DE:73:A2:D5:57:34:77:D0:06:66:30:48:13:E2:60:49:12:23:D0:59:9F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: zooporner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://zooporner.com/faviconico/\r\nserver: cloudflare\r\nset-cookie: ASPro_1382933ca042bef776e8100bd5eb8ac5=f7mrc8hc7i6naei05kuh22urb9; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IAXBhf9UvnB5KZE2fD0caVT5UEnJA3EWq0cxpc26R%2B1Z2DcJj6qFs6xTksoqbW9b86snqh1D2%2FuC829EXgGaKtKIxWGZeQCWUnz55qA%3D\"}]}\r\ncf-ray: 9b82f16c089eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idolerotic.net/wp-content/uploads/2022/04/cropped-favicon-32x32.png","fqdn":"idolerotic.net","domain":"idolerotic.net","tld":"net"},"ip":{"addr":"153.122.86.155","port":443,"asn":131921,"as":"GMO GlobalSign Holdings K.K.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"idolerotic.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 20:51:46 GMT","end":"Mon, 16 Mar 2026 20:51:45 GMT"},"fingerprint":{"sha1":"17:18:52:B8:E4:3F:30:B3:F8:EB:7F:2A:33:97:B3:83:AB:44:29:5F","sha256":"B6:0E:1F:AA:C6:B7:39:2B:7D:23:19:54:89:1E:15:F8:15:B2:7F:E7:92:C0:34:3F:F9:8F:DB:25:85:5C:3C:EB"}}},"request":{"raw":"GET /wp-content/uploads/2022/04/cropped-favicon-32x32.png HTTP/1.1\r\nHost: idolerotic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 03 Jan 2026 13:46:35 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 30 Apr 2022 01:48:52 GMT\r\nETag: \"54-5ddd55c7791b5\"\r\nAccept-Ranges: bytes\r\nContent-Length: 84\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":84,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 1-bit colormap, non-interlaced","md5":"d146cb398929f06017919596f5c2335b","sha1":"fb4a61bde5a5b06aee6cec64ecfbe273c9758288","sha256":"9c8abfd90c9d3bdf792c35be6cc84b42f37a03b99ec4c52282ae4c0510d98841","sha512":"9d6f58cfab14ee1195dfbf25de6a3d7699e204fad6850ef441111ed905492b1b4f40c4706492dc754438c2d0847c186864318c7e502652a170dba9e76064f8cf","ssdeep":"","tlshash":"1ba012d629601c23d28802632115c010e9a2412605370017121845259631000d864351","first_seen":"2025-02-26T09:30:37.529667Z","last_seen":"2026-01-20T20:48:23.879634Z","times_seen":28,"resource_available":false,"data":null}},"time_used":625,"timings":{"blocked":325,"dns":0,"connect":0,"send":0,"wait":299,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blacktowhite.net/data/xfmg/custom_thumbnail/370/370577-a1e73a8e7b6dd0423e20624b7b980897.jpg?1597445239","fqdn":"www.blacktowhite.net","domain":"blacktowhite.net","tld":"net"},"ip":{"addr":"192.243.63.82","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"blacktowhite.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Jul 2025 00:00:00 GMT","end":"Fri, 28 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"29:7F:D6:17:0A:55:E3:DB:E8:59:A0:3D:66:88:A5:35:86:B8:EF:80","sha256":"16:D2:4C:56:09:A6:4E:FB:DC:AF:6D:06:8A:B4:A7:96:B1:B5:E6:6B:82:A7:EE:D8:13:2C:AA:59:3C:FC:F0:43"}}},"request":{"raw":"GET /data/xfmg/custom_thumbnail/370/370577-a1e73a8e7b6dd0423e20624b7b980897.jpg?1597445239 HTTP/1.1\r\nHost: www.blacktowhite.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.17.6\r\ndate: Sat, 03 Jan 2026 13:46:29 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16080\r\nlast-modified: Fri, 14 Aug 2020 22:47:19 GMT\r\netag: \"5f371477-3ed0\"\r\nexpires: Sat, 17 Jan 2026 13:46:29 GMT\r\ncache-control: max-age=1209600\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.17.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16080,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x300, components 3","md5":"6c60f2b947ce194fb0b4657451ca1f9f","sha1":"3a4d44f594c58f6bf84ecca520c546727b362b65","sha256":"8012034240a7f02a9b4a6544aa9601c17e7118e0d5a9d565673832a0ab1805b5","sha512":"50ab6cc48c20c2cbf015d66967eee946daa82eeacdec378ac33731e8d62a11cc90b3c96e563c8c3e6cc3da6fd4f2feca39e6cc37da80e47fee34640b35830570","ssdeep":"384:L37Y0TUUleQ0Px4g6HHF3uvfuj3Md8/HK0wDMHzk3yA5PmJgzbwa:L3dxeGg6HHF3S2j8u3woYifSbwa","tlshash":"b372c011ba125401fd0b2b791441d261884413fb61b2967bb65e3acadfbbccfdd6e432","first_seen":"2026-01-03T13:47:53.029669Z","last_seen":"2026-01-03T13:47:53.029669Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2946,"timings":{"blocked":1372,"dns":20,"connect":92,"send":0,"wait":92,"receive":94,"ssl":1275},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241010-10/c242b8e4f3f014e9f72e148d12aadb48.png","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.034Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241010-10/c242b8e4f3f014e9f72e148d12aadb48.png HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haha888.xyz/video/data-setup","fqdn":"haha888.xyz","domain":"haha888.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:32.215Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /video/data-setup HTTP/1.1\r\nHost: haha888.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.jwplatform.com/favicon.ico","fqdn":"content.jwplatform.com","domain":"jwplatform.com","tld":"com"},"ip":{"addr":"3.164.240.118","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwplayer.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"09:07:C2:01:A5:60:34:94:DE:6A:EB:3B:97:CF:FD:01:36:13:81:D7","sha256":"1D:20:19:08:4E:20:3E:95:A5:35:7B:10:BF:2B:39:A0:C7:FB:BF:4D:E7:F7:DE:51:59:72:68:2C:8F:BB:B3:D7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: content.jwplatform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\ncontent-length: 150\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\nserver: openresty\r\nx-cache: Error from cloudfront\r\nvia: 1.1 a015763506a36624e56a8a469e3484c4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 199ULnwIVkdBPPm-rYckwu-mI5V4WSVVjNH8qzOeh9oLvC-MQ1dAjg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img2.russkoeporno.tv/ruxp/img/1/19573_r2.jpg","fqdn":"img2.russkoeporno.tv","domain":"russkoeporno.tv","tld":"tv"},"ip":{"addr":"172.67.180.196","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"russkoeporno.tv","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 08:15:31 GMT","end":"Mon, 09 Feb 2026 09:13:57 GMT"},"fingerprint":{"sha1":"1C:4F:61:DF:25:96:5A:5E:2E:2E:28:CF:41:9B:AD:26:9B:71:3F:55","sha256":"54:6F:AD:F5:D0:22:36:E9:39:7F:56:8D:0A:28:CE:1C:22:3A:93:47:77:A6:94:3A:8E:63:CB:1C:62:CF:B6:EC"}}},"request":{"raw":"GET /ruxp/img/1/19573_r2.jpg HTTP/1.1\r\nHost: img2.russkoeporno.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18364\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Feb 2025 15:46:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67aa1f38-47bc\"\r\nexpires: Sun, 18 Jan 2026 10:19:17 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccept-ranges: bytes\r\nage: 1308430\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8wVPHT9eaJchUIvRv7QhFtesX%2FhHFOOnt7In7YH9CcNBGMiHhQfWhfiOnzj%2BxDrbqKT2vHXDaa2Brko3KGfhZFKpq9UMn%2BcZHT1YrliJIFjReg%3D%3D\"}]}\r\ncf-ray: 9b82f1434d7e568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18364,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x224, components 3","md5":"3ec7d9e2305b7ae9d38f25c7a9822ec1","sha1":"e15ac1eed80cff9fbde87697e3fc5729e0dcbf31","sha256":"24fd121f141787876614fced6011b1d9dd886752e79098ed1a0645ecb2113c37","sha512":"93d7d673e7ab45cd72322a7512f797cafb778dea86f97e21f4f4bcf61a28ec305ecced743090eb8c73df1e0d78fa2262f2da3dc14154e56cb7745c52394ce2a5","ssdeep":"384:eHUjFpiP4w1aYOKEpeSMpf+E3rncBzWqJxHmg7beptcz9NNJg+XlDZzYd0:poQw1CKEpe5pGGm/JVm1qNjNZsd0","tlshash":"1282d18f32895b57d81ee8fc7d9a140930ece55b46352d8c75b77e5a4fe3d008d22aa0","first_seen":"2026-01-03T13:47:53.033717Z","last_seen":"2026-01-03T13:47:53.033717Z","times_seen":1,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":3,"dns":63,"connect":3,"send":0,"wait":10,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idolerotic.net/wp-content/uploads/2016/08/ZEUSUB-001-T.jpg","fqdn":"idolerotic.net","domain":"idolerotic.net","tld":"net"},"ip":{"addr":"153.122.86.155","port":443,"asn":131921,"as":"GMO GlobalSign Holdings K.K.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"idolerotic.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 20:51:46 GMT","end":"Mon, 16 Mar 2026 20:51:45 GMT"},"fingerprint":{"sha1":"17:18:52:B8:E4:3F:30:B3:F8:EB:7F:2A:33:97:B3:83:AB:44:29:5F","sha256":"B6:0E:1F:AA:C6:B7:39:2B:7D:23:19:54:89:1E:15:F8:15:B2:7F:E7:92:C0:34:3F:F9:8F:DB:25:85:5C:3C:EB"}}},"request":{"raw":"GET /wp-content/uploads/2016/08/ZEUSUB-001-T.jpg HTTP/1.1\r\nHost: idolerotic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 03 Jan 2026 13:46:31 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 05 Nov 2017 00:21:43 GMT\r\nETag: \"5c66-55d31529704a9\"\r\nAccept-Ranges: bytes\r\nContent-Length: 23654\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":23654,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 201x285, components 3","md5":"73f79b335c83a9b10b5bc54c6037569c","sha1":"36c94ff27220b088f5f136a18e567f4f1e858ca0","sha256":"0d8a09fc6945a238e129ab090fa39c9ae11b48629e4e122f66333de588bb2cb9","sha512":"4445768f5fa991509ae102837dcd7528b47a0a37fe82cb6ed2c1931f70e34b1804009f95ae8feba77f156dcd01bfd902b823fa569d88843693c8d7aaf20dda89","ssdeep":"384:TS1XISrP4xrR4TeigwTP6l8c4S4y6HIIqoHvxtzM0VIhiV3dVv4uFdIk62bOsFnh:TS14Sad4bLTP6X4S4y6H9vLzMCIqt9FB","tlshash":"c8b2e029ada0134a4b05c3b3cd0c045a9a59769b24b6c7437c57f9ffd2c729b68f2278","first_seen":"2025-11-24T03:08:53.426241Z","last_seen":"2026-01-20T20:48:23.948243Z","times_seen":9,"resource_available":false,"data":null}},"time_used":8929,"timings":{"blocked":3861,"dns":309,"connect":299,"send":0,"wait":307,"receive":883,"ssl":2099},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p16-kimg.kwai.net/kimg/EKzM1y8qmQEKAnMzEg1waG90by1vdmVyc2VhGoMBdXBpYy8yMDIyLzA1LzE3LzE1L0JNakF5TWpBMU1UY3hOVEExTURWZk1UVXdNREF4TWprd05EZzBNVEl4WHpFMU1EQTJNRGd5TWpRek9ESTFNRjh5WHpNPV9vdXVfQmE5MzllMjI4ZjJhMzY3MjUwYzY1MTYxOTA4MWY1MmIzLndlYnA.webp","fqdn":"p16-kimg.kwai.net","domain":"kwai.net","tld":"net"},"ip":{"addr":"193.212.191.26","port":443,"asn":2119,"as":"Telenor Norge AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kwai.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 16 Apr 2025 08:08:20 GMT","end":"Mon, 18 May 2026 08:08:19 GMT"},"fingerprint":{"sha1":"88:41:08:16:B1:09:65:11:BC:B7:74:9F:3C:2B:7F:E4:B7:29:47:FC","sha256":"A7:08:07:07:A1:B9:AB:05:EF:83:67:DA:40:EB:1F:28:60:07:40:83:60:0A:E5:69:22:53:7E:B8:ED:61:8B:E7"}}},"request":{"raw":"GET /kimg/EKzM1y8qmQEKAnMzEg1waG90by1vdmVyc2VhGoMBdXBpYy8yMDIyLzA1LzE3LzE1L0JNakF5TWpBMU1UY3hOVEExTURWZk1UVXdNREF4TWprd05EZzBNVEl4WHpFMU1EQTJNRGd5TWpRek9ESTFNRjh5WHpNPV9vdXVfQmE5MzllMjI4ZjJhMzY3MjUwYzY1MTYxOTA4MWY1MmIzLndlYnA.webp HTTP/1.1\r\nHost: p16-kimg.kwai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 29352\r\nkrtid: gwb5c2d929c9fc4287adf3081c4286934f\r\nx-amz-cf-pop: SIN3-P1\r\nx-amz-cf-id: LuKmPKlIQ1r7Kp6xfeC1w2oe8K7SdIrZC0myDkrU3eG_oDRQpu4Tmg==\r\ncache-control: max-age=31536000\r\nexpires: Sun, 03 Jan 2027 13:46:31 GMT\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-mon-iucid-del: 1668707\r\nx-ks-request-id: 0.f7bed4c1.1767447991.81281ce\r\nx-ks-cache: Hit from 193.212.191.26\r\nx-mai-cache-status: Y0-L0-0\r\nx-ks-client-ip: 195.64.118.152\r\nkwaisign: null\r\ntiming-allow-origin: *\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC\r\naccess-control-allow-headers: origin,range,hdntl,hdnts\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":29352,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 322x574, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"72b54dc0672b80104f6264d85055daae","sha1":"007702dee756be36239b6f1a14088f4f8871c708","sha256":"9233043a6a82ce47b4a945079db683a78882eea128c675569f47943e7d8a18b7","sha512":"1bbfa15ce5d34bd33112054da4ca0e83c0a88943db3cb097a84b9a769b24e98c7327235fc07d6bc7ffeefab3a7de1781aaba727c8188cea35731c5292d5973e7","ssdeep":"384:mB4q6HL99181t9GJrY2/2NX74HMddP8p/LpyNDSedxw4J/PwPxKQ4fZrhEwlFPwG:q6B918svOBaPpuSSXuYQ4hhEwLzijEJ9","tlshash":"9fd2f1d9209ebda741a72f02980a4f608953cb85cd68668bc95ff39f52c23c33224757","first_seen":"2024-12-10T06:27:48.810658Z","last_seen":"2026-03-01T22:30:17.201578Z","times_seen":18,"resource_available":false,"data":null}},"time_used":3750,"timings":{"blocked":3444,"dns":1,"connect":3,"send":0,"wait":4,"receive":1,"ssl":250},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stickamvids.net/favicon.ico","fqdn":"stickamvids.net","domain":"stickamvids.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.317Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: stickamvids.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":679,"timings":{"blocked":-1,"dns":459,"connect":101,"send":0,"wait":0,"receive":0,"ssl":119},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/e0dd813e0db54fb21ce9ad4d447b9350142b6fa8/cover/5_505_259?ih=1","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"104.20.25.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:42:58 GMT","end":"Sat, 28 Feb 2026 05:41:39 GMT"},"fingerprint":{"sha1":"B4:BA:DA:BD:C3:AB:12:42:98:CF:30:EE:AC:A0:FA:D3:F0:9F:B6:F3","sha256":"52:F0:DB:63:D9:15:13:E1:B0:3F:18:E2:A8:9B:90:97:13:68:24:71:E9:DC:7B:CA:D9:C3:17:79:92:27:EE:B7"}}},"request":{"raw":"GET /videos/e0dd813e0db54fb21ce9ad4d447b9350142b6fa8/cover/5_505_259?ih=1 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 44146\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Mar 2025 10:11:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"67c6d1da-ac72\"\r\nexpires: Fri, 26 Sep 2025 08:04:36 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=7200\r\nt-cache: LHIT\r\naccept-ranges: bytes\r\nage: 3078233\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h00%2Fl7lRPRxS%2B7K6VFLoleSMZMuBtWAtDhoEJD7jaliW1CKb27I7Gmi1GU2I%2BGPqljrogLQQOmlj%2FyfZ5IOkDZQYH%2FwEGtI%2FXNPh\"}]}\r\ncf-ray: 9b82f15c6a2f0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44146,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.107.100\", baseline, precision 8, 505x259, components 3","md5":"1343d93872a3a249d6be50dc2ac52716","sha1":"6471c42f5d8f1cb7a5e83b4167c5cd93bf0ed247","sha256":"ab1dddfff3e572191b56adaca11a1b57e1bec976df2a119b1176c8c1b623f5cd","sha512":"1de1826103f112ab9fa72166dc91ca03a4a43b73dc63fd1379021d63df7e0a90b56889a32ae1dcc7def19656510388deb8c5f1c21bc920f41202a208961994c5","ssdeep":"768:e5xa18PNvwb4KJjCees8zu6HIXkeTXpJX0GrcBTmGNK7NVdtJf0qrPw:eXaOFcgtHI0eTMGrO2DrlBr4","tlshash":"9313f17b1d10465ad59614b5a8092ea8f3cd02d0312cb9acb9e768b2fec46b7a4940f8","first_seen":"2025-06-18T14:32:35.113773Z","last_seen":"2026-03-01T16:28:28.860266Z","times_seen":28,"resource_available":false,"data":null}},"time_used":3742,"timings":{"blocked":3490,"dns":1,"connect":12,"send":0,"wait":7,"receive":0,"ssl":202},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"timg216.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"en.vidmo.pro/thumbs_320/19/4d/194da0025af8f106768597b9401654c5/14802579.jpg","fqdn":"en.vidmo.pro","domain":"vidmo.pro","tld":"pro"},"ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"en.vidmo.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 20:48:10 GMT","end":"Thu, 19 Feb 2026 20:48:09 GMT"},"fingerprint":{"sha1":"B8:8B:9C:2B:E9:53:D3:85:0E:57:74:8D:32:07:72:DF:38:F3:91:DA","sha256":"9B:B3:9F:DD:FB:1B:36:C3:04:60:BF:DF:87:AA:AB:5D:F6:0D:45:20:77:9B:29:19:5F:C4:B6:F1:04:C9:23:3E"}}},"request":{"raw":"GET /thumbs_320/19/4d/194da0025af8f106768597b9401654c5/14802579.jpg HTTP/1.1\r\nHost: en.vidmo.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11986\r\nlast-modified: Fri, 15 Jul 2022 05:53:08 GMT\r\nexpires: Wed, 30 Apr 2025 20:22:36 GMT\r\ncache-control: max-age=604800, public, no-transform\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11986,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3","md5":"c20d0b3d81fd986ea762d228128737b3","sha1":"231860d28cb3b25804ffbdeec556f5a2b8b3dd2a","sha256":"ad6347aa28237221886fbd18f3add9635b5fd8a78fc013e5374e18ba80b106d6","sha512":"c5471c9093117ab949b2cca1c10f9eb4a53bbe0a7268ca3922fcbd7f3fc69d06cc07083b6d4846d03cccb96458e9164a1ab24a16c858c8ea643fcf20b6e71be4","ssdeep":"192:mAN0WGGEcYH0/nQY9bu8YZ7lImkX0GsW7Ve0y5rvVAB0LoAOx/Uq/Mv8fPs89fWG:mUhGgm0/QY9bxol45siVsrvVAUo7x/U0","tlshash":"2432ae1bae0442aac42cc36f0b1a7b1e61be784111b68bd794161d8e7b306d7dd9e2e1","first_seen":"2025-05-23T07:10:39.957054Z","last_seen":"2026-01-15T02:29:14.915456Z","times_seen":20,"resource_available":false,"data":null}},"time_used":3563,"timings":{"blocked":3391,"dns":1,"connect":94,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"en.vidmo.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.com/","fqdn":"www.9188porn.com","domain":"9188porn.com","tld":"com"},"ip":{"addr":"172.67.220.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9188porn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 09:28:02 GMT","end":"Mon, 02 Mar 2026 10:23:10 GMT"},"fingerprint":{"sha1":"A6:75:08:AB:20:D7:2A:E6:2B:50:C1:DA:59:F5:40:7B:7D:28:9E:C5","sha256":"83:9C:6B:2B:35:92:4D:96:4D:22:2B:45:AC:B4:E7:32:B2:F7:DA:26:69:E8:C4:BF:67:0F:41:0C:14:74:D9:09"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.9188porn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IqKsKVus2yXrBeuuOUNg%2FFWe%2BNe5lfbksjhIzO%2FE7sq5NhIK4EodU%2FE2l6TR7g3kLmeFr1Jbti7VUkYJ4opRUKQlB1ZKwMGN0LCpY9qZbo0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b82f1440e4476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":207,"dns":0,"connect":2,"send":0,"wait":5,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/original/2X/f/fe2179d1feb4e81656233b86a06835fac06edd6b.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 03:08:59 GMT","end":"Mon, 02 Feb 2026 03:08:58 GMT"},"fingerprint":{"sha1":"E1:A5:18:66:02:A1:30:48:C0:63:B8:0D:A6:A0:6A:4D:49:FB:31:A4","sha256":"F3:EF:EA:51:6F:29:3C:97:1C:9E:B5:C9:DB:69:E9:BE:55:EA:E1:47:AC:EB:1B:EB:A6:2A:5B:B1:74:85:D0:AB"}}},"request":{"raw":"GET /uploads/default/original/2X/f/fe2179d1feb4e81656233b86a06835fac06edd6b.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.twi-dl.net/favicon.ico","fqdn":"www.twi-dl.net","domain":"twi-dl.net","tld":"net"},"ip":{"addr":"104.21.2.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twi-dl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 21:28:29 GMT","end":"Thu, 26 Mar 2026 22:26:00 GMT"},"fingerprint":{"sha1":"40:60:5C:4F:1B:12:D4:78:49:7E:3D:EA:58:1D:6D:6D:17:63:4B:3E","sha256":"8F:D4:66:0C:C1:7B:4D:EE:92:93:A8:F2:48:BC:4C:E2:EC:9F:A0:76:44:00:3D:BF:22:3F:F0:3E:42:14:FD:D5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.twi-dl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oYnfxbNFVNJvqPsvRqy%2BGdkdtxBUsX5aHMdIPRwY72t2zbuQpIIgykeVYqnlOvc08yHsX9kSA53bNBsBD4f120fR8oqw9Hw6mi%2Bvmx2d\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b82f16caade4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":37,"dns":45,"connect":1,"send":0,"wait":4,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stickamvids.net/photos/2018/05/10066_0_300.jpg","fqdn":"stickamvids.net","domain":"stickamvids.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.071Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /photos/2018/05/10066_0_300.jpg HTTP/1.1\r\nHost: stickamvids.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":3806,"timings":{"blocked":3427,"dns":1,"connect":124,"send":0,"wait":0,"receive":0,"ssl":229},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250923-1/4d7719f28de854529b11b6766d0eec3a.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"142.248.99.81","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 09:53:21 GMT","end":"Fri, 06 Mar 2026 09:53:20 GMT"},"fingerprint":{"sha1":"55:92:B5:BC:78:CB:75:63:3B:0F:C6:A3:DD:2D:2F:7C:FA:07:B7:4A","sha256":"02:67:5F:F2:7D:A5:B6:59:8F:77:98:9C:EF:94:84:1A:E6:C9:FC:6E:A7:27:06:47:BB:16:5D:BE:A9:91:90:79"}}},"request":{"raw":"GET /upload/vod/20250923-1/4d7719f28de854529b11b6766d0eec3a.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 94614\r\nlast-modified: Tue, 23 Sep 2025 05:55:56 GMT\r\nvary: Accept-Encoding\r\netag: \"68d2366c-17196\"\r\nexpires: Thu, 29 Jan 2026 06:35:47 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 371441\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":94614,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 640x360, components 3","md5":"24e3e1954c0e18c960c51d18c68a7fe2","sha1":"040a2b80808a7905e2bd9e35984872cd0b589cfc","sha256":"7d2377dd10c7627b05d78cbee64c60407b9ce4c876dc487d471c66b9ed14dc82","sha512":"8828771c5ef34e77581193f22cec758719e88d493785fa655d37bd0837c0b8b011d4065f9eac31625f4f2300b80680b993d1d454543349bcdeab4d5ac65cab25","ssdeep":"1536:Sf+GIEA/3YYDJ+TMrJ+UMW/DflDCn5tiw6K7bQbQDtbgukMTmHpNc1RSwgw6n2YN:G+b/3YfMJ/DflDCnPiw6gb3Dtjko+pQY","tlshash":"b19312e01e6d3c766ea0e65c5e62cc2a91e35d2d7fcf2331d4927d3c2a8d86450b1ab4","first_seen":"2025-12-05T22:31:48.412577Z","last_seen":"2026-02-06T15:51:51.712099Z","times_seen":35,"resource_available":false,"data":null}},"time_used":1291,"timings":{"blocked":110,"dns":0,"connect":0,"send":0,"wait":799,"receive":382,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.reddit.tube/thumbnails/4a2b8959d1ae853b7db931d0236c8d80b1b046a0.jpg","fqdn":"img.reddit.tube","domain":"reddit.tube","tld":"tube"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.reddit.tube","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 13:03:56 GMT","end":"Mon, 30 Mar 2026 13:03:55 GMT"},"fingerprint":{"sha1":"76:45:10:30:D1:DA:92:AF:E9:4E:54:FC:7A:94:E6:D8:E7:E4:17:49","sha256":"37:4A:43:88:00:05:8B:92:36:E7:7C:CE:50:67:44:0B:59:1D:AF:48:79:B7:95:13:63:5A:E3:C9:81:A9:AF:43"}}},"request":{"raw":"GET /thumbnails/4a2b8959d1ae853b7db931d0236c8d80b1b046a0.jpg HTTP/1.1\r\nHost: img.reddit.tube\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12146\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 114851\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Sun, 22 Oct 2023 14:11:30 GMT\r\ncdn-storageserver: DE-1127\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 566\r\nperma-cache: HIT\r\ncdn-proxyver: 1.37\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 10/03/2025 21:58:02\r\ncdn-edgestorageid: 830\r\ncdn-requestid: ae86b15ba67f14e12ddb2b82a90a137c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":12146,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x680, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7a052744cc1d9c1af91b2e9007447d11","sha1":"036b3a0180f865b4a7fdd844d7b27946f8fd7a4c","sha256":"6173cdc681ad8712f4002615e11b7baf5ac3ae3e071b4987caab44c4d03ae7c6","sha512":"352b6784f84c29942d74c47ddbae6d415650ea70a1f3957e1c6665fa420da819a7ed37e8b303913df36895d3d0d919243c1edeb58708a5a0fe1f1a47a28178a1","ssdeep":"192:dk9+K+R2JoLsR9CAxRnG4Odjqb1/7iVkjVmRK9iq3ZVeHU99eS3zCViYIaj:J2JlxROqxjiz4Z3Hc8nGVTIK","tlshash":"ba42e065fe3d7a38830424ab80094ccdb10880627d51fe6506db9558bd4fb102fbc2fd","first_seen":"2025-09-19T04:19:40.299151Z","last_seen":"2026-01-24T20:33:37.459601Z","times_seen":61,"resource_available":false,"data":null}},"time_used":3718,"timings":{"blocked":3397,"dns":1,"connect":3,"send":0,"wait":5,"receive":0,"ssl":258},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blumpkintube.com/favicon.ico","fqdn":"blumpkintube.com","domain":"blumpkintube.com","tld":"com"},"ip":{"addr":"172.67.148.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:34.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blumpkintube.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:29:09 GMT","end":"Fri, 06 Mar 2026 22:25:31 GMT"},"fingerprint":{"sha1":"F0:75:18:71:3B:57:62:7E:D0:B3:6D:BB:CB:8B:B7:85:4A:62:A2:F9","sha256":"83:20:32:82:21:E4:38:2F:12:C3:85:A8:D6:B1:D1:E0:F4:EF:92:1B:D2:51:B1:35:BB:20:DF:AC:53:43:CA:F8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: blumpkintube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:34 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 1150\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Nov 2019 11:53:39 GMT\r\netag: \"5de106c3-47e\"\r\nexpires: Sun, 03 Jan 2027 08:25:16 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 19277\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4v4vbWO0p%2BPjzrGhR7Mq%2FAHbj7M2ExjHHPprJSqhx9Xq2QRzfElV2wilPNabnWHv3W97FkmRvoG5R071Q%2BH0f5w5Tj7RSDZqs0xG01D7\"}]}\r\ncf-ray: 9b82f16bb8d7b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"3de13983da1e7755426362ee988fae6a","sha1":"51d87d2cb8a6950b5e1c8ca24a257cb397664a93","sha256":"16c3dc433b7b2460b9ba12b1aa28a14c598e93f5bab8f7cb1b5afa3989457c05","sha512":"788bdd434e346a864dbebe4681af25ad503de3d27baf36fe96ac013fc9bd3d207f7641ff85a353da57ad6cccd6e5ce4419de2d6653dba9622bdcb4bac81b1d02","ssdeep":"","tlshash":"3721a45d6404a4bdfd98f77a331175068ede76b2317a00f507e01f676462258b8c6ea0","first_seen":"2024-05-18T21:25:43Z","last_seen":"2026-03-03T14:10:03.70959Z","times_seen":399,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"im2.mediacont.net/xxxzooporn/thumbs/35/925_leggy.jpg","fqdn":"im2.mediacont.net","domain":"mediacont.net","tld":"net"},"ip":{"addr":"104.160.9.33","port":443,"asn":63119,"as":"Angelnet Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mediacont.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 03:04:33 GMT","end":"Fri, 03 Apr 2026 03:04:32 GMT"},"fingerprint":{"sha1":"E0:8B:9C:49:A4:13:05:86:F9:23:3C:A0:64:1D:A9:3C:C2:06:91:8D","sha256":"E0:00:CD:0F:30:B4:55:FF:74:4A:36:9E:39:E4:8D:71:E3:BC:4B:8F:F1:92:53:95:9B:55:54:DC:6D:33:A9:6E"}}},"request":{"raw":"GET /xxxzooporn/thumbs/35/925_leggy.jpg HTTP/1.1\r\nHost: im2.mediacont.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 13:46:31 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 12964\r\nLast-Modified: Sun, 03 Sep 2023 22:21:59 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=30\r\nETag: \"64f50707-32a4\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nX-Request-ID: 0afa7a5d69301947891de30e6ec843a2\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12964,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x174, components 3","md5":"651fcdc33d9546de553b628bc984414f","sha1":"3a4c9f3db51b306983b2bb93f72898af1fc67449","sha256":"15b601b83299bd6fc80856f5ee9f2ee3f083408d535d81da836bc923d2921551","sha512":"cd83a1a4a669d5621c509932555089fcdb3d3a37a104fa807cf83429658ef48c5a9364d2c89feaa7f4482c7807ac52a27e4af9107c835cf338dc6d69d013ee39","ssdeep":"384:WCGxR4BCqc79EkEFzYmivl173AfxqnA8+Cmee2ngxy3:zxeSPFE/vTT4CmeXgM","tlshash":"3542d0fc4206bcbfa39c51320837386b4d169d5869a154e8fbf5fa36a33f41d2a145a3","first_seen":"2025-06-23T16:04:28.535015Z","last_seen":"2026-01-03T13:47:53.101467Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3817,"timings":{"blocked":3418,"dns":1,"connect":50,"send":0,"wait":47,"receive":0,"ssl":252},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/a8/28/8a/a8288aebe0f2619f8d07eac99f24db21/a8288aebe0f2619f8d07eac99f24db21.16.jpg","fqdn":"cdn77-pic.xvideos-cdn.com","domain":"xvideos-cdn.com","tld":"com"},"ip":{"addr":"185.76.9.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:27.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideos.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 15 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3C:93:93:D2:61:40:5B:B9:F9:EB:A2:B0:78:48:57:C0:F2:41:42:42","sha256":"D9:3E:6D:83:C8:0E:74:42:32:A1:4F:A3:9B:CA:3A:9D:E0:D2:60:38:FF:BF:EB:0E:36:AA:3E:41:44:D5:A7:59"}}},"request":{"raw":"GET /videos/thumbs169ll/a8/28/8a/a8288aebe0f2619f8d07eac99f24db21/a8288aebe0f2619f8d07eac99f24db21.16.jpg HTTP/1.1\r\nHost: cdn77-pic.xvideos-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16753\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Mon, 13 Nov 2017 08:44:38 GMT\r\ncache-control: max-age=10368000, public\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBuUwJBgH3yjYnAAwBz9PTEwH3CIYJAAwBj/Q6lQH30MMGAA\r\nx-77-nzt-ray: 5451992d3ed7dc5bb71d59695c39cd13\r\nx-accel-expires: @1775245721\r\nx-accel-date: 1764878061\r\nx-accel-date-max: 1745553108\r\nx-77-cache: HIT\r\nx-77-age: 2569930\r\nserver: CDN77-Turbo\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":16753,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 352x198, components 3","md5":"e46ac1640c0cca13518d86889f86e671","sha1":"28ceb6a16067b3a0f631d73a1d188c0d8cd851cd","sha256":"99598cd04a05968dfb361e56694e0b825edb1265f78e851b2fc68c7c7fd22d86","sha512":"4fea648234447f56108386ee8b024efd40c5051a948a82c434a6b236a1fee3400551f04c55bfb58c3468111821d90138707b3752c297ca0c4f4a2677d2316fff","ssdeep":"384:yuXSBujksJ8SFR70IJEU2+6GzltN5kv+mbj0fd3aody78bQY9sJDA2A:yGZkg8GFxJEd+6elrqz0fd3q8bQY8E2A","tlshash":"1072c09ba307d24162ef92f8457e0bbb500cc0d855827adad9ed1e5f272928e58857b0","first_seen":"2025-08-11T22:22:22.885504Z","last_seen":"2026-01-03T13:47:53.105621Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3393,"timings":{"blocked":120,"dns":0,"connect":8,"send":0,"wait":10,"receive":1,"ssl":3253},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avhub.live/wp-content/uploads/2022/11/%E0%B8%9B%E0%B8%81%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9Ain.jpg","fqdn":"avhub.live","domain":"avhub.live","tld":"live"},"ip":{"addr":"104.21.52.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avhub.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 02:20:20 GMT","end":"Sat, 07 Feb 2026 03:17:59 GMT"},"fingerprint":{"sha1":"FE:BC:D8:FD:66:47:1A:25:25:E6:D4:EF:53:CF:72:51:18:82:B2:CB","sha256":"3C:01:6A:59:29:64:C4:94:BD:F7:29:1B:58:A9:73:8B:C2:93:9B:35:F2:F4:8B:41:B4:19:8D:BF:33:F0:DF:EA"}}},"request":{"raw":"GET /wp-content/uploads/2022/11/%E0%B8%9B%E0%B8%81%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9Ain.jpg HTTP/1.1\r\nHost: avhub.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 120383\r\nserver: cloudflare\r\nlast-modified: Tue, 22 Nov 2022 07:39:50 GMT\r\netag: \"637c7cc6-1d63f\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 3384\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yLk1U8WRSFVQ1DcPp55tSSOjU2U%2FXLz0hScQfJBpvA3myEJPpKSFrQH2wNBAqlRXx7sqWXYQ%2FCtIgYNI9t3sn3iMhoQj%2BztKALA%3D\"}]}\r\ncf-ray: 9b82f15caeb75ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120383,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=565, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1080], progressive, precision 8, 902x565, components 3","md5":"bb78f17e82731c78c54b00525ad93eba","sha1":"3a32218adf2c14da05f07914ff877a362dd0a155","sha256":"d38c22d673ced4959267887ebd37cdc477c89948ab6e34daac3c47cee57db4b9","sha512":"924ff5f17c78bea329846b20fdc5228e1dda6427db0c8dc08295cd15bed5335b4ff772f8b184fa83265289c94d313af03349957ed7e504bb66afcccf3cdbdb81","ssdeep":"1536:uWdKwWdKUswUuObgqaD9KPvJyV80S9auie03upGA5OCkHipSy81braGaav3Wo:uIKwIKvuOsqcUguV9903up7OKSfbraUT","tlshash":"cac3bd40aa50a921e99d367984ecdaa1c7f32ec44e32140f7bdcad0b3f519ae4dd85c3","first_seen":"2025-06-16T22:45:57.386296Z","last_seen":"2026-01-16T01:00:02.610456Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3786,"timings":{"blocked":3484,"dns":1,"connect":14,"send":0,"wait":13,"receive":6,"ssl":241},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.apian088.sbs/sp/media/videos/tmb/2603/20.jpg","fqdn":"img.apian088.sbs","domain":"apian088.sbs","tld":"sbs"},"ip":{"addr":"104.21.50.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apian088.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 12:00:16 GMT","end":"Sat, 14 Feb 2026 12:44:47 GMT"},"fingerprint":{"sha1":"81:62:5B:8E:F8:D6:89:63:71:73:E3:18:57:53:27:65:B5:AD:00:32","sha256":"1E:DA:15:FE:0A:FF:52:03:D1:A0:EE:60:AD:2A:3A:55:0D:CD:56:3F:75:52:A1:90:E2:E7:70:D3:2A:15:12:5E"}}},"request":{"raw":"GET /sp/media/videos/tmb/2603/20.jpg HTTP/1.1\r\nHost: img.apian088.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10858\r\nserver: cloudflare\r\nlast-modified: Sat, 23 Mar 2024 12:20:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65fec90a-2a6a\"\r\naccept-ranges: bytes\r\nage: 2771795\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ri4V6z8r2IkyUHd%2BY0%2Bl2p9b6U7Poave%2FvdAjMNJ1gceCOieNNZd3V%2BmC175UQy%2ByvzSK%2FPaSbnIfnx9%2B1gy8cuLe17V7Lo%2BoHi1tw1E\"}]}\r\ncf-ray: 9b82f144ad4156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10858,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 384x214, components 3","md5":"aacc5dcfeab4f0208ad8a070790bfa93","sha1":"8d876e04f25ba1ba2dd8137c9915d828c644e402","sha256":"2319db67a420ae2d8dc4ca97a1f89cddea47b4d4b3dad1c69a0e3ade9d458e89","sha512":"e315b1f7e2cfd71065d73af51e25c67efea1ef2495f06739dbb06a746a9d780d6b72c83ac8a3ee5bbb12a46eab6f5b486fb490704bffbb85b513bd9e8165128b","ssdeep":"192:TeCJA6OQEe9BDPyK3Gn1l16u6cgHSvRa0UCZ86mK+aG6jQNjnk0y:Td96smK3G1DyypQCW6/GW+y","tlshash":"2f22af6e51d392f07a90e2643a4ecd97f7d2921bd29a130b1fd8bf435321e589924164","first_seen":"2025-11-09T04:48:10.044479Z","last_seen":"2026-01-08T04:21:04.506555Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.com/","fqdn":"www.9188porn.com","domain":"9188porn.com","tld":"com"},"ip":{"addr":"172.67.220.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:32.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9188porn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 09:28:02 GMT","end":"Mon, 02 Mar 2026 10:23:10 GMT"},"fingerprint":{"sha1":"A6:75:08:AB:20:D7:2A:E6:2B:50:C1:DA:59:F5:40:7B:7D:28:9E:C5","sha256":"83:9C:6B:2B:35:92:4D:96:4D:22:2B:45:AC:B4:E7:32:B2:F7:DA:26:69:E8:C4:BF:67:0F:41:0C:14:74:D9:09"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.9188porn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sat, 03 Jan 2026 13:46:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E9Gr6E%2B1lChZQ8kCaxulvdFJgrSdBt8v%2Fv1MHLuZNaKW3A1MU29THWCKESzNtC6qGxm3uQzzDRguyREGlo9f0xxU3pe1jzuygWJCUqWvFLs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b82f15eef1176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asianpornxbb.sbs/zhenshimama14/thumbnails_001.jpg","fqdn":"asianpornxbb.sbs","domain":"asianpornxbb.sbs","tld":"sbs"},"ip":{"addr":"104.21.23.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:28.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0b45ee2e.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 12:25:36 GMT","end":"Sun, 22 Feb 2026 13:25:29 GMT"},"fingerprint":{"sha1":"6D:31:4D:EE:3C:DE:B9:0B:C5:7C:01:F1:81:16:45:26:27:6B:F8:D8","sha256":"CC:84:71:6F:4B:FD:06:5D:95:3B:49:54:17:35:95:90:5D:C0:17:77:5C:74:B3:5E:9C:68:D8:7A:07:DD:32:91"}}},"request":{"raw":"GET /zhenshimama14/thumbnails_001.jpg HTTP/1.1\r\nHost: asianpornxbb.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 13:46:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 77141\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GY6geyPqplD%2BkznyP2dIsXkcd7UhnVR5ReuDfJdZo22SQ9qgwxelyzAzbmw8Bw1K6G6MngIco%2B5R77qzAL2XvRk9iWAgffN3%2BSrQYL6W\"}]}\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\netag: \"ec61eabb4dead1712aacf9a61a4eb88d\"\r\nlast-modified: Thu, 02 May 2024 03:38:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nage: 2522117\r\ncache-control: max-age=31536000\r\ncf-ray: 9b82f15c78b1712d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77141,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1218x1440, components 3","md5":"ec61eabb4dead1712aacf9a61a4eb88d","sha1":"1dff2cc9dd990fe9113dcf9a5b623050d70eedfc","sha256":"d70162a9e6d20894cab8eeeb91711f65e8d63083dd6ec8aad0ce1a578be2f815","sha512":"31805ca5bf88bab7deb8dd1424ac6c99125dbff711eb1f86498746f91c697506af98e6e36a13d2a4b12bf504b7a3ca6b269a7dbfe757465d87364dd229937fa3","ssdeep":"1536:ZM5ZYFB8aWeuJyNLeI/ELzX2jHC97ZXKZdL9n8hRDt/h0hvq:ZM5uFKaLuAteI/+GraNXcr8t70c","tlshash":"6a73015a08fa63cc40af72bf18f36754328e5868e9f5795a7d40643968f3ce309382e5","first_seen":"2025-06-15T23:04:57.72902Z","last_seen":"2026-01-08T04:21:04.4872Z","times_seen":14,"resource_available":false,"data":null}},"time_used":3710,"timings":{"blocked":3440,"dns":1,"connect":13,"send":0,"wait":14,"receive":3,"ssl":217},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20240609-1/cb14203b5d592acc155959f853153668.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"142.248.99.81","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://en.av2.top/","date":"2026-01-03T13:46:32.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 09:53:21 GMT","end":"Fri, 06 Mar 2026 09:53:20 GMT"},"fingerprint":{"sha1":"55:92:B5:BC:78:CB:75:63:3B:0F:C6:A3:DD:2D:2F:7C:FA:07:B7:4A","sha256":"02:67:5F:F2:7D:A5:B6:59:8F:77:98:9C:EF:94:84:1A:E6:C9:FC:6E:A7:27:06:47:BB:16:5D:BE:A9:91:90:79"}}},"request":{"raw":"GET /upload/vod/20240609-1/cb14203b5d592acc155959f853153668.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://en.av2.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 03 Jan 2026 13:46:32 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nage: 0\r\ncache-status: MISS\r\nserver: HyperCDN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}