{"report_id":"87c45e98-cd69-4c33-a88d-108277b54bee","version":6,"status":"done","tags":[],"date":"2025-08-11T01:57:19Z","url":{"schema":"http","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"172.67.73.151","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"title":"Series - 123AV"},"submit":{"url":{"schema":"http","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"172.67.73.151","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-15T01:57:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"prefecturesuggestions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-10","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-10","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"123av.com","ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-06-28","domain_rank":1905,"first_seen":"2015-03-23T10:22:10Z","last_seen":"2025-08-03T16:16:48.097432Z","alert_count":0,"request_count":12,"received_data":723951,"sent_data":6443,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-08-06T15:14:12.503348Z","alert_count":0,"request_count":1,"received_data":17441,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-08-06T15:12:45.48732Z","alert_count":0,"request_count":2,"received_data":383100,"sent_data":1137,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"prefecturesuggestions.com","ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2025-03-28","domain_rank":155164,"first_seen":"2025-04-19T10:54:10.906276Z","last_seen":"2025-08-10T11:26:04.813732Z","alert_count":6,"request_count":6,"received_data":189485,"sent_data":5736,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"professionaltrafficmonitor.com","ip":{"addr":"18.198.116.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-01-23","domain_rank":16376,"first_seen":"2025-01-25T08:56:07.448138Z","last_seen":"2025-08-08T14:17:29.980479Z","alert_count":0,"request_count":2,"received_data":836,"sent_data":882,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kettledroopingcontinuation.com","ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2024-09-01","domain_rank":196057,"first_seen":"2025-07-30T15:18:19.355595Z","last_seen":"2025-08-06T18:00:02.130655Z","alert_count":4,"request_count":4,"received_data":2028,"sent_data":2265,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"weirdopt.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":37519,"first_seen":"2025-07-08T12:55:47.272157Z","last_seen":"2025-08-06T04:04:35.160651Z","alert_count":0,"request_count":1,"received_data":377,"sent_data":412,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"rashcolonizeexpand.com","ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2024-09-01","domain_rank":31106,"first_seen":"2025-06-27T17:12:36.133274Z","last_seen":"2025-08-09T10:12:23.00708Z","alert_count":1,"request_count":1,"received_data":499,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-08-06T15:10:32.619142Z","alert_count":0,"request_count":2,"received_data":81926,"sent_data":1088,"comment":"","tags":null,"fingerprints":null},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2025-08-05T21:38:00.718893Z","alert_count":0,"request_count":2,"received_data":171926,"sent_data":814,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"flushpersist.com","ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2025-08-05T21:38:00.60866Z","alert_count":0,"request_count":2,"received_data":992,"sent_data":1520,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-08-06T15:50:30.984985Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.show-sb.com","ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2025-08-09T06:08:59.436853Z","alert_count":0,"request_count":1,"received_data":2063,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"creative-sb1.com","ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-01","domain_rank":22211,"first_seen":"2025-08-08T09:32:32.509707Z","last_seen":"2025-08-08T09:32:32.509708Z","alert_count":0,"request_count":5,"received_data":171905,"sent_data":2246,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2025-08-08T06:02:20.055218Z","alert_count":0,"request_count":1,"received_data":70836,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-08-06T15:20:03.099982Z","alert_count":0,"request_count":3,"received_data":291275,"sent_data":1555,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ae9adf67bdcb56a2bd2cef47dbf95b81","sha1":"02fe0a91d9b9c987ed7bad69a9b01a8db6c3eb90","sha256":"c21330b79cb35a06e17e1876a16013bd1cf9749898480105b01d1ce252e908a3","sha512":"d547b7690570e6d0d416b13c143cd236683fd0b5d18f4788c28a521ca4fda6bd8a735cadf7c728b9d070dddd8816625f06521d5adb2c6cb0b4419e9a8ebff0f0","ssdeep":"","tlshash":"90a011c838c22002c2b3323020a30c8ab200a8a800208800a300e0283833a22ac02aae","size":71,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-03-10T05:39:50.930032Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"243327215eb6b502bc765cfe9b8ee02e","sha1":"3749becd7ac340a124b85f7a82e55fa2eefc1e7b","sha256":"09a32ea43b810685211d17baf728645d798853c2d8a9b5ec7ca98d01bdd1251a","sha512":"8f3d83101ed9ebdb5ce0d8805f0017ef97c4642a793a8c4909c31700ffcd28be19855ee401e5b09d412df4902d74b839e3595060211edcabd8796995fb8f5066","ssdeep":"","tlshash":"f0b092c235c2f5638aa73db668a71c0765c299a418018c50a2d8e8217a23079ac891ac","size":115,"data":"","first_seen":"2023-08-13T06:18:09Z","last_seen":"2026-03-10T05:39:50.885588Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prefecturesuggestions.com/9b/7e/1e/9b7e1e724274b81f688a60aa9a5b4054.js","fqdn":"prefecturesuggestions.com","domain":"prefecturesuggestions.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"introduction_type":"scriptElement","is_inline":false,"md5":"d53576a5c16e593f8234695c7a566c25","sha1":"9a7cc1551c3d53a11b78ff826a673e1135f9807b","sha256":"d2c30ea36b7b8d6cf25eb9f15018f1d8158eeefd895159012a1f0c3ca03e47fc","sha512":"30e1d814720900512e5bd140ee8a7092fd6273e02c21adbb923b691478f94c08f545db09f73493907c2b9e5498659b12a10ec17f2796cc1070824de3148dc84e","ssdeep":"1536:PwEYGbRF1Psv/8k8gmAW9ak94Hcs8yOAt0y6h/lIWkmA3LAap8:PwEVmmzd48s8BEqh/lIWc3+","tlshash":"7da3c8987f69f02d426590f7213f5137e21b0d45908ce5e8f403f5a82a7c75be8bae26","size":105113,"data":"","first_seen":"2025-08-11T01:57:23.23998Z","last_seen":"2025-08-11T01:57:23.23998Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"36b337cd3565068417f4db881a58ed0d","sha1":"75598aa0e84816be3aead0bee6932332dba3ca75","sha256":"786e23d540b62f1fc83dc916040af2e05ab1890e94e0252caae8e7099d4a8ea7","sha512":"7f427bc563877e9e39cbeb6fe89a1adb23f67b94ba3edd6fcc4c4f9aff73850fa52d35480ae25fc777f7c9547d44aa87329ebe272e455136e5ae183750bebea1","ssdeep":"","tlshash":"afb012c1b9c16460c25b31b5f5a35c1f302265d07008edc4b384fca4382347379812d8","size":105,"data":"","first_seen":"2023-08-13T06:18:09Z","last_seen":"2026-06-02T10:58:21.917508Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"79ff2e829510eda1690a924e30fbd3c1","sha1":"baee178d2bd0998ee3384da8d39dc698786269dc","sha256":"d71f621a7a17be99ee1fed72230e263a240f638ad09a483e3b40faf76d1fe75f","sha512":"12c5f38a9371056de34801c1590440366ebc4d942facf85c99aeb5a1c0be1b15fd37f1ed63a97def833f40703d77d3ca24c2a2a16c4086318ec2a98fe13c8d18","ssdeep":"","tlshash":"d6a002d639d66152c3673d7070e71d477596a8fc5204cc40b244f4647973132ad979bd","size":65,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-06-08T03:32:37.484075Z","times_seen":173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"16b89cffd1b2555556a546dab30602bf","sha1":"796f2614a7a782f0b8189c6a8a3a725d3aaf979c","sha256":"33935d4382f66eb7df0bb1cfeeb8a53693ae240147a57138cbc7c6d7e4ccc0b4","sha512":"35f91bf41e17ec8733be4f34c94e402b9c231aee7c2c148d45bbb1d2b1fa6a33fa0f3dedb3f56ae80981ec083fab67514c4c612bfadb0adbd186237f334dcc53","ssdeep":"","tlshash":"37a012803ad53011c113313472e74c5b6100599421048841b100f0582d7243119d246c","size":80,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-06-08T03:32:37.470735Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c84adb51608767c166ff3633fc589477","sha1":"b9dae42c1bd2b1203c762a0cf922df3d33009458","sha256":"638ef5e142b2a1437e6254f4a5e184610178d99d080f98707aa73f7a596fd784","sha512":"76ef85e250a8fb802721bdef00fe9211d3682a7a6f598575b57ed0f610c9edb22d77b562e2d94ec5c1ac2f64f88827b914150fa0eda0b626cf730aa6096b1ad3","ssdeep":"","tlshash":"35a011803eea2000c223303030a32c0aa020aca00000a802a208f0202a230222c8a2ac","size":71,"data":"","first_seen":"2025-03-15T06:39:38.198187Z","last_seen":"2026-06-02T10:58:21.899652Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9bd542d42f6e61dea1d6775451236dd3","sha1":"8c0a2711527fe52f3228d9bc1157617990fd4d81","sha256":"692ad4a6194c2381e6ab9e1d2778c11966df8e4cc35123b4d3681a9f0edea222","sha512":"3f25b9e0f9f5c6db8a6a9366755750138e50d53bbd4ec1804cd3e964537a970a97bae0faf05304dffbadb0f358f093fb2fb8ace7985b08fd94f862c720e40c69","ssdeep":"","tlshash":"eba0128836c11021c2633d7420a31c03b88514b85004c980a134e0ec2c2203338021ac","size":83,"data":"","first_seen":"2025-01-04T23:35:08.117143Z","last_seen":"2026-03-10T05:39:50.915027Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aaec9da674d8f382d611af3385f01dac","sha1":"a2e5edb0389ed7bcbc0f8dc6e72e0ce9020b6b4b","sha256":"4d8fdc1da808ba2c2bdf373b41643a161dbd354547ad6f5c86eb1fb383cf14e4","sha512":"c6c318c05aa295448d9ca8e386c1de05dfee697b1fba8dfe05dbfa91691e25cbce2148467f73b845609d04fc8654ff39edf364ff79bb0e8ed7ce48da32d0cdaf","ssdeep":"","tlshash":"70b0928878c6582286a735a464fa1d4a72e159a1002088086620e468287a532ae4646d","size":102,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-03-10T05:39:50.946132Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85386,"data":"","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b446c0a1c72e359f08cf75c5dd71c8fc","sha1":"35e98eda6f638cee5b971e879829a9fde55af363","sha256":"47c50ecf8d74b0290912784954cf3d8169e3991be60a17a5ceff97bbdb906a3a","sha512":"9e36849df81bade99801e1ff393025b97905204c2453676201e2adfa1fb784b84f65bea71d46535d3ac1af031a3f01a813f0cd161df6465a7f763f86771ee24c","ssdeep":"","tlshash":"15a012c479d61230c2233471b0f71c0b51561490600ccc00a300e054397b023994119c","size":85,"data":"","first_seen":"2023-08-13T06:18:09Z","last_seen":"2026-06-02T10:58:21.929543Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"86cb401f675b5e5d23a75ba36029b6a2","sha1":"56a11ab37dc4903508524f969959ffc005ea98c9","sha256":"d6c79903b7d07fcc67043160b590d73dcb96f90930016e90f5813cee5cd0d50a","sha512":"34a648043701f1ba3b5e439a7a7f9273c12963f4012c9aac485db934b0dcefb009276c1daf4f30cd31f9b319f2a5f69903338270bfd52444149d068676cf103a","ssdeep":"","tlshash":"67a0128438c25472c73330b474fb1d1b70d15d9000008c08a130e45c2c728323d1606c","size":86,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-04-29T17:03:49.892218Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"efe61b0e7be1f681bf8433e0700ed71f","sha1":"85c5ccbf538b88e3976020d2570daf3d6b3a9a87","sha256":"e868aa834a5c9841ba1a1b137b8a071d252db6cbcf0feba6436838a48625f33d","sha512":"d92fbcaef0b1d14057a87d2d1a1b9fb25438e43ea065bc11ec19dafbd2a124231af4c34ae1624a8b9913d76a09893e257417944f248f1930fedb4728898a6bef","ssdeep":"","tlshash":"34a0128c76c15023c1933db820a31c03b84514b86004cc40e220e0e43c2303278021ac","size":86,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-04-29T16:58:36.831044Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dc09ac297c8388c8e2b6292d6c09a665","sha1":"96f4b147edbdbd5bbac642308cc448a771f3ba3c","sha256":"9b4ccc9601af2ae7456904b715a9c409283fe24ec43a55cc299331c41487689a","sha512":"cfb3bf319d993bcfe7d7c6cde28b1c6fc4d17497b92c0bfd08ef519134c1437a87172f71cfd1e4cde2b913235bd6251d88f3b84c6ac2c5b9106ba7f9665695ce","ssdeep":"","tlshash":"24a022c838c2b002c3233038b0eb0c0ba20c2ce88000cc00b200f0203ab30322c028ac","size":65,"data":"","first_seen":"2024-12-15T14:43:14.35067Z","last_seen":"2026-03-10T05:39:50.934813Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7b8fc6bf7b44ba2bc5b37e9ff3de7b00","sha1":"ed7df950986f8002f997ed04884afa11aaa9ee8a","sha256":"17fa551376c312c2613e051d1b0e62dcc8c240bc1a54f8a8a2f1afb8b50cbbe3","sha512":"403fc594d07f3516470dce81c505a4fc91ed4b2e5d5db8367b0b0e500a784709e94eb4922b985db922114dd793550251bda5140e93fa70715760f6fb599f4c35","ssdeep":"","tlshash":"98a012c039c2b003c2133c7164a30c47150159a04400cc40625de05079230396c011d9","size":86,"data":"","first_seen":"2025-01-04T23:35:08.104959Z","last_seen":"2026-04-18T07:23:09.435975Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VZGC2QQBZ8","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"357f3f1df465de1ca2f4d80970ade375","sha1":"ee611285dbbdfbd664fded19cbe84b6082bf1adc","sha256":"6552fd61315145ede44a745f1767c0c041f8c67ed1c6726fd00434ae6f2fa0f2","sha512":"ec5e3ad554e8b30c73aa6943ff0defb58df6c13b775056bebed3f3730544139a4c8216cf8863417f905fbc16a72a0067b6b183836558624adc68e34431a6d68c","ssdeep":"6144:AxP2NQTnyLnAyevGtkT2PG6B4xd9zccE7:SPikJlcmdxzu","tlshash":"888428cd73c670669396b478503f018ba57b29a2f44cc899f189cce42e74a9a4277f7c","size":381368,"data":"","first_seen":"2025-08-11T01:57:23.259618Z","last_seen":"2025-08-11T01:57:23.259618Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"90b228e56ed22e851a3528390283de91","sha1":"c19f76f6c199e12add4b2f3728a4bed741348c48","sha256":"fec8cf7ea2b4163255bc2eb7a434e1b409a07ac8f980f9212db949f768abaf77","sha512":"7715ecaaca37ee286f74bac24c46c273b619bf4e4632df7b282cc66350645c910986ce1511266679d4fb0fa24f9e82ff685ed1f3f03d5a78465a772c5e99b208","ssdeep":"","tlshash":"5da012c47dd71230c3233470b0f71c0b11561490200ccc00a300e0543d7b02399411dc","size":85,"data":"","first_seen":"2023-08-13T06:18:09Z","last_seen":"2026-06-02T10:58:21.921152Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6699caaee17cc1aa4cd03f1abd8a3f43","sha1":"18cfc45dd0d44587cc53dfdab16dcc869a499c9c","sha256":"92b0531a2946f5ad6b96013f0e7b6edd0c5d4af7b9cf26e5ab16bfe97dfecc91","sha512":"16ed797cac8b3832a8e1b06e90e7048a71e73afc5c7902f707e07144aed879d580f6ac2a783decb9f1ae396f27b5b2260b125095246b85b196f8ba85142c5b8d","ssdeep":"","tlshash":"12a022c038c3e000c22b3c3030eb0c03200028e00000cc00a200f02cbab3032ec0b0ac","size":64,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-06-02T10:58:21.894426Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"815f718aa1f784705dea1c647d498a82","sha1":"96f1c95c59afb8e6611ec03747b0a7c0e9f1b354","sha256":"62f290de93616006fa31041e0f70dd99df9f224d8a8fae4e01a6414f9c5e96dc","sha512":"e280412bedffcad618098d00ebaaf01419ad1af88ac24ded9a0aae966389eb46e24177ee012f458dfe331df89b25a5f9b0833722d8b047276c7a9db76a7cbef3","ssdeep":"","tlshash":"0fa0128239c75041c1673130b1970c02211825d41014c8805240f87034221713a96198","size":81,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-06-02T10:58:21.868965Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7661f85e0c2192dcbef1e583e4c33ef6","sha1":"5242a1d01fc0aaa6681bdcb05b8eb947a359330d","sha256":"553eefa9faf1db7ca59ee4ac1cc27d112afb8436c2f2c303cfb9cc9e8188937d","sha512":"28c48abf3e575441cdd7fd32c3c65fb5731f5e5cb23536e551a987c3006fcf435fe8f7c1ace251cd811d6df9e3c34d4ecc4d365f146ababdaba749aa7695034c","ssdeep":"","tlshash":"87b012857bd61062c1573678b1f30c03381d29f14004ce84e260f8353c620f2b8523ec","size":98,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-04-29T17:03:49.90154Z","times_seen":121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"936e18c03d747f2a9356af1b039dfea5","sha1":"c4a0bbe9555cc55f51981ad45222491329ef49e7","sha256":"b1363402ea14235d0d54b45ba31f49a358f9ce9b3fd12e4bd6ee681e7a5c4406","sha512":"2edc96f93fe22567eb7f0edd176b38ea43a2bf6fc40e21e2bf85e646ec672acdbf5e7228d67a531960bb0434dbb2b7e2c74c045720750c4926757bf67571b883","ssdeep":"","tlshash":"5cb012d1b9c16460c25b31b9f5a35c1f702aa5d06008edc4b384fca4382347379812d8","size":105,"data":"","first_seen":"2023-08-13T06:18:09Z","last_seen":"2026-06-02T10:58:21.890069Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"50ed2682d119d9867cd8f7df0c4cfa81","sha1":"284fdac57bd8f155555cc9c420b44e23235cf494","sha256":"c14467074dcfd41ccc0f52855b2e9edd4e01f6f19e232229888191da2e7be619","sha512":"094e6e8c685cdbc67a0b4ff8e72d1f0c43ad8e865788bc9d62537a350687f47710dbe42894bb61673ca9109b6167c061bc326a6afa8479a4bebcf50c68897bb6","ssdeep":"","tlshash":"25a002d439df7052c273357070f71d57615568e89006cd40a244f4647ab7032ae769ad","size":63,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-06-08T03:32:37.493005Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7ce6f2a3ac8045e4dfe57cf04f1c4098","sha1":"b40c951fca6ec6a50fc2f96d505a7728e10afae4","sha256":"935402cfc593f5aa128308fe4b4b591ed6aebe03722cc297a3ad0c5148a96d20","sha512":"b899f57338049edc5ebf23e6147034c9dd6fb42682c97d4fc098a46eb5f87b6fefec9983789f4ed50758ff175f6df742024fb75b5c5cfde0be98cd4a47a98768","ssdeep":"","tlshash":"56a012c138d31020d113353420930d02308414940000cc40a514f4102822025295655c","size":73,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-04-29T17:05:47.765861Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"111637fdc68cbd678350b49f3b769f23","sha1":"17147aef0353193e7a1f028a28ed66e1bdada429","sha256":"4ee1b2de4490ef59f4871a42313f5741213b77342dc04276570903db1939d4d2","sha512":"6bb9c6e07b5f3c583445c8963fb1e9f822cfceaae36aa86d8eca7e6d02cf2ff18942dd6bd716870022acdd955dc8b20fccfafc017c2eb7c0547baf2b074a27d0","ssdeep":"","tlshash":"f2a012803ac52011c2133138a0e30c0795001da02004cc409100f0542da24361c439ac","size":83,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-03-10T05:39:50.939235Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a383d09af2170229f1c0e8889ddce9e9","sha1":"b313176817726374b82a56ad34b87ea42a6f6b25","sha256":"f06bd7e81555ab29bea90a323fa67fdbfef80aed2cb6c939e0d20603db7bcf6f","sha512":"34517f5bb11b19f8ccb3dbecc5c4c162759534a4fca96a915fc4742472aea0baa724488c870490ce400b6d98bae48ff39f0ea67a6abb4b30c306855d593642ec","ssdeep":"","tlshash":"74a01180bac22000c2233a30a0e30c0ba00828e02000c800a200f0282aa283328820a8","size":71,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-06-08T03:32:37.457061Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"18efc211e2e62ef94bed6b5db278abe6","sha1":"dc6ea6a99845870942bcff8b80c8431fc4f9a1d9","sha256":"f5576ec244a80b35a8d880fa7db5800e213111de7772a86c79fa068eaff936f1","sha512":"48637d18993217d39949820a997f101678bfa8c10ce7012046ffb9fb8745fa96fd98baedbb43c74980cb458db291f510a8aa30ec2f6a6f3c9f698f4e19317746","ssdeep":"","tlshash":"36b09289bad25062c5963ab8b5a31c03682529e55004dd80a250e8653c620a2a8412a8","size":101,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-06-02T10:58:21.893498Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"71615e3773bfd84d6a161bc479c59e3f","sha1":"951d03cf86648a88bc087969d53f76334e23bacd","sha256":"97a10e815cb6f29d665a8c6ba58f03c59072b07ea9c808d83f87c85dc3624558","sha512":"675dc636d6da04623f189d127a3672d77dfd74a8de76350a4a36de1ec6443ce5e5d1ddc372122ab8c62387756bd597b16ea8c9ef886a3ad3aad4dd0d0bfb15d8","ssdeep":"","tlshash":"33a012c878c71403c2b7353120a70c4a705058e1402088016700e12438335229e42559","size":84,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-04-29T17:03:49.908481Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"98e42d39eaef3ac403ea0e0d11d8c4eb","sha1":"cd9d31e116725a40837a09674413f7329ea5736e","sha256":"75e09af7ec068c6d26851c81e0845e7ffa40a6b77c7e47a9ebcd2d3eb0815f69","sha512":"d20722457ce885597adec4e6bb8083c069bb6ca1560d4618e124655412eb1eef28d8c96b445603b5a47d3fea1f17ad6cce9424bf36d281bc808d08d37736970c","ssdeep":"","tlshash":"36a01180b8ca2000e2233ab0b0e30c02a02028e08800cc20b200e0b22ea3032a8020a8","size":69,"data":"","first_seen":"2025-08-11T01:57:23.285217Z","last_seen":"2025-08-11T01:57:23.285217Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"76434cc30c7f68d50010c47abe2cbc03","sha1":"4ad92cabdbfc73ed9ac2a756e0d19f75de160906","sha256":"aff63d71fb25d7c8cd42f9ed65bf174a08cb68b81bcdaf80238ea86657996563","sha512":"72b23c12ca83c2191ae326bb199c72d12772cad114fff7d5187fb4a77939d14477077664d3a86be59cdce972409de22de7e4be01f3cebcde45b6b2771d0776b6","ssdeep":"","tlshash":"d0a022c838cab000c3233030b0eb0c0be28c3ce08000cc00a200f0203ab30b22c0a8ac","size":66,"data":"","first_seen":"2024-12-15T14:43:14.275317Z","last_seen":"2026-03-10T05:39:50.917969Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9683c26daa83b1b644a04af6d653e802","sha1":"06b2171395dec8fa96eff3c141648926670057a9","sha256":"64a72f508c014cd069d201417f45e2d6060030a78c7598d29d9099ac9fecb727","sha512":"b8ecdb96edf51ed03e00206c472aa84c832cb9faa3845cbb5fbb62da9349c01a44649f2ff464ab676c663a0fe6a7cf8d7940d950678837a2f92bf454f4911dda","ssdeep":"","tlshash":"0cb092b83ae27040c123386220a319065190aca0611088c06304f06834f383a3fa6aa8","size":100,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-06-08T03:32:37.466228Z","times_seen":167,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d830c2785f926aad80094c7e00194cf0","sha1":"6bad84d853c3652fcf142884335804cc3634156e","sha256":"e618b0b282014cdf61266ddf2fce8d9cf4476aea4e1234106da5904039499061","sha512":"ca7e1ca3b56aaf39bac712457326f535b4a94e4445b79a5269aba898b25a05106f7a58f30a7cd2db47ded3eff3b2b1c86bb9b56e16a569e9daf96c412cda1236","ssdeep":"","tlshash":"29b0928539c21444e2a671b4f2930c033258a9e780018a4467a8fcad36334622c89a9a","size":104,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-04-29T17:02:38.723747Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"83d666ae07c84b4904b251572413efba","sha1":"11146a1224c767c66c7c9fbb455bcd2da9f24c9d","sha256":"6ce9e9bd415658396e5c24ef507e5cefd1a77da5a2962a2a968ee24475558758","sha512":"a66955a7c9f244de7cee0f848f9a8683ddf81fb71c6f4003bde9459f549600fefa9587ef335fe971c7723a99afb250b9207c8538fe2ecb21296f2e05d66eb73d","ssdeep":"","tlshash":"d5c02b8274db000ec00b3278b5d20c07315912cd0284dd445500fd3132134723e9929d","size":131,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-05-29T14:33:03.446242Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0906708e508376152c1073fbecab481c","sha1":"6a68df0e395b18bb1119e1526170cc13270a05f6","sha256":"33b64869d24989f094d9a0d513ce5b25df861b77db7cd5deaf5635381e1c5af4","sha512":"e15328cfde6cde96fe93784373f1ec73fca35c4b769f893776d4ca74b9bf5416fa1786a186fa44d5ce8009fba825395a5caf03c0012444373a9c088161e3cab0","ssdeep":"","tlshash":"2d9004771c750110117013cc3347354dd3f1103cf454c510d1104005d151013500d0fc","size":41,"data":"","first_seen":"2025-03-15T06:39:38.201351Z","last_seen":"2026-06-02T10:58:21.902Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"56ab55a3744e6b397f4fbb41e518c08b","sha1":"b52b2256531b191d8fe3fac63fb9e4be3da71e9e","sha256":"c128a13d5eb91677ff3008a56088503dd3d2fdbf19bf59253e1168b9717a2521","sha512":"d3e9ccd97abeb46ca1b6f364a5e50bc516d464a03cbf79594fc91b153f230d6d96799eb0f9083d14004f448c70b4c75c909fa32d286ca68b5938a5dac305b5e2","ssdeep":"","tlshash":"77a0128837c51122c163397421e30c03b84c14b41004cd40a230e0a43c23032b8021ac","size":83,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-06-02T10:58:21.937551Z","times_seen":121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8108ee641448315833da99b453836da3","sha1":"8e54ff0afb5d033fea8a1ed72c0712df8f6e398c","sha256":"e7235c4e6f1fa5670ea838024a5dfc58d0abf76236ff35a85932c9e6b0b4be93","sha512":"d08f33383df80075aa8d96fc20526107abd0124b89f100c76a3754e52417a5cf0e2a42d8b5f9ca6df0eea05c107e09c4bce897da369a6db38a0dbdfe2b4e3558","ssdeep":"","tlshash":"d0a022c83cc22082c323303030ef0c0bb0002ce00020cc02a300f0283833c323c222ac","size":68,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-05-10T12:56:28.602877Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6c03c709eebffd0cc0ccd49ef5b3c22b","sha1":"b154c1a1f586ae42673f4e3088a680e9d6f5d310","sha256":"10d7872cb8e6f736259e65cd040654416223efd097feaaba3106e7b8fb6d6006","sha512":"43bc0c569741c3ade29cfdebc3d441f051ec0a5ba93156e71d69c9854fdb9c1d1f68bd67be85512d37a9027346c8d712072f5c14634e203676cebf3254c2b474","ssdeep":"","tlshash":"adc09bdc21475d7555f71b410f5fb725b1513310d8d15c31095563455521c17a758854","size":144,"data":"","first_seen":"2023-03-07T23:06:19Z","last_seen":"2026-06-02T10:58:21.911102Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prefecturesuggestions.com/24/5d/45/245d45a321faaf58150e2b1fe830f4bf.js","fqdn":"prefecturesuggestions.com","domain":"prefecturesuggestions.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f2b37c5ae655d183b0d16de7b307c59","sha1":"6a1b0d8a233dc23f1210828a10b70adc7106cb61","sha256":"24f9fbc59c7c1281dc274851fb02d06ab8e79b5c7922903cbb94462dd3ad8896","sha512":"6eb83152972caba9afbe50508bd5fb2fc0cdcc7ac86d05ef919a3b349a5fa7cd0f2254d5753922bdde0028a3d99daba1e04c959055bf21d42e960552a768c295","ssdeep":"768:Y2Fh07mqjfqw648+QhS8u+Jcj/XcdNjNomOdY08kUbTehzbcep0Of:Y2FhuE4x5O+jvc2dY0U3X4","tlshash":"3d63c7483f91b27802e6b8fa712fa61af0265c0195d8e4d8f503f4ddae66719f036f25","size":72675,"data":"","first_seen":"2025-08-11T01:57:23.242488Z","last_seen":"2025-08-11T01:57:23.242488Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f410aff72af7685cb54e5b241f0d8e8d","sha1":"819dcb0279877ac43c16dad65a8ab5cdad6a34d4","sha256":"449385acbd8e1551b1634a721511717e147c85bca4b9531c991e393039c68adc","sha512":"aec27895f975dbc0dff294831fdc1a6da9cfa38cf8c01e198d007fb3f58f0c824d2808d9edeb052a012a30085750d8acb698bc67787c5109b1c952b060d84d46","ssdeep":"","tlshash":"aab012c1b9c16461c25b32b5f5a35c2f302265d0600cedc4b384fca4382347379817d8","size":105,"data":"","first_seen":"2023-08-13T06:18:09Z","last_seen":"2026-06-02T10:58:21.871747Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"275246f03125c4c238c1753811927123","sha1":"e010d6e6415feb77b3bdb48bc4eb922af54f55cd","sha256":"76bc5eae090edff0b2df2d86344e1091daf30a8acb9741643d1a803201a5f895","sha512":"19c7d137db3d0661a76f340fffc1f2fa2d02a839439f2db849a8d73ad84236584c582bc495b268a1490320bddb5591187bab94f98b7026931d1ab2e26c034fa2","ssdeep":"","tlshash":"9ea012c479d62230c2233074b0f71c0b115a5490200ccc00a300e054397b023a94119c","size":85,"data":"","first_seen":"2023-08-13T06:18:09Z","last_seen":"2026-06-02T10:58:21.889119Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"892f8ffe3199453ac37973dafa98f13c","sha1":"8484337fd52522c6d97124f66e6f63385a7b7bde","sha256":"2d47cde6178eb5ea5e356077a179b9f6fb117e4419613378d753bdf98c52a36e","sha512":"9c31d5cd606389f6c3d93a974a52ebc55c477b59a92786b6befd9e824ac5f6376b22c04a10f3d63c44bf8800839a17b7ef07710ee09cb8ef5809c295595f3b4e","ssdeep":"","tlshash":"e8b092c2b9c26460c25b35b5b5a25c1f202265d06018ed84a384eca438224726981298","size":105,"data":"","first_seen":"2023-08-13T06:18:09Z","last_seen":"2026-03-10T05:39:50.938591Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6ba410501bf2f7eee570758feba031f0","sha1":"9d380d9e1cbc4cccad6176f6e19f9750d700a0fc","sha256":"d37a3479852e92e700c164e39603f6a7493394eeb4278cac0be26a6185065181","sha512":"c268dfca620c046c6896dfe888acdfce4f86cbf8ef1b22eeed9aa427e196f0f2a92bccd09e2b34bff0d7b5555b45c37f8049cc7938005fdb828454ffc0c405b2","ssdeep":"","tlshash":"c9a022e038ca3082c23330b030eb2c8b208a28e08000ccb0f200f03838b30322e022ac","size":69,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-06-08T03:32:37.490302Z","times_seen":166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4552ca4359f46216d61d9ee31b4a593b","sha1":"da2fdd9c9a9209b6fd7cccedc888b757d2bbd4c8","sha256":"0d9c768968f18669bcc2993205e3755fc432215ec8ee1feff4d6cb7539311854","sha512":"955447c4e3f55277b2ebb14fc9bee3cffddb6a63e38820d15380c475714ea801a1508eed08a514769159408595a7fff582e743e8f8dd8d6a47d791f807f1dbcd","ssdeep":"","tlshash":"52a022c03fcb2002c2233230b0e30c0ba20028e83000cc00e200f0a83eb38323f830ac","size":70,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-06-08T03:32:37.452986Z","times_seen":173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"33d596d5f218c8e12ca830d779ac824b","sha1":"d4102335c1852b2d659f377835d033fdb8767b85","sha256":"fd11d76a661056961e10286b39c125a324c45bf64a1d761aecdb8bee9106e4f3","sha512":"868ef691983da84593bbcb1a7596dd39a8ea958fe55671908bc4dff12fe92f6ff9d01caf37967374b137348ed497fb302e81eec3e9360d10c2875514cd328391","ssdeep":"","tlshash":"6da011883ac22880c2a338b830ab2c03a88028ea2000cc00e220f0ac2c320b23c820a8","size":74,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-03-10T05:39:50.919209Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f01257e18c531674a1fd19e4f2395a27","sha1":"42687d593f1da3c31c2c7f3c148b2d1e2672bef8","sha256":"6d0cd86f0322e8d5ae8c1ff718a686de00babfead811cda4fba6bbc16234657f","sha512":"bc2bbb9b269477f6497ca342f62ad10a30306b748cb65ff3ea44aa8934887da44535549317f33e6f2bc04478e89ffa4bd70d31599a598c64cc5a39e2b4cdbaaa","ssdeep":"","tlshash":"5da0128836c21561c17339b860a30c07b85514b410048940b124e0b42c2303378011ec","size":82,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-03-10T05:39:50.908566Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"47dbdf8390541c809af6b481c988df5d","sha1":"80a9ea7dc445a505f6792b5d917903f429aa0358","sha256":"3fa38e13c25e551bc88d28a905f972b1fcf5b5bb236103881a9b88510a9c5810","sha512":"c6fb5f55aa515098bf3d75bd6bc748176cb461bac3022c38a81af4084c12091758690c55379fd7cfadbe77a916776a0d8f27461e01911fa653183f9d8e82cba5","ssdeep":"","tlshash":"e1a0128434c31894d3e3307031e30e06200458d540008c009204e45835730335806999","size":79,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-04-29T17:02:38.714387Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85386,"data":"","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"de2d4783c9b6cf00d5b006375fbfaf23","sha1":"3361527d17c5ce7490d3025f1ca9b12f91dacd8a","sha256":"73965d73b4bb7b14dd1375d6e2acc8d1b1cd1069697072a54b5d30f7664ab168","sha512":"8d7483dcd3ae209abc3ebb12dd988df5cbe59df63cf45baf9721b42fe8bb7b846784d2c24b85d9754ba87cab5c1266ea5ede6ea297bc4b7fcd5c3152be575253","ssdeep":"","tlshash":"83b012d478d61031c2233170b0f71c1f51561490200ccc00f300e054397b023d94159d","size":88,"data":"","first_seen":"2023-08-13T06:18:09Z","last_seen":"2026-06-02T10:58:21.920166Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cb6370402ad66d9adf7b00edd6e50c5e","sha1":"3b639d362aeda91ebce255ceb8fb4497932bc512","sha256":"887945a2a392e8ecddc8160dc472f83e9017eb22464c10e62f8dd82e0d174a68","sha512":"5886005b2782854a64b746b9ee95b60f22051f31c96eb46dd4b5a9857471ae9b162d5fd8842e6a248ce4623b654d8bbad4a9108cc7a2ef42be2ab3f4f0f5c3c7","ssdeep":"","tlshash":"d0b0129438c25022d72330f468fb1e0b72e19d9400008c046120e45c2d720726d1607d","size":89,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-06-02T10:58:21.897581Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5b40f41b419bb7c97567c5a23f6b44cc","sha1":"210a97c433817c6ed7ab2bb7e92e82a678f5869b","sha256":"6648a40a598c208962b58e534d2bf2e0832283b5af843d9a1ce465607e16adab","sha512":"dff7324dbb520845d433d6e896f3e22cfce4df9f0943dfc2fd2d8bcb39cb2894a54aec4879307bb802134f58382920686d15280aafadeb090a0f1e1542951ac9","ssdeep":"","tlshash":"33b012867ad21071c6573a78b5b31c03786529f54004cdc0a1a4fc3d3c620f278413ec","size":98,"data":"","first_seen":"2025-01-04T23:35:08.108938Z","last_seen":"2026-03-10T05:39:50.913704Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa83660b82d391a138f3000130217a0d","sha1":"810a8874c1b70643387a5f163d4ab7fd4f9319c2","sha256":"ef088dd378595754d72d44ce29774b1373147818cdd86109bc47585b8d9ba0d0","sha512":"d6b8ebe39f954caa40ed498d1c0688e675ed1b20050a357c44d0e1efbde95009ef389ae18c1ac20910b3af51fd574bfe5c33c3e711ea6f025a0ed917ace062be","ssdeep":"","tlshash":"57c0c0c178c978618b323cbce06318070054141434008c50a1ec908028230352d0b0fc","size":178,"data":"","first_seen":"2023-08-13T06:18:09Z","last_seen":"2026-03-10T05:39:50.895019Z","times_seen":121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"324d7e63905e3bcce28202cec2d534aa","sha1":"082faa076a64a1d6059e1a86081f61b53ebd537b","sha256":"4cee3a0534f1f98ffd4db743eb3115cac3c75d7a9140a5ff5b2a25656030e0f5","sha512":"492df93d608eb91daa683de5bd09c2f60ac06cbf40d895a8cec58f3db2afb664fd4a2b08f66421bf0f29140bd4489de0e680ecb595c9f034a23de619976d30fa","ssdeep":"","tlshash":"6ea012c03ac66040c2133530e0d71c0bd0051c9010008c009100f61829724315c47198","size":78,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-03-10T05:39:50.933958Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0fad095c517e3e19a0848e1cc76b25a1","sha1":"e5b1ebf3ce128d80f32671764ae69fc5dad07c48","sha256":"7f0f99c93fd870283d116d3c8156ef4366513011f7b2dc56d1451b6ba90f550e","sha512":"e52b3398b9fea8eb4aa275e9e56c21b3b526a9e3722429261d073c660271eac8d78cf17cddf09a1762a615c5f5bd02215d8a6209c6df82d50f2d8edeec59c68a","ssdeep":"","tlshash":"daa022c83cc22002c32330b038e30c0fb0a8ace00020cc02a320f0283a330322c022bf","size":71,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-04-29T16:58:36.841309Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dcd374e02bfc48ab0316658d9578622b","sha1":"84d8a05f8b3900a574e698ea8536a39a860b9b75","sha256":"fe01dab50bae0b80ab176243779160876a46fe04259dafce4d0a4ca8558e7324","sha512":"4bec33846b49f94931be70eb1a6c84e8c58cc2158dd937e088440eb349c52f6656ddede6ca17207f44c9705941428dbb165e9fc3ee2fb3b6c1291ef0cdbc52a4","ssdeep":"","tlshash":"b1a011883ec2a000c22332b028a30e0b200a28a000008c00a200e0a02ab20322a822a8","size":68,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-06-02T10:58:21.94545Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c4adfa9907b44903072f9ea2005a601","sha1":"1dd95fa2f996ae5b6cc9df3be430ce619a13c78a","sha256":"c74a76398c9dcad73f9acfec110923a03054a690e8098d2e30dbd34082d98456","sha512":"cee277173aba226070ae238f98ddbb23ac12e68615c0c1f2ae9c56a319ce572ae18e59f509701e21221dd2f5a1aa4eb4be649cec4326506e8e1a79a46536468a","ssdeep":"","tlshash":"64a022c038ca2002c233303030eb0cc3a02828f00000ccc0f208f8203c330322c020ee","size":64,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-06-08T03:32:37.481177Z","times_seen":168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4a546449239c1c522487660e9a5ef3f3","sha1":"3f7d36fbbd8fd20f73451639d1496b9c53f4b1ef","sha256":"3b9528a7587b3cae7d6d27b4d40c6d33bd31454e4e1390df976d202153da547d","sha512":"194a76e9f3e75b2f3bfb9018ba7a647f2616a2bbcc950b1d97b3971fe167984a90f2eea66cdcf6af1a392c95eebbcc67ed2d4311dd0724d499efe9e00436ba90","ssdeep":"","tlshash":"78b012c178d35438e627353c20931d0274c42c945211ccc0ea14f8106d2302a7a7a99d","size":101,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-03-10T05:39:50.916851Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3f107d706b1442bff0e813566bc79033","sha1":"517bc7028a44dee5cf8a083033f0e2e96f857965","sha256":"385dcfad91223be0df40a5ce9a8a82f7a6e570e718904769fea6c9276b4aecb4","sha512":"0410752e02d8132f2988cb094d995bb2b9d3b852ebf2242308c9bdd45dca432295242834111c5964b87b43bed98bd8c008ff7622fb64b12d4b54fa648fadb860","ssdeep":"","tlshash":"26b092c439c36010cda3367da1ae5d0a11136d984405ca44a608e4ad6ea6022b88269d","size":113,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-06-08T03:32:37.487848Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bc06fdbe36d99aabbef88ce731ee19ff","sha1":"cdb2417dfd2b0fbee4b930923369fa220bf6ceb2","sha256":"853c348594b675de53940d306720144f72812ab663e6429316d7d062c0d758eb","sha512":"ad95e018704b5070bd4e6e212fca3aecb8ed2090f1b061691c2630dc9343a34c8b49901fb39805f5d8a98dd5550a42b59cb5e1e4e0cc56880b820e1ad5dc0cab","ssdeep":"","tlshash":"c6a0128435c11401c157387420930c0b608464941000cc409234f05c3d320717c4107a","size":77,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-04-29T17:02:38.687962Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/vpn/classic-push/small/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a356126b9573eb7bd1e9a7494737410","sha1":"8258d046f17dd3c15a5d3984e1868b7b5d1db329","sha256":"22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5","sha512":"005c3102459dbf145df6a858629d6a6de4598fafe24cd989d86170731b0c3b3c304da470cf66bfd935f6db911b723df0857b5ed561906f7f1c5c4e63ed9430de","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrZ:++414Jiz6fh6lTqya98HrZ","tlshash":"dc83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84380,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-09T21:18:53.584636Z","times_seen":18828,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bd8576abd698129701d8fcefbcc8c2d5","sha1":"03d75d9394f34969ae00a8ebe0d9612e506d081d","sha256":"41bda9e7847b0ed745073946d6a1a611a70c411ff7d1e6778c35c5f165072d6d","sha512":"8950a6d34570b401e69d4edcf56b3911f9614d23773bab8aecafb5af568a8aeb2ab2c4b3e25991e3afd6594077672935c2d71a196fcce810b4c9b3ca768c0c27","ssdeep":"","tlshash":"17b012c5b9c16460c25b35b5f5a35c1f7023a5d1a008edc4b384fca4382347379812d8","size":105,"data":"","first_seen":"2023-08-13T06:18:09Z","last_seen":"2026-06-02T10:58:21.903953Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1b7b4f859db3f20111d41f348dcc6785","sha1":"b1722422aa3e2412081ac26b1a36656ccfefc658","sha256":"fd94eae09dc83668941b0795fdc338f018a4a5aa760be9ccb3bc6cdf2a9b59db","sha512":"38fbc8cba8e4dd031da5896405eaba0bc0ac6b70832da7ef2ac097cb2c0d718ff42c423ca88c6ebf627558c2a3c2c065d55627fabf20ea7ccbf37ac17ddd80eb","ssdeep":"","tlshash":"55a011883ec2a000c22332b028a30e0fa00a2ce080008c08b200f0a02ab20222a022a8","size":70,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-06-08T03:32:37.486439Z","times_seen":166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b9b8f9446434ab2c6e7ea53c9407d98e","sha1":"1f006a5cd05c220c37e8748ba043d09ec4a21970","sha256":"f08104eddda218f022e4e6240f4e175218cae0d9934866ad3ac084673bc2e9ae","sha512":"df37720a4beb7c08f4e1eb222cc8c146b4c801587567c7081b125d96ab761322eac03d747c5ef3766e0e92752c07942f599524f430f9783e802fc9afcae7b562","ssdeep":"","tlshash":"dba002d83dd66051c363357071e72d47b1d668e4500ccc80a205f4647973032eeb65ad","size":62,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-06-08T03:32:37.464392Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8722738dddc0affe76c3a1efb7cec9a1","sha1":"6a38bc67d9d928ad638be44a87db22a21a5c9763","sha256":"b1389a32832380695205f552c2330502429c5a25c502d37f88e0f54ab0d794e4","sha512":"5365fd6f53b6dd95c5791b6b6dbb27c46d056764d3094e10da6711dc587777e8acf479c1d67461a3e3f20ea8fd6c054454dc30acbf1680eca02b7075db27f318","ssdeep":"","tlshash":"34a012c0f4ca5003c333317130a70c56511668d0900088405104f1103463432398215e","size":85,"data":"","first_seen":"2025-08-11T01:57:23.309484Z","last_seen":"2025-08-11T01:57:23.309484Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a6886f6012e45b56dba4e39fabd3048","sha1":"c6a650075773e94ab4f5e18f537a08ed6ea6fe9b","sha256":"5ecda3a2a5366c238ecdcd7a6aa62e8a4a250f6f199316218cf26244d1033ba6","sha512":"bdbcab3d9e47d18f047550d51fab7c2775fbb47c509352c76e9e0a5516b44e2c71d016409ad8138b43d49c12dd46d44965df15e97bad1f1faa75817709bc47ae","ssdeep":"","tlshash":"74c012141c29bbb4561a10c1e5e5e98d346ce63442619b48839d489062c0b969989e41","size":179,"data":"","first_seen":"2025-04-25T07:42:48.698308Z","last_seen":"2026-03-10T05:39:50.9331Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bce058379a4ed27713aa9fe3b1e78600","sha1":"40f11e893b58deb58c44469463c76c1fb668df3b","sha256":"fe25ff82b14d8b5da7ded5204f954b92f5ac9f67929d2181a3a4c765d32ab818","sha512":"cbdebfc3efca9e1f928e28d4322b8d5f7dd50d3d29ab56d4b853480f7c0852c82ce747631757db0a05809334486ba2290d4c93b31c911a8da00498384439d1f3","ssdeep":"","tlshash":"62a012c479d61230c2233070b0f71c0b11561490200ccc00a300e154397b023994519c","size":85,"data":"","first_seen":"2023-08-13T06:18:09Z","last_seen":"2026-06-02T10:58:21.890898Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a4c6f0229ee934fd7ef657ba210b4f8f","sha1":"87aac488d96b33ef6004b370a1ed6c2005fbba78","sha256":"c0152a5c7fe5563fbc80c1e41bbf4dc73c0e9ea1ddc6a453fb0b8c228d8983a5","sha512":"3eaca0684217c124b53a2bbccd8ce77adcb2d7e18ca38d2f1bc15d65ffb1c01f94888249829c1dd49f341582b40ec6657631921228239d7fe18ef23b84b81c7f","ssdeep":"","tlshash":"7bc02bcab5ceb8a2c7b33c7994771c0b21a9186139409c40e3ccd08429330347e4b0ec","size":153,"data":"","first_seen":"2023-08-13T06:18:09Z","last_seen":"2026-06-02T10:58:21.939701Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4c68fecaaabed8039a63e91650be1a86","sha1":"90f9d596c09ec754d71aa40a2ac8b6e217b6076a","sha256":"0dd4f405d07fee441d2f51fc785a730db7422e9791fdb41eab46ba169d04b6b4","sha512":"ef25789ff58214c64942b57c7a5cb49cd119c3c969e29c44b2f080e060a35e54bcf3a16bb4d4c09a68ba88858768ff9a8fc46d5ce6e5e4b85b5b9d6525a932f1","ssdeep":"","tlshash":"d7b0128438c29832c7a330b464fb1d4f70d15d9000008c046220e46c3c73933ad0646d","size":89,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-03-10T05:39:50.940525Z","times_seen":121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/assets/123av/dist/app.js?v=1754354656","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2efb2c66bd8f3db2ac739ebf5c37efc","sha1":"750c8b3f999338c8a60d47f62012973588093bd4","sha256":"668f637acde27005176f8eca59f733940be1bcffd6e6d79fd62b8baa734412b7","sha512":"9d1c8c99b7403820663fb1d00bac82f163fb2e6539fa18d065d51ed9add6d957c0df4d8f8ae72ecc28d8ac5de88925e88eb953cec8b16426ccaba9c291258bb1","ssdeep":"6144:G76wIdyY0WXidGC1aTUUeHLw8eywkFb/W:G76d5bsiU9hFK","tlshash":"ad444a8c72c5b031023b607500afb407b9ba75d1740fa993e97ae8d47cf999e8057e9e","size":255204,"data":"","first_seen":"2025-08-08T04:12:15.10601Z","last_seen":"2025-08-11T01:57:23.228055Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"68119d30dfe223662cce7bf2f644b942","sha1":"622f9642f6e9f6df8d1c3ceb9a0f20760743724a","sha256":"7acac17186e2f8e707b4f76a6d491a72a0a631fc31af90925736bf8699606209","sha512":"79aee0e7d525b72f85421a89cf7d28ad000433bd61f38a89feb4dd035115d95cc3e2dfe8e02dde3f79af267f0f25bf5ea64d19e13814357eb0b0efe326072c67","ssdeep":"","tlshash":"57217032116c5ff8221bf06b928579c99e351195d4a7230e730c0ac91ec03b90bfae9a","size":1276,"data":"","first_seen":"2025-06-15T10:09:54.788188Z","last_seen":"2025-10-04T02:43:01.670578Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"25b77217432c010527f57db38065efc8","sha1":"e96ea2f275c9733b2f9ddc944c9991048678a17d","sha256":"520d04c418a7295f4406b93770b145701c799764cdc9e4c400ebaa78ee8d5da2","sha512":"7464f70ff8242d13992fe33c5f33bdb529d9b45247f74b727be8f8b8e10998b4d7cd1a0760356245fb6c5ccb8abc40de9d1e0d416e037e0633d179e100d86cbc","ssdeep":"","tlshash":"f8a002d439e66151c6673570b0fb1d4b619569e49004cd40a204f4647973132ad5a6be","size":62,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-06-08T03:32:37.456041Z","times_seen":169,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e2feed2c9e8ff2e1e1a99fa1b7087ba5","sha1":"b7de454f4ec0bb469d8c1647ad9df0d49a741555","sha256":"237674f627f660c633ceba86d25065729d70fc75cba62c2827064b5781e8264b","sha512":"86226210ab7cfb801beb3b702e3aca600f0517610afb0762e6d6994f40ad5307c10721198a1330030acce9d1de247c8e1aacc912c24c217f617510d50a52b76e","ssdeep":"","tlshash":"8ca002c439d6705ad273357070e71d4b71556ce95044cd84e604f4e43973032ed565be","size":65,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-04-29T01:28:15.08887Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1411dee97be24694364ed8d77786c7e5","sha1":"65944b08412be4c8a34b24a4e84ccd2415de54f0","sha256":"ccda7b68498c153ea4fde4d1dc9f09a0ad01012a4ddef897939263455743f8e7","sha512":"c3e5b1fac8719c7ca37b12594d2443b2276a057644ef729a07be37676dea682157b3db894b9ccac20794c5ed4d0e87ad717e4cff22ad5d525e4f0c1dd70a3faa","ssdeep":"","tlshash":"24a011c038c22020c2b332b020a30c022208a8e880008800ab08e8a83a33022280a8ae","size":70,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-04-29T17:02:38.696992Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-06-09T15:39:11.000122Z","times_seen":337350,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"10a9618c757ce1d487a910c33838ecb2","sha1":"379c609d33fa702738b13d93ff9929463e153677","sha256":"b568a5bdf10bf3d7445cb80612a83c54bfbe5277bb488a94719b456d7eae123a","sha512":"90b5b11bfa9538e0f0342e87748940033a1ec99d822c428b17177cfef95eb85359b80b18d061022b5e00c2054ffda44e9419580b4e3a1217503535d7b11f5161","ssdeep":"","tlshash":"02b09b551c19ea64494600c5c5e4e84c345476140271cf8c839c5994a6c4b944d86e51","size":125,"data":"","first_seen":"2025-04-19T10:54:17.444478Z","last_seen":"2026-03-10T05:39:50.948225Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"123av.com/assets/123av/dist/app.js?v=1754354656","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:56.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Jul 2025 14:34:55 GMT","end":"Mon, 13 Oct 2025 15:33:19 GMT"},"fingerprint":{"sha1":"F4:96:08:D3:B4:32:31:FB:1D:05:92:D7:14:CB:CB:84:09:EB:B2:10","sha256":"8F:00:12:4B:74:63:2D:62:3A:60:EB:AC:E1:21:0A:2B:78:B0:77:D7:F3:94:B5:53:63:D0:CF:42:1A:37:17:F3"}}},"request":{"raw":"GET /assets/123av/dist/app.js?v=1754354656 HTTP/1.1\r\nHost: 123av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/en/series\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 01:56:56 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 05 Aug 2025 00:44:35 GMT\r\netag: W/\"689153f3-3e4e4\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nvary: accept-encoding\r\nage: 522513\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I00Tbwvj8ugg3x25YL%2BuVWyVddApho6l5frrz3pLrmpiwXMj%2FHUvuP10BXmyCmN3F1dZ0bxVUOruIqEm00ssxq6uyZITh3w%3D\"}]}\r\ncf-ray: 96d41e8fbf7b5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":255204,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b2efb2c66bd8f3db2ac739ebf5c37efc","sha1":"750c8b3f999338c8a60d47f62012973588093bd4","sha256":"668f637acde27005176f8eca59f733940be1bcffd6e6d79fd62b8baa734412b7","sha512":"9d1c8c99b7403820663fb1d00bac82f163fb2e6539fa18d065d51ed9add6d957c0df4d8f8ae72ecc28d8ac5de88925e88eb953cec8b16426ccaba9c291258bb1","ssdeep":"6144:G76wIdyY0WXidGC1aTUUeHLw8eywkFb/W:G76d5bsiU9hFK","tlshash":"ad444a8c72c5b031023b607500afb407b9ba75d1740fa993e97ae8d47cf999e8057e9e","first_seen":"2025-08-08T04:12:15.10601Z","last_seen":"2025-08-11T01:57:23.228055Z","times_seen":3,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:56.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Jun 2025 22:10:34 GMT","end":"Tue, 23 Sep 2025 23:10:19 GMT"},"fingerprint":{"sha1":"9D:9F:FB:08:8A:BA:46:3F:69:F6:F3:D7:AE:78:13:8D:FD:5A:C8:D5","sha256":"D9:F5:02:19:B1:14:B6:BB:CD:0A:77:3F:9C:27:15:A8:11:CF:B7:9A:8D:F2:F4:E8:83:46:88:37:44:03:A7:E7"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://123av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 01:56:56 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96d41e8febb0568d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-06-09T15:39:11.000122Z","times_seen":337350,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":18,"dns":0,"connect":1,"send":0,"wait":13,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/cf-fonts/v/nunito/5.0.16/latin/wght/normal.woff2","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:57.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Jul 2025 14:34:55 GMT","end":"Mon, 13 Oct 2025 15:33:19 GMT"},"fingerprint":{"sha1":"F4:96:08:D3:B4:32:31:FB:1D:05:92:D7:14:CB:CB:84:09:EB:B2:10","sha256":"8F:00:12:4B:74:63:2D:62:3A:60:EB:AC:E1:21:0A:2B:78:B0:77:D7:F3:94:B5:53:63:D0:CF:42:1A:37:17:F3"}}},"request":{"raw":"GET /cf-fonts/v/nunito/5.0.16/latin/wght/normal.woff2 HTTP/1.1\r\nHost: 123av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/en/series\r\nCookie: locale=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 01:56:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 39124\r\ncf-ray: 96d41e92a87e5691-OSL\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DXEtKjJEzpVqMm3Emt3gd0kKvX%2BuqdZhxCcyH%2Fn7Khx91HqNxbMymxxcAL6aHvtZwFtno88Ex%2BxitYPwIDt9f%2FgrYk97h5dmdsImlElMlra82p%2BTAOz2MxB85Is%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=792\u0026min_rtt=391\u0026rtt_var=523\u0026sent=152\u0026recv=78\u0026lost=0\u0026retrans=0\u0026sent_bytes=189738\u0026recv_bytes=2065\u0026delivery_rate=20615961\u0026cwnd=218\u0026unsent_bytes=0\u0026cid=a8accd7f3bb372e6\u0026ts=890\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39124,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39124, version 1.0","md5":"86b73ab5f530be7984b704414f2a711d","sha1":"8e297794ed7b6f5ea476d14b5270df12e8f3e42a","sha256":"1a48b70f97555c13f84b8f088a417f9179d99b5101250819350acaf6e91bb92f","sha512":"468f8d4ae9419cacdf913fba2da37055e3469d935d7b7b362717cf17d2c4c27882ea3bb34510273312dd80dc2dea05775ce65bc3f9d1048f50aad4b27e8188ac","ssdeep":"768:usTP6aNC1fdVoOCiqMR4+H42dLoPZsn578cLtxtQcvA7mQ7RHl:usTS/eDgR4u4IM+TJvUqQ7","tlshash":"0e030162b507a86426818d73f65625388b034831d91f90211e80d772eb6a691e3efbdb","first_seen":"2023-09-15T03:45:56Z","last_seen":"2026-06-09T18:01:05.457773Z","times_seen":14507,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/td?id=G-VZGC2QQBZ8\u0026v=3\u0026t=t\u0026pid=73491133\u0026seq=1\u0026exp=101509157~103116026~103200004~103233427~104684208~104684211~105033766~105033768~105103161~105103163~105135708~105135710\u0026dl=123av.com%2Fen%2Fseries\u0026tdp=G-VZGC2QQBZ8;72265995;0;0;0\u0026frm=0\u0026rtg=72265995\u0026slo=1\u0026hlo=3\u0026lst=3\u0026bt=0\u0026ct=3\u0026z=0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:57.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /td?id=G-VZGC2QQBZ8\u0026v=3\u0026t=t\u0026pid=73491133\u0026seq=1\u0026exp=101509157~103116026~103200004~103233427~104684208~104684211~105033766~105033768~105103161~105103163~105135708~105135710\u0026dl=123av.com%2Fen%2Fseries\u0026tdp=G-VZGC2QQBZ8;72265995;0;0;0\u0026frm=0\u0026rtg=72265995\u0026slo=1\u0026hlo=3\u0026lst=3\u0026bt=0\u0026ct=3\u0026z=0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Mon, 11 Aug 2025 01:56:57 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgtc:45:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsgtc:45:0\r\nreport-to: {\"group\":\"ascnsrsgtc:45:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgtc:45:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T00:14:21.104822Z","times_seen":16282530,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/au/0c/c8/e1/0cc8e13ba9d5dbc867b982993e805a9d/1632728593.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:58.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 11:11:15 GMT","end":"Sat, 08 Nov 2025 12:08:40 GMT"},"fingerprint":{"sha1":"46:26:78:BD:18:7A:95:15:D4:B3:89:73:FE:7E:99:33:18:7F:21:3E","sha256":"AD:6B:6A:10:54:38:33:B9:BB:A6:FD:B7:B0:1B:2E:9D:62:B8:47:35:C4:E6:7B:F6:4A:92:AA:75:B0:29:F7:F3"}}},"request":{"raw":"GET /sb/au/0c/c8/e1/0cc8e13ba9d5dbc867b982993e805a9d/1632728593.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://123av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 01:56:59 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Sep 2021 07:43:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3LDC3MGAkT669K8dQbGb7yT0ZdCWotoAzjo72DjViVeMu1hoXvuTGfzVrVYWPUI7Ll8DCw8LpIkQo68h4XwUkDzTA%2BhwvXBBit4CysE%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 96d41e99cc3f56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1325,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"f6990569c7ffeac1f4a3f6d9eee5da44","sha1":"e7d5e37acf89a8faee252c36fc2c9d6615501d76","sha256":"cc2a9756c81bd570fff8b32e48a413687c33f8abe9c934e743a0769178b4f690","sha512":"be3ebced9d65b29fef8caab46e95f54f1ca645ea5942331c84c964ec033fb7c78506d14eda131948b7f664f1635deaa8d82a63169f9214f72035b087ea104bda","ssdeep":"","tlshash":"a52105692df9c97311e750947b352f1bed92ea87c80a6e0173bc9d684f9ad84cd23407","first_seen":"2023-06-26T22:59:31Z","last_seen":"2026-06-07T23:29:39.373393Z","times_seen":3213,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":36,"dns":20,"connect":1,"send":0,"wait":491,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/vpn/classic-push/small/img/close.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:59.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/img/close.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 01:56:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 591\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"65aa84fe-24f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 234021\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hO3QQJgg7iTCV59feNP%2Fmm2oO4Cib1I8S85GQhzDJK66VnEYJ9xKfte%2FrskyJX6kHr6gpuwR3HfIkunGi9POP43t%2B1LAWR%2Fm3C3RIMDk\"}]}\r\ncf-ray: 96d41e9dca4756b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":591,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced","md5":"9fd5bcb6103d86e317bd1eb019bcbe71","sha1":"6b5a52ea669dcb74946f2bed4bdd7ec985026113","sha256":"0ddd3be104ac7945fb062096df62034a6a24ecc76ba92493c35c62c3c25982ae","sha512":"e244a8842c009fa83e8d9d1088ec5b76ca2a42660568b7886e01724977b9ebd4e43690e0c651e25287c64dcc4826391b34cae6a106e2148139450dd05fc5a562","ssdeep":"","tlshash":"b0f0414e7c5903a1874caf3b18dd00119c27898077c82e0db689eed20e008e215471da","first_seen":"2023-04-11T11:09:41Z","last_seen":"2026-06-07T23:29:39.357071Z","times_seen":5785,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/3d/81/bb/3d81bb97268ef5728376a4b8c41e5769/1680149067.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:59.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Jul 2025 02:33:11 GMT","end":"Wed, 08 Oct 2025 02:33:10 GMT"},"fingerprint":{"sha1":"06:D8:07:0F:AB:BF:D8:7F:C5:38:82:AC:A7:8A:20:4D:83:6C:EA:C9","sha256":"CF:05:58:46:C3:07:3F:B6:A6:8D:42:F2:3B:3D:91:36:93:10:CB:D5:89:47:A3:62:26:D2:F3:BA:AC:51:0E:B7"}}},"request":{"raw":"GET /si/3d/81/bb/3d81bb97268ef5728376a4b8c41e5769/1680149067.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 01:56:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 70486\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 30 Mar 2023 04:04:36 GMT\r\netag: \"64250a54-11356\"\r\nexpires: Wed, 13 Aug 2025 01:56:59 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: ah0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70486,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"5b12f832c47768efe99140878896a06e","sha1":"e4ad174888c105b49055b901cf85ea28fdf08718","sha256":"cd602fed63cebb83565961dae66555978c2e1927388e50c7fb2ee0bb70939fb0","sha512":"7cae7180c69b456dd973f5430e88eca4b0fcf150c999bf14d44601906a320290bb494ee6330a8d33dc0b2ee295dc335eda1e1c6a2a394a31abca690667be1196","ssdeep":"1536:ZF2THgeV1DYIau/86djX5X01YjA/K9NF+Hp8CB2fRHCr:ZF2zgeov8dLC1Di9uJXYfA","tlshash":"9563026fd9fc60573afb58489928afcbd87e91578710d304e164868d008f9cef21b792","first_seen":"2023-06-24T15:48:47Z","last_seen":"2026-06-06T22:53:04.890408Z","times_seen":1121,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":72,"dns":25,"connect":19,"send":0,"wait":38,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prefecturesuggestions.com/9b/7e/1e/9b7e1e724274b81f688a60aa9a5b4054.js","fqdn":"prefecturesuggestions.com","domain":"prefecturesuggestions.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:56.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"prefecturesuggestions.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Jul 2025 22:30:30 GMT","end":"Fri, 24 Oct 2025 22:30:29 GMT"},"fingerprint":{"sha1":"AD:6E:3B:18:DD:94:8B:F3:56:B1:E8:28:EC:D2:36:E8:D2:33:6C:3A","sha256":"7B:6A:B2:1E:DE:76:DA:23:8C:AE:29:8A:26:F0:F4:6A:10:58:E0:BD:AB:D4:38:41:5A:B1:7B:7D:6B:DD:4E:15"}}},"request":{"raw":"GET /9b/7e/1e/9b7e1e724274b81f688a60aa9a5b4054.js HTTP/1.1\r\nHost: prefecturesuggestions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Mon, 11 Aug 2025 01:56:57 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 32435\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: prefecturesuggestions.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 22abe819ba66240b4fc4afe06569cd47\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":105113,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d53576a5c16e593f8234695c7a566c25","sha1":"9a7cc1551c3d53a11b78ff826a673e1135f9807b","sha256":"d2c30ea36b7b8d6cf25eb9f15018f1d8158eeefd895159012a1f0c3ca03e47fc","sha512":"30e1d814720900512e5bd140ee8a7092fd6273e02c21adbb923b691478f94c08f545db09f73493907c2b9e5498659b12a10ec17f2796cc1070824de3148dc84e","ssdeep":"1536:PwEYGbRF1Psv/8k8gmAW9ak94Hcs8yOAt0y6h/lIWkmA3LAap8:PwEVmmzd48s8BEqh/lIWc3+","tlshash":"7da3c8987f69f02d426590f7213f5137e21b0d45908ce5e8f403f5a82a7c75be8bae26","first_seen":"2025-08-11T01:57:23.23998Z","last_seen":"2025-08-11T01:57:23.23998Z","times_seen":1,"resource_available":true,"data":null}},"time_used":778,"timings":{"blocked":288,"dns":16,"connect":91,"send":0,"wait":102,"receive":92,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"prefecturesuggestions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/cf-fonts/v/nunito/5.0.16/latin/wght/normal.woff2","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:57.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Jul 2025 14:34:55 GMT","end":"Mon, 13 Oct 2025 15:33:19 GMT"},"fingerprint":{"sha1":"F4:96:08:D3:B4:32:31:FB:1D:05:92:D7:14:CB:CB:84:09:EB:B2:10","sha256":"8F:00:12:4B:74:63:2D:62:3A:60:EB:AC:E1:21:0A:2B:78:B0:77:D7:F3:94:B5:53:63:D0:CF:42:1A:37:17:F3"}}},"request":{"raw":"GET /cf-fonts/v/nunito/5.0.16/latin/wght/normal.woff2 HTTP/1.1\r\nHost: 123av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/en/series\r\nCookie: locale=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 01:56:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 39124\r\ncf-ray: 96d41e92a87f5691-OSL\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mLop5UEZcvZYFhh1i6HMP0IwFvNN4J5udckW7AKGWDTYxsiYIjaMe0ccrrT%2FpYRmiLhJ3m8s0xzw8c1C%2FoyLpnHlFN9QzD7qd4YvMUthdgSflhtdGRDI%2BrS93NQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=812\u0026min_rtt=391\u0026rtt_var=133\u0026sent=182\u0026recv=92\u0026lost=0\u0026retrans=0\u0026sent_bytes=229530\u0026recv_bytes=2176\u0026delivery_rate=34306021\u0026cwnd=220\u0026unsent_bytes=0\u0026cid=a8accd7f3bb372e6\u0026ts=892\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39124,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39124, version 1.0","md5":"86b73ab5f530be7984b704414f2a711d","sha1":"8e297794ed7b6f5ea476d14b5270df12e8f3e42a","sha256":"1a48b70f97555c13f84b8f088a417f9179d99b5101250819350acaf6e91bb92f","sha512":"468f8d4ae9419cacdf913fba2da37055e3469d935d7b7b362717cf17d2c4c27882ea3bb34510273312dd80dc2dea05775ce65bc3f9d1048f50aad4b27e8188ac","ssdeep":"768:usTP6aNC1fdVoOCiqMR4+H42dLoPZsn578cLtxtQcvA7mQ7RHl:usTS/eDgR4u4IM+TJvUqQ7","tlshash":"0e030162b507a86426818d73f65625388b034831d91f90211e80d772eb6a691e3efbdb","first_seen":"2023-09-15T03:45:56Z","last_seen":"2026-06-09T18:01:05.457773Z","times_seen":14507,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prefecturesuggestions.com/24/5d/45/245d45a321faaf58150e2b1fe830f4bf.js","fqdn":"prefecturesuggestions.com","domain":"prefecturesuggestions.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:57.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"prefecturesuggestions.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Jul 2025 22:30:30 GMT","end":"Fri, 24 Oct 2025 22:30:29 GMT"},"fingerprint":{"sha1":"AD:6E:3B:18:DD:94:8B:F3:56:B1:E8:28:EC:D2:36:E8:D2:33:6C:3A","sha256":"7B:6A:B2:1E:DE:76:DA:23:8C:AE:29:8A:26:F0:F4:6A:10:58:E0:BD:AB:D4:38:41:5A:B1:7B:7D:6B:DD:4E:15"}}},"request":{"raw":"GET /24/5d/45/245d45a321faaf58150e2b1fe830f4bf.js HTTP/1.1\r\nHost: prefecturesuggestions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Mon, 11 Aug 2025 01:56:57 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 25668\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: prefecturesuggestions.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: bf24d5fa35e924f4a7f689101c2afaa3\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72675,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2f2b37c5ae655d183b0d16de7b307c59","sha1":"6a1b0d8a233dc23f1210828a10b70adc7106cb61","sha256":"24f9fbc59c7c1281dc274851fb02d06ab8e79b5c7922903cbb94462dd3ad8896","sha512":"6eb83152972caba9afbe50508bd5fb2fc0cdcc7ac86d05ef919a3b349a5fa7cd0f2254d5753922bdde0028a3d99daba1e04c959055bf21d42e960552a768c295","ssdeep":"768:Y2Fh07mqjfqw648+QhS8u+Jcj/XcdNjNomOdY08kUbTehzbcep0Of:Y2FhuE4x5O+jvc2dY0U3X4","tlshash":"3d63c7483f91b27802e6b8fa712fa61af0265c0195d8e4d8f503f4ddae66719f036f25","first_seen":"2025-08-11T01:57:23.242488Z","last_seen":"2025-08-11T01:57:23.242488Z","times_seen":1,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"prefecturesuggestions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rashcolonizeexpand.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=946\u0026rd=946\u0026fd=524\u0026bv=25.8.7886\u0026tmpl=70","fqdn":"rashcolonizeexpand.com","domain":"rashcolonizeexpand.com","tld":"com"},"ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:57.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rashcolonizeexpand.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:10:41 GMT","end":"Fri, 26 Sep 2025 22:10:40 GMT"},"fingerprint":{"sha1":"C7:75:50:5C:D3:7C:BF:A1:34:3E:61:33:FC:D6:81:21:2E:31:1D:92","sha256":"CB:A9:18:8B:DD:56:71:B4:C1:61:A7:9F:5C:50:7F:22:BB:83:72:BC:0F:B3:14:19:C4:E9:F9:59:6A:0F:95:EC"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=946\u0026rd=946\u0026fd=524\u0026bv=25.8.7886\u0026tmpl=70 HTTP/1.1\r\nHost: rashcolonizeexpand.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Mon, 11 Aug 2025 01:56:57 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: rashcolonizeexpand.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T00:14:21.104822Z","times_seen":16282530,"resource_available":true,"data":null}},"time_used":707,"timings":{"blocked":305,"dns":26,"connect":91,"send":0,"wait":95,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-10","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prefecturesuggestions.com/pixel/sbs?c=1","fqdn":"prefecturesuggestions.com","domain":"prefecturesuggestions.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:59.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"prefecturesuggestions.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Jul 2025 22:30:30 GMT","end":"Fri, 24 Oct 2025 22:30:29 GMT"},"fingerprint":{"sha1":"AD:6E:3B:18:DD:94:8B:F3:56:B1:E8:28:EC:D2:36:E8:D2:33:6C:3A","sha256":"7B:6A:B2:1E:DE:76:DA:23:8C:AE:29:8A:26:F0:F4:6A:10:58:E0:BD:AB:D4:38:41:5A:B1:7B:7D:6B:DD:4E:15"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: prefecturesuggestions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nCookie: uid_id2=5f289a35-7a3b-4c0d-8be6-8b6e4591b06a:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl23746230=1; slec245d45a321faaf58150e2b1fe830f4bf=[4323733]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 11 Aug 2025 01:56:59 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: prefecturesuggestions.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T00:14:21.104822Z","times_seen":16282530,"resource_available":true,"data":null}},"time_used":660,"timings":{"blocked":282,"dns":1,"connect":92,"send":0,"wait":94,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"prefecturesuggestions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:59.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://123av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 07 Aug 2025 10:09:08 GMT\r\nexpires: Fri, 07 Aug 2026 10:09:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 316071\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-10T00:14:21.120657Z","times_seen":875515,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":147,"dns":0,"connect":20,"send":0,"wait":8,"receive":4,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.7.1/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:56.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.7.1/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 01:56:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 22415\r\ncf-ray: 96d41e8fee950b69-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"673e23f5-578f\"\r\nlast-modified: Wed, 20 Nov 2024 18:01:25 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 942359\r\nexpires: Sat, 01 Aug 2026 01:56:56 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2FcefRJimE4cqt%2FNdoiICBexIdUAzXvbgInAQkWl3ezrOtrP1izNFq4a%2Bm9k2AzYzWnTYQ8auv%2Bf6pbFEGNGc96bnhFD2i1CTgmQHk%2FnRJdwhXGPR6%2BzaOAHThpW%2BXU1nR3qFQroQ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104502,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (58875)","md5":"bde2a1ac06ec87a30967e54da50f5c15","sha1":"5b0c53fe2da7a616e4d4197f579ad62cdeb9e81d","sha256":"320d572dfb844e7152480b7b62374236c4896ccca3ac9d69bb03f3bc2034acb8","sha512":"e47b37745d8010f92934047b5223876dafa545224d78cd840a4c31508c42d50fc52f27064db35aa565c1e2d3fcf3d9394f926ef1fb386f53f9cff881e2731f49","ssdeep":"1536:YbM1MvMaMfMRQFlDZ4eU+9GoW/WTb+1V568sQLebc9UjA691m:hpZZU+0opQLeI9u191m","tlshash":"73a330127d84015bb8064dff3895bfb466f6d7149a9100b9b470ac463eb28acb19f7b3","first_seen":"2024-11-25T11:12:50.821981Z","last_seen":"2026-06-08T23:43:26.361461Z","times_seen":2439,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":35,"dns":21,"connect":1,"send":0,"wait":11,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/assets/123av/images/logo.png?v=2","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:56.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Jul 2025 14:34:55 GMT","end":"Mon, 13 Oct 2025 15:33:19 GMT"},"fingerprint":{"sha1":"F4:96:08:D3:B4:32:31:FB:1D:05:92:D7:14:CB:CB:84:09:EB:B2:10","sha256":"8F:00:12:4B:74:63:2D:62:3A:60:EB:AC:E1:21:0A:2B:78:B0:77:D7:F3:94:B5:53:63:D0:CF:42:1A:37:17:F3"}}},"request":{"raw":"GET /assets/123av/images/logo.png?v=2 HTTP/1.1\r\nHost: 123av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/en/series\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 01:56:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 11706\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 23 Nov 2024 03:03:56 GMT\r\netag: \"6741461c-2dba\"\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 2247539\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HMyBC5vBewoo1HgtK3oodSnsCYSjdQ6Djbe1lNB%2Bd%2B6mHt4Se1UkgtPItjrQBhTVpP3A11vgCF%2BU7FriBZdBvzdalZTwjag%3D\"}]}\r\ncf-ray: 96d41e8fbf7a5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11706,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 466 x 135, 8-bit/color RGBA, non-interlaced","md5":"2f1f9cea18cfd84e37877e8ebddeb8d4","sha1":"39206b188a08d6b23eedec5bb67de038968fcbb3","sha256":"117aee193670fc3997ee1684896ebc5bca360c6af30ec82b26852f5bf144a1e6","sha512":"832b07ab8efa23f9e231594c660d55d31c2e72de55aba44f14643323d9ca5c2851a2571521faa03c19a31db8a9b2e257306bf6a558e315af2dc8472034adf098","ssdeep":"192:ZiknWQ9klpIF/nyM1CxR6QK7xA1nSxTtURuQavEC9POE3dAfqh0e2:XnWDlpIZyM1Cx11nIiuL9mTqyX","tlshash":"60328e48ff416c51bf01e693a6aae0da5fbb42a0c1d3d486adefc92354d017d5d0e282","first_seen":"2024-12-05T22:43:08.122875Z","last_seen":"2026-06-02T10:58:21.793717Z","times_seen":72,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/cf-fonts/v/nunito/5.0.16/latin/wght/italic.woff2","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:57.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Jul 2025 14:34:55 GMT","end":"Mon, 13 Oct 2025 15:33:19 GMT"},"fingerprint":{"sha1":"F4:96:08:D3:B4:32:31:FB:1D:05:92:D7:14:CB:CB:84:09:EB:B2:10","sha256":"8F:00:12:4B:74:63:2D:62:3A:60:EB:AC:E1:21:0A:2B:78:B0:77:D7:F3:94:B5:53:63:D0:CF:42:1A:37:17:F3"}}},"request":{"raw":"GET /cf-fonts/v/nunito/5.0.16/latin/wght/italic.woff2 HTTP/1.1\r\nHost: 123av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/en/series\r\nCookie: locale=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 01:56:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 41800\r\ncf-ray: 96d41e92e8a75691-OSL\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=O6SWUHxWk%2Fcz5y0C8wAiMqjk6tsWxwZrbTJKdfbfNoW%2F0DK3Chbu8Ptc3nIRsaQSHsJS5o6xS4koI4JUnkX5C1PkPcUZyPZysoC8N8oBys5okx7wmmnYPNA1moI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1841\u0026min_rtt=391\u0026rtt_var=2175\u0026sent=245\u0026recv=101\u0026lost=0\u0026retrans=0\u0026sent_bytes=309797\u0026recv_bytes=2287\u0026delivery_rate=51166077\u0026cwnd=220\u0026unsent_bytes=0\u0026cid=a8accd7f3bb372e6\u0026ts=959\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41800,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 41800, version 1.0","md5":"3ea99ad21ca9121d85ab7e668fe557e4","sha1":"a3c34cafeee04cc309f965899b0b879793e59795","sha256":"2a4ba0bfd05a144b759af1564fae807d80463489344ed2cf2d0f7fb5635e967a","sha512":"d5dd8e4a53d529a2d5bdbe7c8b9787253cf7f5aee8239723e7c310d67c3eaacf4105fe93f269c207d5c5bb25a5ef22b0829e41631c5f48c8f9f1159477563bd9","ssdeep":"768:ABwCBzncp+RylW478ONwQNer1ZB01Xj7XChhn9/jcQhqeUCu33vznyp3:AB/BzntRQW4JNwrX0VH+9/IQMeUCefz4","tlshash":"0c1302e02eeb96d4ddc721b9f4802a44ff0e6675d1b130438eaaf3bb2716a177394605","first_seen":"2023-09-16T11:50:24Z","last_seen":"2026-06-06T21:55:38.530597Z","times_seen":868,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:57.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 15:11:38 GMT","end":"Mon, 29 Sep 2025 15:11:37 GMT"},"fingerprint":{"sha1":"F9:52:70:4B:81:A8:F8:39:E6:E7:96:8F:EA:FE:17:FD:96:C5:32:E3","sha256":"D8:C9:87:B5:89:5E:D4:F4:8D:FD:98:3C:31:39:42:67:D3:20:27:14:A9:AD:F2:AB:97:A4:48:0F:94:F0:FF:A2"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 11 Aug 2025 01:56:57 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 28254\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 9a20e2e70766b2ba36e4b0ca52f869d5\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":57,"dns":0,"connect":19,"send":0,"wait":27,"receive":19,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/series","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-11T01:56:56.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Jul 2025 14:34:55 GMT","end":"Mon, 13 Oct 2025 15:33:19 GMT"},"fingerprint":{"sha1":"F4:96:08:D3:B4:32:31:FB:1D:05:92:D7:14:CB:CB:84:09:EB:B2:10","sha256":"8F:00:12:4B:74:63:2D:62:3A:60:EB:AC:E1:21:0A:2B:78:B0:77:D7:F3:94:B5:53:63:D0:CF:42:1A:37:17:F3"}}},"request":{"raw":"GET /en/series HTTP/1.1\r\nHost: 123av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 01:56:56 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\ncache-control: public, max-age=30\r\nx-cache: MISS\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=t2PbhnagGMdmJ81yMBt3tUub%2F1fRSTUNAb6Wx%2Brg8h09F8hTREjyyd9QMsa%2BjkMCeAZbLXL1zz%2B7XZGH%2Bn5Ukj5wTWYPtuTcc%2Bv0Iu9cSoiDf5%2FEQS60UeJuwjY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\ncf-ray: 96d41e8d4e765691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfOrigin;dur=196,cfEdge;dur=19, cfL4;desc=\"?proto=TCP\u0026rtt=5798\u0026min_rtt=432\u0026rtt_var=10756\u0026sent=7\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3191\u0026recv_bytes=1127\u0026delivery_rate=7798922\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=a8accd7f3bb372e6\u0026ts=232\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":49429,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6736)","md5":"6ce28371bad36f89f31a092d05a06b90","sha1":"e3bd9ddc8ab3dbaff5ee428350475009c94d94a5","sha256":"6382f20f0607a62801a7ea563bb34bd5c3d6b539484820119dddfdd4cfb167c7","sha512":"bcb85fd218173322494b7074ecfe13d6a9fcbdd4ed2f92093b8a70c7d298eb5647ee03c2c41f9b67a0ad548649a5869385ff6008a2cb1fc896f912bdd3a0744b","ssdeep":"384:WUNmW+PZWFZZWseCWshZYFW1WLsZQtrk1s47whhiFuOI4cJvaCKkhSibKOM6x+cr:Wex9K00Fzn0yhOvA7L62rz/","tlshash":"b723ee324006182b0ea363d17eb52f2f70c28936e9a759039bf587cd4bd6ed2ce46665","first_seen":"2025-08-11T01:57:23.249172Z","last_seen":"2025-08-11T01:57:23.249172Z","times_seen":1,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":43,"dns":25,"connect":1,"send":0,"wait":219,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/assets/123av/images/avatar.svg?1","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:57.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Jul 2025 14:34:55 GMT","end":"Mon, 13 Oct 2025 15:33:19 GMT"},"fingerprint":{"sha1":"F4:96:08:D3:B4:32:31:FB:1D:05:92:D7:14:CB:CB:84:09:EB:B2:10","sha256":"8F:00:12:4B:74:63:2D:62:3A:60:EB:AC:E1:21:0A:2B:78:B0:77:D7:F3:94:B5:53:63:D0:CF:42:1A:37:17:F3"}}},"request":{"raw":"GET /assets/123av/images/avatar.svg?1 HTTP/1.1\r\nHost: 123av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/assets/123av/dist/app.css?v=1754354656\r\nCookie: locale=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 01:56:57 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 21 Nov 2024 03:54:42 GMT\r\nvary: accept-encoding\r\nx-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XJCXccdQZKM%2BMTT5C8Atyra0Cz8GsISFjLDzcJe6L8IX5BZchO20f45nQxmJCQEJEx5qCMD6x1h6cVTfwSdacNgEk%2BoPYnc%3D\"}]}\r\nage: 862703\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\netag: W/\"673eaf02-3d6\"\r\ncontent-encoding: br\r\ncf-ray: 96d41e92887b5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":982,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"433b52c1065019a2dc84177fc667c7b8","sha1":"589034fb93d845ac495dffb63d083304b4b5ee06","sha256":"2a7a23c57b4ce4f9d4c9143c7685e2405a307265971507e2d8a5ac286f82f5e0","sha512":"da4d7f1c3675bd77f7cc74dc29e058465b4d482aed2aea16de78afd7e64a920160b23fb4f94999a53f0cc9069531e62593d3e88d65a034cb109d6a40d11e8c56","ssdeep":"","tlshash":"6211e1e8c1dc8030ca7883a4a27874f58a0ca1eed1d187df7289a07a21366e8f11b550","first_seen":"2023-05-07T18:04:55Z","last_seen":"2026-06-03T14:24:56.9895Z","times_seen":1394,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:57.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 15:11:38 GMT","end":"Mon, 29 Sep 2025 15:11:37 GMT"},"fingerprint":{"sha1":"F9:52:70:4B:81:A8:F8:39:E6:E7:96:8F:EA:FE:17:FD:96:C5:32:E3","sha256":"D8:C9:87:B5:89:5E:D4:F4:8D:FD:98:3C:31:39:42:67:D3:20:27:14:A9:AD:F2:AB:97:A4:48:0F:94:F0:FF:A2"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 11 Aug 2025 01:56:57 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 28254\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: de3ff3ad9052707a753d3e3c5f5ae71e\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":66,"dns":3,"connect":17,"send":0,"wait":26,"receive":18,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"18.198.116.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:57.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://123av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 01:56:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://123av.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=5f289a35-7a3b-4c0d-8be6-8b6e4591b06a:2:1; expires=Thu, 09 Aug 2035 01:56:57 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"3d91107ede57ee38987750446f5cfa4e","sha1":"f0b26dba46f00c303e337e22682f8ad25febacf7","sha256":"a2a192ae9b49e6ae15f037d91ef062aa0abab8cde95060c935d47d8248f131a7","sha512":"f4b95c18ac66911c41919ceb8faf569ad45615447427c9b1ad2888c00761e0b1f399939447a75eaee45527644b7ff8bb995b9d9f80f12925f7759b2e3ebe4249","ssdeep":"","tlshash":"da90044d7141504c7501077c141513c13014c134d10c45404d55d0c35fd3711d555410","first_seen":"2025-08-11T01:57:23.252125Z","last_seen":"2025-08-11T01:57:23.252125Z","times_seen":1,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":76,"dns":3,"connect":20,"send":0,"wait":23,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prefecturesuggestions.com/sbar.json?key=245d45a321faaf58150e2b1fe830f4bf\u0026uuid=5f289a35-7a3b-4c0d-8be6-8b6e4591b06a%3A2%3A1","fqdn":"prefecturesuggestions.com","domain":"prefecturesuggestions.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:58.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"prefecturesuggestions.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Jul 2025 22:30:30 GMT","end":"Fri, 24 Oct 2025 22:30:29 GMT"},"fingerprint":{"sha1":"AD:6E:3B:18:DD:94:8B:F3:56:B1:E8:28:EC:D2:36:E8:D2:33:6C:3A","sha256":"7B:6A:B2:1E:DE:76:DA:23:8C:AE:29:8A:26:F0:F4:6A:10:58:E0:BD:AB:D4:38:41:5A:B1:7B:7D:6B:DD:4E:15"}}},"request":{"raw":"GET /sbar.json?key=245d45a321faaf58150e2b1fe830f4bf\u0026uuid=5f289a35-7a3b-4c0d-8be6-8b6e4591b06a%3A2%3A1 HTTP/1.1\r\nHost: prefecturesuggestions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://123av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Mon, 11 Aug 2025 01:56:58 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nAccess-Control-Allow-Origin: https://123av.com\r\nAccess-Control-Allow-Credentials: true\r\nSet-Cookie: uid_id2=5f289a35-7a3b-4c0d-8be6-8b6e4591b06a:2:1; expires=Mon, 18 Aug 2025 01:56:58 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Tue, 12 Aug 2025 01:56:58 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Tue, 12 Aug 2025 01:56:58 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Tue, 12 Aug 2025 01:56:58 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Tue, 12 Aug 2025 01:56:58 GMT; path=/; secure; SameSite=None\nu_pl23746230=1; expires=Tue, 12 Aug 2025 01:56:58 GMT; path=/; secure; SameSite=None\nslec245d45a321faaf58150e2b1fe830f4bf=[4323733]; expires=Mon, 11 Aug 2025 01:57:03 GMT; path=/; secure; SameSite=None\r\nHost: prefecturesuggestions.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 8c89f228339bcb789cda34adc97bcd60\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6146,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"72e31c44c0b888607eb5fcd6fe09e9f5","sha1":"73cc82d490daf53572c0eae1e70776e14be2e1d0","sha256":"7af22788974761aecde358e38f4bf48fb031dca3423a411054648087e66faf1d","sha512":"e9a459d024e61fd942437ad99aa72370ae71694cd1c056e7bd1b51fed3dcf04f01cd38a6d68c545f7e5aa7d3dea3b829057ae1f540f2fc68f4c8e8e4915c97be","ssdeep":"192:9z9do/zo9qVUkUqeyVenpEpXGUzcgXyYkBp:9zgRVypS2wXkBp","tlshash":"9fc16c2e618464cb8ed0ee8c0687adf51df60c8d661dda6fdb42cfedd010846c754170","first_seen":"2025-08-11T01:57:23.254176Z","last_seen":"2025-08-11T01:57:23.254176Z","times_seen":1,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"prefecturesuggestions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=5f289a35-7a3b-4c0d-8be6-8b6e4591b06a\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=9b7e1e724274b81f688a60aa9a5b4054\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=1","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:58.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 15:12:33 GMT","end":"Mon, 29 Sep 2025 15:12:32 GMT"},"fingerprint":{"sha1":"9E:08:20:A0:75:ED:21:51:E0:3D:DE:29:CD:B0:11:01:4D:04:77:0A","sha256":"FB:D4:A2:1D:0F:F1:FB:A8:D9:5E:88:03:1F:BB:94:D2:32:5C:CC:49:11:11:FC:04:7B:C6:43:40:CF:1E:A2:BA"}}},"request":{"raw":"GET /pxf.gif?uuid=5f289a35-7a3b-4c0d-8be6-8b6e4591b06a\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=9b7e1e724274b81f688a60aa9a5b4054\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=1 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Mon, 11 Aug 2025 01:56:58 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 59fba8123e744b3c678126a8ac06fe5e\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T00:14:21.104822Z","times_seen":16282530,"resource_available":true,"data":null}},"time_used":680,"timings":{"blocked":290,"dns":0,"connect":92,"send":0,"wait":99,"receive":0,"ssl":196},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fstyle.css\u0026l=3355\u0026fd=69","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:59.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 21:49:55 GMT","end":"Fri, 26 Sep 2025 21:49:54 GMT"},"fingerprint":{"sha1":"38:55:0E:5D:7C:E7:08:BA:9A:77:8D:79:E7:3A:6B:27:F8:97:E4:89","sha256":"3A:54:48:30:C3:83:C3:F6:C2:3E:B3:7D:81:B3:37:9D:16:0C:B9:AE:C5:C3:56:8C:33:5D:AD:24:2B:B7:35:AF"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fstyle.css\u0026l=3355\u0026fd=69 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Mon, 11 Aug 2025 01:56:59 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T00:14:21.104822Z","times_seen":16282530,"resource_available":true,"data":null}},"time_used":986,"timings":{"blocked":471,"dns":2,"connect":194,"send":0,"wait":107,"receive":0,"ssl":210},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-10","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/vpn/classic-push/small/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:59.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/js/jquery.min.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 01:56:59 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q76PjwqQ6hfqDkRVG1W0DLwVNqaF%2BAAK1H3XJwc8t3LCPnGc2qb%2BjPd80ph3nN64w8uVhl8PTpLGhLISB%2BALxcP%2FgIwZsb6vnMLBGbLU\"}]}\r\nage: 234020\r\ncf-cache-status: HIT\r\netag: W/\"65aa84fe-1499c\"\r\ncontent-encoding: br\r\ncf-ray: 96d41e9dca4b56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84380,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025)","md5":"4a356126b9573eb7bd1e9a7494737410","sha1":"8258d046f17dd3c15a5d3984e1868b7b5d1db329","sha256":"22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5","sha512":"005c3102459dbf145df6a858629d6a6de4598fafe24cd989d86170731b0c3b3c304da470cf66bfd935f6db911b723df0857b5ed561906f7f1c5c4e63ed9430de","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrZ:++414Jiz6fh6lTqya98HrZ","tlshash":"dc83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-09T21:18:53.584636Z","times_seen":18828,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prefecturesuggestions.com/impr.gif?sid=H4sIAAAAAAAC_1RSP2wcxReeddL9fhJ_hCiQIl2RAiR83r3dO98RoSghCTIksUkMLqhmdmbPY8_NLDO7t-ejsbAEKY8CiVCtv7NjARaChg4JnWmQBRJH5SKmoKNFikQFOvukg1e89775ZqTvfW8-3M1PSYicnqzcMX2pFF2oV_3Ki2tSc1O4yt3VSuBX_SuVNakb0ZVKb5Js95UgjKr-S5XXRbxpFmp-4PuBH1RuSSsS01s4YyHTw1ZQbfnVqFYN6hF69r_Y5R4c9cC7p-RZSD5-6vfkXch4BN35-oZwm5lJX77ZyRXNjEWXH7ytN7UpNDqzNrEeEn0wvQ3jxoR8OgejD6YTwHT3JhOAyTGZe_4xmD6YygTr7p8rZQpCg_H_oeiOINQIko4Qmx1I_gsBYo67y9CdR3eNLejWOUsn7JhcfPInZDEmFx8_B9356rqSvcp9o_JMGu3QS0rI3giyPUKaHyHrz0EWR4izDyD5z2ThyW3ozt6yUwaSn1yuJ7Vmi4b1-UUasvko9vl8k4nGfJM1RFRvBcxv0DOLZDICdXPInYdcesgTD3nqocNPKpHfjOKAho2kxeNFP6JRxAXzW82a79NWvIg8nmgfIEsHiNUAsd1GarexKQew-fdw6yUc9-Aygi4vUQiCwhEUlKCQBEVGUHTLfa5czZWPuHI5C6a1Nq1hOTRZe5fum6wtNAG1A1he7sn0PbeDOLsw7CeOD80kUZaVQ8p4uZuekmcmtnob73yLTXFSqUV1HtVpWAsSSpN6M6j7osaCRDRDP4lYAidLSDcH6jz05Zi8-tbfSOWYXPptFYwewakjxPJp0PwSaFGCrpfo60Mtinm9QbvV3lYf3JRIs4vItrxddUpeOFvstb8-gYiPr_74cBKfIbYlUltiQ_5A0FYPhvdMQfbumcKRb5bTTHZkn06Wfj-jmbjwxZtiqzCWL91wg8-vxRNi0h6uCpfdpppL3Xbky-uSc2FvGRsL8t2SWxNsJXfr13Or8_T2ymu3ljqpFc5Jo0egcky8939CLMfk_2_cPPvQl5c-grQj2LxEJz8m00CcbsOlM-3OEFg141nqocjLoa2x2aGSBErMMGUl3L8wm_VDSyevqSx33QO0rQea7UB3SnRtia4qQdUALr8wzFJ7fPXX8CzAlDdkynp7TFn18bnFTp5UklDUYt9vLjaCsJmIIIx4nNSbUYs3qB-GApkbrz-888c_AQAA__8f6Cs3rgQAAA==","fqdn":"prefecturesuggestions.com","domain":"prefecturesuggestions.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:59.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"prefecturesuggestions.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Jul 2025 22:30:30 GMT","end":"Fri, 24 Oct 2025 22:30:29 GMT"},"fingerprint":{"sha1":"AD:6E:3B:18:DD:94:8B:F3:56:B1:E8:28:EC:D2:36:E8:D2:33:6C:3A","sha256":"7B:6A:B2:1E:DE:76:DA:23:8C:AE:29:8A:26:F0:F4:6A:10:58:E0:BD:AB:D4:38:41:5A:B1:7B:7D:6B:DD:4E:15"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSP2wcxReeddL9fhJ_hCiQIl2RAiR83r3dO98RoSghCTIksUkMLqhmdmbPY8_NLDO7t-ejsbAEKY8CiVCtv7NjARaChg4JnWmQBRJH5SKmoKNFikQFOvukg1e89775ZqTvfW8-3M1PSYicnqzcMX2pFF2oV_3Ki2tSc1O4yt3VSuBX_SuVNakb0ZVKb5Js95UgjKr-S5XXRbxpFmp-4PuBH1RuSSsS01s4YyHTw1ZQbfnVqFYN6hF69r_Y5R4c9cC7p-RZSD5-6vfkXch4BN35-oZwm5lJX77ZyRXNjEWXH7ytN7UpNDqzNrEeEn0wvQ3jxoR8OgejD6YTwHT3JhOAyTGZe_4xmD6YygTr7p8rZQpCg_H_oeiOINQIko4Qmx1I_gsBYo67y9CdR3eNLejWOUsn7JhcfPInZDEmFx8_B9356rqSvcp9o_JMGu3QS0rI3giyPUKaHyHrz0EWR4izDyD5z2ThyW3ozt6yUwaSn1yuJ7Vmi4b1-UUasvko9vl8k4nGfJM1RFRvBcxv0DOLZDICdXPInYdcesgTD3nqocNPKpHfjOKAho2kxeNFP6JRxAXzW82a79NWvIg8nmgfIEsHiNUAsd1GarexKQew-fdw6yUc9-Aygi4vUQiCwhEUlKCQBEVGUHTLfa5czZWPuHI5C6a1Nq1hOTRZe5fum6wtNAG1A1he7sn0PbeDOLsw7CeOD80kUZaVQ8p4uZuekmcmtnob73yLTXFSqUV1HtVpWAsSSpN6M6j7osaCRDRDP4lYAidLSDcH6jz05Zi8-tbfSOWYXPptFYwewakjxPJp0PwSaFGCrpfo60Mtinm9QbvV3lYf3JRIs4vItrxddUpeOFvstb8-gYiPr_74cBKfIbYlUltiQ_5A0FYPhvdMQfbumcKRb5bTTHZkn06Wfj-jmbjwxZtiqzCWL91wg8-vxRNi0h6uCpfdpppL3Xbky-uSc2FvGRsL8t2SWxNsJXfr13Or8_T2ymu3ljqpFc5Jo0egcky8939CLMfk_2_cPPvQl5c-grQj2LxEJz8m00CcbsOlM-3OEFg141nqocjLoa2x2aGSBErMMGUl3L8wm_VDSyevqSx33QO0rQea7UB3SnRtia4qQdUALr8wzFJ7fPXX8CzAlDdkynp7TFn18bnFTp5UklDUYt9vLjaCsJmIIIx4nNSbUYs3qB-GApkbrz-888c_AQAA__8f6Cs3rgQAAA== HTTP/1.1\r\nHost: prefecturesuggestions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nCookie: uid_id2=5f289a35-7a3b-4c0d-8be6-8b6e4591b06a:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl23746230=1; slec245d45a321faaf58150e2b1fe830f4bf=[4323733]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Mon, 11 Aug 2025 01:56:59 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nSet-Cookie: iprc_l+5af3860280d1df17f2780d4b25c840f4=4323733; expires=Tue, 12 Aug 2025 01:56:59 GMT; path=/; secure; SameSite=None\niprc_l:4323733=1; expires=Tue, 12 Aug 2025 01:56:59 GMT; path=/; secure; SameSite=None\r\nHost: prefecturesuggestions.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: d264e0a0e480eb9fa172c0db57c2e666\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T00:14:21.104822Z","times_seen":16282530,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"prefecturesuggestions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/assets/123av/dist/app.css?v=1754354656","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:56.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Jul 2025 14:34:55 GMT","end":"Mon, 13 Oct 2025 15:33:19 GMT"},"fingerprint":{"sha1":"F4:96:08:D3:B4:32:31:FB:1D:05:92:D7:14:CB:CB:84:09:EB:B2:10","sha256":"8F:00:12:4B:74:63:2D:62:3A:60:EB:AC:E1:21:0A:2B:78:B0:77:D7:F3:94:B5:53:63:D0:CF:42:1A:37:17:F3"}}},"request":{"raw":"GET /assets/123av/dist/app.css?v=1754354656 HTTP/1.1\r\nHost: 123av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/en/series\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 01:56:56 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 04 May 2025 05:00:34 GMT\r\netag: W/\"6816f472-386a4\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nvary: accept-encoding\r\nage: 522513\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qX6U6deg9Koy7ZfC7yDM6wpQ3Awoqg7ujItRVhbQ%2Fk7RrfLLuJz5EtZG3ma8%2FJe6%2F%2FP2txj8xKxK63AhOz4uyJy5i4zbe4k%3D\"}]}\r\ncf-ray: 96d41e8fbf795691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231076,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (60740)","md5":"e7d00d55fe1cb845dc5806153b0e1a84","sha1":"bafbad6b6b1f1b546e6d4919c985992e4931fc44","sha256":"575d6e117f2ca33d1dfc6f4fa2145d5782bbf6cb49c295907be7b2b4d3e9fe0b","sha512":"f442d8d76d0f795c9bd1758716a8d4161d9a6eabf3358494292395d850f7842ee5f368169bb9b4cffa35de2185cb18c6181ad044b442ef872e11bd27ddd69aa8","ssdeep":"1536:S0OiUcIJFQnssgLPzODEBi8yNcuSEvz9tAkfzq3SYiLENM6HN263MsQ8AWoBoVif:S/iUrW9Lq3SYiLENM6HN263nsY/5vWyW","tlshash":"db34c8b6f591342de067c619a0d0babe1d2f8253e3224fbbb5277b6447896c60573e0c","first_seen":"2025-05-10T05:39:59.678936Z","last_seen":"2026-01-23T00:52:35.148517Z","times_seen":46,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/cf-fonts/v/nunito/5.0.16/latin/wght/normal.woff2","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:57.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Jul 2025 14:34:55 GMT","end":"Mon, 13 Oct 2025 15:33:19 GMT"},"fingerprint":{"sha1":"F4:96:08:D3:B4:32:31:FB:1D:05:92:D7:14:CB:CB:84:09:EB:B2:10","sha256":"8F:00:12:4B:74:63:2D:62:3A:60:EB:AC:E1:21:0A:2B:78:B0:77:D7:F3:94:B5:53:63:D0:CF:42:1A:37:17:F3"}}},"request":{"raw":"GET /cf-fonts/v/nunito/5.0.16/latin/wght/normal.woff2 HTTP/1.1\r\nHost: 123av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/en/series\r\nCookie: locale=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 01:56:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 39124\r\ncf-ray: 96d41e92b88a5691-OSL\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=eXHs91vs7V8THL0p2FFw3pEyqE5FALBsrwEAmhn2%2FPCvxgnm3nHlQcoNXlaQSHWeVzvmhF3exp8PyGDtS4CGSprMXvWJkoTKndCZzAx9U4AFgQdNBiN807Qbq9Y%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=727\u0026min_rtt=391\u0026rtt_var=123\u0026sent=213\u0026recv=96\u0026lost=0\u0026retrans=0\u0026sent_bytes=269356\u0026recv_bytes=2176\u0026delivery_rate=51166077\u0026cwnd=220\u0026unsent_bytes=0\u0026cid=a8accd7f3bb372e6\u0026ts=905\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39124,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39124, version 1.0","md5":"86b73ab5f530be7984b704414f2a711d","sha1":"8e297794ed7b6f5ea476d14b5270df12e8f3e42a","sha256":"1a48b70f97555c13f84b8f088a417f9179d99b5101250819350acaf6e91bb92f","sha512":"468f8d4ae9419cacdf913fba2da37055e3469d935d7b7b362717cf17d2c4c27882ea3bb34510273312dd80dc2dea05775ce65bc3f9d1048f50aad4b27e8188ac","ssdeep":"768:usTP6aNC1fdVoOCiqMR4+H42dLoPZsn578cLtxtQcvA7mQ7RHl:usTS/eDgR4u4IM+TJvUqQ7","tlshash":"0e030162b507a86426818d73f65625388b034831d91f90211e80d772eb6a691e3efbdb","first_seen":"2023-09-15T03:45:56Z","last_seen":"2026-06-09T18:01:05.457773Z","times_seen":14507,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prefecturesuggestions.com/ren.gif?sid=H4sIAAAAAAAC_1RSP2wcxReeddL9fhJ_hCiQIl2RAiR83r-XOyIUJSRBhsQ2icEF1czO7HnsvZllZvf2fDQWliDlUSARqvV3dizAQtDQIaEzDbJA4qhcxBR0tEiRqEBnn3TwivfeN9-M9L3vzYe7xSkJUNCTlbu6L9OULkR1t_bimlRcl7a2tFrz3Lp7tbYmVSO8WutNkum-4gVh3X2p9rqIN_WC73qu67le7bY0ItG9hTMWMjtsefWWWw_9uheF6Jn_Yls4sNQB756SZyH5-Knfk3ch4xFU5-ubwm7mOnv5VqdIaa4NuvzgbbWpdKnQmbWJcZCog-ltaDsm5NM5aHUwnQC6uzeZAEyOydzzj8HUwVQmWHf_XClLIRQY_x_K7ggiHUHSEWK9A8l_IUDMsbQM1Xm0pE1Jt85ZOmHH5OKTPyHLMbn4-Dmozlc3Utmr3ddpkUutLHpJBdkbQbZHyIoj5P05yPIIcf4BJP-ZLDy5A9XZW7aphuQnl6PEb7ZoEM1foQGbD2OXzzeZaMw3WUOEUctjboOeWSSTEaidQ2EdFNJBkTgoMgcdflIL3WYYezRoJC0eX3FDGoZcMLfV9F2XtuIrKOKJ9gHybIA4HSA228jMNjblAKb4Hna9guUObE7Q5RVKQVBagpISlJKgzAnKbrXPU-vb6hFPbcG8afWnNaiGOm_v0n2dt4UioGYAw6s9mb1ndxDnF4b9xPKhniTK8mpIGa92s1PyzMRWZ-Odb7EpTmp-GPEwooHvJZQmUdOLXOEzLxHNwE1ClsDKCtLOgVoHfTkmr771NzI5Jpd-WwWjR7DpEWL5NGhxCbSsQNcr9NWhEuW82qDdem-rD64rZPlF5FvObnpKXjhb7PW_PoGIj6_9-HASnyE2FTJTYUP-QNBOHwzv6ZLs3dOlJd8sZ7nsyD6dLP1-TnNx4Ys3xVapDV-8aQefX48nxKQ9XBU2v0MVl6ptyZc3JOfC3NYmFuS7Rbsm2Eph128URhXZnZXXbi92MiOslVqNQOWYOO__hFiOyf_fuHX2oS8vfgRpRjBFhU5xTKaBONuGzWbarSYw6YxnmYOyqIbGZ7PDVBKkYoYpq2D_hdmsHxo6eU1ltWsfoG0c0HwHqlOhayp00wo0HcAWF4Z5Zo6v_RqcBVjqDFlqnD2WmvTjc4utPKlFPgsazWZDJA2eBDzwA96KXNEKaasRtsIIuR2vP7z7xz8BAAD__-OAu-muBAAA","fqdn":"prefecturesuggestions.com","domain":"prefecturesuggestions.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:58.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"prefecturesuggestions.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Jul 2025 22:30:30 GMT","end":"Fri, 24 Oct 2025 22:30:29 GMT"},"fingerprint":{"sha1":"AD:6E:3B:18:DD:94:8B:F3:56:B1:E8:28:EC:D2:36:E8:D2:33:6C:3A","sha256":"7B:6A:B2:1E:DE:76:DA:23:8C:AE:29:8A:26:F0:F4:6A:10:58:E0:BD:AB:D4:38:41:5A:B1:7B:7D:6B:DD:4E:15"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSP2wcxReeddL9fhJ_hCiQIl2RAiR83r-XOyIUJSRBhsQ2icEF1czO7HnsvZllZvf2fDQWliDlUSARqvV3dizAQtDQIaEzDbJA4qhcxBR0tEiRqEBnn3TwivfeN9-M9L3vzYe7xSkJUNCTlbu6L9OULkR1t_bimlRcl7a2tFrz3Lp7tbYmVSO8WutNkum-4gVh3X2p9rqIN_WC73qu67le7bY0ItG9hTMWMjtsefWWWw_9uheF6Jn_Yls4sNQB756SZyH5-Knfk3ch4xFU5-ubwm7mOnv5VqdIaa4NuvzgbbWpdKnQmbWJcZCog-ltaDsm5NM5aHUwnQC6uzeZAEyOydzzj8HUwVQmWHf_XClLIRQY_x_K7ggiHUHSEWK9A8l_IUDMsbQM1Xm0pE1Jt85ZOmHH5OKTPyHLMbn4-Dmozlc3Utmr3ddpkUutLHpJBdkbQbZHyIoj5P05yPIIcf4BJP-ZLDy5A9XZW7aphuQnl6PEb7ZoEM1foQGbD2OXzzeZaMw3WUOEUctjboOeWSSTEaidQ2EdFNJBkTgoMgcdflIL3WYYezRoJC0eX3FDGoZcMLfV9F2XtuIrKOKJ9gHybIA4HSA228jMNjblAKb4Hna9guUObE7Q5RVKQVBagpISlJKgzAnKbrXPU-vb6hFPbcG8afWnNaiGOm_v0n2dt4UioGYAw6s9mb1ndxDnF4b9xPKhniTK8mpIGa92s1PyzMRWZ-Odb7EpTmp-GPEwooHvJZQmUdOLXOEzLxHNwE1ClsDKCtLOgVoHfTkmr771NzI5Jpd-WwWjR7DpEWL5NGhxCbSsQNcr9NWhEuW82qDdem-rD64rZPlF5FvObnpKXjhb7PW_PoGIj6_9-HASnyE2FTJTYUP-QNBOHwzv6ZLs3dOlJd8sZ7nsyD6dLP1-TnNx4Ys3xVapDV-8aQefX48nxKQ9XBU2v0MVl6ptyZc3JOfC3NYmFuS7Rbsm2Eph128URhXZnZXXbi92MiOslVqNQOWYOO__hFiOyf_fuHX2oS8vfgRpRjBFhU5xTKaBONuGzWbarSYw6YxnmYOyqIbGZ7PDVBKkYoYpq2D_hdmsHxo6eU1ltWsfoG0c0HwHqlOhayp00wo0HcAWF4Z5Zo6v_RqcBVjqDFlqnD2WmvTjc4utPKlFPgsazWZDJA2eBDzwA96KXNEKaasRtsIIuR2vP7z7xz8BAAD__-OAu-muBAAA HTTP/1.1\r\nHost: prefecturesuggestions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nCookie: uid_id2=5f289a35-7a3b-4c0d-8be6-8b6e4591b06a:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl23746230=1; slec245d45a321faaf58150e2b1fe830f4bf=[4323733]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Mon, 11 Aug 2025 01:56:58 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: prefecturesuggestions.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 13264590d3a6f2d91d46bc85d8bc4e8d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T00:14:21.104822Z","times_seen":16282530,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-11","alert":"Sinkholed","trigger":"prefecturesuggestions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F0c%2Fc8%2Fe1%2F0cc8e13ba9d5dbc867b982993e805a9d%2F1632728593.html\u0026l=1325\u0026fd=532","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:59.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 21:49:55 GMT","end":"Fri, 26 Sep 2025 21:49:54 GMT"},"fingerprint":{"sha1":"38:55:0E:5D:7C:E7:08:BA:9A:77:8D:79:E7:3A:6B:27:F8:97:E4:89","sha256":"3A:54:48:30:C3:83:C3:F6:C2:3E:B3:7D:81:B3:37:9D:16:0C:B9:AE:C5:C3:56:8C:33:5D:AD:24:2B:B7:35:AF"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F0c%2Fc8%2Fe1%2F0cc8e13ba9d5dbc867b982993e805a9d%2F1632728593.html\u0026l=1325\u0026fd=532 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 11 Aug 2025 01:56:59 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T00:14:21.104822Z","times_seen":16282530,"resource_available":true,"data":null}},"time_used":691,"timings":{"blocked":298,"dns":13,"connect":92,"send":0,"wait":93,"receive":0,"ssl":192},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-10","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.7.1/webfonts/fa-regular-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:57.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.7.1/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://123av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 Aug 2025 01:56:57 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 25484\r\ncf-ray: 96d41e92ddc30b41-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"673e23f5-638c\"\r\nlast-modified: Wed, 20 Nov 2024 18:01:25 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 852272\r\nexpires: Sat, 01 Aug 2026 01:56:57 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dGwKilu%2FtiARD%2FKHGVO3P3JAWMd96kADPBFWVeR40rpXGjnVVblSDo1kxLzDBGfLqzeOwtA3o9PA5JfzP3fL%2BinDcWUjo0V7QImFOWo013p4Q0hv1IdHpGKSYN3L8Tsof1or5aHx\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25484,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 25484, version 775.768","md5":"28deedcffdb1ecdc7c2c2e209e2e36d2","sha1":"3c727ff1af5625c9095d2cb6566f9e0a4fbc2b8d","sha256":"003b55144f370c07c2bc6f8f80455bca7d61a2fb2766551883734249e953e700","sha512":"e911df24377b57fe219bf0b476ad43e499b4910ff730905f1daf64610d0df92cf03128554a36cc36a8dcf11d55b231a12db9ec70f29c77f1b26180c418a0ffbd","ssdeep":"768:Hcq6O0xjG7MVcQRjIRR9T53mz/RLL7Zkcbg:H/QJVpk9wD/kcc","tlshash":"bbb2d1b686ba21107f8392facda55fe4f244a1d0953276653389134f570a4f4cddce92","first_seen":"2024-11-30T20:48:08.600139Z","last_seen":"2026-06-09T21:03:53.45319Z","times_seen":900,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/assets/123av/images/favicon.png?v=2","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:57.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Jul 2025 14:34:55 GMT","end":"Mon, 13 Oct 2025 15:33:19 GMT"},"fingerprint":{"sha1":"F4:96:08:D3:B4:32:31:FB:1D:05:92:D7:14:CB:CB:84:09:EB:B2:10","sha256":"8F:00:12:4B:74:63:2D:62:3A:60:EB:AC:E1:21:0A:2B:78:B0:77:D7:F3:94:B5:53:63:D0:CF:42:1A:37:17:F3"}}},"request":{"raw":"GET /assets/123av/images/favicon.png?v=2 HTTP/1.1\r\nHost: 123av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/en/series\r\nCookie: locale=en; x-token=b70e2eda717e20216469d66abd41e1bc; session=V3bM07R8ufUvh9b6rcDdBSlUEmY7KAj2s1IbT5rd; _ga_VZGC2QQBZ8=GS2.1.s1754877417$o1$g0$t1754877417$j60$l0$h0; _ga=GA1.1.619101210.1754877418; dom3ic8zudi28v8lr6fgphwffqoz0j6c=5f289a35-7a3b-4c0d-8be6-8b6e4591b06a%3A2%3A1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 Aug 2025 01:56:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 6605\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IRoMX%2FsaCd19GNzgl2twC0d%2FLIiePmNzpOi9tSmtmxRlKqvMjlVMGJnDP3M6odELXQd7agROV9GYkVj8IoiJNN5up141JEXZ1bG%2ByTn744NM6V8s3JmdVxiQFkg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Thu, 21 Nov 2024 03:54:42 GMT\r\netag: \"673eaf02-19cd\"\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 749969\r\ncf-cache-status: HIT\r\ncf-ray: 96d41e95ded556c7-OSL\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1538\u0026min_rtt=450\u0026rtt_var=1299\u0026sent=388\u0026recv=525\u0026lost=0\u0026retrans=0\u0026sent_bytes=25702\u0026recv_bytes=28347\u0026delivery_rate=362363\u0026ss_exit_cwnd=14897\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=be72a8888e4275c9\u0026ts=1173\u0026inflight_dur=44\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6605,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit colormap, non-interlaced","md5":"92c5b5ee1d5b499babb53fd657721440","sha1":"2c807a18d1d0474c8153fae50e2f46a05abfdc47","sha256":"262d4209924a751bf3ca838267d2c99e3c476fa657dd27b2187fb2de999a82fa","sha512":"7e3edf1515ad436e345698e2321c5309eed764ae987dceddcad59767c67621052d9aec90cdcfdde700277e9fbf297c2b1714d73e7bb2b38e8fea6b71b1bc3d4c","ssdeep":"192:ahnES2sLCz3ajSmjxuz0uJ8z/DWMqVoK9+Trd:CnESDbjSicouI/MVoJ","tlshash":"59d18d8b42ab4a0596109dcfc077a9aca1c5e44d9dee060f017f7197e2a031f5bf6614","first_seen":"2023-05-03T12:44:55Z","last_seen":"2026-06-02T10:58:21.83942Z","times_seen":194,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=70","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:59.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 21:49:55 GMT","end":"Fri, 26 Sep 2025 21:49:54 GMT"},"fingerprint":{"sha1":"38:55:0E:5D:7C:E7:08:BA:9A:77:8D:79:E7:3A:6B:27:F8:97:E4:89","sha256":"3A:54:48:30:C3:83:C3:F6:C2:3E:B3:7D:81:B3:37:9D:16:0C:B9:AE:C5:C3:56:8C:33:5D:AD:24:2B:B7:35:AF"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=70 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Mon, 11 Aug 2025 01:56:59 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T00:14:21.104822Z","times_seen":16282530,"resource_available":true,"data":null}},"time_used":854,"timings":{"blocked":378,"dns":1,"connect":186,"send":0,"wait":97,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-10","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:59.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://123av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 07 Aug 2025 10:09:08 GMT\r\nexpires: Fri, 07 Aug 2026 10:09:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 316071\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-10T00:14:21.120657Z","times_seen":875515,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":80,"dns":2,"connect":7,"send":0,"wait":9,"receive":8,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VZGC2QQBZ8","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:56.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /gtag/js?id=G-VZGC2QQBZ8 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 11 Aug 2025 01:56:57 GMT\r\nexpires: Mon, 11 Aug 2025 01:56:57 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1099:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1099:0\r\nreport-to: {\"group\":\"ascgcycc:1099:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1099:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 129643\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":381368,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"357f3f1df465de1ca2f4d80970ade375","sha1":"ee611285dbbdfbd664fded19cbe84b6082bf1adc","sha256":"6552fd61315145ede44a745f1767c0c041f8c67ed1c6726fd00434ae6f2fa0f2","sha512":"ec5e3ad554e8b30c73aa6943ff0defb58df6c13b775056bebed3f3730544139a4c8216cf8863417f905fbc16a72a0067b6b183836558624adc68e34431a6d68c","ssdeep":"6144:AxP2NQTnyLnAyevGtkT2PG6B4xd9zccE7:SPikJlcmdxzu","tlshash":"888428cd73c670669396b478503f018ba57b29a2f44cc899f189cce42e74a9a4277f7c","first_seen":"2025-08-11T01:57:23.259618Z","last_seen":"2025-08-11T01:57:23.259618Z","times_seen":1,"resource_available":true,"data":null}},"time_used":481,"timings":{"blocked":170,"dns":0,"connect":30,"send":0,"wait":59,"receive":74,"ssl":144},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/en/ajax/user/info","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:57.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Jul 2025 14:34:55 GMT","end":"Mon, 13 Oct 2025 15:33:19 GMT"},"fingerprint":{"sha1":"F4:96:08:D3:B4:32:31:FB:1D:05:92:D7:14:CB:CB:84:09:EB:B2:10","sha256":"8F:00:12:4B:74:63:2D:62:3A:60:EB:AC:E1:21:0A:2B:78:B0:77:D7:F3:94:B5:53:63:D0:CF:42:1A:37:17:F3"}}},"request":{"raw":"GET /en/ajax/user/info HTTP/1.1\r\nHost: 123av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/en/series\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 01:56:57 GMT\r\ncontent-type: application/json\r\ncf-ray: 96d41e9278735691-OSL\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\nset-cookie: x-token=b70e2eda717e20216469d66abd41e1bc; path=/; httponly; samesite=lax\nsession=V3bM07R8ufUvh9b6rcDdBSlUEmY7KAj2s1IbT5rd; expires=Mon, 11 Aug 2025 03:56:57 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Dw0pM74u2x76cGQcs4%2BmaoE%2Bp6jEuBbD6BOfQsJG9rkNZZ6KkPce4wlJjuAXh11AsdiN9HZvHKfwaI4IS2VVBmObxZg%2BVuZI6GC2HbG3wpifKcMsjN2qaBqIL7I%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1974\u0026min_rtt=391\u0026rtt_var=2544\u0026sent=243\u0026recv=100\u0026lost=0\u0026retrans=0\u0026sent_bytes=309037\u0026recv_bytes=2287\u0026delivery_rate=51166077\u0026cwnd=220\u0026unsent_bytes=0\u0026cid=a8accd7f3bb372e6\u0026ts=951\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1d2f3736d99389c2844a05069ef30d12","sha1":"657be94b1bc215236f14e959717ffa4ffd0c94ce","sha256":"0631f50d3ec00310d56512bfe5a6cd0289206db5c55f88e97c8a1a5d7cfe36c5","sha512":"7b572e657a9c2bebfe00aa25b8cc7d7de0718d8f908c0adc3f59b6cf3494225df8411d1b5ccb785e2e8e520c9c4e4dddb8b259c20c2359be2da697391d85be64","ssdeep":"","tlshash":"7ea002545d2358a83d801942598311972d9a6524094d1594803c4e640a59454675d505","first_seen":"2025-04-19T10:54:17.414914Z","last_seen":"2026-06-02T10:58:21.803115Z","times_seen":45,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.7.1/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:57.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.7.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://123av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 11 Aug 2025 01:56:57 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 158224\r\ncf-ray: 96d41e92ddc40b41-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"673e23f5-26a10\"\r\nlast-modified: Wed, 20 Nov 2024 18:01:25 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 855336\r\nexpires: Sat, 01 Aug 2026 01:56:57 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tXDptEP72ClAMka9xSkZBZ0XOCk%2Fmjd0dmVk3aBZ%2F6d%2B1FDAGtYGXnCYJ4q1H94caFz3vt5cgW03I80uQYCwXTMLkxG00NeUU3A23bDca%2BBObQRrxC7sEAh%2F%2B3auWwvl4kx6B%2BOM\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158224,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 158224, version 775.768","md5":"8569e341029ad642d6f62398649236b4","sha1":"1b3b218d84feb031d8adcc70742c80b625cba4ed","sha256":"38e76ab3d359e772e9f2aab11fbb07a2e2209318183a89ced0a97d6b958a7a6f","sha512":"4f6d022dc44d79c64835078a28629a91f21301e69755306a1dfe5128ade1956158e0b919caeaa5ee922971b87dd4f3a5dcf0fdc2a1606c6b12580e9ad9edfb2a","ssdeep":"3072:MM1Qd+B1NmuitFBwBEj4jSLLGNGM5W1o9fvwumLiF6Ps7Nk:I+B1NCpj4jSnGoo9fvwpOF6sNk","tlshash":"d5f3123eb5005b9bd91e1b8782ff497b5d368178e290519daa3f28a415c0e0d753cafc","first_seen":"2024-11-25T11:12:50.83498Z","last_seen":"2026-06-09T21:03:53.460637Z","times_seen":3091,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":34,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"weirdopt.com/ad/advertisers.js","fqdn":"weirdopt.com","domain":"weirdopt.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:57.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"weirdopt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 15:18:37 GMT","end":"Mon, 29 Sep 2025 15:18:36 GMT"},"fingerprint":{"sha1":"1A:27:71:C0:8E:44:D4:6B:F5:AA:49:F0:F1:AF:E5:5F:30:23:A4:D4","sha256":"84:6C:2E:D6:ED:8A:2F:33:05:CC:E9:F2:24:E5:5C:E0:80:C2:04:2D:C3:21:06:64:E1:0D:14:81:A1:9A:00:1B"}}},"request":{"raw":"GET /ad/advertisers.js HTTP/1.1\r\nHost: weirdopt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Mon, 11 Aug 2025 01:56:57 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 67aa1f907f62c61a76e3ae155bc1bd3d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T00:14:21.104822Z","times_seen":16282530,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":57,"dns":1,"connect":17,"send":0,"wait":21,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"18.198.116.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:57.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://123av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 01:56:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://123av.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=b99aeb4d-3636-478d-a749-05e89979c244:2:1; expires=Thu, 09 Aug 2035 01:56:57 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"465d3c3ecc4f7b2db2fd2ba34168f95c","sha1":"78a9964b319425a7988a9b870fec8653bba4a613","sha256":"c0c35feda1c581677068bbb770c500877ed3f3d32c6761d3680f43a4b87666d7","sha512":"de9f5535d225f291b0e11f443247df94a6b4e699c40206b9f488e4914d75a702a08f42d33110dae12e04c715988a16a3561f777047231eaebafe13523b8903a3","ssdeep":"","tlshash":"3d900431513554503043cd33fccc1341051d1c345445504ccdd5c5c1450541454c0041","first_seen":"2025-08-11T01:57:23.262793Z","last_seen":"2025-08-11T01:57:23.262793Z","times_seen":1,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":126,"dns":21,"connect":21,"send":0,"wait":22,"receive":0,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/cdn-cgi/rum?","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.9.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:57.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Jul 2025 14:34:55 GMT","end":"Mon, 13 Oct 2025 15:33:19 GMT"},"fingerprint":{"sha1":"F4:96:08:D3:B4:32:31:FB:1D:05:92:D7:14:CB:CB:84:09:EB:B2:10","sha256":"8F:00:12:4B:74:63:2D:62:3A:60:EB:AC:E1:21:0A:2B:78:B0:77:D7:F3:94:B5:53:63:D0:CF:42:1A:37:17:F3"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: 123av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1387\r\nOrigin: https://123av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/en/series\r\nCookie: locale=en; x-token=b70e2eda717e20216469d66abd41e1bc; session=V3bM07R8ufUvh9b6rcDdBSlUEmY7KAj2s1IbT5rd; _ga_VZGC2QQBZ8=GS2.1.s1754877417$o1$g0$t1754877417$j60$l0$h0; _ga=GA1.1.619101210.1754877418; dom3ic8zudi28v8lr6fgphwffqoz0j6c=5f289a35-7a3b-4c0d-8be6-8b6e4591b06a%3A2%3A1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Mon, 11 Aug 2025 01:56:57 GMT\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://123av.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: cloudflare\r\ncf-ray: 96d41e966ed956c7-OSL\r\nx-frame-options: DENY\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T00:14:21.104822Z","times_seen":16282530,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=5f289a35-7a3b-4c0d-8be6-8b6e4591b06a\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=245d45a321faaf58150e2b1fe830f4bf\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=1","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:58.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 15:12:33 GMT","end":"Mon, 29 Sep 2025 15:12:32 GMT"},"fingerprint":{"sha1":"9E:08:20:A0:75:ED:21:51:E0:3D:DE:29:CD:B0:11:01:4D:04:77:0A","sha256":"FB:D4:A2:1D:0F:F1:FB:A8:D9:5E:88:03:1F:BB:94:D2:32:5C:CC:49:11:11:FC:04:7B:C6:43:40:CF:1E:A2:BA"}}},"request":{"raw":"GET /pxf.gif?uuid=5f289a35-7a3b-4c0d-8be6-8b6e4591b06a\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=245d45a321faaf58150e2b1fe830f4bf\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=1 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Mon, 11 Aug 2025 01:56:58 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 61c469e3f31678e8bd4c7530260b271a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T00:14:21.104822Z","times_seen":16282530,"resource_available":true,"data":null}},"time_used":684,"timings":{"blocked":294,"dns":0,"connect":93,"send":0,"wait":94,"receive":0,"ssl":200},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/vpn/classic-push/small/css/animate.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:59.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/css/animate.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://123av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 01:56:59 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa84fe-13361\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 231045\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fntKWOL%2BlYpxSy%2FdLrzSf6BGx8XCOZwOVHrwoyzz4e85waM6%2BrImfYHtQcQGwuwWJqWmvZR%2FDiYuEpwxJUG6ll9fmfrshikTAGLvhuzJ\"}]}\r\ncf-ray: 96d41e9d6a0c56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78689,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3d4123dbfb33d27a5cfdfcfa91df6783","sha1":"e7d0eeeec54b848f0bc3da8685fa3bc88429d660","sha256":"cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887","sha512":"75c8a48dc207595e201b50b87ff68782112a21aded9f15f14185c07d40f0151d6afe74a2b278aa575caf12ac422e8166316296ed7b6573ea24e667cca4af51dd","ssdeep":"384:jvuAuF81dghu3ublZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uLu7uNKwZiMUL6Vpaj7F","tlshash":"22731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-01-20T06:37:31Z","last_seen":"2026-06-09T20:24:40.823332Z","times_seen":11891,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":52,"dns":33,"connect":1,"send":0,"wait":10,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/vpn/classic-push/small/css/style.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:59.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/css/style.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://123av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 01:56:59 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa84fe-d1b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 231045\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DRL7bS1%2FvmY%2FPat7o5a85Zz1udOygi0nieBI34DEiveoWmCy7WLqdPTGzuaKXJwPKIb7AGzbyR%2B0qt0mN%2BEdj4wFOtBQR%2F5t9OSiMvNW\"}]}\r\ncf-ray: 96d41e9d6a0d56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3355,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"039a6734d79ed9aa51cf81c52479c5fe","sha1":"9cf29c4ea1a3880681d50c7228374f8073b7778b","sha256":"a15bad73fc8907795285b78a4a1a1bf5e7f68b4d39988b9bb165444819cf9eb1","sha512":"879f067d02f582c2ff8f9c0308cbb44b24964136c4d8074f1a1b200169b520bb49fdd2b290772dfbc3ca432fba2ce9d5b1a398eb14746613cc942dd7567fa1d9","ssdeep":"","tlshash":"3a61ba966b670a04b51ad0ab3f667b4723084007995fed757fc8620ccfc92a8d6d378e","first_seen":"2024-02-12T03:25:01Z","last_seen":"2026-06-07T23:29:39.347369Z","times_seen":2981,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":53,"dns":32,"connect":4,"send":0,"wait":9,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:59.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 11 Aug 2025 01:56:59 GMT\r\ndate: Mon, 11 Aug 2025 01:56:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"e9d2e14beb088f37fae98294940a9dcd","sha1":"1dafc3c55550249c8c2d782d5616c7b445c8e005","sha256":"f2e491cc46d3fcba81f729065d622bd722751d4a2e7f80b479aa64a92c17b5c7","sha512":"64025ea9b660d5e1d45a593a27345e152ba6b5ef95daceee5e43201319a555eb5457cfe1ecdcc725202063a22c5f406f3ba4607863d5b714c378f144bcdea5f7","ssdeep":"384:pjf5jgjPjrjyUj/qY4+j4jYjpjfMj1jWj6jyhj/qY4XjNjtj4jfdjkjDj3jyQj/E:p90DXOU/R08toBy+Oh/EBpcZwPLOQ/VK","tlshash":"e5722291041740009b835ce223cebf35fe1f92117152d0b5abfd9b6badcbc66526939d","first_seen":"2025-06-02T17:27:24.212334Z","last_seen":"2026-01-19T16:22:17.33804Z","times_seen":5482,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":136,"dns":1,"connect":27,"send":0,"wait":46,"receive":0,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/vpn/classic-push/small/js/script.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:59.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/small/js/script.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://123av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 Aug 2025 01:56:59 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iisSbk8s0dS%2FKJswf%2FfIkhlCw1MAuWeNc93ilMA3RPONlJdZIQ4iixuyvULwUW1%2BvDfJ703S5O%2FGsfmRFREEju4DYCECoPj6No0ovANQ\"}]}\r\nage: 231045\r\ncf-cache-status: HIT\r\netag: W/\"65aa84fe-3c2\"\r\ncontent-encoding: br\r\ncf-ray: 96d41e9e0a5d56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":962,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"0013fbb3bd9e7300fa1bc9f62501dcf0","sha1":"447e4a8994979e2e158b9beff79b94e7d1b29508","sha256":"4cf18df81115ddab6967dc82096077ee024223dac3c6ffc9b810bffb7780a20e","sha512":"288a5e82fdbfdadf11f5a15ed40b54b67dd43fd83f0666abf85ebc0f14ef3b6e5e9104c3491fdb85b40e5556b252d933ee8cbe6e381e96e01170e76c60003dc6","ssdeep":"","tlshash":"e7117d37156882f06257f027a15729d6ee32029ee81a5707721c06cd0ec47b913fa6e7","first_seen":"2023-06-25T06:36:24Z","last_seen":"2026-06-07T23:29:39.335075Z","times_seen":3078,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fjs%2Fscript.js\u0026l=962\u0026fd=12","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/en/series","date":"2025-08-11T01:56:59.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 21:49:55 GMT","end":"Fri, 26 Sep 2025 21:49:54 GMT"},"fingerprint":{"sha1":"38:55:0E:5D:7C:E7:08:BA:9A:77:8D:79:E7:3A:6B:27:F8:97:E4:89","sha256":"3A:54:48:30:C3:83:C3:F6:C2:3E:B3:7D:81:B3:37:9D:16:0C:B9:AE:C5:C3:56:8C:33:5D:AD:24:2B:B7:35:AF"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fsmall%2Fjs%2Fscript.js\u0026l=962\u0026fd=12 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Mon, 11 Aug 2025 01:56:59 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T00:14:21.104822Z","times_seen":16282530,"resource_available":true,"data":null}},"time_used":596,"timings":{"blocked":309,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-10","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}
