{"report_id":"987ec71d-1d80-4600-a105-651cd9a651bb","version":6,"status":"done","tags":[],"date":"2026-04-18T07:22:58Z","url":{"schema":"https","addr":"123av.com/zh/dm9","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"172.67.73.151","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"123av.com/zh/dm9","fqdn":"123av.com","domain":"123av.com","tld":"com"},"title":"在线观看高清AV | 免费高质量AV - 123AV","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"123av.com/zh/dm9","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"172.67.73.151","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-23T07:22:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":17}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"rec2.123av.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"prefecturesuggestions.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"prefecturesuggestions.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"prefecturesuggestions.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"123av.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"s.magsrv.com","ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-08-01","domain_rank":47665,"first_seen":"2023-08-04T12:48:00Z","last_seen":"2026-04-17T04:37:08.423106Z","alert_count":5,"request_count":5,"received_data":17214,"sent_data":4044,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2026-04-16T08:11:51.226974Z","alert_count":3,"request_count":1,"received_data":85956,"sent_data":407,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-04-12T22:43:52.947527Z","alert_count":0,"request_count":1,"received_data":31542,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-04-12T22:24:43.06808Z","alert_count":0,"request_count":1,"received_data":449778,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"a.magsrv.com","ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2023-08-01","domain_rank":51490,"first_seen":"2023-08-04T16:18:00Z","last_seen":"2026-04-16T01:24:12.086584Z","alert_count":2,"request_count":1,"received_data":188947,"sent_data":409,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"rec2.123av.com","ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-06-28","domain_rank":4238021,"first_seen":"2026-01-16T18:59:13.737549Z","last_seen":"2026-01-16T18:59:13.737549Z","alert_count":4,"request_count":4,"received_data":7452,"sent_data":2289,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"z6v2p9a8.bkcdn.net","ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2026-04-13","domain_rank":0,"first_seen":"2026-04-15T09:02:49.870945Z","last_seen":"2026-04-15T09:02:53.016399Z","alert_count":0,"request_count":9,"received_data":3143130,"sent_data":4554,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"cdn.123av.me","ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-11-19","domain_rank":766098,"first_seen":"2025-03-18T08:55:21.226613Z","last_seen":"2026-04-03T08:27:03.508303Z","alert_count":0,"request_count":30,"received_data":3356199,"sent_data":13877,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"prefecturesuggestions.com","ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-03-28","domain_rank":155164,"first_seen":"2025-04-19T10:54:10.906276Z","last_seen":"2026-04-05T10:51:41.555365Z","alert_count":3,"request_count":1,"received_data":94630,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"kettledroopingcontinuation.com","ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":196057,"first_seen":"2025-07-30T15:18:19.355595Z","last_seen":"2026-04-16T09:31:15.98406Z","alert_count":4,"request_count":1,"received_data":812,"sent_data":504,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"flushpersist.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2026-04-16T07:48:30.145651Z","alert_count":2,"request_count":1,"received_data":530,"sent_data":760,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"protrafficinspector.com","ip":{"addr":"63.182.85.33","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2026-04-15T20:56:11.843562Z","alert_count":0,"request_count":2,"received_data":1254,"sent_data":926,"comment":"","tags":null,"fingerprints":null},{"fqdn":"123av.com","ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-06-28","domain_rank":1905,"first_seen":"2015-03-23T10:22:10Z","last_seen":"2025-11-13T04:55:42.727329Z","alert_count":13,"request_count":13,"received_data":824728,"sent_data":7493,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-04-12T22:33:20.808909Z","alert_count":0,"request_count":3,"received_data":291251,"sent_data":1555,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"123av.com/zh/dm9","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"09c653e15e1fbbce1dbe5073dbd3f775","sha1":"d113011e62ad21d5831aced175464b207bcb1cb3","sha256":"6e08de43d5888816263eccaa8549094066d6370ef3fab34d0fe6f53be1c12f13","sha512":"9dcdc6e233cc64aaac0fa7c2f080d73c365d8b3206692fd1fd90ed330d92382359480227bae369765509bd21e54bd8cc1b230e78314b08de9b547a55bfcc3506","ssdeep":"","tlshash":"97a012c038c22000c517307060e30c02112514944004cc00a104e05539330315e921e9","size":75,"data":"","first_seen":"2024-10-02T00:52:55Z","last_seen":"2026-06-02T10:58:21.901241Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/zh/dm9","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4d530fac62a94ddedc3faf9ccd2f8767","sha1":"cec63520308a9a14ff815d492e065bae9226b92d","sha256":"039cb560e033e37c47da0b39af21b33234a8b4d7dee5f57fac96eee60f41d830","sha512":"7faa383457203fa31a4df74d7a2440a966e5ef4a93ebd484b98761ed54a492d7fb15bf570e8d26d5289945fe85059ee16e743c6466a1360ce95ec4d51ac25fbb","ssdeep":"","tlshash":"d5a0118838c2a000c223303030ab0c02222028e000808880a220e0a82e33022e8028ae","size":71,"data":"","first_seen":"2024-10-12T13:49:15.205134Z","last_seen":"2026-06-02T10:58:21.896802Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-06-21T08:15:15.959798Z","times_seen":19262,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/zh/dm9","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"56ab55a3744e6b397f4fbb41e518c08b","sha1":"b52b2256531b191d8fe3fac63fb9e4be3da71e9e","sha256":"c128a13d5eb91677ff3008a56088503dd3d2fdbf19bf59253e1168b9717a2521","sha512":"d3e9ccd97abeb46ca1b6f364a5e50bc516d464a03cbf79594fc91b153f230d6d96799eb0f9083d14004f448c70b4c75c909fa32d286ca68b5938a5dac305b5e2","ssdeep":"","tlshash":"77a0128837c51122c163397421e30c03b84c14b41004cd40a230e0a43c23032b8021ac","size":83,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-06-02T10:58:21.937551Z","times_seen":121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/zh/dm9","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c615a96eb38378eaebcb8d43d9ec71b5","sha1":"b9a5f27c054810f26c8fdce62e88e462a2af5836","sha256":"3de967b9279f4e83ef80a77642b0ec6e16e31a605e2884c83f3aab2165706db8","sha512":"2b8632b3f94805a4733d6874ecab6ac0fb347dadeac0aad7225d69080b9ce56f5ea88bc0282831fd78ad2fd9794715321081e943eeb1e6c7d769209a2137149c","ssdeep":"","tlshash":"6da0128079c260f2c3233070309f4c02a92a19d4431088106301e9202422039ac89669","size":84,"data":"","first_seen":"2026-04-18T07:23:09.429393Z","last_seen":"2026-04-18T07:23:09.429393Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/zh/dm9","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3eaa849b72b13587b0c27c3e419b9552","sha1":"ef632fcb8957362d331400cacdc115d552c02851","sha256":"63237691f008e326fda0230459d8d62ae64ede70870ae6103a65ea85ac68fcf8","sha512":"7b55fdc17a126fc27aeba1980747d92712324075a4f043c0398055b799612b96594eaacdac753e8d8d40bd3533244509e9c3611afc2dcb67a921283e1887079b","ssdeep":"","tlshash":"d7a012807cd22000c713313034d30c42102118946004c8006120e4553d32031594399e","size":75,"data":"","first_seen":"2024-10-12T13:49:15.36399Z","last_seen":"2026-06-02T10:58:21.925146Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/zh/dm9","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4182aa5d78e6d131a1dff422191d8ce6","sha1":"07b353597bd0ac40601f39019d4edb69e1a581ed","sha256":"f4da672b52965247d86f2c6d623b7d3510a200e7994109fb8e2e15c5a2a06065","sha512":"7daf392a0197686869a0c8e36a022bd37e2441828f083e3f4d460e73d67918828090b790ece4adbfe9ef40db964df36f20d9fad799ea29f195288f08cb5dc020","ssdeep":"","tlshash":"afa0128038c26072c113347030df4d036a2a5de4920088106301e5502422039ac4966a","size":85,"data":"","first_seen":"2026-04-18T07:23:09.431791Z","last_seen":"2026-04-18T07:23:09.431791Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","size":31169,"data":"","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-06-21T07:18:06.051515Z","times_seen":78167,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/zh/dm9","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d9c2083537df321d4e18fcda4723b8b5","sha1":"e1e805519d9c63b9ea6af5e709a2a2eda6c9413a","sha256":"3f9bf8a105b3fddd481c7b68f1b3149f1724fe841adea089e513acc07094bd6c","sha512":"af554be4c002e8acfe2b070614dd99f5ee98b5d33d294500f00562d28ba22a30d698797d4102892e5493a24f6a1896fdd88d5cffbd6e016e6a805cd0708b621d","ssdeep":"","tlshash":"69a002c439d6b161c263357074e71d9761ad79e4d004cd88b614f5a439730327d675ad","size":65,"data":"","first_seen":"2024-10-02T00:52:55Z","last_seen":"2026-06-02T10:58:21.941606Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/zh/dm9","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7a9c9c996f811b592034c3b5efdb7083","sha1":"55aac1a3882d11e55a29ecf47dfa6a4d64b4bd7c","sha256":"e7589585deda80d65eece055240c3bb2525d50729f1f650b1408bf3c19732388","sha512":"2f40dad1c9c4249c6f3cc82d6829d4e53066cfd40fb599694ccfa3de7f40a8e2b497e8906ef64ac486c08286c81f9ff360089cef00ebd67abf690b72f659d5ea","ssdeep":"","tlshash":"31a011c838e2a020c223303030ab0c02222028e000808c80a220e0a03a32022e80aaae","size":72,"data":"","first_seen":"2024-10-12T13:49:15.427419Z","last_seen":"2026-06-02T10:58:21.907134Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/zh/dm9","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c5f30765413af8ea6cc6655439d03e24","sha1":"cf54e0f982b452a11be5bad2eacc1b9e35d1fb84","sha256":"2fc0e93bd9e48add2ff77973de5f49af92f9eeabcd82082a3dff9c770ca4c995","sha512":"7ae24d5e9b03418733d256f87b79f435e3576ef2470224d86a0940f524854e5a232d26a199851b2d7e37e5bf7507e3f100877284aa7dea07d54c7e5f55a91790","ssdeep":"","tlshash":"8aa002c879d6f171d263357074eb5e5762a96de4d004cd80b604f4b43a730326d675ed","size":66,"data":"","first_seen":"2024-10-17T18:24:27.732173Z","last_seen":"2026-06-02T10:58:21.938337Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"7aed630ee31d3f9cff55e0b1f5e3e811","sha1":"cf93796454e8c42585ad9e5ff39ca4017d55a301","sha256":"bf409d98c411ec137c473af54cf2c3626c221541e42779aa4dcbd91ae26ea576","sha512":"bdc330f602edd0c9da30d2495eb24e4ad97cc6ea3fce43b83d8a42543297328b8d4c342430c725f4c2516bc782453b63216af9557246b603ce78c2c9fdaeae51","ssdeep":"3072:8dqQ7K6+28VOk2DZ2HgMaElwnRyL78wBHishYolYHoJCXMdpo:DM+28VOk2d2SElwnRW8w4sDRpo","tlshash":"0c045c983792303441d3a12da9ff52083375506ab90f4884bb4dd9a427adeea51b3ffd","size":188413,"data":"","first_seen":"2026-04-15T13:08:57.83457Z","last_seen":"2026-04-22T10:25:44.153871Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/zh/dm9","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7b8fc6bf7b44ba2bc5b37e9ff3de7b00","sha1":"ed7df950986f8002f997ed04884afa11aaa9ee8a","sha256":"17fa551376c312c2613e051d1b0e62dcc8c240bc1a54f8a8a2f1afb8b50cbbe3","sha512":"403fc594d07f3516470dce81c505a4fc91ed4b2e5d5db8367b0b0e500a784709e94eb4922b985db922114dd793550251bda5140e93fa70715760f6fb599f4c35","ssdeep":"","tlshash":"98a012c039c2b003c2133c7164a30c47150159a04400cc40625de05079230396c011d9","size":86,"data":"","first_seen":"2025-01-04T23:35:08.104959Z","last_seen":"2026-04-18T07:23:09.435975Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/zh/dm9","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4c8d9eefbd8b260db2fe1a56563b0640","sha1":"681e444af23d4148b9e6bce4dec51c708aec593f","sha256":"bc84becc95230aaa566356d871e36265e0fceff0fcbf1e342cac7c999fe81099","sha512":"314ade2a8553a6d71a838ed81ee8cb5187eedd8752f9b6bf0872dc9b1300d5c30bd4b367ca4024c0d6f6d7217f78a088ca5944e7225107e33fb374c9bd95e198","ssdeep":"","tlshash":"6eb012c17ec1a040c1273230b1b71c03312129d51044c8809340f82134a20f138496dc","size":87,"data":"","first_seen":"2024-10-12T13:49:15.296902Z","last_seen":"2026-06-02T10:58:21.870039Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VZGC2QQBZ8","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5b93960be00272042fd65e3e652e21a","sha1":"110f5484cc4a573d0d47516179613ef9843f4843","sha256":"522bcf029551ca45209a0470df3d72bdbd69485eaa81a529e6a512471f812d7b","sha512":"936ae22e12c6ca6f2e5346d1c9fa703f71bea56c26569203626e0e52357d4ab9f4e94c47dfd73fc1760785641983c76be7f878aa0dd968118372b27f1819206c","ssdeep":"6144:z4OjKgsCA4MRBRfrJPj8B3v0yIjwcHRpLUgW1w01V91XX:Hst4MtfrJL8M5BOn","tlshash":"90a419cdb3c674665397f478903f018ba57b28a2b44cc89af189c8e42d7469a4277f7c","size":449174,"data":"","first_seen":"2026-04-18T07:23:09.419999Z","last_seen":"2026-04-18T07:23:09.419999Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/zh/dm9","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"182ec7cb3c6c5b281a205042669149c0","sha1":"b2df80056640a367bc8ffbbae8b1cf9b5b5894fa","sha256":"14545a6261d46e7fb2e7c785c714e3e80c1ab2346b4dbd5fd94ce3b6292410e3","sha512":"5698ad28a9d0b9f0a145524fa4532e8c2eec2cc1ac6b2f624f48dcb267ab11bc702acda3b296edf3d832ca0321a6345538e62d5161def69d2f1bf5cd864ef911","ssdeep":"","tlshash":"aaa0128074c26066c1133070309f4c02692619d48b0098106301e511253203aac4aa79","size":85,"data":"","first_seen":"2026-04-18T07:23:09.438679Z","last_seen":"2026-04-18T07:23:09.438679Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/zh/dm9","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ed5f5d73cce5a454e97a4abdc4b0f3c1","sha1":"fa5afb73591449673c9881a5614bc86b08438206","sha256":"d23712ea6b4d929c5d0af110e7544a008de6eb9a3afe8d55a57d3bb84dd12cab","sha512":"c74bfa13833ddf4681074630e37e331806ba3473ae4f321e1da08884cd09d6f52d5a52fd00fdb43333f7186f5df9de63441b0d8571b52c0d428497a28909104b","ssdeep":"","tlshash":"9fa011803ae22000c2233030a0eb0c02e08828a0a0008c80a200e0a02833022aca20a8","size":65,"data":"","first_seen":"2024-10-02T00:52:55Z","last_seen":"2026-06-02T10:58:21.895191Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/zh/dm9","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d45a15272e8f87303dd00e8fb3c531cf","sha1":"d61a5e0eab97e9095eddddf30e965249a4ec3768","sha256":"7dabde89fd74db6389dbfa689eb2f6fc453f3d5c86b3bf24017252be1c8faa75","sha512":"7adf55e4c008ef2691e7248f194ed2972b0a2c9ede0cbd6ccd1b9d7457f8b70b9c6281626a1620e525c7793c4425d6f5c94334b7c2a12fd84bbaa3c27cbc4ccc","ssdeep":"","tlshash":"47a001c439d66052d26335b1a4eb1d4662a969a490449d80a248e5a42a73022aea76a9","size":69,"data":"","first_seen":"2024-10-02T00:52:55Z","last_seen":"2026-06-02T10:58:21.877918Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/zh/dm9","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2ebef702db279d5494fb3c027a09b69b","sha1":"a17f32c15326d5b9fe8a1e5bcdcfd3c0315556b2","sha256":"53656efd9c8e067621c9abc3e5ba02b963a87547d5bce3f0f062cbdefe32f3a9","sha512":"dfa4c2b70ff527946a250b211bddda8a1fce7fe9e7f3f14df7bb21b68f98744770d8a76794f8d1563d15ca1d2a6238363cc57713d6ac3722af5f851cddc13d72","ssdeep":"768:XQycsqY8pYHmUfoOUWBCK0Tl6/DeGQXWRgk3u6gqU:AycskucWoKYk/DeGGk3uQU","tlshash":"03f295dfe3d22a3c1afa82dd8d964bbe87c909715091e5bbd4fa0d4d330306cd225a65","size":36955,"data":"","first_seen":"2026-04-18T07:23:09.441919Z","last_seen":"2026-04-29T17:05:47.773693Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/zh/dm9","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41eece0da217398b6f4d4ee2f01b6245","sha1":"72f2098b0520b07dd3c6874646c920a3d367a4e2","sha256":"62bba8c2295a14bb2d007a3f7f8730fd10cef7348a6474f3f832c99ca6795d35","sha512":"1009ef0076bfb735c9b40fa3b106c8de414943b27fd74cfd315265ad768592a9d3eaf408c2392269659fb5af26c32f454d8f8a86fe0044d5a0c46ef424ebe207","ssdeep":"","tlshash":"dec09b3d110413fedfd5359ddc05667d1811b1b1d1918cb04715d527605de144cf3801","size":134,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-21T07:48:38.727279Z","times_seen":13521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/zh/dm9","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8c34a8a8fb3f447f81a97ced9ab600fc","sha1":"8ad532583c5f88857190f606c101c09a81f5de58","sha256":"cf4446868785b5c0cd1122deb5e21c50f0303f0ddd07b89452e7a79915e538d7","sha512":"1768e9ba18b57f60ecd9dc32627b18516044f361daa8f1d8d803bb3a2afde7ddbcfe55228fdae16450dfb10f2ce9730bbe3925a1661ecc371857ad32ac162aae","ssdeep":"","tlshash":"bba012c034c27062c1133070309f4c026e2619d4960088506301e550252203aac8aa59","size":85,"data":"","first_seen":"2026-04-18T07:23:09.443828Z","last_seen":"2026-04-18T07:23:09.443828Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/zh/dm9","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"71615e3773bfd84d6a161bc479c59e3f","sha1":"951d03cf86648a88bc087969d53f76334e23bacd","sha256":"97a10e815cb6f29d665a8c6ba58f03c59072b07ea9c808d83f87c85dc3624558","sha512":"675dc636d6da04623f189d127a3672d77dfd74a8de76350a4a36de1ec6443ce5e5d1ddc372122ab8c62387756bd597b16ea8c9ef886a3ad3aad4dd0d0bfb15d8","ssdeep":"","tlshash":"33a012c878c71403c2b7353120a70c4a705058e1402088016700e12438335229e42559","size":84,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-04-29T17:03:49.908481Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/zh/dm9","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"952d0ab33d87f1014c9e81352e974800","sha1":"8026c83b2db3e522b6d914d852f320ef2d4c7cad","sha256":"0f3212439b44a5daac74a7e1d0561e440deba25a303b24c6fc1f520147029ff0","sha512":"59069ad89d6dbffd97f24284b7fd7c984892b642630b5f9320c798157d015cfa728062e3c22fafd5d37594a2f2e59fb660d66e3fad7458b174e99e2db8c24dd4","ssdeep":"","tlshash":"16a022c038e2b080e233303038e30e03208c38e08000cf80f200f8ac38330322c230ac","size":68,"data":"","first_seen":"2024-10-02T00:52:54Z","last_seen":"2026-06-02T10:58:21.908414Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/zh/dm9","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"41d71e8d546a86b0d8ea2ca05c09a0ac","sha1":"a07c333174aa07e6a87bcc48c203f8f923bd6bbf","sha256":"557357641c5c59db63b98f2424e9ad75e9230ec56fc6496ab77dcc5891dfb071","sha512":"fb61cf5cfa0e63abd252e5c4f363c6efc0de8d5f86d368efacd1ccd5573b359e10ac77740ecb81369e8c3fbaa94431473bcb8d778779c92cb95997298fc11cf9","ssdeep":"","tlshash":"f1b012c038c63610c3d330b024e70d82100d2698e009cc0c7d05e5dd7827072b8e65dd","size":94,"data":"","first_seen":"2024-10-02T00:52:54Z","last_seen":"2026-06-02T10:58:21.933006Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/zh/dm9","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e18c14caf3e5fb10219cb5ece7bffdc","sha1":"966096790d77cc61fde519331926dd0e1347322a","sha256":"50a964efbd36a20b0ec7f5273306056a1c0266752f30c980a8ff3dfe3e6bc577","sha512":"519761aa7dbd669e91d42eb4a7b014e79b0c96381c55e9deeea6b8f8145f507d70bc5d717508c779f326dd800fe3d2c0904db5bc64f0944ecea3ecaf8d811a9e","ssdeep":"","tlshash":"d1c02b8274cb000fc00a3338b5d20c07305d23cd0144dd441900fd3132124713a94199","size":131,"data":"","first_seen":"2023-05-06T08:33:56Z","last_seen":"2026-04-18T07:23:09.447888Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/zh/dm9","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"78b711d158f7dbaf77f954b4cac21eba","sha1":"a48aa6cee35c356c4e30c1c8b1810178eb155d7f","sha256":"d711881e1e29ddc4834c74a0a7a7d47cc37a471e362376d1c98814a05b9c7ac3","sha512":"b2235fe6aa273d0f5a422a1b2fd181e76dcfbb6ffce86c82542678a91002041af21c2efc107b2d95def82a22de8e15f8ced57c5043b0dcba084c0ba23963898d","ssdeep":"","tlshash":"c3a011c03cc22080c2a330b830a30c2aa020a8a800088c80a220e0282f330222c0aaae","size":71,"data":"","first_seen":"2024-10-12T13:49:15.281898Z","last_seen":"2026-06-02T10:58:21.94325Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/zh/dm9","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"efe61b0e7be1f681bf8433e0700ed71f","sha1":"85c5ccbf538b88e3976020d2570daf3d6b3a9a87","sha256":"e868aa834a5c9841ba1a1b137b8a071d252db6cbcf0feba6436838a48625f33d","sha512":"d92fbcaef0b1d14057a87d2d1a1b9fb25438e43ea065bc11ec19dafbd2a124231af4c34ae1624a8b9913d76a09893e257417944f248f1930fedb4728898a6bef","ssdeep":"","tlshash":"34a0128c76c15023c1933db820a31c03b84514b86004cc40e220e0e43c2303278021ac","size":86,"data":"","first_seen":"2023-04-27T13:32:25Z","last_seen":"2026-04-29T16:58:36.831044Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/zh/dm9","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0906708e508376152c1073fbecab481c","sha1":"6a68df0e395b18bb1119e1526170cc13270a05f6","sha256":"33b64869d24989f094d9a0d513ce5b25df861b77db7cd5deaf5635381e1c5af4","sha512":"e15328cfde6cde96fe93784373f1ec73fca35c4b769f893776d4ca74b9bf5416fa1786a186fa44d5ce8009fba825395a5caf03c0012444373a9c088161e3cab0","ssdeep":"","tlshash":"2d9004771c750110117013cc3347354dd3f1103cf454c510d1104005d151013500d0fc","size":41,"data":"","first_seen":"2025-03-15T06:39:38.201351Z","last_seen":"2026-06-02T10:58:21.902Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prefecturesuggestions.com/9b/7e/1e/9b7e1e724274b81f688a60aa9a5b4054.js","fqdn":"prefecturesuggestions.com","domain":"prefecturesuggestions.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"27323846cb4676009fd9a05de1adf0ec","sha1":"1b652e4f72fece24fb90a34ad4d1445a08a58878","sha256":"bd495d05aae518c89e55235aca86521d88450cdb8428fe2c008ecfae3075da94","sha512":"832f022dab8d3c3767716db91ef242eea5fb9b7437948a001b0ba00058a48409e4309e062ddf5709d44e16307a1be75fff24a97692d739bcbdd027b995d14336","ssdeep":"1536:7RsPXZoem5Kvg/+UEiOXwaHe4J+L+FZ8Xmj8sV:yTv4WUK+1aFT9V","tlshash":"1493d78c3fc1f0e513a5203b222f714ef0a94d95546ce468e783f5692f7ca4ae536b98","size":93779,"data":"","first_seen":"2026-04-18T07:23:09.368735Z","last_seen":"2026-04-29T17:02:38.639173Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/zh/dm9","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a4c6f0229ee934fd7ef657ba210b4f8f","sha1":"87aac488d96b33ef6004b370a1ed6c2005fbba78","sha256":"c0152a5c7fe5563fbc80c1e41bbf4dc73c0e9ea1ddc6a453fb0b8c228d8983a5","sha512":"3eaca0684217c124b53a2bbccd8ce77adcb2d7e18ca38d2f1bc15d65ffb1c01f94888249829c1dd49f341582b40ec6657631921228239d7fe18ef23b84b81c7f","ssdeep":"","tlshash":"7bc02bcab5ceb8a2c7b33c7994771c0b21a9186139409c40e3ccd08429330347e4b0ec","size":153,"data":"","first_seen":"2023-08-13T06:18:09Z","last_seen":"2026-06-02T10:58:21.939701Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/zh/dm9","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dc686653f8dc6efa899974d57a72fe16","sha1":"8dc5365cf9057ec8a0358a274b7ea63313810de4","sha256":"fd81655efc92ace8ab12f65906df0cf097bdbe931dea3e2f703412162216570d","sha512":"078969e9a8d8bedad7c086c5911c788f5a407ebe50dfef3e6298b095dfd0cc05542e7bd51ca8d7f662353b5425fd55a1562ea7c78e2c2565e1364c2d8c06981b","ssdeep":"","tlshash":"d1a022c03cca3002c2a3303038e30c8b302028e0c000ec08a228f0283fb30332c2b0af","size":69,"data":"","first_seen":"2024-10-12T13:49:15.31943Z","last_seen":"2026-06-02T10:58:21.900484Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rec2.123av.com/batch?timestamp=1776496956\u0026signature=db5c7a2a","fqdn":"rec2.123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:36.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:24:53 GMT","end":"Sun, 07 Jun 2026 21:22:25 GMT"},"fingerprint":{"sha1":"6B:4D:07:CB:DA:7C:B4:E9:AA:43:45:C5:DB:D7:38:21:15:2E:5E:67","sha256":"86:42:87:61:B5:8C:5A:6D:EF:43:94:60:4F:CE:5F:96:24:EB:BD:A8:8F:71:F0:2C:CC:79:B1:31:DF:2D:2F:AD"}}},"request":{"raw":"POST /batch?timestamp=1776496956\u0026signature=db5c7a2a HTTP/1.1\r\nHost: rec2.123av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 897\r\nOrigin: https://123av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":897,"data":"{\"requests\":[{\"url\":\"users/02461e69-224a-44cb-b132-2db12c92e8a0/items\",\"method\":\"POST\",\"data\":{\"count\":4,\"scenario\":\"home-recommended\",\"included_properties\":[\"code\",\"dm\",\"title_zh\",\"image_path\",\"duration\",\"info_at\"]}},{\"url\":\"users/02461e69-224a-44cb-b132-2db12c92e8a0/items\",\"method\":\"POST\",\"data\":{\"count\":4,\"scenario\":\"home-segments-items\",\"genre\":\"Big Tits\",\"included_properties\":[\"code\",\"dm\",\"title_zh\",\"image_path\",\"duration\",\"info_at\"]}},{\"url\":\"users/02461e69-224a-44cb-b132-2db12c92e8a0/items\",\"method\":\"POST\",\"data\":{\"count\":4,\"scenario\":\"home-segments-items\",\"genre\":\"Creampie\",\"included_properties\":[\"code\",\"dm\",\"title_zh\",\"image_path\",\"duration\",\"info_at\"]}},{\"url\":\"users/02461e69-224a-44cb-b132-2db12c92e8a0/items\",\"method\":\"POST\",\"data\":{\"count\":4,\"scenario\":\"home-segments-items\",\"genre\":\"Drama\",\"included_properties\":[\"code\",\"dm\",\"title_zh\",\"image_path\",\"duration\",\"info_at\"]}}]}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 07:22:36 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cjCq0Pu3BxIg5is685HtKRgJC8vIunPuLgs6bhUa62nv4ivu4dimrgsIEO7XbaigKNCh0ADXSQdUzfpPM3GbNJyh2IIXZa66A1COTcVkM%2FjIJ%2BdD%2BRaVLopzfUI9EszAQg%3D%3D\"}]}\r\ncf-ray: 9ee1eb5b7c791525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4431,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a1d6ae31696682c8dd28e9dc7429199c","sha1":"fe7e906dc0fb048418e3f737c893eeeff9b0f18e","sha256":"3a83d6d1ccd996f7ee58325708b754af9f9179f1cd239cc502e761ffc9b567ba","sha512":"aeb704056f9a9e251ccb9d28e319c92e2bbae61d641eec10cdf8efe251e2a0a98326a74ff2efc657784046c03dd9120f70c30518f1474ff00e010b2081fa807c","ssdeep":"96:5UVHS0qfyqbXFW7iO+ROIYx7Vh2XgO+oyVGa3dQ:qS0qfRdO+ROI+Y+vVO","tlshash":"d69193e907ad9c9f25638b81a75f2c69893c124a13c18e558defaeacd083939c3f5700","first_seen":"2026-04-18T07:23:09.362556Z","last_seen":"2026-04-18T07:23:09.362556Z","times_seen":1,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"rec2.123av.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"z6v2p9a8.bkcdn.net/library/914186/39ea0c58773ff1127fe544a2353a16549b763171.mp4","fqdn":"z6v2p9a8.bkcdn.net","domain":"bkcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:36.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 17:32:27 GMT","end":"Mon, 13 Jul 2026 17:32:26 GMT"},"fingerprint":{"sha1":"51:7D:4D:98:A6:D6:C9:6E:C1:63:31:0F:10:C9:1E:FB:99:1D:A4:40","sha256":"32:EC:40:B8:45:B1:5B:2F:F4:56:FC:1A:26:19:E0:5F:D4:38:FC:F9:CA:A2:0A:6E:45:C4:94:4A:0B:9F:89:5A"}}},"request":{"raw":"GET /library/914186/39ea0c58773ff1127fe544a2353a16549b763171.mp4 HTTP/1.1\r\nHost: z6v2p9a8.bkcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sat, 18 Apr 2026 07:22:36 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 825620\r\nlast-modified: Tue, 05 Aug 2025 08:36:13 GMT\r\netag: \"6891c27d-c9914\"\r\nexpires: Wed, 05 Aug 2026 08:51:28 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec01-prg1-1\r\nx-77-nzt: kyHImtZkAiOhYhtGWdCUnyAROv4eWY8Pe9+/cQ2S3IPHDW/PLhrw09IEGQNAoMJBpgZRcHM\r\nx-77-nzt-ray: 2a494a15062323696131e3694c70ed2c\r\nx-77-cache: HIT\r\nx-77-age: 21991633\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-825619/825620\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":825620,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"cc26eedccef76a0e58f5af46c0a9b455","sha1":"39ea0c58773ff1127fe544a2353a16549b763171","sha256":"f4b184dd7c74a55e62af589f8d6a952a1360d3731116c3b7198236cab18984fc","sha512":"65498b9f56fd95e6710301f9be249c3156627b5547986bda4abbef81acd9aea3ea48b708a8a47385ffb3b24ebf8b0c6da226cf3024cf2b2c92100bd83ad59046","ssdeep":"12288:8JTtXgGqFiTrOM9EqlGU61oxuUT5hjWIFxwhXEXdBD0KfssMpb6r08WnZkIDp2:MNgX+rOkEqlGToxLVrFxwlYdVMpWQZm","tlshash":"38052343cb86187fc11869365953228187a3d3bc3ede021bf2b5e68b1a5f996fd523c4","first_seen":"2025-08-10T08:47:26.229905Z","last_seen":"2026-06-21T03:44:24.177398Z","times_seen":552,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":1,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.123av.me/images/9/49/real-970/cover.jpg?t=1771617022","fqdn":"cdn.123av.me","domain":"123av.me","tld":"me"},"ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:37.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 14:54:00 GMT","end":"Thu, 04 Jun 2026 15:51:38 GMT"},"fingerprint":{"sha1":"6C:B5:1C:36:CB:19:FE:D4:A3:9F:93:94:D2:7C:FD:1D:94:1E:04:E5","sha256":"8E:B7:BB:7D:A8:02:FB:B2:B2:5B:D7:46:DC:30:11:A8:32:09:C0:22:28:B0:FA:98:D9:8B:06:11:A2:D0:00:68"}}},"request":{"raw":"GET /images/9/49/real-970/cover.jpg?t=1771617022 HTTP/1.1\r\nHost: cdn.123av.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 07:22:37 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 167459\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 20 Feb 2026 19:50:22 GMT\r\netag: \"6998bafe-28e23\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 370764\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RtdSg9dWM5Ms8IJYmMUihq1dRGYuMWYAMMChtyo7mNaAxFklO%2FrirHpFrFrjN9R%2BqcxHDQR26v%2F1Yb5wGWhqE6MDPq%2F%2FGPnZGPxTryYLvRBD9XnDVBgUt7QbMVTHuxM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee1eb5dedd20b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167459,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", baseline, precision 8, 800x537, components 3","md5":"c4133b8fab3782ee6dc840a892747eb0","sha1":"5c18aa37f9a59dd0af42767a47a56fb664171064","sha256":"503dee90ec5b0ff47db22d77d279563ddc6869c1e384d504045fa311ed3f855b","sha512":"6c5620c4b35c3b03036808ef6ee182c335e512c2d7b8bbe9bc3676edcdbd4a790d0ed368e996e122ab2ad87b3244cf7e40425ae384bbc7b3088f406fdcb0ed2f","ssdeep":"3072:3nuWVtCpiaLKcWh8W1bABAOygARTM4pMuZm4OkyEXSEG4gczasmnHBmDmm:3uWbaDWhRd1XROImwf2y","tlshash":"a4f312c8c53719ecf9def1e500e4b6078ab51baa8e8523d2abd6560157d37743093ce8","first_seen":"2026-04-18T07:23:09.365355Z","last_seen":"2026-04-29T16:58:36.762004Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.123av.me/images/5/b5/1pondo-021726_001/cover.jpg?t=1771321235","fqdn":"cdn.123av.me","domain":"123av.me","tld":"me"},"ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:37.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 14:54:00 GMT","end":"Thu, 04 Jun 2026 15:51:38 GMT"},"fingerprint":{"sha1":"6C:B5:1C:36:CB:19:FE:D4:A3:9F:93:94:D2:7C:FD:1D:94:1E:04:E5","sha256":"8E:B7:BB:7D:A8:02:FB:B2:B2:5B:D7:46:DC:30:11:A8:32:09:C0:22:28:B0:FA:98:D9:8B:06:11:A2:D0:00:68"}}},"request":{"raw":"GET /images/5/b5/1pondo-021726_001/cover.jpg?t=1771321235 HTTP/1.1\r\nHost: cdn.123av.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 07:22:37 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 56240\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 17 Feb 2026 09:40:35 GMT\r\netag: \"69943793-dbb0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 5174485\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q7Zo7uQ4K7Pi%2FwEr9bZ5V3LNNVZNxqSkWo3xQEyLFTj3tXQLPcSF6EWV9uhs1DYDbD6VPJ%2BqR145GPvrgYxDahRzOPBs4gxDIXr%2FO4YnQEIhNUd%2BUVTliNYdRicuvnw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee1eb5dcdcf0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56240,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", baseline, precision 8, 800x450, components 3","md5":"4d2a3fc6dc6b4b76231924f45f3052da","sha1":"7e98ea399ffc966e47cb13554426a95668773a9e","sha256":"36745d749ad5cc5ddf3a06eca21945d48a23435939488b02db21c7b4d67b396d","sha512":"7996f8e671909a852d9e8743f5201f9e71278f65b1488c0e619f19bec2fabd28150f75b1b626764704dfb06b5aadab11b4fa4ded35616b1904b9008829597b86","ssdeep":"1536:M1wbAiKEteOcHU94+Vv8uLVE9YLpgscAtYDty5VOpswTa0:M1wrKKFfZk9YtgsDGQORm0","tlshash":"8043011bf7210a9287d12e2a0a5149ea98d75c677cf01ca365b32bfe6020121d3e9a82","first_seen":"2026-04-18T07:23:09.366633Z","last_seen":"2026-04-18T07:23:09.366633Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.123av.me/resize/s500/4/44/ebwh-322/cover.jpg?t=1776373250","fqdn":"cdn.123av.me","domain":"123av.me","tld":"me"},"ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:34.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 14:54:00 GMT","end":"Thu, 04 Jun 2026 15:51:38 GMT"},"fingerprint":{"sha1":"6C:B5:1C:36:CB:19:FE:D4:A3:9F:93:94:D2:7C:FD:1D:94:1E:04:E5","sha256":"8E:B7:BB:7D:A8:02:FB:B2:B2:5B:D7:46:DC:30:11:A8:32:09:C0:22:28:B0:FA:98:D9:8B:06:11:A2:D0:00:68"}}},"request":{"raw":"GET /resize/s500/4/44/ebwh-322/cover.jpg?t=1776373250 HTTP/1.1\r\nHost: cdn.123av.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 07:22:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 74831\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 16 Apr 2026 21:00:50 GMT\r\netag: W/\"69e14e02-22467\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 109904\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rbjv5K5%2BMbL%2F0DJMlKj9CCocQ5ULFXK2oOrEXiw4j6NQX%2F8t4FMo1k%2FHrdhC908MTWR5Og8B9LoRiS2SFDtE6YlgE8Gcs1%2FbsPWnZ8WXe0Wz4%2Bt19S8owqCnA4GpNBg%3D\"}]}\r\ncf-ray: 9ee1eb4e09140afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74831,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x336, components 3","md5":"92510406e317789600ede1b9565dca77","sha1":"dd2fdb59b86c3be0bfb8c9b4567d33d2fd106b4f","sha256":"9b38bf07d9fd6c41dae9035e7ed85ae0c5c23e1d88b95c2a172ce869a5be55eb","sha512":"f43e8b1ad6cf0346c39d88ba6aa51b137f7d71a9d3d7b0218226c896add49f0791166bfb039f0d27a93280ba88bbdb4cf2dc70ec6f98c883c9aedbea97dd2bbb","ssdeep":"1536:zf9HSGOYqUPXJcHvtj3JH3cxm+EHSeTTtQk79UgbTmdfq3ZF8mo:xUq6FJcxR0TtV99HP8mo","tlshash":"55730206c249a749ddff5af9e3a5822480f7700f5e8d4dd716e00c1ad166afea884bf1","first_seen":"2026-04-18T07:23:09.36759Z","last_seen":"2026-04-18T07:23:09.36759Z","times_seen":1,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":168,"dns":62,"connect":3,"send":0,"wait":17,"receive":24,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prefecturesuggestions.com/9b/7e/1e/9b7e1e724274b81f688a60aa9a5b4054.js","fqdn":"prefecturesuggestions.com","domain":"prefecturesuggestions.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:34.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"prefecturesuggestions.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 21:49:40 GMT","end":"Sun, 21 Jun 2026 21:49:39 GMT"},"fingerprint":{"sha1":"15:B4:12:7B:D6:2F:F3:93:8B:84:12:F5:5F:6A:45:41:AC:F5:C2:66","sha256":"79:41:26:2B:38:7C:B5:49:51:96:2A:11:78:3D:D3:5B:9F:7C:4C:ED:1B:E6:9A:3B:44:6B:32:4F:F2:BE:2B:C5"}}},"request":{"raw":"GET /9b/7e/1e/9b7e1e724274b81f688a60aa9a5b4054.js HTTP/1.1\r\nHost: prefecturesuggestions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 18 Apr 2026 07:22:34 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 34190\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 5\r\nHost: prefecturesuggestions.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 7ee44af4792243f659356bf5c3c0fe61\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93779,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"27323846cb4676009fd9a05de1adf0ec","sha1":"1b652e4f72fece24fb90a34ad4d1445a08a58878","sha256":"bd495d05aae518c89e55235aca86521d88450cdb8428fe2c008ecfae3075da94","sha512":"832f022dab8d3c3767716db91ef242eea5fb9b7437948a001b0ba00058a48409e4309e062ddf5709d44e16307a1be75fff24a97692d739bcbdd027b995d14336","ssdeep":"1536:7RsPXZoem5Kvg/+UEiOXwaHe4J+L+FZ8Xmj8sV:yTv4WUK+1aFT9V","tlshash":"1493d78c3fc1f0e513a5203b222f714ef0a94d95546ce468e783f5692f7ca4ae536b98","first_seen":"2026-04-18T07:23:09.368735Z","last_seen":"2026-04-29T17:02:38.639173Z","times_seen":2,"resource_available":true,"data":null}},"time_used":544,"timings":{"blocked":-1,"dns":46,"connect":98,"send":0,"wait":105,"receive":96,"ssl":198},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"prefecturesuggestions.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"prefecturesuggestions.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"prefecturesuggestions.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.123av.me/resize/s500/e/de/pred-858/cover.jpg?t=1776372050","fqdn":"cdn.123av.me","domain":"123av.me","tld":"me"},"ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:34.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 14:54:00 GMT","end":"Thu, 04 Jun 2026 15:51:38 GMT"},"fingerprint":{"sha1":"6C:B5:1C:36:CB:19:FE:D4:A3:9F:93:94:D2:7C:FD:1D:94:1E:04:E5","sha256":"8E:B7:BB:7D:A8:02:FB:B2:B2:5B:D7:46:DC:30:11:A8:32:09:C0:22:28:B0:FA:98:D9:8B:06:11:A2:D0:00:68"}}},"request":{"raw":"GET /resize/s500/e/de/pred-858/cover.jpg?t=1776372050 HTTP/1.1\r\nHost: cdn.123av.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 07:22:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 82243\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 16 Apr 2026 20:40:50 GMT\r\netag: W/\"69e14952-24d63\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 99326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D%2Fl056gekbkqiPgyvuqBR0ikV9dxfe6R1q54bmdtdyaoX%2FAywVTf96rrSZ9mLWhkrRZFeLFO3LlxBLL61rYqI16WcFxC9NcniR%2B8XN1LpLqIFtmfrsiSGh7jdLJ7ebo%3D\"}]}\r\ncf-ray: 9ee1eb4e69590afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82243,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x336, components 3","md5":"78f5ada0e8ac56ba0ec97bd4c1c4a800","sha1":"556dda7db4d7f11a43859e0700d8f4e776eed6cf","sha256":"26ec3d7ceecce4c3a6aedd411eafa08535b2276362a73a1c8d762eadc3700c40","sha512":"d3cd67dbb14aa383e62d215b9f061bdce4e48514e81569603263a8b6485b2f089816f4afc45edfe93eb0210da2815bdacf09a0da1d555941cf59b682c43167e1","ssdeep":"1536:zaSJ4BJk+s3slH/aKbb7k+Mbf10tMo3jwofra/LaZgF07:uSJ43sclfaSCutZu/+ZgF07","tlshash":"11831227482fde04c50f427f3e8eb617a7d4fe0548da750346a9cdee216e2485ee061e","first_seen":"2026-04-18T07:23:09.369607Z","last_seen":"2026-04-18T07:23:09.369607Z","times_seen":1,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":217,"dns":67,"connect":4,"send":0,"wait":10,"receive":3,"ssl":159},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/assets/123av/dist/app.js?v=1771820231","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:34.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:24:53 GMT","end":"Sun, 07 Jun 2026 21:22:25 GMT"},"fingerprint":{"sha1":"6B:4D:07:CB:DA:7C:B4:E9:AA:43:45:C5:DB:D7:38:21:15:2E:5E:67","sha256":"86:42:87:61:B5:8C:5A:6D:EF:43:94:60:4F:CE:5F:96:24:EB:BD:A8:8F:71:F0:2C:CC:79:B1:31:DF:2D:2F:AD"}}},"request":{"raw":"GET /assets/123av/dist/app.js?v=1771820231 HTTP/1.1\r\nHost: 123av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/zh/dm9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 07:22:34 GMT\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 23 Feb 2026 04:18:22 GMT\r\netag: W/\"699bd50e-3d65b\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nvary: accept-encoding\r\nage: 2610127\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2dIJCltZ9v6mHdHSGQwhlXZ7nQydQ8GWxooR%2BjKhwHICIPvAB4jGvFpodJOrCAkctheWsYdobd7p3591UP9WCXBrklL2NzpGra2M8t0uvAd7d5lVCFPMcj8owmU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee1eb4cf9f91525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":251483,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c484cb3d85dee26c229df361cb8a722b","sha1":"0a61eb007d278fed4db536c19c5272d49d4af69c","sha256":"557431fabcc6743760995c7541d9bcb9e36ae2d6c7c14f93fa03a65a32b94334","sha512":"31567ed4a2b37e7a69de913acc7bad657b2cb9623b575d394d392a1112753eaff63b91fbdfc51933b3720eff4b9e0f081c6ed61673b6e5506091ef76e97c99d1","ssdeep":"6144:G76wIdyY0WXidGserEFDpJyHDii+HnqUG:G76d5bu3Q5n","tlshash":"3c34188c71c7b03102736034049fb447b4ba79e1640fa993e96ae8d4bcfa59e9057dee","first_seen":"2026-02-24T19:37:32.39032Z","last_seen":"2026-06-08T03:32:37.369864Z","times_seen":17,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"123av.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.7.1/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:35.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.7.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://123av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Apr 2026 07:22:35 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 158224\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"673e23f5-26a10\"\r\nlast-modified: Wed, 20 Nov 2024 18:01:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 860022\r\nexpires: Thu, 08 Apr 2027 07:22:35 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ovbh7omzUUh5fGo5QwP5GqefCbRY%2BUWCUso5MPPifP66BwPQqojnvitviDVn8kva23VYHBUNT2dcMdpcJSNstXJgZ6kUe9a5j525MVBwv5pw3CRJ4taftQlCqOv26UhEOW2VIrvV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9ee1eb55b9a156bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158224,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 158224, version 775.768","md5":"8569e341029ad642d6f62398649236b4","sha1":"1b3b218d84feb031d8adcc70742c80b625cba4ed","sha256":"38e76ab3d359e772e9f2aab11fbb07a2e2209318183a89ced0a97d6b958a7a6f","sha512":"4f6d022dc44d79c64835078a28629a91f21301e69755306a1dfe5128ade1956158e0b919caeaa5ee922971b87dd4f3a5dcf0fdc2a1606c6b12580e9ad9edfb2a","ssdeep":"3072:MM1Qd+B1NmuitFBwBEj4jSLLGNGM5W1o9fvwumLiF6Ps7Nk:I+B1NCpj4jSnGoo9fvwpOF6sNk","tlshash":"d5f3123eb5005b9bd91e1b8782ff497b5d368178e290519daa3f28a415c0e0d753cafc","first_seen":"2024-11-25T11:12:50.83498Z","last_seen":"2026-06-21T05:19:29.512503Z","times_seen":3146,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":32,"dns":3,"connect":0,"send":0,"wait":8,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1248\u0026rd=1248\u0026fd=661\u0026bv=26.3.5226\u0026tmpl=70","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:36.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 21:44:44 GMT","end":"Sun, 24 May 2026 21:44:43 GMT"},"fingerprint":{"sha1":"4C:9B:DC:71:4E:6F:7E:04:5A:F2:21:54:DA:06:E8:A0:34:82:CB:86","sha256":"23:FF:1C:4C:C9:81:C7:C0:A0:EB:2B:81:77:68:85:F3:47:33:36:DE:71:C4:DB:B4:66:77:5F:24:24:B9:A7:89"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1248\u0026rd=1248\u0026fd=661\u0026bv=26.3.5226\u0026tmpl=70 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 18 Apr 2026 07:22:36 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Device-Stock-UA, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-PlatformUser-Agent, User-Agent, X-Device-User-Agent, X-OperaMini-Phone-UA, X-UCBrowser-Device-UA\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T08:29:50.63871Z","times_seen":16603756,"resource_available":true,"data":null}},"time_used":779,"timings":{"blocked":340,"dns":48,"connect":95,"send":0,"wait":97,"receive":0,"ssl":195},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA01P20rFMBD8FX+gYe/ZnGefFRQ/oK2tT0fBgijsx7tJUU6GhL3MMBMCsglkQr8DvhBd2KJhaVCECqrEw+NTCAYSz19l/bjmVtCT5EZigdCEgEIboDYPBY9aFYU8NUBcUSQEggMSpJxtVgUgVRXi5fl+3LQIi3y6YaCH9xE5fCNQl+y6MXh6L/K6L+lqm+60cBVetW2UdLiJCScKuNaQoL9BYupMRmHKLHkgxng+ft7XiH8a4inSkZ16gyE3hFuc3P4rNDbzqo3Fe/ACOBZnQIijXOe34/NMicN/UNJv7MdsFCvX3WRfTbzlL0V3m6tv27IxqxH+An3eRra8AQAA\u0026cb=e2e_69e3313c1828a0.15495251","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:36.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:20:01 GMT","end":"Sun, 24 May 2026 08:20:00 GMT"},"fingerprint":{"sha1":"58:0F:84:09:FF:55:47:81:68:33:43:D3:D2:47:4C:DB:77:90:25:FB","sha256":"11:22:FD:18:0A:A9:69:03:FF:90:1D:F1:BD:A4:A3:CF:3E:A4:0C:FA:D2:84:97:23:1B:81:45:31:26:81:D6:14"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA01P20rFMBD8FX+gYe/ZnGefFRQ/oK2tT0fBgijsx7tJUU6GhL3MMBMCsglkQr8DvhBd2KJhaVCECqrEw+NTCAYSz19l/bjmVtCT5EZigdCEgEIboDYPBY9aFYU8NUBcUSQEggMSpJxtVgUgVRXi5fl+3LQIi3y6YaCH9xE5fCNQl+y6MXh6L/K6L+lqm+60cBVetW2UdLiJCScKuNaQoL9BYupMRmHKLHkgxng+ft7XiH8a4inSkZ16gyE3hFuc3P4rNDbzqo3Fe/ACOBZnQIijXOe34/NMicN/UNJv7MdsFCvX3WRfTbzlL0V3m6tv27IxqxH+An3eRra8AQAA\u0026cb=e2e_69e3313c1828a0.15495251 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://123av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nCookie: __uvt=s%3A32%3A%22198d4d498c27470d863b258ff23b1267%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Apr 2026 07:22:36 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://123av.com\r\nAccess-Control-Allow-Credentials: true\r\nVary: Origin\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T08:29:50.63871Z","times_seen":16603756,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.123av.me/resize/s360/8/58/mrss-182/cover.jpg?t=1776490830","fqdn":"cdn.123av.me","domain":"123av.me","tld":"me"},"ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:36.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 14:54:00 GMT","end":"Thu, 04 Jun 2026 15:51:38 GMT"},"fingerprint":{"sha1":"6C:B5:1C:36:CB:19:FE:D4:A3:9F:93:94:D2:7C:FD:1D:94:1E:04:E5","sha256":"8E:B7:BB:7D:A8:02:FB:B2:B2:5B:D7:46:DC:30:11:A8:32:09:C0:22:28:B0:FA:98:D9:8B:06:11:A2:D0:00:68"}}},"request":{"raw":"GET /resize/s360/8/58/mrss-182/cover.jpg?t=1776490830 HTTP/1.1\r\nHost: cdn.123av.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 07:22:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 48466\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 18 Apr 2026 05:40:30 GMT\r\netag: W/\"69e3194e-24112\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 2552\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=09oAIUHuPpfs3L4784uZAIpSsq8OwTbV%2BFZN0S0sXsk15xMDaoq8IA0dRd%2BiZySSWGFmln7s8W2rmFRrwZyyD2NgZonZ5jtJ2sOrWWno52VmC5iIBgtUAA3dC5vewyc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee1eb5b5db60b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48466,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 360x242, components 3","md5":"5e39cc5c00acc989b73a47dbc29f0398","sha1":"bef6cdf73b99d38b14a67a51831d37a877679a21","sha256":"1842e48615cec635d74334cc10af4166136db22c6582600f2439b43cc8ef2088","sha512":"a1f37ebee4023b2cc54cc58e9947dfc3c86e9b31e8bc7c80c2f6b8e74751f0a7bea1bfb7ed2eb9cfb5a1e34bbe2ae4ca5983d7749ed68741ab30619aed3caf4d","ssdeep":"768:GRNBKk3QauCCD6Ed9I+SeOA/UIf/oLAUpsYuNs2PjxPAgUCBhWZgq4zTaJ:GRNBN3kCEdS8UIILlGNNPxUCdTg","tlshash":"ab23010c53830df63e216b2f4b6f07c3d2e8563aa89c884484e911707467cb9e79de93","first_seen":"2026-04-18T07:23:09.373588Z","last_seen":"2026-04-18T07:23:09.373588Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":16,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.123av.me/images/e/2e/san-421/cover.jpg?t=1769800891","fqdn":"cdn.123av.me","domain":"123av.me","tld":"me"},"ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:37.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 14:54:00 GMT","end":"Thu, 04 Jun 2026 15:51:38 GMT"},"fingerprint":{"sha1":"6C:B5:1C:36:CB:19:FE:D4:A3:9F:93:94:D2:7C:FD:1D:94:1E:04:E5","sha256":"8E:B7:BB:7D:A8:02:FB:B2:B2:5B:D7:46:DC:30:11:A8:32:09:C0:22:28:B0:FA:98:D9:8B:06:11:A2:D0:00:68"}}},"request":{"raw":"GET /images/e/2e/san-421/cover.jpg?t=1769800891 HTTP/1.1\r\nHost: cdn.123av.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 07:22:37 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 175100\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 30 Jan 2026 19:21:31 GMT\r\netag: \"697d04bb-2abfc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 6692536\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2B6HfEmWA1UeW5qae498SY4zEQ3dO3dCfzeJOTRSin1g2Qm96KklyCncCHWICJj7P3l5PjLX1xrVkmA4uOYG2GbCYEnVQ6nPUZ6%2FXO90VemdEMXbyELd9YhuQyXz8uM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee1eb5e3de20b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":175100,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", baseline, precision 8, 800x540, components 3","md5":"62827b1c83e41d287fe285c0d897047d","sha1":"bd95d539b2545292edfd0b71a55c00a160c99c17","sha256":"4e82134236c8331c27806632bb80afd4cc4febbb60908ed8137c52ec4bef5f29","sha512":"bf383720fc7c7974d848604c64f4fbf033d8e51585ec642e24dd1baa03fa61f42bbd26d65ac37830d537ed6cbd8f6cfe9aec8e99df33df061b86bde7989915e1","ssdeep":"3072:rmd5INDjSpgVjlIp8R/mjNr9pqGiQXqXBsjURY2JuB4qDfvuB5d1GR/hXq0Xf02D:rmd5INDZLY8dEtq+XqXajUR5ATwERn0s","tlshash":"f8041369372e141ff62853d20296e8d3ee7722a08195f9da5cc233290c21f157fbdd9a","first_seen":"2026-04-18T07:23:09.37486Z","last_seen":"2026-04-18T07:23:09.37486Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.123av.me/images/d/0d/jur-663/cover.jpg?t=1771534848","fqdn":"cdn.123av.me","domain":"123av.me","tld":"me"},"ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:37.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 14:54:00 GMT","end":"Thu, 04 Jun 2026 15:51:38 GMT"},"fingerprint":{"sha1":"6C:B5:1C:36:CB:19:FE:D4:A3:9F:93:94:D2:7C:FD:1D:94:1E:04:E5","sha256":"8E:B7:BB:7D:A8:02:FB:B2:B2:5B:D7:46:DC:30:11:A8:32:09:C0:22:28:B0:FA:98:D9:8B:06:11:A2:D0:00:68"}}},"request":{"raw":"GET /images/d/0d/jur-663/cover.jpg?t=1771534848 HTTP/1.1\r\nHost: cdn.123av.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 07:22:37 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 177139\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Feb 2026 21:00:48 GMT\r\netag: \"69977a00-2b3f3\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 4835367\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Le%2FQ9x3ue%2FEf7ymEVqXTuN%2F70alWOVpEPb4Pt6tpNmXnr4bQ7GpDgBrbQyDHw4o703X29ehD7Ienv34jLsCCChlDygpssQeL1D9hV1MqbWCSyLRWK0wdo3mjFP%2B1W0M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee1eb5e4de50b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":177139,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", baseline, precision 8, 800x538, components 3","md5":"b41351428abfe14f7f6a7a11702ea8c0","sha1":"c2bd7d81085efd348da090f87313f37a5af414e6","sha256":"c755a8b86f26f0d8e857411d08df96b3acb80f3893395c337801544ca2655b71","sha512":"61e67191750aac693cbab3f85a92ada2a04345d81ad651c28e48e6e071a863aaa45725d53023ae288d9962bcdf8c2b19402eb0995fd34c5dd696347c68bcce87","ssdeep":"3072:AfPoUbFdGPZFMTJ7uBZYy/YgWXCDbo214S0fsJsA31LaENjYi+Mdng7t1nIZyW6i:A/bFom+2y/Pb9t31umg7t0b","tlshash":"e80412f93c48eb11cd6022b65042b596dce494f2156c729fcdc6b78eae08dacbf0e159","first_seen":"2026-04-18T07:23:09.37604Z","last_seen":"2026-04-18T07:23:09.37604Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rec2.123av.com/users/02461e69-224a-44cb-b132-2db12c92e8a0/segments?timestamp=1776496955\u0026signature=fae32429","fqdn":"rec2.123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"172.67.73.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:35.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:24:53 GMT","end":"Sun, 07 Jun 2026 21:22:25 GMT"},"fingerprint":{"sha1":"6B:4D:07:CB:DA:7C:B4:E9:AA:43:45:C5:DB:D7:38:21:15:2E:5E:67","sha256":"86:42:87:61:B5:8C:5A:6D:EF:43:94:60:4F:CE:5F:96:24:EB:BD:A8:8F:71:F0:2C:CC:79:B1:31:DF:2D:2F:AD"}}},"request":{"raw":"POST /users/02461e69-224a-44cb-b132-2db12c92e8a0/segments?timestamp=1776496955\u0026signature=fae32429 HTTP/1.1\r\nHost: rec2.123av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 38\r\nOrigin: https://123av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":38,"data":"{\"count\":3,\"scenario\":\"home-segments\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 07:22:35 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FMvei41KfTLxuIgeFV88UG1xpiKr8L1XyM47c92ycandMcO42heutjZBQqu2YfYINtqDffy7uE8YcxkXxKadESGbgzeKbCwaHNrMJJnj3aPgAgFrnzBoYQod4g3OvPuHQw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ee1eb563db856b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1c1bab39334268d88603f7f6db75ef63","sha1":"3641906d42456cbefb38943e8238c5d82282a09f","sha256":"8998ad736bff4fc85eaa9b5e0f3c67d0f655daf8f6abb16d4c63fe03508d1e68","sha512":"72bbf73c381cd9308cb17b70578666f6f89cb1cbd7997f580eb6ea75592d8dba3d65c3cc6deec56054d6ea4779c943f3a345d4417bb0773ffe130d7d9d3928ed","ssdeep":"","tlshash":"3090021a85990816a65304066c836981257484992840495859b5c78009114c46180186","first_seen":"2026-04-18T07:23:09.377673Z","last_seen":"2026-04-18T07:23:09.377673Z","times_seen":1,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"rec2.123av.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"z6v2p9a8.bkcdn.net/library/974714/702173eabc2d158862e6d747fb3c9c91d0ddf965.webp","fqdn":"z6v2p9a8.bkcdn.net","domain":"bkcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:37.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 17:32:27 GMT","end":"Mon, 13 Jul 2026 17:32:26 GMT"},"fingerprint":{"sha1":"51:7D:4D:98:A6:D6:C9:6E:C1:63:31:0F:10:C9:1E:FB:99:1D:A4:40","sha256":"32:EC:40:B8:45:B1:5B:2F:F4:56:FC:1A:26:19:E0:5F:D4:38:FC:F9:CA:A2:0A:6E:45:C4:94:4A:0B:9F:89:5A"}}},"request":{"raw":"GET /library/974714/702173eabc2d158862e6d747fb3c9c91d0ddf965.webp HTTP/1.1\r\nHost: z6v2p9a8.bkcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 07:22:37 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8862\r\nlast-modified: Thu, 29 Jan 2026 17:16:26 GMT\r\netag: \"697b95ea-229e\"\r\nexpires: Sat, 30 Jan 2027 06:28:51 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec01-prg1-1\r\nx-77-nzt: k2B96nIDRIhQfKZNdZTL7jGw1m9Ex+8VG/2NpM0Gu0BWiBFNRDp3riUZe9EHOfoUyaURRp4\r\nx-77-nzt-ray: 2a494a15062323696231e369a4c7300e\r\nx-77-cache: HIT\r\nx-77-age: 6741645\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":8862,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 736x554, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9cff9705d44376d5fcc44efe7563f220","sha1":"702173eabc2d158862e6d747fb3c9c91d0ddf965","sha256":"242dc783df15844369c471d58cb41eeda3b5768b087f1c557cd1bd58ad832f59","sha512":"b15fdefb257b9c15fddde7d9f97b5ca83ea96297f11c014cbcd24c9d8476667c3446e21bc676166cef5cdb65d009c7206761744c48e6f22b4ce82696ad519ab1","ssdeep":"192:pV2c4AgK3j993SeF96DflhVHzehmIGji9XabaWhIcVAjl:ph7ieFoDTtzeS8lcmB","tlshash":"d602ae8f8cfe23dac17ba06c08ac69bfc01627c553c7ca4944966c4bb16169cf21e517","first_seen":"2026-01-30T10:02:28.100457Z","last_seen":"2026-06-20T18:03:36.113035Z","times_seen":206,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=6cdc5678-0b68-4755-8233-8784b704c3ff\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=9b7e1e724274b81f688a60aa9a5b4054\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=7","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:37.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 22:12:10 GMT","end":"Wed, 27 May 2026 22:12:09 GMT"},"fingerprint":{"sha1":"F8:CE:1C:DD:8F:86:0E:25:10:C6:86:56:A7:A3:47:DA:38:11:C7:3A","sha256":"19:3B:E0:74:B6:FC:9E:17:C4:75:30:39:E3:6A:CB:EF:32:91:9E:69:12:DF:51:AC:FA:76:15:EE:1B:D3:36:B8"}}},"request":{"raw":"GET /pxf.gif?uuid=6cdc5678-0b68-4755-8233-8784b704c3ff\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=9b7e1e724274b81f688a60aa9a5b4054\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=7 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 18 Apr 2026 07:22:37 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 2\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: dfcd1eaf30a1acd0b5653984ec024174\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T08:29:50.63871Z","times_seen":16603756,"resource_available":true,"data":null}},"time_used":792,"timings":{"blocked":343,"dns":45,"connect":100,"send":0,"wait":104,"receive":0,"ssl":196},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/assets/123av/images/logo.png?v=2","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:34.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:24:53 GMT","end":"Sun, 07 Jun 2026 21:22:25 GMT"},"fingerprint":{"sha1":"6B:4D:07:CB:DA:7C:B4:E9:AA:43:45:C5:DB:D7:38:21:15:2E:5E:67","sha256":"86:42:87:61:B5:8C:5A:6D:EF:43:94:60:4F:CE:5F:96:24:EB:BD:A8:8F:71:F0:2C:CC:79:B1:31:DF:2D:2F:AD"}}},"request":{"raw":"GET /assets/123av/images/logo.png?v=2 HTTP/1.1\r\nHost: 123av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/zh/dm9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 07:22:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 11706\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 23 Nov 2024 03:03:56 GMT\r\netag: \"6741461c-2dba\"\r\ncache-control: public, max-age=2678400\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nage: 7442684\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=njTYNvxuFp2Y5zkeKGQ7n07CSP9HJq7TBAdd9q1QJ5TXsXfpmheBnlP223zJsD4XBh9Li49ArdUbXiD9NY%2FktkcwerEvqAGrbe7%2FY79ysfWNB6gWdbKkAjVgA6Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ee1eb4cd9f71525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11706,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 466 x 135, 8-bit/color RGBA, non-interlaced","md5":"2f1f9cea18cfd84e37877e8ebddeb8d4","sha1":"39206b188a08d6b23eedec5bb67de038968fcbb3","sha256":"117aee193670fc3997ee1684896ebc5bca360c6af30ec82b26852f5bf144a1e6","sha512":"832b07ab8efa23f9e231594c660d55d31c2e72de55aba44f14643323d9ca5c2851a2571521faa03c19a31db8a9b2e257306bf6a558e315af2dc8472034adf098","ssdeep":"192:ZiknWQ9klpIF/nyM1CxR6QK7xA1nSxTtURuQavEC9POE3dAfqh0e2:XnWDlpIZyM1Cx11nIiuL9mTqyX","tlshash":"60328e48ff416c51bf01e693a6aae0da5fbb42a0c1d3d486adefc92354d017d5d0e282","first_seen":"2024-12-05T22:43:08.122875Z","last_seen":"2026-06-02T10:58:21.793717Z","times_seen":72,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"123av.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.123av.me/resize/s500/3/f3/start-542/cover.jpg?t=1776112235","fqdn":"cdn.123av.me","domain":"123av.me","tld":"me"},"ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:34.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 14:54:00 GMT","end":"Thu, 04 Jun 2026 15:51:38 GMT"},"fingerprint":{"sha1":"6C:B5:1C:36:CB:19:FE:D4:A3:9F:93:94:D2:7C:FD:1D:94:1E:04:E5","sha256":"8E:B7:BB:7D:A8:02:FB:B2:B2:5B:D7:46:DC:30:11:A8:32:09:C0:22:28:B0:FA:98:D9:8B:06:11:A2:D0:00:68"}}},"request":{"raw":"GET /resize/s500/3/f3/start-542/cover.jpg?t=1776112235 HTTP/1.1\r\nHost: cdn.123av.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 07:22:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 88564\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 13 Apr 2026 20:30:35 GMT\r\netag: W/\"69dd526b-26ccf\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 356607\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DBp%2F9l5wt6FQHPm8uy5R3MvDuXobB9MmLN4drtEui5rg5vj5KIW5LrsOl1rDVf75kIWpdC9IrXaMF98dVLCjLc3Jklo3c%2BuKAJ%2FphRt3MITvEZnIDbghYTkiD9K376s%3D\"}]}\r\ncf-ray: 9ee1eb4df9040afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88564,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x335, components 3","md5":"eb2b6457cd4a679cf30ac768a72ddc5d","sha1":"a8fe4988a8720c12b64b3dd6fa2d64ccccba5be6","sha256":"a3a653e39435e9993b4a0f2f00ce539f3bac2015800d60325897b41a92004a3d","sha512":"c874ac6985ef3d8d306e1af08cbf298f303f71326a6ba0bd935644f01c3e901d268da0277c9ce3225d9cc289250c0dc57b4be17d4d907e9f98f55fc858735c7d","ssdeep":"1536:EGHNtR931XZoRYvxxn6OSVLikpZg1CmmoZUK5P9Z/TweYD5lL4uKng7S5x1GVsS6:xttRLpoq7nFm2eZZcP3rwR9dex1+U","tlshash":"dd83122a5b5d9ee96d24a430eb840fddf3edc48130f0a6afa9f905d9606e1c8641d70e","first_seen":"2026-04-18T07:23:09.38114Z","last_seen":"2026-04-18T07:23:09.38114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":133,"dns":0,"connect":0,"send":0,"wait":25,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/cf-fonts/v/nunito/5.0.16/latin/wght/normal.woff2","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:35.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:24:53 GMT","end":"Sun, 07 Jun 2026 21:22:25 GMT"},"fingerprint":{"sha1":"6B:4D:07:CB:DA:7C:B4:E9:AA:43:45:C5:DB:D7:38:21:15:2E:5E:67","sha256":"86:42:87:61:B5:8C:5A:6D:EF:43:94:60:4F:CE:5F:96:24:EB:BD:A8:8F:71:F0:2C:CC:79:B1:31:DF:2D:2F:AD"}}},"request":{"raw":"GET /cf-fonts/v/nunito/5.0.16/latin/wght/normal.woff2 HTTP/1.1\r\nHost: 123av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/zh/dm9\r\nCookie: locale=zh; x-token=ca765934a399ae2f65342024d714d1dc; session=CB8ZfExaidSejyat9W5tcvYJ99GAKzM5QXldqNRb\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Apr 2026 07:22:35 GMT\r\ncontent-length: 39128\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x%2FVQXAiN3SRBLLfiXj5zwxrdo7R0gJfVx1lkM2%2BEy%2FDoKeXLJZ9gmwsJNMi9XDkt%2BU8ZjktWAKl5vXDndj1d7JY68ZDfjj4oHGe8HjZm2ujsCoEqsUEzisjmZAE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ee1eb55cbc21525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-06-21T08:50:55.592647Z","times_seen":33639,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"123av.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.7.1/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:34.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.7.1/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 07:22:34 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 22415\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"673e23f5-578f\"\r\nlast-modified: Wed, 20 Nov 2024 18:01:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 865532\r\nexpires: Thu, 08 Apr 2027 07:22:34 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xV6C%2FVp1omsSxQ59YJ423QaDFZmfpuzr%2FrgUvD5K%2B%2B2s0Zq9mJ5IkjsO1TlB49Q6FAj0wD6UBhXB%2FXqYBFho2joG%2FtnL9LV8bycMcGBTUOfUuEurLYFK%2FInG3IthZzv4ik5ZcDQt\"}]}\r\ncf-ray: 9ee1eb4cfa7eb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":104502,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (58875)","md5":"bde2a1ac06ec87a30967e54da50f5c15","sha1":"5b0c53fe2da7a616e4d4197f579ad62cdeb9e81d","sha256":"320d572dfb844e7152480b7b62374236c4896ccca3ac9d69bb03f3bc2034acb8","sha512":"e47b37745d8010f92934047b5223876dafa545224d78cd840a4c31508c42d50fc52f27064db35aa565c1e2d3fcf3d9394f926ef1fb386f53f9cff881e2731f49","ssdeep":"1536:YbM1MvMaMfMRQFlDZ4eU+9GoW/WTb+1V568sQLebc9UjA691m:hpZZU+0opQLeI9u191m","tlshash":"73a330127d84015bb8064dff3895bfb466f6d7149a9100b9b470ac463eb28acb19f7b3","first_seen":"2024-11-25T11:12:50.821981Z","last_seen":"2026-06-21T04:10:03.583647Z","times_seen":2478,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":7,"dns":0,"connect":1,"send":0,"wait":16,"receive":2,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/cf-fonts/v/nunito/5.0.16/latin/wght/normal.woff2","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:35.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:24:53 GMT","end":"Sun, 07 Jun 2026 21:22:25 GMT"},"fingerprint":{"sha1":"6B:4D:07:CB:DA:7C:B4:E9:AA:43:45:C5:DB:D7:38:21:15:2E:5E:67","sha256":"86:42:87:61:B5:8C:5A:6D:EF:43:94:60:4F:CE:5F:96:24:EB:BD:A8:8F:71:F0:2C:CC:79:B1:31:DF:2D:2F:AD"}}},"request":{"raw":"GET /cf-fonts/v/nunito/5.0.16/latin/wght/normal.woff2 HTTP/1.1\r\nHost: 123av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/zh/dm9\r\nCookie: locale=zh; x-token=ca765934a399ae2f65342024d714d1dc; session=CB8ZfExaidSejyat9W5tcvYJ99GAKzM5QXldqNRb\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Apr 2026 07:22:35 GMT\r\ncontent-length: 39128\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FKh8av1ZQP7pxNwyyuWgp5Jf2MjqEbtK4t%2FqJYw6orn5Xq4hFjp6GB3rVOuK6%2BhlVFtQ7CEiOGNQ0JarKUKJkgfGt6ygykgAnmftapBnmWVIliAPDDSmxJXNjZ8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ee1eb556bb71525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-06-21T08:50:55.592647Z","times_seen":33639,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"123av.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"63.182.85.33","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:36.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"statistics.it.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 14 Apr 2026 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:66:77:D7:9E:99:80:D4:C4:22:4B:79:2F:16:2B:49:2C:08:07:99","sha256":"54:26:39:E0:45:11:B3:20:EE:6C:3E:B3:C0:57:5D:F2:28:8C:E0:E1:C4:F0:BD:56:E7:8C:91:6B:40:CC:0E:0D"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://123av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nCookie: uid_id2=6cdc5678-0b68-4755-8233-8784b704c3ff:1:1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 07:22:36 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://123av.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"cfdadff4f240345a4c81e51b07993dc6","sha1":"0364fd9cb1c270a30e76ccfac16fc2d4902b531d","sha256":"3a4722ac5426c04e203f3500e5e8ba07f0e8f5635c7c22117fa075844720b53b","sha512":"3eb8582a4dc6091d50a72fb7c1314f0af0c354e00712a7aaa7c65dd3b3adaa09582708d891d07d0175b5a3d777c5db34ad4c05707d64780359ce4e8b125adeaf","ssdeep":"","tlshash":"0f9004c15751f400300171c0731d10151307174101404c5417c045d01f10500d57405c","first_seen":"2026-04-18T07:23:09.383556Z","last_seen":"2026-04-18T07:23:09.383556Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.123av.me/images/1/61/10musume-021926_01/cover.jpg?t=1771479024","fqdn":"cdn.123av.me","domain":"123av.me","tld":"me"},"ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:37.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 14:54:00 GMT","end":"Thu, 04 Jun 2026 15:51:38 GMT"},"fingerprint":{"sha1":"6C:B5:1C:36:CB:19:FE:D4:A3:9F:93:94:D2:7C:FD:1D:94:1E:04:E5","sha256":"8E:B7:BB:7D:A8:02:FB:B2:B2:5B:D7:46:DC:30:11:A8:32:09:C0:22:28:B0:FA:98:D9:8B:06:11:A2:D0:00:68"}}},"request":{"raw":"GET /images/1/61/10musume-021926_01/cover.jpg?t=1771479024 HTTP/1.1\r\nHost: cdn.123av.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 07:22:37 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 63364\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Feb 2026 05:30:24 GMT\r\netag: \"69969ff0-f784\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 4964153\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=INRFfV3MHXIO12VbaUabvuZ45Te9sz4%2Bg6FUZrTWIwg795K2QIQDJWDi0AUrWIJCXZVvgfuRJMs7lzN%2FRL%2BHEPIg8YFPji6zAdk%2BpVp1u3ZuzddgFijjbJEThwLzaVQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee1eb5dadca0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63364,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", baseline, precision 8, 800x450, components 3","md5":"0320b74bafccb25394b2822c88ae0d16","sha1":"772f29c6eb47ff3aa1ff7ce3c6297d29c717141d","sha256":"20608c9023ada5edc7de74f2ae25f66a0369d3233b90d9fca444f51786790d5a","sha512":"e9a2e1ac2938d30a3f8da9d4b4696f6787ffa99f70c1a5cae2e434bcf8324beacfa2543427eb39ab871a5d5877e41779926f20691effedc3384980d5f92fcb4e","ssdeep":"1536:nZAoJsceTHm2yp4ZjFbPSkDeAPgG3O9LiXG0yH9vneYjUt7pbr:ZScXJKZfeAPgG+9aqNqh","tlshash":"2b5301b03a8283d1f62261c293fd7af1892c4161a6cc13d773b6d4e6b236d498b84f1d","first_seen":"2026-04-18T07:23:09.384526Z","last_seen":"2026-04-18T07:23:09.384526Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.123av.me/images/f/8f/heyzo-3784/cover.jpg?t=1771150231","fqdn":"cdn.123av.me","domain":"123av.me","tld":"me"},"ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:37.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 14:54:00 GMT","end":"Thu, 04 Jun 2026 15:51:38 GMT"},"fingerprint":{"sha1":"6C:B5:1C:36:CB:19:FE:D4:A3:9F:93:94:D2:7C:FD:1D:94:1E:04:E5","sha256":"8E:B7:BB:7D:A8:02:FB:B2:B2:5B:D7:46:DC:30:11:A8:32:09:C0:22:28:B0:FA:98:D9:8B:06:11:A2:D0:00:68"}}},"request":{"raw":"GET /images/f/8f/heyzo-3784/cover.jpg?t=1771150231 HTTP/1.1\r\nHost: cdn.123av.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 07:22:37 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 71542\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 15 Feb 2026 10:10:31 GMT\r\netag: \"69919b97-11776\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 5344953\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ahtTy9NAuHfyUAXPWhu%2BZS8XMEFe1mpHJwxd8T8rrh4ZVflzf0NQuQp9MGNxK%2F9MWFuc4GEVBIuS1lqW91%2FhrAAiho9mMTmte24bCJLe7gZqsrNma2aUIvfgNZ0MuFA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee1eb5dadcc0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71542,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", baseline, precision 8, 800x450, components 3","md5":"464a233e43b59673e3c959b983841424","sha1":"b5312ae1ae1b1cb7771388e174f2029325058c5f","sha256":"eb9e49561de042dac4dbad2e19f7fe6c7a4bf6bcf12a3d8acecc7b0ac362a6a3","sha512":"c5f6956f5fab0df03f723c435063a1864152d715895141126396435de126f2f91db0106d0f3343cf0d685e02efc491f22b7c05008b20944e3e87a93202d938b2","ssdeep":"1536:sSl6sdRbvSfzUh/v+4y9PI3/rxP/mHx/dcMx3vAFvwDO:ssTLSAhnc52mzcs3vAZwDO","tlshash":"786302f072c428c732e9b1abc5102bc758534c64a4710d9a56f7ed4f27beb646251ef2","first_seen":"2026-04-18T07:23:09.385855Z","last_seen":"2026-04-18T07:23:09.385855Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.123av.me/images/f/8f/nhdtc-165/cover.jpg?t=1771447228","fqdn":"cdn.123av.me","domain":"123av.me","tld":"me"},"ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:37.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 14:54:00 GMT","end":"Thu, 04 Jun 2026 15:51:38 GMT"},"fingerprint":{"sha1":"6C:B5:1C:36:CB:19:FE:D4:A3:9F:93:94:D2:7C:FD:1D:94:1E:04:E5","sha256":"8E:B7:BB:7D:A8:02:FB:B2:B2:5B:D7:46:DC:30:11:A8:32:09:C0:22:28:B0:FA:98:D9:8B:06:11:A2:D0:00:68"}}},"request":{"raw":"GET /images/f/8f/nhdtc-165/cover.jpg?t=1771447228 HTTP/1.1\r\nHost: cdn.123av.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 07:22:37 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 197929\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Feb 2026 20:40:28 GMT\r\netag: \"699623bc-30529\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 321861\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BQGp79DKrRxqeWdE7kOcVgNr5pbtfDlocfIgGzZ206AlSE3eHO%2BiOsbjxP%2BEZDefJz4wLbI%2B%2BMSCz%2F6MVznHESxoU%2FbuDjcr7NTw%2ByCI%2BUjETod6HlQGiQCljBk5ths%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee1eb5dedd30b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":197929,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", baseline, precision 8, 800x536, components 3","md5":"cd671fb11536426d091991e6f073c918","sha1":"0ea46fa4a006ea147b68d0d970688fa9b37de616","sha256":"4e70870796962799b6615def336a1506d1a8a45b908d2528d81eb452dea78a7a","sha512":"324942984247fb103759e56f447f77046755091cb11672446ce96f2ee4d078d3b968a0de1738b8e663cccbfba3d632e7e1b950ddac2f2c94c81ceddd57c853c4","ssdeep":"6144:GddgTG2/e8ZgUtnFObmb+4o2jJUUcSHNQe:Gb2/eigUtnFOyb1oiJ7HNn","tlshash":"4d1412a5efa9091b3fef158d9e0bb91cc6b911c873a44e531f11ec8955ef2f8b04484a","first_seen":"2026-04-18T07:23:09.386906Z","last_seen":"2026-04-18T07:23:09.386906Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.123av.me/images/7/b7/roe-442/cover.jpg?t=1771540210","fqdn":"cdn.123av.me","domain":"123av.me","tld":"me"},"ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:37.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 14:54:00 GMT","end":"Thu, 04 Jun 2026 15:51:38 GMT"},"fingerprint":{"sha1":"6C:B5:1C:36:CB:19:FE:D4:A3:9F:93:94:D2:7C:FD:1D:94:1E:04:E5","sha256":"8E:B7:BB:7D:A8:02:FB:B2:B2:5B:D7:46:DC:30:11:A8:32:09:C0:22:28:B0:FA:98:D9:8B:06:11:A2:D0:00:68"}}},"request":{"raw":"GET /images/7/b7/roe-442/cover.jpg?t=1771540210 HTTP/1.1\r\nHost: cdn.123av.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 07:22:37 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 172370\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Feb 2026 22:30:10 GMT\r\netag: \"69978ef2-2a152\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 202083\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BqXt6ebttXib%2FxX00FCvk9xnnf35FoVkzJnb45z%2BDcmVrooIvwror7HstA4jn306HLkCPNN%2FrdCNTbEczR0GTanVQMTWwx033owXcOlyJynGJjDwxoSL9MCfAEUOdZk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee1eb5e4de40b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172370,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", baseline, precision 8, 800x538, components 3","md5":"6d23e7f6e407534d33a1c2383bca4f51","sha1":"8d543af7ba92b81e0563baeae9b832be99dc64da","sha256":"f5f932e8e75d279a5b6e49f608250364ff03075ad824f47d3b940dfb3b563410","sha512":"4d88284c00e10982178fc0c8fb05ec158099201e769b20e053142c6d5f71827a4977218783ab28002c7f3dd68e91a5dce73fa8da631bcf2d064d60b8933f137d","ssdeep":"3072:NmLjQuVXVaSAgFPLYh2L0Wfkplj2RnsuWremCFq9ZKNOJeKfWx0/4bCmVLCrR:NuVX0SAg1LgZWs/2RnsHMrNOJQxK4o","tlshash":"04f312637217a2b4b51e4ef9c38bde48c68de5c4217790436cefad158726764938c33a","first_seen":"2026-04-18T07:23:09.387956Z","last_seen":"2026-04-18T07:23:09.387956Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"z6v2p9a8.bkcdn.net/library/914186/2747f4650e1830afee463a069b701f21bf76327a.webp","fqdn":"z6v2p9a8.bkcdn.net","domain":"bkcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:37.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 17:32:27 GMT","end":"Mon, 13 Jul 2026 17:32:26 GMT"},"fingerprint":{"sha1":"51:7D:4D:98:A6:D6:C9:6E:C1:63:31:0F:10:C9:1E:FB:99:1D:A4:40","sha256":"32:EC:40:B8:45:B1:5B:2F:F4:56:FC:1A:26:19:E0:5F:D4:38:FC:F9:CA:A2:0A:6E:45:C4:94:4A:0B:9F:89:5A"}}},"request":{"raw":"GET /library/914186/2747f4650e1830afee463a069b701f21bf76327a.webp HTTP/1.1\r\nHost: z6v2p9a8.bkcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 07:22:37 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12420\r\nlast-modified: Tue, 05 Aug 2025 08:36:46 GMT\r\netag: \"6891c29e-3084\"\r\nexpires: Thu, 06 Aug 2026 18:32:12 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap01-sec01-prg1-1\r\nx-77-nzt: k6VKRrhDamMnc1jHIz6R24d9Qy9QvAEFVj8eooScBM4aDlX3F1MTujhojZ7l8cNnVuRji+s\r\nx-77-nzt-ray: 2a494a15062323696231e3698e32640e\r\nx-77-cache: HIT\r\nx-77-age: 21991614\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":12420,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1630cdb377a85049e578b1fa5827d09d","sha1":"2747f4650e1830afee463a069b701f21bf76327a","sha256":"a82f5c53a10731cbb3d2847c1208f9a89d54bcd6fc4c7d4af42dc33464873e31","sha512":"dea29dce03d2ba4cbba148d5d8dc94841bcc19d1d72d3223eadfbd1eccdc6de3309490b546d0cf9f121fbb02fa2b3d75a02174672f537090b9678053ea91a98a","ssdeep":"384:KMDfyz/d+lEa7qArt9HLzj0m0+KuXH4RG6qxG:FyzUlEa7q0vHLzjjXH4RG3xG","tlshash":"c542c032fb9b3eaf94e47d9c981bdda712d06d41ac1252e2866406d93232433127eb77","first_seen":"2025-08-10T08:47:26.20323Z","last_seen":"2026-06-21T05:04:09.226638Z","times_seen":389,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/zh/ajax/user/info","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:35.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:24:53 GMT","end":"Sun, 07 Jun 2026 21:22:25 GMT"},"fingerprint":{"sha1":"6B:4D:07:CB:DA:7C:B4:E9:AA:43:45:C5:DB:D7:38:21:15:2E:5E:67","sha256":"86:42:87:61:B5:8C:5A:6D:EF:43:94:60:4F:CE:5F:96:24:EB:BD:A8:8F:71:F0:2C:CC:79:B1:31:DF:2D:2F:AD"}}},"request":{"raw":"GET /zh/ajax/user/info HTTP/1.1\r\nHost: 123av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/zh/dm9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 07:22:35 GMT\r\ncontent-type: application/json\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\nset-cookie: x-token=ca765934a399ae2f65342024d714d1dc; path=/; httponly; samesite=lax\nsession=CB8ZfExaidSejyat9W5tcvYJ99GAKzM5QXldqNRb; expires=Sat, 18 Apr 2026 09:22:35 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0E0dxFFPz%2BumXffHTtatItMVZmSFKjZKU4H7qbP9UyiTWfa73q6mostFAhbPsHbqkTC%2BPctgQptO7ysdMP5%2BuRVqHDjCFjni0OHTiPsKQH9zFJS5XYTbyYDJ9no%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee1eb538b251525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1d2f3736d99389c2844a05069ef30d12","sha1":"657be94b1bc215236f14e959717ffa4ffd0c94ce","sha256":"0631f50d3ec00310d56512bfe5a6cd0289206db5c55f88e97c8a1a5d7cfe36c5","sha512":"7b572e657a9c2bebfe00aa25b8cc7d7de0718d8f908c0adc3f59b6cf3494225df8411d1b5ccb785e2e8e520c9c4e4dddb8b259c20c2359be2da697391d85be64","ssdeep":"","tlshash":"7ea002545d2358a83d801942598311972d9a6524094d1594803c4e640a59454675d505","first_seen":"2025-04-19T10:54:17.414914Z","last_seen":"2026-06-02T10:58:21.803115Z","times_seen":45,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"123av.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.7.1/webfonts/fa-regular-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:35.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.7.1/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://123av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Apr 2026 07:22:35 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 25484\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"673e23f5-638c\"\r\nlast-modified: Wed, 20 Nov 2024 18:01:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 526916\r\nexpires: Thu, 08 Apr 2027 07:22:35 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ol9Pfyvq4jJExgYfW%2B4YHlipNKu6uzG89DYzWB9V0g3kQiW%2FQyNjsIDo71MgqYEufkvyoke8pZggDuP5rnuy1QonCOtul58ceVEhvs9BobNOI5uVGcPkzYV42SoZgxQRhK0YWL%2BY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9ee1eb55c9a356bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25484,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 25484, version 775.768","md5":"28deedcffdb1ecdc7c2c2e209e2e36d2","sha1":"3c727ff1af5625c9095d2cb6566f9e0a4fbc2b8d","sha256":"003b55144f370c07c2bc6f8f80455bca7d61a2fb2766551883734249e953e700","sha512":"e911df24377b57fe219bf0b476ad43e499b4910ff730905f1daf64610d0df92cf03128554a36cc36a8dcf11d55b231a12db9ec70f29c77f1b26180c418a0ffbd","ssdeep":"768:Hcq6O0xjG7MVcQRjIRR9T53mz/RLL7Zkcbg:H/QJVpk9wD/kcc","tlshash":"bbb2d1b686ba21107f8392facda55fe4f244a1d0953276653389134f570a4f4cddce92","first_seen":"2024-11-30T20:48:08.600139Z","last_seen":"2026-06-20T19:48:40.756828Z","times_seen":914,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/assets/123av/images/favicon.png?v=2","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:36.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:24:53 GMT","end":"Sun, 07 Jun 2026 21:22:25 GMT"},"fingerprint":{"sha1":"6B:4D:07:CB:DA:7C:B4:E9:AA:43:45:C5:DB:D7:38:21:15:2E:5E:67","sha256":"86:42:87:61:B5:8C:5A:6D:EF:43:94:60:4F:CE:5F:96:24:EB:BD:A8:8F:71:F0:2C:CC:79:B1:31:DF:2D:2F:AD"}}},"request":{"raw":"GET /assets/123av/images/favicon.png?v=2 HTTP/1.1\r\nHost: 123av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/zh/dm9\r\nCookie: locale=zh; x-token=ca765934a399ae2f65342024d714d1dc; session=CB8ZfExaidSejyat9W5tcvYJ99GAKzM5QXldqNRb; _ga_VZGC2QQBZ8=GS2.1.s1776496956$o1$g0$t1776496956$j60$l0$h0; _ga=GA1.1.1428785752.1776496956\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 07:22:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 6605\r\npriority: u=6,i=?0\r\nlast-modified: Thu, 21 Nov 2024 03:54:42 GMT\r\netag: \"673eaf02-19cd\"\r\nx-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2678400\r\nage: 2506729\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3G4cqaNso7%2BO2XGww4E0yBowZtZgmkTJhGQrt6u%2FwHNbfWV343WoUM1XrmdfqGQTycl%2BoOrdzvVwHDmYAIr8yC93APW2xgmLWTPj%2BD6UUlZnyK1RtwBAuE44mbc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ee1eb599c221525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6605,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit colormap, non-interlaced","md5":"92c5b5ee1d5b499babb53fd657721440","sha1":"2c807a18d1d0474c8153fae50e2f46a05abfdc47","sha256":"262d4209924a751bf3ca838267d2c99e3c476fa657dd27b2187fb2de999a82fa","sha512":"7e3edf1515ad436e345698e2321c5309eed764ae987dceddcad59767c67621052d9aec90cdcfdde700277e9fbf297c2b1714d73e7bb2b38e8fea6b71b1bc3d4c","ssdeep":"192:ahnES2sLCz3ajSmjxuz0uJ8z/DWMqVoK9+Trd:CnESDbjSicouI/MVoJ","tlshash":"59d18d8b42ab4a0596109dcfc077a9aca1c5e44d9dee060f017f7197e2a031f5bf6614","first_seen":"2023-05-03T12:44:55Z","last_seen":"2026-06-18T22:22:37.194228Z","times_seen":198,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"123av.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA01PS07FMAy8Chdo5G/ivDVrkEAcIP2xeiBRCYHkw+OkAl5GTdzxODMhoDyBTGh3wBeiC2evmCokoYQq/vD45IKOxO0zLe/X6ApaiCyTZEeoQkCuFVCruYJ5yWZQxBErco2+Czg7BEhZpFcJIKYK+Mvz/fjCwrPH1g0dza1TZPCFQH1k143BwnuWdZ/j1rzpTjMX4UXrRiGHm5hwIoFpCXP6JQJTVzIKU2SJBT7odny/Le5/MsRzSEd26j/ociO4Rfl/VBw46jMS+JGu7fX4OHPhcByScBj9wY2ibjm3VSIZr0qr6t5qgyaNuHJd9h+95hfCrgEAAA==\u0026cb=e2e_69e3313c181561.27682446","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:36.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:20:01 GMT","end":"Sun, 24 May 2026 08:20:00 GMT"},"fingerprint":{"sha1":"58:0F:84:09:FF:55:47:81:68:33:43:D3:D2:47:4C:DB:77:90:25:FB","sha256":"11:22:FD:18:0A:A9:69:03:FF:90:1D:F1:BD:A4:A3:CF:3E:A4:0C:FA:D2:84:97:23:1B:81:45:31:26:81:D6:14"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA01PS07FMAy8Chdo5G/ivDVrkEAcIP2xeiBRCYHkw+OkAl5GTdzxODMhoDyBTGh3wBeiC2evmCokoYQq/vD45IKOxO0zLe/X6ApaiCyTZEeoQkCuFVCruYJ5yWZQxBErco2+Czg7BEhZpFcJIKYK+Mvz/fjCwrPH1g0dza1TZPCFQH1k143BwnuWdZ/j1rzpTjMX4UXrRiGHm5hwIoFpCXP6JQJTVzIKU2SJBT7odny/Le5/MsRzSEd26j/ociO4Rfl/VBw46jMS+JGu7fX4OHPhcByScBj9wY2ibjm3VSIZr0qr6t5qgyaNuHJd9h+95hfCrgEAAA==\u0026cb=e2e_69e3313c181561.27682446 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://123av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nCookie: __uvt=s%3A32%3A%22198d4d498c27470d863b258ff23b1267%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Apr 2026 07:22:36 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://123av.com\r\nAccess-Control-Allow-Credentials: true\r\nVary: Origin\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T08:29:50.63871Z","times_seen":16603756,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":90,"dns":1,"connect":25,"send":0,"wait":35,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"z6v2p9a8.bkcdn.net/library/914186/dff6d5dd821e43336ed3f6cad3d37e12ec59f4fa.mp4","fqdn":"z6v2p9a8.bkcdn.net","domain":"bkcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:36.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 17:32:27 GMT","end":"Mon, 13 Jul 2026 17:32:26 GMT"},"fingerprint":{"sha1":"51:7D:4D:98:A6:D6:C9:6E:C1:63:31:0F:10:C9:1E:FB:99:1D:A4:40","sha256":"32:EC:40:B8:45:B1:5B:2F:F4:56:FC:1A:26:19:E0:5F:D4:38:FC:F9:CA:A2:0A:6E:45:C4:94:4A:0B:9F:89:5A"}}},"request":{"raw":"GET /library/914186/dff6d5dd821e43336ed3f6cad3d37e12ec59f4fa.mp4 HTTP/1.1\r\nHost: z6v2p9a8.bkcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sat, 18 Apr 2026 07:22:36 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 790127\r\nlast-modified: Thu, 30 Jan 2025 20:11:37 GMT\r\netag: \"679bdcf9-c0e6f\"\r\nexpires: Wed, 05 Aug 2026 08:06:17 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec01-prg1-1\r\nx-77-nzt: ky60u/BF1PR/z1FxuxOE13RV7Lq9Ca2QeZQ1fhaDU6zoJBgKj2iaeiHxzeeYG4f+Sfg7te8\r\nx-77-nzt-ray: 2a494a15062323696131e369983ccc2c\r\nx-77-cache: HIT\r\nx-77-age: 22112119\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-790126/790127\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":790127,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"194690f1d12b981124ab67a9ad195c97","sha1":"dff6d5dd821e43336ed3f6cad3d37e12ec59f4fa","sha256":"3de1e4eb1017fa986d21003a3645956e3e3bead9b74730f50bbab53b51a1fd4e","sha512":"48a817938238e73f317d4643a20d67305cc021bee770465a8b8919df272f0e3ed14efcd5e8bbdf8a9d34e0fe728122e9b1ecfab6e5a59c8899b32f410bbc128b","ssdeep":"12288:sBW8mnIGRIkUlff3gbg/PuJvReWw7E0JQaLDkTabyMUnTkpFyCQo1zQi9vhPhZ:qW8mnI5PIHX19rMU4woQi1JhZ","tlshash":"e7f4236bdbb5828ad9459cb7805b67a4cb62c84d21ce2f471100f92e5ccecd17e827f6","first_seen":"2025-08-07T21:10:53.94955Z","last_seen":"2026-06-20T21:28:07.36605Z","times_seen":313,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":3,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.123av.me/resize/s360/1/31/suji-306/cover.jpg?t=1776492610","fqdn":"cdn.123av.me","domain":"123av.me","tld":"me"},"ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:37.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 14:54:00 GMT","end":"Thu, 04 Jun 2026 15:51:38 GMT"},"fingerprint":{"sha1":"6C:B5:1C:36:CB:19:FE:D4:A3:9F:93:94:D2:7C:FD:1D:94:1E:04:E5","sha256":"8E:B7:BB:7D:A8:02:FB:B2:B2:5B:D7:46:DC:30:11:A8:32:09:C0:22:28:B0:FA:98:D9:8B:06:11:A2:D0:00:68"}}},"request":{"raw":"GET /resize/s360/1/31/suji-306/cover.jpg?t=1776492610 HTTP/1.1\r\nHost: cdn.123av.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 07:22:37 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 55923\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 18 Apr 2026 06:10:10 GMT\r\netag: W/\"69e32042-2a540\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 749\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2BWTdIX3B29LpTkL8p6MsYbviYW%2F%2BjUSkxZD0e5KLuHfTFQJelIYc72snWx4D0L5ih9pwPAq8wmaX2Gz4ovcz9q6eDTEjKnXU%2B%2Bp1mJehU9Oi3g7md7D2SkmGP4Kvog%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee1eb5d6dc60b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55923,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 360x242, components 3","md5":"f64342d05502ec465c6d6edfeeab72ab","sha1":"4a0282236b8d37de4693f5c89af77e524e0fc7d2","sha256":"f7401852b2c4f7e2fe4744e34a599f4213212220b6245a84e5072a53fa9024df","sha512":"2b603033d64b81b1e3e5c35bbe2417854978d5d229b6dc09b43f4276a2d1344b804f99bd2511d3b3aea924204559dceb191b4fefa34a0e4e4a53576e8c54201b","ssdeep":"1536:Gyaausbbxqk8bNFljVAZUUTrIuOARI5AQ8/WowOp:TaalXIk8BFFWZUUAk4xup/p","tlshash":"bb43f1b298044b97770f859cb6ea1c3361e8abd4d5581afe63cc0b2422b94f5b584e37","first_seen":"2026-04-18T07:23:09.393038Z","last_seen":"2026-04-18T07:23:09.393038Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"z6v2p9a8.bkcdn.net/library/914186/708a32e9716c3dbc50e54d3c902f3c45ea4ddd9e.webp","fqdn":"z6v2p9a8.bkcdn.net","domain":"bkcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:37.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 17:32:27 GMT","end":"Mon, 13 Jul 2026 17:32:26 GMT"},"fingerprint":{"sha1":"51:7D:4D:98:A6:D6:C9:6E:C1:63:31:0F:10:C9:1E:FB:99:1D:A4:40","sha256":"32:EC:40:B8:45:B1:5B:2F:F4:56:FC:1A:26:19:E0:5F:D4:38:FC:F9:CA:A2:0A:6E:45:C4:94:4A:0B:9F:89:5A"}}},"request":{"raw":"GET /library/914186/708a32e9716c3dbc50e54d3c902f3c45ea4ddd9e.webp HTTP/1.1\r\nHost: z6v2p9a8.bkcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 07:22:37 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6960\r\nlast-modified: Wed, 16 Apr 2025 14:25:30 GMT\r\netag: \"67ffbdda-1b30\"\r\nexpires: Wed, 05 Aug 2026 09:05:58 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec01-prg1-1\r\nx-77-nzt: k2vu4HNut25mwW5FwV2JIZzXAD58VCdvz0yybRxAAmx/oCH8hUJvT6sfdAkkxwKhB6FoIuA\r\nx-77-nzt-ray: 2a494a15062323696231e369233e380e\r\nx-77-cache: HIT\r\nx-77-age: 22112095\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":6960,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a76326f8927ee051f6bfd556f67d23b2","sha1":"708a32e9716c3dbc50e54d3c902f3c45ea4ddd9e","sha256":"d895c77b1bef8795922722fa15809b9634636f822c9770a792a2e45f9421e516","sha512":"dc78f715ae62210399f62d2f09d7f7fca7f970e6f46074dd1883c0483d0a72bb69ea56f230a3c48aeb9dfaa073b8cb826ca2e0357e8c16b6c10249ca816f6e0a","ssdeep":"96:W+9UVL8pQ5dSeM0MaMbpXGfVHwG5TFLO+vNNfpuSlKvfCxJh2yesPuydAg:W+pIpMr2icTFLHNNRuCKvA3YoAg","tlshash":"ade1ae481e7ff91fecb508c96d386ca811a458fbc70c2a1154ebeaca451a71c969cc7d","first_seen":"2025-08-13T23:19:12.181897Z","last_seen":"2026-06-21T07:48:38.688645Z","times_seen":431,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"63.182.85.33","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:36.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"statistics.it.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 14 Apr 2026 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:66:77:D7:9E:99:80:D4:C4:22:4B:79:2F:16:2B:49:2C:08:07:99","sha256":"54:26:39:E0:45:11:B3:20:EE:6C:3E:B3:C0:57:5D:F2:28:8C:E0:E1:C4:F0:BD:56:E7:8C:91:6B:40:CC:0E:0D"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://123av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 07:22:36 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://123av.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=6cdc5678-0b68-4755-8233-8784b704c3ff:1:1; expires=Tue, 15 Apr 2036 07:22:36 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"cfdadff4f240345a4c81e51b07993dc6","sha1":"0364fd9cb1c270a30e76ccfac16fc2d4902b531d","sha256":"3a4722ac5426c04e203f3500e5e8ba07f0e8f5635c7c22117fa075844720b53b","sha512":"3eb8582a4dc6091d50a72fb7c1314f0af0c354e00712a7aaa7c65dd3b3adaa09582708d891d07d0175b5a3d777c5db34ad4c05707d64780359ce4e8b125adeaf","ssdeep":"","tlshash":"0f9004c15751f400300171c0731d10151307174101404c5417c045d01f10500d57405c","first_seen":"2026-04-18T07:23:09.383556Z","last_seen":"2026-04-18T07:23:09.383556Z","times_seen":1,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":122,"dns":22,"connect":21,"send":0,"wait":21,"receive":0,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.123av.me/resize/s500/9/99/pred-840/cover.jpg?t=1776378647","fqdn":"cdn.123av.me","domain":"123av.me","tld":"me"},"ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:34.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 14:54:00 GMT","end":"Thu, 04 Jun 2026 15:51:38 GMT"},"fingerprint":{"sha1":"6C:B5:1C:36:CB:19:FE:D4:A3:9F:93:94:D2:7C:FD:1D:94:1E:04:E5","sha256":"8E:B7:BB:7D:A8:02:FB:B2:B2:5B:D7:46:DC:30:11:A8:32:09:C0:22:28:B0:FA:98:D9:8B:06:11:A2:D0:00:68"}}},"request":{"raw":"GET /resize/s500/9/99/pred-840/cover.jpg?t=1776378647 HTTP/1.1\r\nHost: cdn.123av.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 07:22:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 90401\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 16 Apr 2026 22:30:47 GMT\r\netag: W/\"69e16317-29a1c\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 81234\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Qxe3k92RJB%2BaY7LNDD7R1vBI6xWyi342caavLrCN%2BeS0aZedvgNa6SajqUxvj444A7yGnMlF2ZtwATs3sAtUXvzNiRYFhfTcQS1lO3ulNRcwNnwtUW1z0Bsi9CtLGs%3D\"}]}\r\ncf-ray: 9ee1eb4df8fd0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90401,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x336, components 3","md5":"a41f61770c63c1557715e9728c9943a5","sha1":"ef8978a081479d0537bdbdb0a7b060ace0e24853","sha256":"e862a528abd381c0382229ce14abc9d00062eb372ba0c8836f21071cad0fdcf7","sha512":"3267f11bb8ac67e2fb6dd67f1dd158d563ec51a443d43261d9dd40208c788daacc7578af54d42b528919422dadbfe29154f6c18a532d7e49ef48c3f0b0504b32","ssdeep":"1536:zuQSuPKkEgLK1S7EuwgJIS5p2ZtkN+MM5J0oaPVLCIohQse8WmBPUVlYq8YdAwlB:ztKkE+eSvwgJlp2INbML0BLvsLlWmBP+","tlshash":"d19302af51c26403ee1652d7bc342bf528f44cd3fb93d8126ac5ad754afa90107e71a1","first_seen":"2026-04-18T07:23:09.395094Z","last_seen":"2026-04-18T07:23:09.395094Z","times_seen":1,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":151,"dns":64,"connect":4,"send":0,"wait":27,"receive":7,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.123av.me/resize/s500/4/34/259luxu-1882/cover.jpg?t=1776228023","fqdn":"cdn.123av.me","domain":"123av.me","tld":"me"},"ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:34.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 14:54:00 GMT","end":"Thu, 04 Jun 2026 15:51:38 GMT"},"fingerprint":{"sha1":"6C:B5:1C:36:CB:19:FE:D4:A3:9F:93:94:D2:7C:FD:1D:94:1E:04:E5","sha256":"8E:B7:BB:7D:A8:02:FB:B2:B2:5B:D7:46:DC:30:11:A8:32:09:C0:22:28:B0:FA:98:D9:8B:06:11:A2:D0:00:68"}}},"request":{"raw":"GET /resize/s500/4/34/259luxu-1882/cover.jpg?t=1776228023 HTTP/1.1\r\nHost: cdn.123av.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 07:22:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 57929\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 15 Apr 2026 04:40:23 GMT\r\netag: W/\"69df16b7-17d0f\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 198814\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EHc81zbLaWGyE1EdmMR8N7u9eRTJmuBUG7fQO0oJ%2BL%2BYHKGO8YGYxqtILKPgijkOQ%2BvEm4MpLpHfe6%2BH2Yw%2Bz6CheyDkAVvGM%2FMrsabj1apuAmNxmFcn5jch0O8sh5Y%3D\"}]}\r\ncf-ray: 9ee1eb4e090b0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57929,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x280, components 3","md5":"f2ac50938a6646de9332f55fcfaf2d16","sha1":"924affbdcc8c7f603307062e177ed41b43d2c196","sha256":"14a5b4deea7c19af4d2803717381b7b357f468c164cd38626b7bc1c58058e5ca","sha512":"d3e99a24e2c426cddc904e55a402c0e46f2c702111dfc9800f2cf57e384818aa1406ba920e76f6e2d649ee8da601ab546c1f570b95ced1667ddfa0849de98dfe","ssdeep":"1536:bcy5BSOB4Cw2P4zUjXd5jhR9DxRg0xSz9PMgr:3v9o5zUp5jQ9Ugr","tlshash":"bb43022def81f6f67828c22f5e3e0fc53beb4a1256a45853072502d475aa4fa570bcc9","first_seen":"2026-04-18T07:23:09.396447Z","last_seen":"2026-04-18T07:23:09.396447Z","times_seen":1,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":156,"dns":65,"connect":4,"send":0,"wait":21,"receive":23,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.123av.me/resize/s500/5/f5/mfyd-121/cover.jpg?t=1776382822","fqdn":"cdn.123av.me","domain":"123av.me","tld":"me"},"ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:34.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 14:54:00 GMT","end":"Thu, 04 Jun 2026 15:51:38 GMT"},"fingerprint":{"sha1":"6C:B5:1C:36:CB:19:FE:D4:A3:9F:93:94:D2:7C:FD:1D:94:1E:04:E5","sha256":"8E:B7:BB:7D:A8:02:FB:B2:B2:5B:D7:46:DC:30:11:A8:32:09:C0:22:28:B0:FA:98:D9:8B:06:11:A2:D0:00:68"}}},"request":{"raw":"GET /resize/s500/5/f5/mfyd-121/cover.jpg?t=1776382822 HTTP/1.1\r\nHost: cdn.123av.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 07:22:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 90380\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 16 Apr 2026 23:40:22 GMT\r\netag: W/\"69e17366-28e26\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 85047\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MXg2svWHs9AS3XFv%2FFMOIHQsAcPpiUdOWxDdZt6z7YAJe5Rp%2F8TL5c%2Fcno8umoqmJGtHSofVhKnBDCQV%2FiAHaR9Riuv04iHDXFDfVUF%2FjzG1RpN%2F%2BSAGfx88QHrG2jI%3D\"}]}\r\ncf-ray: 9ee1eb4e594f0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90380,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x336, components 3","md5":"fe21902730af597db39cd7611e4616b8","sha1":"e147e0819de51351502583f62d22d82e0a54b99f","sha256":"a6a1265395cb408932326209a26cf5bd56b2ebafa7e641c7e3400205774a5ab7","sha512":"c839544a02bcfc2a88228d08640d01e8359272c834290d0df07ccff327d50fe00896e384bb5a59ea74527909719779ebb6df92357fa929e568a0a14b0915111d","ssdeep":"1536:z9U5fz5uk9hhcY1U05T7MuuOsPAefehVh3CIuzU1tpeBO5goANimq:Wr5X/hR4fMhEojm9fU","tlshash":"dc9312b3c93423f8a466313525beb1cd1af56033334b56e53a600e6e9d9a1df29c521f","first_seen":"2026-04-18T07:23:09.397613Z","last_seen":"2026-04-18T07:23:09.397613Z","times_seen":1,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":206,"dns":68,"connect":5,"send":0,"wait":10,"receive":4,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:36.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 01:24:35 GMT","end":"Thu, 28 May 2026 01:24:34 GMT"},"fingerprint":{"sha1":"66:45:2B:BB:A2:6D:D3:A2:B6:16:36:65:94:BA:4A:C6:5E:05:66:09","sha256":"A4:2E:A7:56:DB:44:FF:55:9A:FA:4D:EC:2A:78:CB:C5:02:CD:CF:B2:FB:A7:A7:75:77:EC:01:DB:19:71:C0:77"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 18 Apr 2026 07:22:36 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: af3a461349547f60716a04cf50969249\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-06-21T08:15:15.959798Z","times_seen":19262,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":105,"dns":46,"connect":17,"send":0,"wait":19,"receive":20,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.123av.me/images/d/bd/halt-078/cover.jpg?t=1771620023","fqdn":"cdn.123av.me","domain":"123av.me","tld":"me"},"ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:37.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 14:54:00 GMT","end":"Thu, 04 Jun 2026 15:51:38 GMT"},"fingerprint":{"sha1":"6C:B5:1C:36:CB:19:FE:D4:A3:9F:93:94:D2:7C:FD:1D:94:1E:04:E5","sha256":"8E:B7:BB:7D:A8:02:FB:B2:B2:5B:D7:46:DC:30:11:A8:32:09:C0:22:28:B0:FA:98:D9:8B:06:11:A2:D0:00:68"}}},"request":{"raw":"GET /images/d/bd/halt-078/cover.jpg?t=1771620023 HTTP/1.1\r\nHost: cdn.123av.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 07:22:37 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 176589\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 20 Feb 2026 20:40:23 GMT\r\netag: \"6998c6b7-2b1cd\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 285010\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UWo5lMWeDW%2BwiGmd8hc3uRkXXwExweR4%2Bm4G78%2FpNNg6EUkDXn5F3SlDYUljNHtjNqn1b4e8%2BtXa4lApV4ZGzIGShGMoBYZ1yy5yF49ef97ksXYI200vKLNvSiM5T6M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee1eb5dfdd40b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176589,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", baseline, precision 8, 800x538, components 3","md5":"9a9ab66ee1433dc8cf94b09648e85814","sha1":"fe9868d978a02ea63d263d6d12b8ad690180c3ef","sha256":"129c66e59f00b9f72784cc9798b8d8a7caebe8faaec11da53d3e80e6ed391330","sha512":"ffb18248d855e1db4309288c2c15b74eb15721fc2c2f48b3f04e06a551daf4a9503cb771e2664cff58ceca8296c1a7aea4dfc07f35730a6a2f2834e400e9286a","ssdeep":"3072:tm/rx9fFiBz4ldwGMP6ZLcpGUaE0rWQvtxIkvhDmpnqka293iCh:tmTx9fFid4ldchGRyQvDhvhQqkr3","tlshash":"5d0412711e8815dca0756719c85f6e54e2c6eed8b0eb2ef4ae4ea01cf3aad93218d015","first_seen":"2026-04-18T07:23:09.399376Z","last_seen":"2026-04-18T07:23:09.399376Z","times_seen":1,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.123av.me/images/8/78/hmn-805/cover.jpg?t=1771532432","fqdn":"cdn.123av.me","domain":"123av.me","tld":"me"},"ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:37.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 14:54:00 GMT","end":"Thu, 04 Jun 2026 15:51:38 GMT"},"fingerprint":{"sha1":"6C:B5:1C:36:CB:19:FE:D4:A3:9F:93:94:D2:7C:FD:1D:94:1E:04:E5","sha256":"8E:B7:BB:7D:A8:02:FB:B2:B2:5B:D7:46:DC:30:11:A8:32:09:C0:22:28:B0:FA:98:D9:8B:06:11:A2:D0:00:68"}}},"request":{"raw":"GET /images/8/78/hmn-805/cover.jpg?t=1771532432 HTTP/1.1\r\nHost: cdn.123av.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 07:22:37 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 159604\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Feb 2026 20:20:32 GMT\r\netag: \"69977090-26f74\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 4961552\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gUZFoH1OKwbQ%2FVqYXrRcdwH9%2FOHAF2aK08%2Fx%2FNoMmRZtW45Grc7M3maQmzjOITDTvNBsPq1dgr%2F3G2saZjv5o7zBuPgXznkiRQ84x2p2%2F0fAFQ8aT6kYF3likVccGT0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee1eb5e0dd60b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159604,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", baseline, precision 8, 800x538, components 3","md5":"ea79be08a39bfb29f038017e2f92cfc2","sha1":"cefe8a78829546f6f1003c87d9b00054d514b454","sha256":"d6b27ad8003e283ef8bd11ddf428b5f4f3ec1da335bb7975b459811dacd5e68b","sha512":"116204eff4dea1ca1e938d8b45626d74328f35f9caf67ccb3e8a7b2c5f8b2c49944e139533c42462e69e70eef121296cca33a7787d7e353119e21073ccbbec6a","ssdeep":"3072:WPdbOupp/1g+TTbRdH+ixO53U10cuICleBJ+Juwgfe:WPdbDpdl5dE3U10ca0BMr","tlshash":"25f32332036b9fd3a963c86dc11b7f60c1c8ebd349530c36c7e9fe2bb5566141a6846a","first_seen":"2026-04-18T07:23:09.400666Z","last_seen":"2026-04-18T07:23:09.400666Z","times_seen":1,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.123av.me/resize/s500/6/e6/mida-596/cover.jpg?t=1776377448","fqdn":"cdn.123av.me","domain":"123av.me","tld":"me"},"ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:34.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 14:54:00 GMT","end":"Thu, 04 Jun 2026 15:51:38 GMT"},"fingerprint":{"sha1":"6C:B5:1C:36:CB:19:FE:D4:A3:9F:93:94:D2:7C:FD:1D:94:1E:04:E5","sha256":"8E:B7:BB:7D:A8:02:FB:B2:B2:5B:D7:46:DC:30:11:A8:32:09:C0:22:28:B0:FA:98:D9:8B:06:11:A2:D0:00:68"}}},"request":{"raw":"GET /resize/s500/6/e6/mida-596/cover.jpg?t=1776377448 HTTP/1.1\r\nHost: cdn.123av.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 07:22:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 91798\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 16 Apr 2026 22:10:48 GMT\r\netag: W/\"69e15e68-29329\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 101783\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AM7CDnfME8C0cc21ePGWhc0iTbuXRnxMWZn%2FC5ZHGU0E7eDVzM7dMC0qVgUc%2Ft1rqLJgr5W4iHk4%2FSTVGPE3VpbMOS2RPMvsTjTvOn6MK4f6i7ioa2%2FdA1ClWAku40U%3D\"}]}\r\ncf-ray: 9ee1eb4e09090afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91798,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x336, components 3","md5":"0a8a99b754b2d92ac66417c1f2962327","sha1":"6753de5b8d591cb2265d08a82d90b629941c406e","sha256":"9442c731989c0733f1a637be18b2fda86c234c2ca50e0dd253d80dd7c8d5ec67","sha512":"35696097426e2dcd0a12f983653a011e88fd8c92d528b0af49483ff3ba6f3839791dd47151683faee210c150fe40e34db7eb6cd14cdc509bfb46fef1044a7994","ssdeep":"1536:zn4/h/2jfH1Nc+mP4fKVYeeKABpseK8tNxo0SmmEcfIJRXb2vFE9cC+Zwn2aq:8/oT/hmP6eetni0sE1JRXCFE91n2R","tlshash":"6a9302291942b5d4f35b4b57fe9838d2bac5d0b81a1d37f5d9edec7272408ac23841d1","first_seen":"2026-04-18T07:23:09.401782Z","last_seen":"2026-04-18T07:23:09.401782Z","times_seen":1,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":160,"dns":63,"connect":3,"send":0,"wait":23,"receive":21,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/cf-fonts/v/nunito/5.0.16/latin/wght/normal.woff2","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:35.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:24:53 GMT","end":"Sun, 07 Jun 2026 21:22:25 GMT"},"fingerprint":{"sha1":"6B:4D:07:CB:DA:7C:B4:E9:AA:43:45:C5:DB:D7:38:21:15:2E:5E:67","sha256":"86:42:87:61:B5:8C:5A:6D:EF:43:94:60:4F:CE:5F:96:24:EB:BD:A8:8F:71:F0:2C:CC:79:B1:31:DF:2D:2F:AD"}}},"request":{"raw":"GET /cf-fonts/v/nunito/5.0.16/latin/wght/normal.woff2 HTTP/1.1\r\nHost: 123av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/zh/dm9\r\nCookie: locale=zh; x-token=ca765934a399ae2f65342024d714d1dc; session=CB8ZfExaidSejyat9W5tcvYJ99GAKzM5QXldqNRb\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Apr 2026 07:22:35 GMT\r\ncontent-length: 39128\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s2M6jhJY%2Fy4jYWs59W31oMQbd61bJIuFRR7sSt4pKlnLCx5%2B5bMqmU5SFdbUmBTdLhkEDc8rzTAE5kMAINf%2F048vYg6UyP1kCg0fYtx7bugszIXGnoTPBo%2BJ180%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ee1eb556bb61525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-06-21T08:50:55.592647Z","times_seen":33639,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"123av.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"z6v2p9a8.bkcdn.net/library/914186/6136e6c36acb861a9ab65dd30fd437a1e580f024.mp4","fqdn":"z6v2p9a8.bkcdn.net","domain":"bkcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:36.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 17:32:27 GMT","end":"Mon, 13 Jul 2026 17:32:26 GMT"},"fingerprint":{"sha1":"51:7D:4D:98:A6:D6:C9:6E:C1:63:31:0F:10:C9:1E:FB:99:1D:A4:40","sha256":"32:EC:40:B8:45:B1:5B:2F:F4:56:FC:1A:26:19:E0:5F:D4:38:FC:F9:CA:A2:0A:6E:45:C4:94:4A:0B:9F:89:5A"}}},"request":{"raw":"GET /library/914186/6136e6c36acb861a9ab65dd30fd437a1e580f024.mp4 HTTP/1.1\r\nHost: z6v2p9a8.bkcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sat, 18 Apr 2026 07:22:36 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 822399\r\nlast-modified: Wed, 16 Apr 2025 14:25:39 GMT\r\netag: \"67ffbde3-c8c7f\"\r\nexpires: Wed, 05 Aug 2026 08:17:28 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap01-sec02-prg1-1\r\nx-77-nzt: kwx6M61S0PTTJoaM2FzHaSY0QC1NXD/FWxqypEkve+QVklGOH8BiYU1CrLxEZbsNeiFEt9o\r\nx-77-nzt-ray: 2a494a15062323696131e369be1cc52c\r\nx-77-cache: HIT\r\nx-77-age: 22112127\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-822398/822399\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":822399,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"3bf00740a48fac286131c6b157e32b8e","sha1":"6136e6c36acb861a9ab65dd30fd437a1e580f024","sha256":"f9065c7d44672318ede6fa3dc0d5ad519030e8c3abcba4918fdcdf1f1b7792f6","sha512":"9e3534f8132ca7e42d42fec5c40fd220ae138d593d0d8d8c0e43b77b77ba8ba4f71abf951fe5be58b26e76d2f25339efe165d5977b1f2dbd37dfdf121d1d7c07","ssdeep":"24576:8rY77qyv/IxBzH1/90rn8znozEj0KHqpKLu2utu:8say3Ix//9+Cj0M/1utu","tlshash":"c0052393cb61a81dd0aec974cb9b4b61c37eda9c02df4357720d908f48de1197d417aa","first_seen":"2025-08-06T07:26:46.729778Z","last_seen":"2026-06-21T07:48:38.595547Z","times_seen":710,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":3,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.123av.me/images/7/87/pacopacomama-021726_100/cover.jpg?t=1771319428","fqdn":"cdn.123av.me","domain":"123av.me","tld":"me"},"ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:37.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 14:54:00 GMT","end":"Thu, 04 Jun 2026 15:51:38 GMT"},"fingerprint":{"sha1":"6C:B5:1C:36:CB:19:FE:D4:A3:9F:93:94:D2:7C:FD:1D:94:1E:04:E5","sha256":"8E:B7:BB:7D:A8:02:FB:B2:B2:5B:D7:46:DC:30:11:A8:32:09:C0:22:28:B0:FA:98:D9:8B:06:11:A2:D0:00:68"}}},"request":{"raw":"GET /images/7/87/pacopacomama-021726_100/cover.jpg?t=1771319428 HTTP/1.1\r\nHost: cdn.123av.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 07:22:37 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 46873\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 17 Feb 2026 09:10:28 GMT\r\netag: \"69943084-b719\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 5176347\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JJFbpyURdu%2Bi63WTUwP5%2BZY4yNyBNZ%2Fp19xSS8rqLyVkcXMO6JBU0bbfLuu12PWBTNdzxsda25%2FmtsOEKwbusa8gg%2BbivkHsSsByasQ1yMwtwq3EGPTX4Qj6Oox3Mbs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee1eb5dcdce0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46873,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", baseline, precision 8, 800x450, components 3","md5":"51de55fd3f90785ba4b80f4987bf0c25","sha1":"869531fd4a8ae6a82aab0395f973278818c0a529","sha256":"af827d611e095c682e0cc2673b5cf1209161a2c70f54c7ce48afbae74991b78f","sha512":"78c1b6429a40029def7916fa1f284617542e131235db8eae5cfbf5fc251544a386a1d8789c7953f4d2451199418d0c0c9e4bc2aba40ca6d7893d3f698ad0ac26","ssdeep":"768:vbzkic/sEpG9CoQj9rL/hufEGAAk69CkJPL2J2m7vDmM4xxO+w8CcqMeAKr9IDzl:jfc08GXQjifV9t2J2IvDmMOO+wtxxA44","tlshash":"fa23025e0a18def5be8215728f7e0945f3e3bedd51808898257f202b7797a37588389c","first_seen":"2026-04-18T07:23:09.403735Z","last_seen":"2026-04-18T07:23:09.403735Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.123av.me/images/a/5a/dass-905/cover.jpg?t=1771564821","fqdn":"cdn.123av.me","domain":"123av.me","tld":"me"},"ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:37.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 14:54:00 GMT","end":"Thu, 04 Jun 2026 15:51:38 GMT"},"fingerprint":{"sha1":"6C:B5:1C:36:CB:19:FE:D4:A3:9F:93:94:D2:7C:FD:1D:94:1E:04:E5","sha256":"8E:B7:BB:7D:A8:02:FB:B2:B2:5B:D7:46:DC:30:11:A8:32:09:C0:22:28:B0:FA:98:D9:8B:06:11:A2:D0:00:68"}}},"request":{"raw":"GET /images/a/5a/dass-905/cover.jpg?t=1771564821 HTTP/1.1\r\nHost: cdn.123av.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 07:22:37 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 165966\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 20 Feb 2026 05:20:21 GMT\r\netag: \"6997ef15-2884e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 100495\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5L69gkraXTiSlmj%2BlvhdM6FbPwPRLz7aqhT68B8QZE7nivN9nDxwS2xGaK3zUrF7XDp1Afy%2BCigthLZYdCS2W%2FwplOY5ahHuzGxHeKnevNH59cLqVU3JbLjVaoK9oU4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee1eb5e1dd70b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165966,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", baseline, precision 8, 800x538, components 3","md5":"2efc9d3d239c30c5c5acbd385475dfde","sha1":"43c4917977eaf1d44d1bafa557a3ef3ccdb21c81","sha256":"020f3703ab9bfb267ae89eda7308de5a1eb5a3c9de0bcdde15c9205c516b90ff","sha512":"f45027676b01dc17d74c4d90bb3ac75bc19fa96988f1a61f33efef0438ec3e7ab9b7e92adb24c7037de609798cee4182991823ada1f16e475bdc2796dc1e49c2","ssdeep":"3072:H5wFj3vY1eN0MjWLiOUo8zpgKBGU2MyUQiR/jDqz6MYL6:H5EjA8WMC5epg0GU9ybK/jA6MYm","tlshash":"8cf31246afce31db26e7dbc6c9ad3fa220d9c0ed5ae1497003101f64fda88c16d92e51","first_seen":"2026-04-18T07:23:09.40492Z","last_seen":"2026-04-18T07:23:09.40492Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.123av.me/resize/s500/0/70/mida-593/cover.jpg?t=1776377429","fqdn":"cdn.123av.me","domain":"123av.me","tld":"me"},"ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:34.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 14:54:00 GMT","end":"Thu, 04 Jun 2026 15:51:38 GMT"},"fingerprint":{"sha1":"6C:B5:1C:36:CB:19:FE:D4:A3:9F:93:94:D2:7C:FD:1D:94:1E:04:E5","sha256":"8E:B7:BB:7D:A8:02:FB:B2:B2:5B:D7:46:DC:30:11:A8:32:09:C0:22:28:B0:FA:98:D9:8B:06:11:A2:D0:00:68"}}},"request":{"raw":"GET /resize/s500/0/70/mida-593/cover.jpg?t=1776377429 HTTP/1.1\r\nHost: cdn.123av.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 07:22:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 84523\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 16 Apr 2026 22:10:29 GMT\r\netag: W/\"69e15e55-255a3\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 50855\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4%2Bx4YBTr3RfBWw254OYznTuw1DQkPDizfSjfnIC9M%2B80V4%2B0NJCxS0%2B884ppvnSRD4sqaBXAarVrTmZuwjcYAiJ9s%2Bx3yA81Nu0UMdfuD%2FfcTrbyrvIarsWGOTwr5tc%3D\"}]}\r\ncf-ray: 9ee1eb4df9020afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84523,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x336, components 3","md5":"09ea90a8a2e1bcee8809a6a278d57977","sha1":"44d98220346b1541b4fed5fe0ff0f4f74e321649","sha256":"efd1668f7011029a9d1abc7ebc3537a81266e4370d5043c2d4ec8338e7c9e7fc","sha512":"475a74644d353430355905bd93f5db99d8d31641facbdb4bd61ee5ba5b7ff8092a80375267f006c340a27b0bc2e94293bfca8ba0526eb133ec41489ce64fe212","ssdeep":"1536:zKx147EIsy4JnGPHMTq6bIF0/hJdT+gf8vi77mDT1D8J2Xf+GSo6iNm/Zy1X:AH3yzPsG6U0Z5f8G7m2sZ6iNl1X","tlshash":"6c83127b441e78dc311ae71572332c785bd4836f36a1fa22a1882b62c5d59f73c186ba","first_seen":"2026-04-18T07:23:09.405967Z","last_seen":"2026-04-18T07:23:09.405967Z","times_seen":1,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":133,"dns":0,"connect":0,"send":0,"wait":12,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QQU4DMQz8Ch/oyp7YidMzZ5BAPGC73UU9tJW6qALJj8dJBVTESuQkM56xQcgbkg3bA6UtsE3ZKw+VBsHAKv70/OLCzkjjdZjOR69FCotXy5DsTFVAcK3EWs2VzI2KZbXgmAY2kQt5coqAJpGWDURUC1BCQ8AixQv52+tj36Hn2eNo6lEHbu0NRp9MaAUWnROZsO1kv+zCQ551wS4VSZPWGQGnO9ORJ1ZkR9WiaPqmJUDotm6xaZzEkhAeY5H353H9Ok3uvzDmG0l7T2iXRvS7Sn9Rf5rtmtzzf31zB67DcXxfLze73OU7PuRiFAEkv46Xw/hxOJ/6fyP5zPvRaMICLPMS0w7zyFzY9plGxTcK/s8J3wEAAA==\u0026cb=e2e_69e3313c17eef0.93004269","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:36.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:20:01 GMT","end":"Sun, 24 May 2026 08:20:00 GMT"},"fingerprint":{"sha1":"58:0F:84:09:FF:55:47:81:68:33:43:D3:D2:47:4C:DB:77:90:25:FB","sha256":"11:22:FD:18:0A:A9:69:03:FF:90:1D:F1:BD:A4:A3:CF:3E:A4:0C:FA:D2:84:97:23:1B:81:45:31:26:81:D6:14"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QQU4DMQz8Ch/oyp7YidMzZ5BAPGC73UU9tJW6qALJj8dJBVTESuQkM56xQcgbkg3bA6UtsE3ZKw+VBsHAKv70/OLCzkjjdZjOR69FCotXy5DsTFVAcK3EWs2VzI2KZbXgmAY2kQt5coqAJpGWDURUC1BCQ8AixQv52+tj36Hn2eNo6lEHbu0NRp9MaAUWnROZsO1kv+zCQ551wS4VSZPWGQGnO9ORJ1ZkR9WiaPqmJUDotm6xaZzEkhAeY5H353H9Ok3uvzDmG0l7T2iXRvS7Sn9Rf5rtmtzzf31zB67DcXxfLze73OU7PuRiFAEkv46Xw/hxOJ/6fyP5zPvRaMICLPMS0w7zyFzY9plGxTcK/s8J3wEAAA==\u0026cb=e2e_69e3313c17eef0.93004269 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://123av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nCookie: __uvt=s%3A32%3A%22198d4d498c27470d863b258ff23b1267%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Apr 2026 07:22:36 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://123av.com\r\nAccess-Control-Allow-Credentials: true\r\nVary: Origin\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T08:29:50.63871Z","times_seen":16603756,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.123av.me/images/b/9b/cjod-501/cover.jpg?t=1771542621","fqdn":"cdn.123av.me","domain":"123av.me","tld":"me"},"ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:37.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 14:54:00 GMT","end":"Thu, 04 Jun 2026 15:51:38 GMT"},"fingerprint":{"sha1":"6C:B5:1C:36:CB:19:FE:D4:A3:9F:93:94:D2:7C:FD:1D:94:1E:04:E5","sha256":"8E:B7:BB:7D:A8:02:FB:B2:B2:5B:D7:46:DC:30:11:A8:32:09:C0:22:28:B0:FA:98:D9:8B:06:11:A2:D0:00:68"}}},"request":{"raw":"GET /images/b/9b/cjod-501/cover.jpg?t=1771542621 HTTP/1.1\r\nHost: cdn.123av.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 07:22:37 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 155198\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Feb 2026 23:10:21 GMT\r\netag: \"6997985d-25e3e\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 1946457\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QlrkoJs%2FdOF%2BYhS1mRrr5PBAeWWstjbHPm%2FBqh3tZnGo0H97JURkXGOmGP%2ByfY1bWFBv%2FvkAgP8%2BPrRMWPJp670dFrXyrvnanqaFKEQsQFlx5CYAcsa6nLEbIrHT2dA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee1eb5e0dd50b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155198,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", baseline, precision 8, 800x538, components 3","md5":"c3ceb369e0446ae8bbc3f0a1f3a2246c","sha1":"8a4b255b5a2014322c805e8a823451ee7b1d98c3","sha256":"1d7414d857730076cc15147367f8b4e6d94d2c49b3b367311c267c47035b9977","sha512":"9a357c334a1d35e7008e1fa9a10f7bebe1014fd571d00ca008d802c67d130df771e33b68872098c0fae400d526d3da1e215f3c30e870dc7c26af486ecc3083c2","ssdeep":"3072:HgFqYkOLbWxm2hfoZPg2YyOLepJa8kerf58/qQOKRv7uuaPp:AF7k8m58IMpJa8keDPQOmuZ","tlshash":"f5e32397bf9ae0955c3c9e451d436691c0d944cde90fbd7240ed8ec9eacaee06870acc","first_seen":"2026-04-18T07:23:09.407089Z","last_seen":"2026-04-18T07:23:09.407089Z","times_seen":1,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/assets/123av/dist/app.css?v=1771820231","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:34.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:24:53 GMT","end":"Sun, 07 Jun 2026 21:22:25 GMT"},"fingerprint":{"sha1":"6B:4D:07:CB:DA:7C:B4:E9:AA:43:45:C5:DB:D7:38:21:15:2E:5E:67","sha256":"86:42:87:61:B5:8C:5A:6D:EF:43:94:60:4F:CE:5F:96:24:EB:BD:A8:8F:71:F0:2C:CC:79:B1:31:DF:2D:2F:AD"}}},"request":{"raw":"GET /assets/123av/dist/app.css?v=1771820231 HTTP/1.1\r\nHost: 123av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/zh/dm9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 07:22:34 GMT\r\ncontent-type: text/css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 05 Feb 2026 11:15:25 GMT\r\netag: W/\"69847bcd-386b0\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\nvary: accept-encoding\r\nage: 2557257\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WvSahYDbBaEeOZlhcKzEvgqXR3uDmk7AbLsUC0W5GOC1fy0O3uWHETWvxVaVuEdY3UnUopt2%2B1FtIhPjEFXF19Jrfj%2Bv1SkHEXV8D8wWow0cp1DQIiCrKPOaQgw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee1eb4cc9f41525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231088,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (60740)","md5":"8b87379fd5009ef5ec73ebd6d535c1ab","sha1":"0e2e0ffa48b1b5c3ad5c1e2ccf155f90155f4b94","sha256":"fe35f925da84718727fdcb4ba26713a437b77212c519c68ca6d4e5b4ab88b10e","sha512":"ddf9b938cc18fab429cf04efb71a29d9c68c5158c9119e834ecd43e6fe7c29c5ffc38a3a5c9cb17415721bf6526dcf4c7e9d7501a4a69dd8329620dc2e0b14d1","ssdeep":"1536:S0OiUcIJFQnssgLPzODEBi8yNcuSEvz9tAkfzq3SYiLENM6HN263MsQ8AWoBoVi3:S/iUrW9Lq3SYiLENM6HN263nsY/5vWya","tlshash":"c634c8b6f591342de067c619a0d0babe1d2f8253e3224fbbb5277b6447896c60573e0c","first_seen":"2026-02-22T13:17:34.979913Z","last_seen":"2026-06-02T10:58:21.845394Z","times_seen":10,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"123av.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rec2.123av.com/users/02461e69-224a-44cb-b132-2db12c92e8a0/segments?timestamp=1776496955\u0026signature=fae32429","fqdn":"rec2.123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"172.67.73.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:35.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:24:53 GMT","end":"Sun, 07 Jun 2026 21:22:25 GMT"},"fingerprint":{"sha1":"6B:4D:07:CB:DA:7C:B4:E9:AA:43:45:C5:DB:D7:38:21:15:2E:5E:67","sha256":"86:42:87:61:B5:8C:5A:6D:EF:43:94:60:4F:CE:5F:96:24:EB:BD:A8:8F:71:F0:2C:CC:79:B1:31:DF:2D:2F:AD"}}},"request":{"raw":"OPTIONS /users/02461e69-224a-44cb-b132-2db12c92e8a0/segments?timestamp=1776496955\u0026signature=fae32429 HTTP/1.1\r\nHost: rec2.123av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://123av.com/\r\nOrigin: https://123av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 07:22:35 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\naccess-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT\r\naccess-control-max-age: 600\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://123av.com\r\naccess-control-allow-headers: content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zEy32D6jErsPYsYAODzXzn6OR9UVhDQTl9IbMkGHlir7auK80FL26STTBJaYvzwL5siqtqjFw8ZyeXUqI3axTTHKmfZildKYhh%2BFqYpozKkw%2BoeEs7byO4hjIso%2Bx%2BuPjQ%3D%3D\"}]}\r\ncf-ray: 9ee1eb556ceb56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-06-21T08:32:22.957535Z","times_seen":329885,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":56,"dns":24,"connect":1,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"rec2.123av.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:35.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:20:01 GMT","end":"Sun, 24 May 2026 08:20:00 GMT"},"fingerprint":{"sha1":"58:0F:84:09:FF:55:47:81:68:33:43:D3:D2:47:4C:DB:77:90:25:FB","sha256":"11:22:FD:18:0A:A9:69:03:FF:90:1D:F1:BD:A4:A3:CF:3E:A4:0C:FA:D2:84:97:23:1B:81:45:31:26:81:D6:14"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 402\r\nOrigin: https://123av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":402,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://123av.com/zh/dm9\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":5901598,\"extra_params\":{\"first_request\":true,\"zone_type\":6}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Apr 2026 07:22:36 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://123av.com\r\nAccess-Control-Allow-Credentials: true\r\nVary: Origin\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%22198d4d498c27470d863b258ff23b1267%22%3B; expires=Mon, 17 Apr 2028 07:22:36 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15349,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"55d54d234814510818774be3bd91274a","sha1":"eb42cd72270309976a45b14af4d58178645de612","sha256":"8dbdeb6859f41b72505e8155cc74c291ec5e5131087c92841b203fa48b7c4aa6","sha512":"8344fac8c0e59d4befcff4209ec11cb107e920bc5dd555cb3b386fa75b0b2129d063395ddf07c27c2370725443645369c5f03c93b77f460d48f2f4bad35ad56e","ssdeep":"192:swC/OqatqVl3r3Cv/p1fpARvPA7VihUX1XGcniOdwxpSw4ryRbOdBd74BhrobW9I:jCbvLJ9ciOe/1JOVkBGMOverOv5F6yP","tlshash":"d0622937ff9454e926d54b84a9eb76bced3c3047d3408e712f88a62143ec6e60a1735a","first_seen":"2026-04-18T07:23:09.410081Z","last_seen":"2026-04-18T07:23:09.410081Z","times_seen":1,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":61,"dns":1,"connect":24,"send":0,"wait":109,"receive":1,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.123av.me/resize/s360/5/45/myba-093/cover.jpg?t=1776491428","fqdn":"cdn.123av.me","domain":"123av.me","tld":"me"},"ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:36.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 14:54:00 GMT","end":"Thu, 04 Jun 2026 15:51:38 GMT"},"fingerprint":{"sha1":"6C:B5:1C:36:CB:19:FE:D4:A3:9F:93:94:D2:7C:FD:1D:94:1E:04:E5","sha256":"8E:B7:BB:7D:A8:02:FB:B2:B2:5B:D7:46:DC:30:11:A8:32:09:C0:22:28:B0:FA:98:D9:8B:06:11:A2:D0:00:68"}}},"request":{"raw":"GET /resize/s360/5/45/myba-093/cover.jpg?t=1776491428 HTTP/1.1\r\nHost: cdn.123av.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 07:22:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 47904\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 18 Apr 2026 05:50:28 GMT\r\netag: W/\"69e31ba4-252cf\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 1951\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tLb18As%2BLtoIRqSvMRvxD3FWMztmuLrsJPAEtF7O48wxM0dSsbptFJFKMBu6dP4SBM0xwGxIHa9HPiIjbkSPpYOQZHeNIjdeMKxHBbgEPj81BsIwuaBnIlUz101NKkA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee1eb5b4db40b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47904,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 360x242, components 3","md5":"b61871bc4bcb7bad9798d1e5f766ec1b","sha1":"fe2249d75ba741af9c98e6fd49f74215b799a992","sha256":"40bdc9a0f86a5db7cd9b32a0587a79877568fc9b30cba6949b85dff8c324bb17","sha512":"ebec63f972f38c6ebaac372144af7abd4b2a7a2b97605fea972e9b19b10c06846892d8069df2cb5cb0fdcddce18181037901adc9f927a03880f4d9034fb4dcd2","ssdeep":"768:GKuKN30t+Ojc7JsMLEQVjouaqw4hFQPvMcIW/FU0XR1zUkSC1:Gc3GcsFQBouaXlIELRRtd","tlshash":"9c23f273e861119fea2893a6c832fee774fb111b9d5982ae21b10d45cf95464385b40e","first_seen":"2026-04-18T07:23:09.41141Z","last_seen":"2026-04-18T07:23:09.41141Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:34.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Apr 2026 18:57:25 GMT","end":"Thu, 16 Jul 2026 19:57:22 GMT"},"fingerprint":{"sha1":"AB:25:45:8F:55:B6:2B:26:B5:B1:EF:90:E0:60:64:9C:56:47:0F:B5","sha256":"47:83:31:CC:5E:02:0E:51:A7:52:AC:83:1B:8A:A8:4C:74:11:A5:F1:61:8D:C5:6D:29:3C:9D:6A:C9:29:AF:7F"}}},"request":{"raw":"GET /beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://123av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 07:22:34 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2026.2.0\"\r\nlast-modified: Thu, 19 Feb 2026 17:45:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9ee1eb4d482e56c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31169,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31169), with no line terminators","md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-06-21T07:18:06.051515Z","times_seen":78167,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":10,"connect":1,"send":0,"wait":36,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/assets/123av/images/avatar.svg?1","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:35.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:24:53 GMT","end":"Sun, 07 Jun 2026 21:22:25 GMT"},"fingerprint":{"sha1":"6B:4D:07:CB:DA:7C:B4:E9:AA:43:45:C5:DB:D7:38:21:15:2E:5E:67","sha256":"86:42:87:61:B5:8C:5A:6D:EF:43:94:60:4F:CE:5F:96:24:EB:BD:A8:8F:71:F0:2C:CC:79:B1:31:DF:2D:2F:AD"}}},"request":{"raw":"GET /assets/123av/images/avatar.svg?1 HTTP/1.1\r\nHost: 123av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/assets/123av/dist/app.css?v=1771820231\r\nCookie: locale=zh; x-token=ca765934a399ae2f65342024d714d1dc; session=CB8ZfExaidSejyat9W5tcvYJ99GAKzM5QXldqNRb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 07:22:35 GMT\r\ncontent-type: image/svg+xml\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 21 Nov 2024 03:54:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-cache: MISS\r\ncontent-encoding: br\r\ncache-control: public, max-age=2678400\r\nage: 4922750\r\ncf-cache-status: HIT\r\netag: W/\"673eaf02-3d6\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sxQYTCz%2F2BgKhlm%2Fcae6xhOhNQYRWm3hes%2BPWVMR3gV8NEVIE6n0eFpH2q9EDYQ02hJ%2BEW2J5QomVVsTSG0EYdR7uHmcGOBgKQI%2BZnzlK1rys7BKFXPEa2900i4%3D\"}]}\r\ncf-ray: 9ee1eb555bb21525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":982,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"433b52c1065019a2dc84177fc667c7b8","sha1":"589034fb93d845ac495dffb63d083304b4b5ee06","sha256":"2a7a23c57b4ce4f9d4c9143c7685e2405a307265971507e2d8a5ac286f82f5e0","sha512":"da4d7f1c3675bd77f7cc74dc29e058465b4d482aed2aea16de78afd7e64a920160b23fb4f94999a53f0cc9069531e62593d3e88d65a034cb109d6a40d11e8c56","ssdeep":"","tlshash":"6211e1e8c1dc8030ca7883a4a27874f58a0ca1eed1d187df7289a07a21366e8f11b550","first_seen":"2023-05-07T18:04:55Z","last_seen":"2026-06-21T08:24:33.442956Z","times_seen":1398,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"123av.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/cf-fonts/v/nunito/5.0.16/latin/wght/italic.woff2","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:35.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:24:53 GMT","end":"Sun, 07 Jun 2026 21:22:25 GMT"},"fingerprint":{"sha1":"6B:4D:07:CB:DA:7C:B4:E9:AA:43:45:C5:DB:D7:38:21:15:2E:5E:67","sha256":"86:42:87:61:B5:8C:5A:6D:EF:43:94:60:4F:CE:5F:96:24:EB:BD:A8:8F:71:F0:2C:CC:79:B1:31:DF:2D:2F:AD"}}},"request":{"raw":"GET /cf-fonts/v/nunito/5.0.16/latin/wght/italic.woff2 HTTP/1.1\r\nHost: 123av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/zh/dm9\r\nCookie: locale=zh; x-token=ca765934a399ae2f65342024d714d1dc; session=CB8ZfExaidSejyat9W5tcvYJ99GAKzM5QXldqNRb\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Apr 2026 07:22:35 GMT\r\ncontent-length: 41760\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v0jFrjprPfKyttupFAFFgaZRwoj3GdZ38Nu8IdDZtUZmYWJpC7AUflbG7whaOKk5TfuZzJbbQnOeszlJBC975hViGkA3LrT2X7fEYSWO0NOkrl%2BI2rT3avfvlso%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ee1eb55cbc11525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41760,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 41760, version 1.0","md5":"e0eb96848e7ece7c88f75df30c72fe8d","sha1":"beb5780dff4fce57eb9dcd7c1b8cb77d551580b1","sha256":"6cfcc3786d5ba3b5c3a41797f95272e57f4290ccbd283a4bfd0033a3d857e64c","sha512":"0aaf5225dd41293693700dc157c426035e7b2098544af25026b416884980e8932977f146a3a2de0dd0462fadb7487ef7b35f0cd15db5adcb5fe84644b4e336e7","ssdeep":"768:6Dqvd1/JelR8Z7XuSngTdbJecAWB1U6zzbRzF175aWzP8dF53YSZYJ:6c42FngTdFebWBdznRj7r8dvHYJ","tlshash":"b413f11a9d045cefd29152c8ed2f2944a85f58736b0b0470b75c789e0ab9e2b0e71cf6","first_seen":"2025-09-17T21:25:54.807515Z","last_seen":"2026-06-21T00:29:01.532871Z","times_seen":2354,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":40,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"123av.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"z6v2p9a8.bkcdn.net/images/close-icon-circle.png","fqdn":"z6v2p9a8.bkcdn.net","domain":"bkcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:36.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 17:32:27 GMT","end":"Mon, 13 Jul 2026 17:32:26 GMT"},"fingerprint":{"sha1":"51:7D:4D:98:A6:D6:C9:6E:C1:63:31:0F:10:C9:1E:FB:99:1D:A4:40","sha256":"32:EC:40:B8:45:B1:5B:2F:F4:56:FC:1A:26:19:E0:5F:D4:38:FC:F9:CA:A2:0A:6E:45:C4:94:4A:0B:9F:89:5A"}}},"request":{"raw":"GET /images/close-icon-circle.png HTTP/1.1\r\nHost: z6v2p9a8.bkcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 07:22:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 405\r\nlast-modified: Wed, 17 Dec 2025 10:22:04 GMT\r\netag: \"6942844c-195\"\r\nexpires: Sat, 19 Dec 2026 10:45:31 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec01-prg1-1\r\nx-77-nzt: k2VzfM3fVjjn6qx1VHWfPftdeErpL9tc05dR7XweHGpsIGJbgJqiQVtFlGh8\r\nx-77-nzt-ray: 2a494a15062323696131e36907e87e2c\r\nx-77-cache: HIT\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nx-77-age: 10355825\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":405,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"bc8bf5d1633e548e9a178bf29be30b7b","sha1":"bd290b6eabd73d2c95db053620797503e9178484","sha256":"94f575abdb5c45476f9c2b62bbe06fbfacce9d25e95796ffcd07680bd7c6c0bb","sha512":"9382f398492b21ad1e592b9375768db4736d8eb3dff54868d4387a67ec430a0a106567d874c380d0b8ebb791dc74996ba72931c0a52d20efb8a0cc6312d1c57a","ssdeep":"","tlshash":"c1e0a3e315dd4509afbdaf16551a0221ff773fdea4321a493d90d052559440e055a371","first_seen":"2023-04-13T22:41:38Z","last_seen":"2026-06-20T21:28:07.366882Z","times_seen":3027,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":108,"dns":52,"connect":1,"send":0,"wait":6,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.123av.me/images/e/be/uzu-036/cover.jpg?t=1771614638","fqdn":"cdn.123av.me","domain":"123av.me","tld":"me"},"ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:37.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 14:54:00 GMT","end":"Thu, 04 Jun 2026 15:51:38 GMT"},"fingerprint":{"sha1":"6C:B5:1C:36:CB:19:FE:D4:A3:9F:93:94:D2:7C:FD:1D:94:1E:04:E5","sha256":"8E:B7:BB:7D:A8:02:FB:B2:B2:5B:D7:46:DC:30:11:A8:32:09:C0:22:28:B0:FA:98:D9:8B:06:11:A2:D0:00:68"}}},"request":{"raw":"GET /images/e/be/uzu-036/cover.jpg?t=1771614638 HTTP/1.1\r\nHost: cdn.123av.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 07:22:37 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 175565\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 20 Feb 2026 19:10:38 GMT\r\netag: \"6998b1ae-2adcd\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 4878743\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lf8KaVSdILB%2FzbWYqjb2NhqkL%2B%2Fj0sPpjtj5938MM9cnv1wn1Hq7R9PJeqrJTM2As7Fvd5TowHzMtA%2F%2FwMB0ZlLhLdFX38OnfMiBcfGfRZF57Q2M501RsSxH%2FANmWEI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee1eb5dddd10b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":175565,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", baseline, precision 8, 800x536, components 3","md5":"d1cbadeed7d29ae211cd9d7e28392101","sha1":"10b4c1656cbee92ee1ea7669f04a4e6fefcb27a6","sha256":"9373980d3f95c7290b02f95d35720cf673cac2e8b4e98c8f7fa14da7af4285ca","sha512":"4af4f5ec74b9fe113f7dc1b542c5076002760a506cf4c4b9b1098a6781fdd5ba4e8b6832453010fcfda1e2ac15e351725767ad7e730f663b47343d1249461cf5","ssdeep":"3072:0H7iM52sY6Jqe6rcQA6LC/sk1R6ueqpEfqFbwN7Jg1Fv6pfGS3IQLeNUYcA:kl0s7q3cVqS10ueq6fqFUILAeENA","tlshash":"30042330a7c7c42c9621f57d8a596a6ada5efff442f6e1c4e05c64133e14408ebcbb26","first_seen":"2026-04-18T07:23:09.414957Z","last_seen":"2026-04-18T07:23:09.414957Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.123av.me/resize/s500/d/9d/mfyd-116/cover.jpg?t=1776385811","fqdn":"cdn.123av.me","domain":"123av.me","tld":"me"},"ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:34.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 14:54:00 GMT","end":"Thu, 04 Jun 2026 15:51:38 GMT"},"fingerprint":{"sha1":"6C:B5:1C:36:CB:19:FE:D4:A3:9F:93:94:D2:7C:FD:1D:94:1E:04:E5","sha256":"8E:B7:BB:7D:A8:02:FB:B2:B2:5B:D7:46:DC:30:11:A8:32:09:C0:22:28:B0:FA:98:D9:8B:06:11:A2:D0:00:68"}}},"request":{"raw":"GET /resize/s500/d/9d/mfyd-116/cover.jpg?t=1776385811 HTTP/1.1\r\nHost: cdn.123av.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 07:22:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 92560\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 17 Apr 2026 00:30:11 GMT\r\netag: W/\"69e17f13-2a721\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 58138\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p649vUvV59LteiVsUgybZbTX5QaGrabXj3zF05ZJjJDTvh9IQepw2DGmnZw10r%2BQKCuambKmODOyske5wjS5yM7IEwSW8Xbe5f0RKwDcC8r6jXJEQOh0g3HffQPo6gQ%3D\"}]}\r\ncf-ray: 9ee1eb4df8ff0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92560,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x336, components 3","md5":"64d29ffaf21260426b0102bd9f365c88","sha1":"1b5852a50a9c96137591addc65993390cd10aee0","sha256":"b0015ad0aa1c99914b5daca72c8a497174c18e32bfdf909f6a67171fe7bdfc26","sha512":"8efff2c3c18d3f6e3082d76f12dcb14c64a4fcb3a0da73d41d3f67e8cee324af55ce89b2bb2cd15120305ea479c030a7aaf357b42393ad54f3ea33bd89e28b52","ssdeep":"1536:zFH4gaHRw+1V+8JS4UtqQ4ppD32wRI+sKR33ZajjOm+zklAjGXNnGYz:94gvsVJPUtCpL21+sKR6x+zGkmBd","tlshash":"0893124f87e7214c369b65c1ccc95f1342cdca2266ac4221efc62ad1b72c89329d797a","first_seen":"2026-04-18T07:23:09.416128Z","last_seen":"2026-04-18T07:23:09.416128Z","times_seen":1,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":142,"dns":0,"connect":0,"send":0,"wait":27,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rec2.123av.com/batch?timestamp=1776496956\u0026signature=db5c7a2a","fqdn":"rec2.123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:36.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:24:53 GMT","end":"Sun, 07 Jun 2026 21:22:25 GMT"},"fingerprint":{"sha1":"6B:4D:07:CB:DA:7C:B4:E9:AA:43:45:C5:DB:D7:38:21:15:2E:5E:67","sha256":"86:42:87:61:B5:8C:5A:6D:EF:43:94:60:4F:CE:5F:96:24:EB:BD:A8:8F:71:F0:2C:CC:79:B1:31:DF:2D:2F:AD"}}},"request":{"raw":"OPTIONS /batch?timestamp=1776496956\u0026signature=db5c7a2a HTTP/1.1\r\nHost: rec2.123av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://123av.com/\r\nOrigin: https://123av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 07:22:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\npriority: u=4,i=?0\r\nvary: Origin\r\naccess-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT\r\naccess-control-max-age: 600\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://123av.com\r\naccess-control-allow-headers: content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EW19%2FTR5snRrKRjZtgO2KcjUeq2MnoQdGivpsqH45CT2Dc9lCV7hTmud%2BarjJem29CByZ8Qq14fv09wlNr%2BQYOWvxsGP6SR0%2FMzL0gP3NUHuOdLs2A6ULqEdy6J2BCNunA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee1eb5adc451525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-06-21T08:32:22.957535Z","times_seen":329885,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"rec2.123av.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/cdn-cgi/rum?","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:36.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:24:53 GMT","end":"Sun, 07 Jun 2026 21:22:25 GMT"},"fingerprint":{"sha1":"6B:4D:07:CB:DA:7C:B4:E9:AA:43:45:C5:DB:D7:38:21:15:2E:5E:67","sha256":"86:42:87:61:B5:8C:5A:6D:EF:43:94:60:4F:CE:5F:96:24:EB:BD:A8:8F:71:F0:2C:CC:79:B1:31:DF:2D:2F:AD"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: 123av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 643\r\nOrigin: https://123av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/zh/dm9\r\nCookie: locale=zh; x-token=ca765934a399ae2f65342024d714d1dc; session=CB8ZfExaidSejyat9W5tcvYJ99GAKzM5QXldqNRb; _ga_VZGC2QQBZ8=GS2.1.s1776496956$o1$g0$t1776496956$j60$l0$h0; _ga=GA1.1.1428785752.1776496956; __suvt=65d57adb42ce584fcf12451e5bf3e20a; dom3ic8zudi28v8lr6fgphwffqoz0j6c=6cdc5678-0b68-4755-8233-8784b704c3ff%3A1%3A1; pp_main_9b7e1e724274b81f688a60aa9a5b4054=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":643,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":1985,\"startTime\":1776496953697,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2026.2.0\",\"timings\":2},\"pageloadId\":\"758c610f-d47e-4ad4-872f-05e3b4e1a14a\",\"location\":\"https://123av.com/zh/dm9\",\"nt\":\"navigate\",\"timingsV2\":{\"nextHopProtocol\":\"h2\",\"domainLookupStart\":20,\"domainLookupEnd\":42,\"connectStart\":42,\"connectEnd\":66,\"requestStart\":67,\"responseStart\":360,\"responseEnd\":384,\"domInteractive\":2116,\"domComplete\":2796,\"loadEventStart\":2796,\"loadEventEnd\":2797,\"transferSize\":29216,\"decodedBodySize\":114991},\"siteToken\":\"e8cf1470a1f2461f9cdf796dab4659c9\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://123av.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YK99PQFREnR4slyT0eC1hFh1N0oInfSxxZEIJRez6q7xx1t3ayLyKjse58BO%2BwJySAG8fyHHZ8W5q46w6Bikavuc%2FM4Ce29QjvH99oaOTQnijRpmZB8M9Ha06fI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 18 Apr 2026 07:22:36 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ee1eb5b2c4f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T08:29:50.63871Z","times_seen":16603756,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"123av.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.123av.me/images/8/28/hnbr-006/cover.jpg?t=1766180434","fqdn":"cdn.123av.me","domain":"123av.me","tld":"me"},"ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:37.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 14:54:00 GMT","end":"Thu, 04 Jun 2026 15:51:38 GMT"},"fingerprint":{"sha1":"6C:B5:1C:36:CB:19:FE:D4:A3:9F:93:94:D2:7C:FD:1D:94:1E:04:E5","sha256":"8E:B7:BB:7D:A8:02:FB:B2:B2:5B:D7:46:DC:30:11:A8:32:09:C0:22:28:B0:FA:98:D9:8B:06:11:A2:D0:00:68"}}},"request":{"raw":"GET /images/8/28/hnbr-006/cover.jpg?t=1766180434 HTTP/1.1\r\nHost: cdn.123av.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 07:22:37 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 158028\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 19 Dec 2025 21:40:34 GMT\r\netag: \"6945c652-2694c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bvZtxtuVH6IqjOlwybFe8nIIZjbdUQnjclxsE1e4jt50ZvlPWqJnL1mI7wxgZsGCm9sJ3HIdNZqkAXieJVqUjPTioEOOmwKhwHJKutAoEwQU0MQSDBfBREHv8iirYnA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee1eb5e3de30b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158028,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", baseline, precision 8, 800x536, components 3","md5":"62651c5e911d8004f31f2c70518b1d05","sha1":"a8b78a4383f72e9070581f769fc03c51f69605c9","sha256":"509060839a31d90ffd4d1d866559d75471673a9893b0a8a607a194fc6f0615a6","sha512":"f34b66ad3154789754473b1c3a652b2e38a983e32b47a820d8d1248149a982c3168c1c9610b31a51e084b5fd32bc0963960df9803f522b57e6cff4ccd86d913f","ssdeep":"3072:Tg9N39hqLOlUioslF/Kssq3GbciotZl2z3PnW6bl7eryf+ngpEyyF9W0TM6iJ:43kKGNslF/KHqWIDMn/d2F9W0TM/","tlshash":"b6f313e5a52658973a37bcf0b40b9b4348fd693512dafcb0652c66dfe1d9b82040dc8e","first_seen":"2026-04-18T07:23:09.417271Z","last_seen":"2026-04-18T07:23:09.417271Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"z6v2p9a8.bkcdn.net/library/914186/8b60a868f1a501849ef1dc0e4ee127bf29007a47.webp","fqdn":"z6v2p9a8.bkcdn.net","domain":"bkcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:37.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 17:32:27 GMT","end":"Mon, 13 Jul 2026 17:32:26 GMT"},"fingerprint":{"sha1":"51:7D:4D:98:A6:D6:C9:6E:C1:63:31:0F:10:C9:1E:FB:99:1D:A4:40","sha256":"32:EC:40:B8:45:B1:5B:2F:F4:56:FC:1A:26:19:E0:5F:D4:38:FC:F9:CA:A2:0A:6E:45:C4:94:4A:0B:9F:89:5A"}}},"request":{"raw":"GET /library/914186/8b60a868f1a501849ef1dc0e4ee127bf29007a47.webp HTTP/1.1\r\nHost: z6v2p9a8.bkcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 07:22:37 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7528\r\nlast-modified: Thu, 30 Jan 2025 20:10:34 GMT\r\netag: \"679bdcba-1d68\"\r\nexpires: Wed, 05 Aug 2026 09:05:56 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec02-prg1-1\r\nx-77-nzt: k/I6rL3FaO5oePleh3iXK0GdaZq8Ki0aE0oaa5r9nQKV2wUOfQsDSX7ctrxKjZ//3obXqEQ\r\nx-77-nzt-ray: 2a494a15062323696231e369ecc63d0e\r\nx-77-cache: HIT\r\nx-77-age: 22112101\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7528,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"80719b6d21525dd9792d6bcb8cd1e4c1","sha1":"8b60a868f1a501849ef1dc0e4ee127bf29007a47","sha256":"58ef4f4f49667b65f9582b80630a67bd31066da9c86794d162ebd1ec94178a7c","sha512":"c95e1bd71736fa65f4c01c35c437b1306b78145e69447f051ff4e15b323d16a4a35e6884211ba55fe0f671f6e4d4aa9ca8c862ec618774e7a0aaa9d25694a44c","ssdeep":"192:4aHTYG87n1tCqNhWapVxidPCuiSeDxoDV6O/lDD9R/g44g:4S3kPWapF9SsoDoSDD9R4Ng","tlshash":"8cf1ae021d115917f1ceaae7e01ec620b50f061460ab8e72149fe9438b5ff9731eab87","first_seen":"2025-02-01T19:58:48.928379Z","last_seen":"2026-06-20T21:28:07.411252Z","times_seen":351,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.123av.me/resize/s500/c/6c/start-465/cover.jpg?t=1776112226","fqdn":"cdn.123av.me","domain":"123av.me","tld":"me"},"ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:34.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 14:54:00 GMT","end":"Thu, 04 Jun 2026 15:51:38 GMT"},"fingerprint":{"sha1":"6C:B5:1C:36:CB:19:FE:D4:A3:9F:93:94:D2:7C:FD:1D:94:1E:04:E5","sha256":"8E:B7:BB:7D:A8:02:FB:B2:B2:5B:D7:46:DC:30:11:A8:32:09:C0:22:28:B0:FA:98:D9:8B:06:11:A2:D0:00:68"}}},"request":{"raw":"GET /resize/s500/c/6c/start-465/cover.jpg?t=1776112226 HTTP/1.1\r\nHost: cdn.123av.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 07:22:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 83684\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 13 Apr 2026 20:30:26 GMT\r\netag: W/\"69dd5262-2422b\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\ncache-control: public, max-age=2678400\r\nx-cache: EXPIRED\r\naccept-ranges: bytes\r\nage: 262789\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jtcFQrREZWuBz6fPeTMVpv%2BjsBsHXKMAQtNQOoUn0aV187HQB48eOgryhRsg5E3CF0bJQzGDRxcFTBNhjmpkLPo24YkfHOIwY3dxdjctyiCTjxgXyCUVDJqcChrB4As%3D\"}]}\r\ncf-ray: 9ee1eb4df9000afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83684,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x335, components 3","md5":"718bd08b88f277fbd820651ac6f99195","sha1":"93b9d88ac59d1a1070c9c65df8e82cb1c5ef70dc","sha256":"64c037ea860e6e6d5eee1dfbb06d0f815031dd575e104392856efa91294d4a6c","sha512":"ed1c85428360d6d29f988486d3de4b9fdaab87ea3fd048b129a34209c7baf2a66a7a7d4639cd6c49bdeb0f261da544e0e81e9ca94ce3ac80d41a190added0bb5","ssdeep":"1536:EIzppO2fbQwHvkJZ3lYVu+1Tiz7aOWjxK6uZl82gdUqRCbbuWam/DPhl:dtpO+DPwXYVFTM7o7t27HTaqP3","tlshash":"758302b4b58c736cb32d91504985fac6169d2b170ca078419faf2216cc739ed86c9ebf","first_seen":"2026-04-18T07:23:09.41902Z","last_seen":"2026-04-18T07:23:09.41902Z","times_seen":1,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":140,"dns":0,"connect":0,"send":0,"wait":27,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VZGC2QQBZ8","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:34.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtag/js?id=G-VZGC2QQBZ8 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 18 Apr 2026 07:22:34 GMT\r\nexpires: Sat, 18 Apr 2026 07:22:34 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 151557\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":449174,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5929)","md5":"f5b93960be00272042fd65e3e652e21a","sha1":"110f5484cc4a573d0d47516179613ef9843f4843","sha256":"522bcf029551ca45209a0470df3d72bdbd69485eaa81a529e6a512471f812d7b","sha512":"936ae22e12c6ca6f2e5346d1c9fa703f71bea56c26569203626e0e52357d4ab9f4e94c47dfd73fc1760785641983c76be7f878aa0dd968118372b27f1819206c","ssdeep":"6144:z4OjKgsCA4MRBRfrJPj8B3v0yIjwcHRpLUgW1w01V91XX:Hst4MtfrJL8M5BOn","tlshash":"90a419cdb3c674665397f478903f018ba57b28a2b44cc89af189c8e42d7469a4277f7c","first_seen":"2026-04-18T07:23:09.419999Z","last_seen":"2026-04-18T07:23:09.419999Z","times_seen":1,"resource_available":true,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":1,"connect":23,"send":0,"wait":41,"receive":60,"ssl":471},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:34.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:20:01 GMT","end":"Sun, 24 May 2026 08:20:00 GMT"},"fingerprint":{"sha1":"58:0F:84:09:FF:55:47:81:68:33:43:D3:D2:47:4C:DB:77:90:25:FB","sha256":"11:22:FD:18:0A:A9:69:03:FF:90:1D:F1:BD:A4:A3:CF:3E:A4:0C:FA:D2:84:97:23:1B:81:45:31:26:81:D6:14"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 07:22:34 GMT\r\ncontent-type: application/javascript\r\netag: W/\"cf93796454e8c42585ad9e5ff39\"\r\nexpires: Thu, 16 Apr 2026 17:34:49 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: k31l+7aJVwj6AC2Qqf94vpWK3DRtseMN7Vt7fdW/SfB1ej8x02oB5Yi5QZ+Jl+oz7A2seEc\r\nx-77-nzt-ray: 2a494a151c20ab515f31e369fa54821e\r\nx-77-cache: HIT\r\nx-77-age: 6322\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":188413,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39940)","md5":"7aed630ee31d3f9cff55e0b1f5e3e811","sha1":"cf93796454e8c42585ad9e5ff39ca4017d55a301","sha256":"bf409d98c411ec137c473af54cf2c3626c221541e42779aa4dcbd91ae26ea576","sha512":"bdc330f602edd0c9da30d2495eb24e4ad97cc6ea3fce43b83d8a42543297328b8d4c342430c725f4c2516bc782453b63216af9557246b603ce78c2c9fdaeae51","ssdeep":"3072:8dqQ7K6+28VOk2DZ2HgMaElwnRyL78wBHishYolYHoJCXMdpo:DM+28VOk2d2SElwnRW8w4sDRpo","tlshash":"0c045c983792303441d3a12da9ff52083375506ab90f4884bb4dd9a427adeea51b3ffd","first_seen":"2026-04-15T13:08:57.83457Z","last_seen":"2026-04-22T10:25:44.153871Z","times_seen":172,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":32,"connect":1,"send":0,"wait":6,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/cf-fonts/v/nunito/5.0.16/latin/wght/normal.woff2","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:35.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:24:53 GMT","end":"Sun, 07 Jun 2026 21:22:25 GMT"},"fingerprint":{"sha1":"6B:4D:07:CB:DA:7C:B4:E9:AA:43:45:C5:DB:D7:38:21:15:2E:5E:67","sha256":"86:42:87:61:B5:8C:5A:6D:EF:43:94:60:4F:CE:5F:96:24:EB:BD:A8:8F:71:F0:2C:CC:79:B1:31:DF:2D:2F:AD"}}},"request":{"raw":"GET /cf-fonts/v/nunito/5.0.16/latin/wght/normal.woff2 HTTP/1.1\r\nHost: 123av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/zh/dm9\r\nCookie: locale=zh; x-token=ca765934a399ae2f65342024d714d1dc; session=CB8ZfExaidSejyat9W5tcvYJ99GAKzM5QXldqNRb\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Apr 2026 07:22:35 GMT\r\ncontent-length: 39128\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JE1Bdv64kxmbey0c7g3DGclzycNlzGostZAEaWDL4waf7WUrnOWrV02%2FHljErDTLXh%2BJoHn3YjIpAj2SL25VKJ%2B39ZRsDokbejNuf2kDESdOS9DI9zmors3TmyU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ee1eb558bbb1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-06-21T08:50:55.592647Z","times_seen":33639,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"123av.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA01PW0oEMRC8ihfYUP1I0tlvvxUUDzCPjV+r4IAo9OHtycC6KZJ0uquoCoPLCXoie4Ccmc9SvFFqSMqJsvrT84srObFM32n5vMZUyYJkhbU4oSmDPTdQbuYZ5rVmUkFowFKpqStcHAHOorpXCQhVhb+9Po4dFl48jt3Qydz2Fht+CLxLer4ILLxnXfscruWSO89SVZbcLhx03MXEgQTL1TmAG047UyIiR5ZY8NGett+Pxf1GIzpEeWTn/UGud4R71P9PxUWjPiLBt3Sd3revIxcNx0EJhzEfvVH0aS2tYzWutkC68bqYUWGSvta5/AEyq4Y8rgEAAA==\u0026cb=e2e_69e3313c180375.06702364","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:36.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:20:01 GMT","end":"Sun, 24 May 2026 08:20:00 GMT"},"fingerprint":{"sha1":"58:0F:84:09:FF:55:47:81:68:33:43:D3:D2:47:4C:DB:77:90:25:FB","sha256":"11:22:FD:18:0A:A9:69:03:FF:90:1D:F1:BD:A4:A3:CF:3E:A4:0C:FA:D2:84:97:23:1B:81:45:31:26:81:D6:14"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA01PW0oEMRC8ihfYUP1I0tlvvxUUDzCPjV+r4IAo9OHtycC6KZJ0uquoCoPLCXoie4Ccmc9SvFFqSMqJsvrT84srObFM32n5vMZUyYJkhbU4oSmDPTdQbuYZ5rVmUkFowFKpqStcHAHOorpXCQhVhb+9Po4dFl48jt3Qydz2Fht+CLxLer4ILLxnXfscruWSO89SVZbcLhx03MXEgQTL1TmAG047UyIiR5ZY8NGett+Pxf1GIzpEeWTn/UGud4R71P9PxUWjPiLBt3Sd3revIxcNx0EJhzEfvVH0aS2tYzWutkC68bqYUWGSvta5/AEyq4Y8rgEAAA==\u0026cb=e2e_69e3313c180375.06702364 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://123av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nCookie: __uvt=s%3A32%3A%22198d4d498c27470d863b258ff23b1267%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Apr 2026 07:22:36 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://123av.com\r\nAccess-Control-Allow-Credentials: true\r\nVary: Origin\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T08:29:50.63871Z","times_seen":16603756,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":93,"dns":1,"connect":21,"send":0,"wait":36,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"z6v2p9a8.bkcdn.net/library/974714/81eea850167c41bb3f509a5379b09433459be308.mp4","fqdn":"z6v2p9a8.bkcdn.net","domain":"bkcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:36.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 17:32:27 GMT","end":"Mon, 13 Jul 2026 17:32:26 GMT"},"fingerprint":{"sha1":"51:7D:4D:98:A6:D6:C9:6E:C1:63:31:0F:10:C9:1E:FB:99:1D:A4:40","sha256":"32:EC:40:B8:45:B1:5B:2F:F4:56:FC:1A:26:19:E0:5F:D4:38:FC:F9:CA:A2:0A:6E:45:C4:94:4A:0B:9F:89:5A"}}},"request":{"raw":"GET /library/974714/81eea850167c41bb3f509a5379b09433459be308.mp4 HTTP/1.1\r\nHost: z6v2p9a8.bkcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sat, 18 Apr 2026 07:22:36 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 663399\r\nlast-modified: Thu, 29 Jan 2026 17:17:47 GMT\r\netag: \"697b963b-a1f67\"\r\nexpires: Fri, 29 Jan 2027 17:22:05 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap01-sec01-prg1-1\r\nx-77-nzt: k1Tyc3OUuwqe9tF/h/eMTDCNqNCXiKXpru4GwEYHG4eeRc7QhU8m2x0Dp/I6ypJUfkgpbCM\r\nx-77-nzt-ray: 2a494a15062323696131e369634a3c2f\r\nx-77-cache: HIT\r\nx-77-age: 6741649\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-663398/663399\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":663399,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"e2dd5bec526f0c02d6c4b6d689adb24c","sha1":"81eea850167c41bb3f509a5379b09433459be308","sha256":"dd76d6fe41f75383b6adae515ba926e8bb45aabdbb12e017fc7055f9cdb5c585","sha512":"cc8c3317d58f18fda10c495b47a6019dacc0104e93d666338b273d4665643be4e69c2aa023b2c590aac2d24c5217c26550d4173e5f130c9f7a562ff81e277ea0","ssdeep":"12288:3JTTvt1QXWOjtiVAM8puLzvSmwm4iB0xEnBfZRMK8VKYSF5JmxPew3HW86qjtHDz:5Ht4OVZ8wLzvSmWiB0o2KEKYE5AxG62O","tlshash":"17e423e3eb741b93d5181b74f9cd2a02f8bcc94a5b9895c7fe1d8aa2c717187052e052","first_seen":"2026-01-30T10:02:27.997614Z","last_seen":"2026-06-21T01:59:09.288731Z","times_seen":254,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":64,"dns":16,"connect":3,"send":0,"wait":1,"receive":19,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.123av.me/images/e/be/hmn-804/cover.jpg?t=1771527633","fqdn":"cdn.123av.me","domain":"123av.me","tld":"me"},"ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:37.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 14:54:00 GMT","end":"Thu, 04 Jun 2026 15:51:38 GMT"},"fingerprint":{"sha1":"6C:B5:1C:36:CB:19:FE:D4:A3:9F:93:94:D2:7C:FD:1D:94:1E:04:E5","sha256":"8E:B7:BB:7D:A8:02:FB:B2:B2:5B:D7:46:DC:30:11:A8:32:09:C0:22:28:B0:FA:98:D9:8B:06:11:A2:D0:00:68"}}},"request":{"raw":"GET /images/e/be/hmn-804/cover.jpg?t=1771527633 HTTP/1.1\r\nHost: cdn.123av.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 07:22:37 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 172123\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 19 Feb 2026 19:00:33 GMT\r\netag: \"69975dd1-2a05b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 4967552\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JhWCRpWRdHdeN%2Fa6vS7H7Ep1hLGs%2FSX0SfUiKKUVUx%2B3pQUsgtszqtOjhKKAnAnVMFc10E5AgDgDlDZaD8NWz4Lu4RqhwrNIHjiVvy0FhobGI43LV0VtAq3KrhcO0jA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee1eb5e2ddf0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172123,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", baseline, precision 8, 800x538, components 3","md5":"d3ebe1ed7eea9f41c0e52dc0359e897a","sha1":"26c9fb30d4566486c97dff41bd73e83764c60449","sha256":"cfcd20edaa77feee39fa10705edd9645385abcdba87926cfd4fd906b4c03e821","sha512":"937cc059a739cc35d690b45fbc1d42b10b89d98478330cdc90093d18074dc6e0dd4017e5f40bdeec3ee17fe588555212e0f8c568d6af5b3200a842e35bc8107f","ssdeep":"3072:MkYHMZPXLIFfI+wIyaP5gnyxFuKSxseWZQIEhmivMx0YWD5KOkBZ:MHHM1IFfILM2y/nSSdLEhVEx0YW93CZ","tlshash":"58f3234bfad13816ba8482b910ae0f855144127e8b9eaf404dfba977df0d6f421dcf46","first_seen":"2026-04-18T07:23:09.42266Z","last_seen":"2026-04-29T17:05:47.733984Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"123av.com/zh/dm9","fqdn":"123av.com","domain":"123av.com","tld":"com"},"ip":{"addr":"104.26.8.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-18T07:22:33.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 20:24:53 GMT","end":"Sun, 07 Jun 2026 21:22:25 GMT"},"fingerprint":{"sha1":"6B:4D:07:CB:DA:7C:B4:E9:AA:43:45:C5:DB:D7:38:21:15:2E:5E:67","sha256":"86:42:87:61:B5:8C:5A:6D:EF:43:94:60:4F:CE:5F:96:24:EB:BD:A8:8F:71:F0:2C:CC:79:B1:31:DF:2D:2F:AD"}}},"request":{"raw":"GET /zh/dm9 HTTP/1.1\r\nHost: 123av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 07:22:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nXkmzGZsO4%2FyB6hEOVWZSTCHSGB5ua68E5a7oIt0QgyqKlQ1d%2F32EHjM0fkXjVFCyFRs18Mjgg5Z%2BBVLwzEccYtRWcfad3GSt5Tw6WB1V24z20zUYtLn1mQFQsE%3D\"}]}\r\ncache-control: public, max-age=30\r\nx-cache: MISS\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=3,cfOrigin;dur=284\r\ncontent-encoding: br\r\ncf-ray: 9ee1eb490c515ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":114991,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (36953)","md5":"1a87427353b6866cdf0d5e9d9024d78e","sha1":"8bf39e43b30701869f69801a6069d8fee4a7e949","sha256":"19d71257a9a6dd6586e687d007ac95f5ed5963834f3ac732ca9ef528fd04ee31","sha512":"6852ea259d2c908cd175e4b869f2c8e667f20c2bba90793bd2933cd176fb7e906552a8fc158de9d6b6b97f632e0c639ebc9dcd1b05dd23430d838640ea314d62","ssdeep":"1536:1ycskucWoKYk/DeGGk3uQ1nRkRdRwRdaMi27L3rzC:1HsoWIk/6GB3FRMdRIda67L3re","tlshash":"1ab3e9bf61862c3b0df752c46ea59f2fb1c29632c5a29403dbf48f4e17d2e9ac909511","first_seen":"2026-04-18T07:23:09.423989Z","last_seen":"2026-04-18T07:23:09.423989Z","times_seen":1,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":37,"dns":22,"connect":1,"send":0,"wait":293,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"123av.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.123av.me/resize/s360/3/93/bbtu-112/cover.jpg?t=1776492028","fqdn":"cdn.123av.me","domain":"123av.me","tld":"me"},"ip":{"addr":"104.21.63.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://123av.com/zh/dm9","date":"2026-04-18T07:22:36.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123av.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 14:54:00 GMT","end":"Thu, 04 Jun 2026 15:51:38 GMT"},"fingerprint":{"sha1":"6C:B5:1C:36:CB:19:FE:D4:A3:9F:93:94:D2:7C:FD:1D:94:1E:04:E5","sha256":"8E:B7:BB:7D:A8:02:FB:B2:B2:5B:D7:46:DC:30:11:A8:32:09:C0:22:28:B0:FA:98:D9:8B:06:11:A2:D0:00:68"}}},"request":{"raw":"GET /resize/s360/3/93/bbtu-112/cover.jpg?t=1776492028 HTTP/1.1\r\nHost: cdn.123av.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://123av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 18 Apr 2026 07:22:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 52550\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 18 Apr 2026 06:00:28 GMT\r\netag: W/\"69e31dfc-28533\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\ncache-control: public, max-age=2678400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 1354\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uDu%2FeoPEll4dJSv8RT6W%2B4Xkn5vncxUnBq%2F5IKc09BbhTzQ6UQgEU59FGvoREPPBKP0KEP1NsCI4TjPAT%2F7Fb3jtfkLQHEE37N%2FbZ5dcuw1hdUnyFQ%2F18vlh%2BTcazPU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ee1eb5b4db50b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52550,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 360x241, components 3","md5":"ba2da20c3c0b699744dd8dd7b29f38d0","sha1":"e8e4d74a5394cdb843d22eb0398772856840f38d","sha256":"b566ca3d6a08feef17828383308f15d8beb9e0b11881a6add85a2d5a04a390b5","sha512":"5dba9d947b190a67c7b4635252f856371b377610619073045e965ba443d3df36731172692396e13d27ad23e0722d29ba1685ff47f25c330b0203a00cee8edc6d","ssdeep":"1536:llaHMazcCwoRcwfoWFETLNjzc9oG2EY7VEi+gaUqZhpd7i:GHMfCwgX+vNjzD72iGUqPpU","tlshash":"d233f137b3b88ad032e855a094c16d722effe7113aeb186213865dafc9d35d244bdc21","first_seen":"2026-04-18T07:23:09.425238Z","last_seen":"2026-04-18T07:23:09.425238Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":19,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}