{"report_id":"b9145dd8-0376-4de8-8e16-b672e33bfea2","version":6,"status":"done","tags":[],"date":"2025-07-10T08:05:32Z","url":{"schema":"http","addr":"x99av.com/","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"x99av.com/","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"title":"国产自拍,国产自拍偷拍视频,日本AV - x99AV"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-18T08:05:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"imgsa.baidu.com","ip":{"addr":"58.42.14.48","port":443,"asn":139203,"as":"Guizhou GuiAn IDC","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":139015,"first_seen":"2017-01-29T16:54:01Z","last_seen":"2025-07-05T05:18:35.291843Z","alert_count":0,"request_count":1,"received_data":428475,"sent_data":478,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sp0.baidu.com","ip":{"addr":"103.235.46.102","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"1999-10-11","domain_rank":18423,"first_seen":"2014-12-05T23:12:12Z","last_seen":"2025-07-10T02:38:21.610006Z","alert_count":0,"request_count":1,"received_data":116,"sent_data":470,"comment":"","tags":null,"fingerprints":null},{"fqdn":"768tup.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.65.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-06-22T10:55:18.203925Z","last_seen":"2025-07-07T02:29:59.634178Z","alert_count":0,"request_count":1,"received_data":202276,"sent_data":458,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-07-09T15:09:48.844799Z","alert_count":0,"request_count":6,"received_data":97674,"sent_data":3106,"comment":"","tags":null,"fingerprints":null},{"fqdn":"x99av.com","ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-07-26","domain_rank":0,"first_seen":"2016-03-04T18:18:12Z","last_seen":"2025-06-25T19:32:41.798017Z","alert_count":0,"request_count":10,"received_data":300960,"sent_data":5018,"comment":"","tags":null,"fingerprints":null},{"fqdn":"5845-xxpp.oss-accelerate.aliyuncs.com","ip":{"addr":"47.254.186.179","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2023-11-14T16:55:03Z","last_seen":"2025-07-06T06:52:45.639017Z","alert_count":0,"request_count":1,"received_data":324523,"sent_data":449,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img.fjyyedu.com","ip":{"addr":"123.6.18.16","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"domain_registered":"2015-12-30","domain_rank":0,"first_seen":"2025-04-16T03:14:18.953413Z","last_seen":"2025-07-04T09:11:42.600908Z","alert_count":0,"request_count":2,"received_data":709599,"sent_data":869,"comment":"","tags":null,"fingerprints":null},{"fqdn":"txdytuchuang1.oss-cn-beijing.aliyuncs.com","ip":{"addr":"39.103.20.63","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2024-12-01T01:06:49.447195Z","last_seen":"2025-07-06T06:49:03.962535Z","alert_count":0,"request_count":1,"received_data":340273,"sent_data":453,"comment":"","tags":null,"fingerprints":null},{"fqdn":"zgnzw.xyz","ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-24","domain_rank":0,"first_seen":"2025-03-06T03:09:27.561462Z","last_seen":"2025-07-05T00:34:13.915857Z","alert_count":0,"request_count":4,"received_data":2395390,"sent_data":1761,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xpj46-xz.oss-accelerate.aliyuncs.com","ip":{"addr":"47.254.186.237","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2023-10-26T16:53:01Z","last_seen":"2025-07-06T06:49:04.194067Z","alert_count":0,"request_count":1,"received_data":385873,"sent_data":447,"comment":"","tags":null,"fingerprints":null},{"fqdn":"5454ylylgh.oss-accelerate.aliyuncs.com","ip":{"addr":"47.254.187.92","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2024-07-25T07:33:23Z","last_seen":"2025-07-06T06:49:04.208221Z","alert_count":0,"request_count":1,"received_data":523985,"sent_data":447,"comment":"","tags":null,"fingerprints":null},{"fqdn":"canon.intell0330.top","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-05-14","domain_rank":0,"first_seen":"2025-07-05T11:43:59.268721Z","last_seen":"2025-07-05T11:43:59.268721Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":460,"comment":"","tags":null,"fingerprints":null},{"fqdn":"timg216.top","ip":{"addr":"172.66.155.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-04","domain_rank":0,"first_seen":"2025-05-11T16:24:46.418762Z","last_seen":"2025-07-08T00:41:46.04338Z","alert_count":0,"request_count":13,"received_data":636521,"sent_data":6463,"comment":"","tags":null,"fingerprints":null},{"fqdn":"p.ananas.chaoxing.com","ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"domain_registered":"2004-05-28","domain_rank":0,"first_seen":"2014-12-22T08:19:26Z","last_seen":"2025-07-03T22:41:36.796351Z","alert_count":0,"request_count":3,"received_data":728784,"sent_data":1422,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xm777111.img8822437445.com","ip":{"addr":"205.198.65.114","port":8686,"asn":138997,"as":"Eons Data Communications Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2025-05-17","domain_rank":0,"first_seen":"2025-07-07T02:29:58.468493Z","last_seen":"2025-07-07T02:29:58.468493Z","alert_count":0,"request_count":1,"received_data":322328,"sent_data":453,"comment":"","tags":null,"fingerprints":null},{"fqdn":"yj777222.img0251678113.com","ip":{"addr":"205.198.65.114","port":8686,"asn":138997,"as":"Eons Data Communications Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2025-05-17","domain_rank":0,"first_seen":"2025-07-07T23:48:15.446689Z","last_seen":"2025-07-07T23:48:15.446689Z","alert_count":0,"request_count":1,"received_data":391128,"sent_data":449,"comment":"","tags":null,"fingerprints":null},{"fqdn":"zz.bdstatic.com","ip":{"addr":"157.255.63.48","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"domain_registered":"2011-12-26","domain_rank":27702,"first_seen":"2017-01-30T07:45:48Z","last_seen":"2025-07-06T06:53:54.139045Z","alert_count":0,"request_count":1,"received_data":769,"sent_data":416,"comment":"","tags":null,"fingerprints":null},{"fqdn":"tg481zz.oss-cn-beijing.aliyuncs.com","ip":{"addr":"39.103.20.54","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-06-28T21:47:11.35398Z","last_seen":"2025-07-06T06:49:03.601621Z","alert_count":0,"request_count":1,"received_data":420317,"sent_data":446,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xx4848.delilaw.com","ip":{"addr":"123.6.18.113","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"domain_registered":"2024-08-29","domain_rank":0,"first_seen":"2025-06-28T09:33:53.625173Z","last_seen":"2025-07-05T11:43:59.726125Z","alert_count":0,"request_count":3,"received_data":1234804,"sent_data":1287,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gif.fpaixfl.com","ip":{"addr":"98.98.86.10","port":443,"asn":21859,"as":"ZEN-ECN","country":"United States","country_code":"US"},"domain_registered":"2024-08-29","domain_rank":0,"first_seen":"2025-05-15T23:53:25.04598Z","last_seen":"2025-07-04T05:35:27.799791Z","alert_count":2,"request_count":2,"received_data":708896,"sent_data":869,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-10T08:05:11Z","timestamp":1752134711,"ip_dst":{"addr":"47.79.65.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.2","port":44448,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-07-10T08:05:11.600086+0000\",\"flow_id\":3622607251055,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":44448,\"dest_ip\":\"47.79.65.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"768tup.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":937,\"bytes_toclient\":5886,\"start\":\"2025-07-10T08:05:11.058991+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-07-10T08:05:11Z","timestamp":1752134711,"ip_dst":{"addr":"47.254.187.92","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.2","port":38238,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-07-10T08:05:11.869421+0000\",\"flow_id\":1078972896479952,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":38238,\"dest_ip\":\"47.254.187.92\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"5454ylylgh.oss-accelerate.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":904,\"bytes_toclient\":6780,\"start\":\"2025-07-10T08:05:11.821968+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-07-10T08:05:11Z","timestamp":1752134711,"ip_dst":{"addr":"47.254.186.179","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.2","port":42632,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-07-10T08:05:11.884782+0000\",\"flow_id\":1872904043608107,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":42632,\"dest_ip\":\"47.254.186.179\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"5845-xxpp.oss-accelerate.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":903,\"bytes_toclient\":6176,\"start\":\"2025-07-10T08:05:11.833579+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-07-10T08:05:11Z","timestamp":1752134711,"ip_dst":{"addr":"39.103.20.63","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"ip_src":{"addr":"172.18.0.2","port":37330,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-07-10T08:05:11.937411+0000\",\"flow_id\":51726240933270,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":37330,\"dest_ip\":\"39.103.20.63\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"txdytuchuang1.oss-cn-beijing.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":907,\"bytes_toclient\":6467,\"start\":\"2025-07-10T08:05:11.419222+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-07-10T08:05:12Z","timestamp":1752134712,"ip_dst":{"addr":"47.254.186.237","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.2","port":57592,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-07-10T08:05:12.017655+0000\",\"flow_id\":993221726946989,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":57592,\"dest_ip\":\"47.254.186.237\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"xpj46-xz.oss-accelerate.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6176,\"start\":\"2025-07-10T08:05:11.968365+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-07-10T08:05:12Z","timestamp":1752134712,"ip_dst":{"addr":"39.103.20.54","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"ip_src":{"addr":"172.18.0.2","port":41256,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-07-10T08:05:12.061507+0000\",\"flow_id\":1020252103588148,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":41256,\"dest_ip\":\"39.103.20.54\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"tg481zz.oss-cn-beijing.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6467,\"start\":\"2025-07-10T08:05:11.538932+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-10","alert":"Sinkholed","trigger":"fpaixfl.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"x99av.com/","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd265a6c197452e6947eacb51f801a7e","sha1":"cd5141166249e58dc92dd9e0de7c132ad10b055e","sha256":"8e1c0330f035408d29c8ca8523a46da3c909d44d7d5325a753d29d6ba9e6c167","sha512":"9febad2e90438434db38faae10de1bae725758f2d1cb22b5d22d6d8fe7b304add38434f773099dbb9686e4e3c9cba6498f18566fa758d42a0c593082cb3a00c3","ssdeep":"","tlshash":"d3a022203e80300bb8fe2cf3f28a23f2032822280c2ef00b8230f20820c002200b0088","size":70,"data":"","first_seen":"2025-02-10T22:35:16.54797Z","last_seen":"2025-09-14T22:20:42.603888Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz.bdstatic.com/linksubmit/push.js","fqdn":"zz.bdstatic.com","domain":"bdstatic.com","tld":"com"},"ip":{"addr":"157.255.63.48","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9fc52ab67f035b8baf5d558714cc94d","sha1":"37062a6fb1ef410d496137d44275738ae743c747","sha256":"c31f2003f1c93ac1e34b09f376d97a65da6e110bf451cf1e0e50a7946c5e7212","sha512":"ebb0415852fbb5b964094e2e55a28b90f701dff1977c8b98c6f24d65d09067dc0c417d01492ca28a4be6747816d7c0bfac87b73a33725aee047a5d2f7ab83182","ssdeep":"","tlshash":"11e0cde86054c01c0dcb107135bb324ce7771d675a645545c04d9445396cb1f8247fe9","size":308,"data":"","first_seen":"2023-03-07T01:18:58Z","last_seen":"2026-04-05T13:00:53.968011Z","times_seen":18980,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x99av.com/","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4335aaba44d7dad01d8fae4c17afd51e","sha1":"dc934e347752d0db565f4c887e6af1e45bec5631","sha256":"7e064d032f085aca29e83e3236679c596abcce1822f268c588037da016f90816","sha512":"e1bbd7b0c244a8e0b499671d5b1d906bef52fb74633130b2d7a1846ef651ce5c43e12a59cfd23c2e7763a4a38db8a2dd1c33750c2488531bf7b53f3857b57ad1","ssdeep":"","tlshash":"fcd0eb1300cef0ee8d237c9400aa2bb5e00e00ac8400e0cae13ccc2009854b0f3a50dc","size":282,"data":"","first_seen":"2023-07-10T18:46:11Z","last_seen":"2026-02-01T05:24:10.928564Z","times_seen":178,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x99av.com/","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8a83b9f4d858d21fb9ff7fcee2811460","sha1":"5e93a9789a0a58bec0564e552ead1f0061a21d41","sha256":"773caf53462559033b21d967f792e1d6acd930fa536783d85403b258d31b43c2","sha512":"d2332077b888ea597f18adb343557bd939754d1660ae077c0c05d656743a281601a5e6464ab9619a7572a6b9c6b195fb59f99997cd60247723444f23c35680d5","ssdeep":"","tlshash":"dfd02236a7aa771d170e090dcd4bd10a61490ffa6cb57ee384a840ce9cd78008202a23","size":203,"data":"","first_seen":"2024-06-28T19:22:35Z","last_seen":"2025-09-06T02:26:52.296312Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x99av.com/","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8afc83d72e4cd440cba35f77b915b9db","sha1":"062c91891a4f34cfcd6ded4279f46bd8f357c477","sha256":"f89213c596b7a6a089ab7c8c06a5a6263a6ad0c15c7bbc7c1789a9aef46aef23","sha512":"2f0d6008e346fe2637f88faaf7e8877b028872da02f8202f864a6e67f087aa8e77bdb80b2e84c0be3ae018e92d18a7dce5eaabca589fded1795da6f58cd58000","ssdeep":"","tlshash":"e911ad05a848cc3c66f5133e4e4fb357a3215e66613bae56e8b0d08eb9a090796a14e3","size":1083,"data":"","first_seen":"2024-07-03T01:45:41Z","last_seen":"2026-02-11T02:12:47.376059Z","times_seen":2439,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x99av.com/","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"058abc92baa2246eea71e58bdf8deaef","sha1":"5b5fc560da64f5f721f47e8a5823855b288f8b64","sha256":"8dc0f5e90c90292fbb41676ff44cae4429496234238205a2039aab0e5d5f9e6a","sha512":"2355c4111afbe4e8b726ecf2ab796b1e8489ad48108c2ee42d00bda98ba2573f9502f16ec6b2ee9769103dcea2372431821fb6d92291c9ffc249f33e14e09ae1","ssdeep":"","tlshash":"90f0e1d532dd6a3327826073ac6ff20f3c112e23a850e5182464e0e7d989807d57c69c","size":577,"data":"","first_seen":"2025-07-10T08:05:35.938031Z","last_seen":"2025-07-10T08:05:35.938031Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x99av.com/","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"02a2433468719f80cde9c6c7545fa0f6","sha1":"e790a06aa4fb6a86deba88a8bafe8141cdcc8dea","sha256":"49991c33f9fc8458b89e90b99e933eee50eda4b5044b8470df9aac437fab343b","sha512":"017118fa59f3d9e494c55dae35d683afaaba6caea1883fc3fd5190ca60fbb4372b652c427da203e108d7553d27c07f89bf1ab431008d243479b66c05be9aa228","ssdeep":"","tlshash":"b1014c5b9d65dd75f2e014fce598539be3230c04f2402b25cc3b9f12e4e43553266687","size":729,"data":"","first_seen":"2024-06-28T19:22:37Z","last_seen":"2025-07-12T12:31:04.424898Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/x99av/js/b.x99av.js?33ac1d67ca8294babd96e2","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c213430fcc657fc410594b549e17765a","sha1":"8dd04d5d7efb86058958153cef72ecf7bcb3573d","sha256":"685c04a933797e49b1b0d8436eb12f60d5d9d507ca3959eb7a8c2a919df36440","sha512":"9246c9e6b33acbfdefa41fd27f8588941944325c64805af4c1c954eb548394770a211e9c6e0824e1aeacf1651f89305880ac8950ef72e3ec9aa7e95e1eb4ff37","ssdeep":"1536:nCOBMJAhqbEaC4oNQxsr6Ilw22aMLTr9hk4il67QQZ+jtcb:n5qbEaCgxYv+9hkbR0","tlshash":"f7b390cdb692b06113a770b1807f600bf33b68a9684d4524f655e8d67cb9a4dd23bf2c","size":108484,"data":"","first_seen":"2025-07-09T06:33:40.491412Z","last_seen":"2025-07-10T08:05:35.931705Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x99av.com/","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"225578dd008fdb4f91e48134d9295a15","sha1":"b335a8c3e5567f45a7e129c95331d6aa07a7d189","sha256":"23f4f8697ebd03f522696fc7530d04be1f664d956f8c108470e3d4f6852de660","sha512":"e9d0d99af8e63816edad0b9ccd550262070d47117a85211fbb11e0404d388c815f11b1e676d632f2cac14e05442d5d77ca35704d70aadad3129bfe2ab2e0bbbb","ssdeep":"","tlshash":"a911c02220ed6d774d0bb473292d7ea2e06e4ed9e0418799a5f9cc024aea6705f844de","size":1093,"data":"","first_seen":"2025-04-13T06:37:08.572266Z","last_seen":"2026-02-11T02:12:47.412547Z","times_seen":1620,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x99av.com/","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4d337390a9b3aca0ebe662b739a105c9","sha1":"8c8caee559fc20c4bcf197d32e0cce075b3b9362","sha256":"45c7d159e4343711f425187e0486b9cd8d2366e84859927675820c6e0ad80f54","sha512":"54fae7e07e49898bc798290c97485b55d73520133471e30bec4b82e64001d6360ef330e1eda4852edd77c38664b9b8db4ccc5a9338744fc19ba6e1e04f354be9","ssdeep":"","tlshash":"a7c02b8a83264340c044b0ddc40c331f8053c192dcd7c0e38bb9020612092ee1370330","size":139,"data":"","first_seen":"2025-06-06T20:21:43.152576Z","last_seen":"2025-07-10T08:05:35.940661Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x99av.com/","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aeb82009d5a6770c01dc5dc2000d9d80","sha1":"c326a9f6b4f3943e373ae33f2f6fea5882f2cfb9","sha256":"2aab3829a0f4701e7525a2cc24106c318d9db90c10712a646e6ed8241f360e54","sha512":"30ead322da967c6bc23adaf405bb86192b8517b930dea5e99a34ef5d1540c0da897e8d2576f1d06199986a42241bc9bc210dfb4979ebc215a8aa8c55f3c8ffd2","ssdeep":"192:r8uixLTSOG9t2d8PsAGMOpTplYFz6TT4ZA8:rCTSzt+rpF4GU28","tlshash":"ae0396a364eff7b5ce26750b14097ce4e11aa96be810e5c9966dc820c424fb01f0f5be","size":37971,"data":"","first_seen":"2024-12-01T01:06:57.058337Z","last_seen":"2026-02-04T07:15:49.841096Z","times_seen":1442,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x99av.com/","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f3e48a1346bb5fad2fd2240fc0aadb59","sha1":"0cf62634436b3ff48e2c9bcb460f9ce663070976","sha256":"7f97a8934df8eb1c639a69af55217a2b770a82b8dcde43d768341bf664369819","sha512":"9ac1bbb2c6d5338e0cf89400dda8a6e1bf6bfb40058a6c740a7dc872da75ae17ac7080b670d62e9c95a72dd66a4520a3c44459607c18055543850dbf703eefd6","ssdeep":"","tlshash":"5a01105372cc543293437d431f2fde07721e44e6b9608e4ad3e8984e1545326eda90de","size":739,"data":"","first_seen":"2025-07-10T08:05:35.942411Z","last_seen":"2025-07-10T08:05:35.942411Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x99av.com/","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7e839953f86d2c085cb38611e7c2e4e1","sha1":"78874a8fa33215e02376c3cc1c22595ea0438ecd","sha256":"403da2bb6df7d906b8c1fc29c2b7cca55f09a4a6315b28160e26bbc9c363432f","sha512":"1eae0eb6919efb9f8132f60e459651dd83ad97b6f77776123b8e80eae61ca9f8ce23653877231b72f87641f615ae2d0e97c420ce3cadf3e22adbaadd0081c289","ssdeep":"","tlshash":"4cc0124010bdf171ce866061219e7fb1cc0208f984b99084f4b5ce10159d970eb1d03c","size":192,"data":"","first_seen":"2023-05-22T12:03:42Z","last_seen":"2026-03-29T19:55:31.612518Z","times_seen":195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x99av.com/","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"22f78f56338c8f2416bf149922229ca5","sha1":"8f1613242b54bfbf31c2594ffdfb5e546168860b","sha256":"93d4d71d3924882009f21364e86ccee27f511962e718e259a4547e0494fb497e","sha512":"dbd78ca9996e44765bdfe7d21aa66423a8502514624d1df91d61ab731d7ebab94c968f5bf00b422f1c087d829a2177b8318f630c8a9faae991b8a87c89714887","ssdeep":"","tlshash":"08b09b0b94591144c25875e8d50d630d4452d5cb9dd4e4a5cb70446555513d92526c1c","size":125,"data":"","first_seen":"2025-07-10T08:05:35.94409Z","last_seen":"2025-07-10T08:05:35.94409Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x99av.com/","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5166297bf8f0e50de4e91e4ffd4a7dc5","sha1":"c81f1add836a34255e6594bff449ba58035bbd89","sha256":"2980875e099fbba4dfa92b6d059b7684aa295d213baa9babc87608383fb014d3","sha512":"2b5c50cea8ae0cf50110aa2c0d8e62fbaceb0dae0641e35adb2618db776e9646d81d8d04791fe26520629506f90bfbb4a7c83f863955cb19a2ad83c6e501e294","ssdeep":"","tlshash":"1bb09b2936d7653910051345d42f5515a175175558671461f4a99088e41b9c65182857","size":122,"data":"","first_seen":"2024-06-28T19:22:37Z","last_seen":"2026-03-29T19:55:31.61366Z","times_seen":239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x99av.com/","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9c6ec54caa37ee898d0d3e305773f3d1","sha1":"a6e09e260aa614a5dd3711bdf00695a17c8e334f","sha256":"c89a1ff4962c9595d5c7c44261b68273f5191bc774a732f730e4fda71e5bd71c","sha512":"2e0c2bd9a0a06892dedf9058b9c9fa47985e3c049f63221b48d120a93304b0126c76d0c3a7f26e63b450e127713475bc0576f5eeca3c75b25970d1acaa870521","ssdeep":"","tlshash":"5be02b1a2946863c0cd47d0550b9c57930e434a459638056a65dc86cc429fc50c1199d","size":403,"data":"","first_seen":"2025-03-01T17:04:46.226705Z","last_seen":"2026-02-01T05:24:10.92723Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x99av.com/","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e38d8dbe162ec560927b553bb78f139c","sha1":"0b79d9b36c15d02931b9cb73978bd9ba6c4e050a","sha256":"773796e797fcf022639c5f3c876d344c4d518a3fc8ea164975929c232c7ab10b","sha512":"1e65843f532abd18b0442133cf7a922ded73ccfc53f60f6318a1f81f638a48a099dcb41088787d4e5acb60cca389fe92ecdfa60b49f3707d9af0a46dcfb30a79","ssdeep":"","tlshash":"73a02203f28838b20ccf0f832020c3cef030a3002c28ab3303380aa08320aa200e3000","size":78,"data":"","first_seen":"2024-06-28T15:30:14Z","last_seen":"2026-01-30T03:15:49.492204Z","times_seen":1896,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x99av.com/","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"36290a391555c104e011686d19fde68e","sha1":"d56cefe2845aacb03556c3c92eaed7b1d9ad1c8a","sha256":"91fa188a08e90acce01d4952f6c59ac07736f961754d9562fd3ec9c4b6cde6d0","sha512":"2f4935a334f3f2f6a22b746c7c69ab145d9ce8ed06ff15888d0b9c8e834361f2ea426089ed0beb8e3a0d167a5706770386aac8374dc99364ab65aea791439f7a","ssdeep":"","tlshash":"0731e06388ffe1b6cd16b456993c7e74e04e74aec464a0d8e47ecd2094987b08b4d92e","size":1624,"data":"","first_seen":"2025-07-10T08:05:35.947193Z","last_seen":"2025-07-12T12:31:04.43331Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x99av.com/","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7ec7f43b7fc2f7d6ec8b666865c2bcba","sha1":"08622a583609d865511234f28a3eee86ec2e21c0","sha256":"d704302f2e566645ff26b894d183a0b3cc5180222913d26cafba1d86590c8199","sha512":"d6d9ab0c0c7437717047aa1a856ff2e0c20fbfef5977e85447c787db2c07e7b23d24a47affb47bed94fd2e9851c0cf4fb81927a288c1711a175b134f1247f4f1","ssdeep":"","tlshash":"0c71e52ba0ffe4bddc6ea002805db6b0f40e18bad45194e6f538cc64519efb16b1c02e","size":3802,"data":"","first_seen":"2025-05-11T12:22:21.084885Z","last_seen":"2026-02-01T05:24:10.9222Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x99av.com/","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d66b2a07ae7d0fcb76b2fcda29f72589","sha1":"c31d6299c5a8a13ac46c1f5e0fd8df5c525a67cb","sha256":"b4baa72bb6d3bbf9fbe70cfbc2135d74aea0065a750430937ef698e2b128b355","sha512":"83a080bb23700ad4257191a06cf67506921ee33d107d9768b3813fca91efd06e9790c79b9ed6008f4a4cb32dabbb5857c3dcd929c84744a4e567aace2320cae8","ssdeep":"","tlshash":"5421512160ddae361e4360230d1bfe73e02e0cedf3689f95a6b8cc4569c02b18b480ce","size":1241,"data":"","first_seen":"2023-07-06T13:04:16Z","last_seen":"2026-02-11T02:12:47.429576Z","times_seen":2548,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x99av.com/","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ef6a08d6fcb8e9b7261d34ecc6275029","sha1":"fa8f5398c53e068d4b1d27d99ba8854f91956484","sha256":"09199677a341c53bc13a0a24b32fbc95c2721305aed7df840871b0ec9a2625a3","sha512":"06dba23568791cb4b256a43a8fe9d1ab0227a866fc4c1fb1e5f2b7db69656b9f98a1e438645613f5943832d3712c8224561b5fa3868a6de231d92cd7c13463c2","ssdeep":"","tlshash":"dee0c05355cb7837fdc3d900db6f3972d91b1df55880d895e110dc58516cc508b0d45d","size":376,"data":"","first_seen":"2023-07-10T18:46:10Z","last_seen":"2026-02-01T05:24:10.930208Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x99av.com/","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f67c27347d821e4f626848d678458d16","sha1":"0cc4e3d0b0a4bc031160c4869f344f1e0e21a1e7","sha256":"92e8aa0fa734ee4dd5814c7e4125743f9d2d664cc211b49f97639f563273322b","sha512":"030bedd44b91bdc1300e3ee9ae0708fea7f3e944ae01184e3429d8401d0ac8a0bee0d4e7933ece51d3e643036c887051147b13aa3116d7cc8510624ea7a03d4a","ssdeep":"","tlshash":"1c01dcc0b6ac5866730a00bc5e0bf007c4a06fe87c7ca519f6f06cc3a89b14693d98b2","size":747,"data":"","first_seen":"2025-04-13T06:37:08.571365Z","last_seen":"2025-12-05T09:37:09.366874Z","times_seen":1060,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/x99av/js/t.x99av.js?417abdd002cfd2e3640","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7136e12f8cb87a09fde89d520c36fd80","sha1":"9d27484cdc3a9a0cd3c60884f90623c6ded9273b","sha256":"213ba3587801396d59c1c3caee1f26adf4c5e9d571b573c92473a168e11fd398","sha512":"f53abd1d083a0b3644f95e07ebaac8a0ed97041a0c2eb127130c603f9edddec410d9048653a1cc2d5009f12b9aa8ccbd163fb88863fa4868957bf57adbae1d72","ssdeep":"24576:0xV3wDFugEiQZswBMgtsVFyEJz47RfY/U7:0V3wDFugEiQew+SsVFyEJz47Rf2U7","tlshash":"e4452b8af281b06506d760b5513f1606f2372959e40e805cfe7ae4e96cbca8c51bbf3d","size":1201605,"data":"","first_seen":"2025-07-10T08:05:35.915494Z","last_seen":"2025-07-10T08:05:35.915494Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x99av.com/","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8a7ef4e6dc81233b26594364de68276d","sha1":"9dfdf9a43c24536c6abcd21371706d4ed97f3b7c","sha256":"72b0eac089ae76ac73ca23c33f64e37563e2a8c0dbcf5180ffb168863153e956","sha512":"f4d3379862333994d459ee1a1240a88045feb9178818f21ffce8c32cacf20fc0c4bc1e6a7522d75546ad373f033dff0dceccee2857f03a14449cc4c1efc4ff92","ssdeep":"","tlshash":"55d0a55514bfd570cdd3941114293e73f04f54f9c094d4da757ddc5111d1510579957c","size":244,"data":"","first_seen":"2023-07-10T18:46:10Z","last_seen":"2025-09-14T22:20:42.618814Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"tg481zz.oss-cn-beijing.aliyuncs.com/xpj.gif","fqdn":"tg481zz.oss-cn-beijing.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"39.103.20.54","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:11.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cn-beijing.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 02 Jan 2025 06:32:06 GMT","end":"Thu, 04 Sep 2025 00:00:00 GMT"},"fingerprint":{"sha1":"8A:3B:CD:6E:33:73:41:A6:84:C1:C1:D4:33:14:D9:08:13:FC:B3:FD","sha256":"0F:19:CE:E1:BA:5A:38:3C:2B:09:0F:FE:AE:74:8C:D2:80:A0:09:2C:FD:9C:1E:E8:B2:13:00:39:44:DB:2D:8C"}}},"request":{"raw":"GET /xpj.gif HTTP/1.1\r\nHost: tg481zz.oss-cn-beijing.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 10 Jul 2025 08:05:12 GMT\r\nContent-Type: image/gif\r\nContent-Length: 419767\r\nConnection: keep-alive\r\nx-oss-request-id: 686F7438EE5BBF3930AFEEE0\r\nAccept-Ranges: bytes\r\nETag: \"10A329AC99F63E7325906194038DFF5A\"\r\nLast-Modified: Tue, 22 Apr 2025 04:15:36 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5377492437494691571\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000104\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: EKMprJn2PnMlkGGUA43/Wg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":419767,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"10a329ac99f63e7325906194038dff5a","sha1":"f63714f6c451005ca5a0b1cd3d7344dbedf9c52f","sha256":"e15dec1bf311351f603e121b07c2147a57ee984d2409263672e97e49ed3006a6","sha512":"0d904051c6eeda7c8078c6facd9e67dd56a9a5e7d765bd53dc923a771a49dafcf4c4c462c6bb728fd978a024cd80327b8f52f70f5320973c5d39b8734c720423","ssdeep":"12288:a5My/m3MOQgInUI2L4x7KDj0+Xc3E316d5R1mwjiyGUuyE1CKy:aKcOQ/Q4JKDY+XcU316db1mKiyOyE1CP","tlshash":"109423b301763b12e9ffc92de4dba8b7b54f90949520747908d3f1912cdb84a1acc6b6","first_seen":"2024-12-27T00:51:28.057092Z","last_seen":"2025-07-28T04:14:29.375054Z","times_seen":299,"resource_available":false,"data":null}},"time_used":2341,"timings":{"blocked":-1,"dns":420,"connect":253,"send":0,"wait":256,"receive":867,"ssl":543},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/878f6f39bdd432c684cc4df3114fa2c847e0edf5037cdf286981e5aa5a7e2d62/cover/5_320_180.webp?ih=1","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"172.66.155.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:12.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 03:04:17 GMT","end":"Thu, 04 Sep 2025 04:01:55 GMT"},"fingerprint":{"sha1":"77:83:68:54:E0:99:C9:F6:C6:B3:2B:5F:C1:56:9E:4F:34:BE:32:D9","sha256":"E6:71:B6:18:08:78:12:6E:22:71:D7:80:F0:4F:EE:0F:80:3E:05:55:F3:37:C3:5D:2B:BB:9F:A9:DA:EE:50:6D"}}},"request":{"raw":"GET /videos/878f6f39bdd432c684cc4df3114fa2c847e0edf5037cdf286981e5aa5a7e2d62/cover/5_320_180.webp?ih=1 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 10 Jul 2025 08:05:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15106\r\nserver: cloudflare\r\nt-cache: MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Accept-Encoding, Origin\r\ne2-id: 2a154b4\r\naccess-control-allow-origin: *\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Mon, 16 Jun 2025 18:34:57 GMT\r\nx-content-type-options: nosniff\r\netag: \"001ea88654eebce1b480506254bae823\"\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nage: 455891\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-csp-endpoint\",\"max_age\":86400,\"endpoints\":[{\"url\":\"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=hJfGco321NZNcZdnFIibSUH_vfViLMVoz8qrB8VSL08-1752134712.1499052-1.0.1.1-RpxE0nxEpSlFZuDJhgouVjoX.718XaPFIcofL3JjRbh29oaWSu3zllucySEAWn0LG7Qb1P1p1TSki9xbAhucypwbvA3r3If.6RmwXjZF9Ub.ZIOnxvhvZW9u5XcXcEbWwNDXFOgKZXXcELVoh37Evg\"}]}\r\ncontent-security-policy-report-only: script-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=hJfGco321NZNcZdnFIibSUH_vfViLMVoz8qrB8VSL08-1752134712.1499052-1.0.1.1-RpxE0nxEpSlFZuDJhgouVjoX.718XaPFIcofL3JjRbh29oaWSu3zllucySEAWn0LG7Qb1P1p1TSki9xbAhucypwbvA3r3If.6RmwXjZF9Ub.ZIOnxvhvZW9u5XcXcEbWwNDXFOgKZXXcELVoh37Evg; report-to cf-csp-endpoint\r\ncf-ray: 95ce8dfeed9556bd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15106,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"001ea88654eebce1b480506254bae823","sha1":"3d907a62a5cc21e93b0ddd4180cdaeba43ff4330","sha256":"bf828487aa9709ee7b788c66cb66bd21d86db0057e78a33b8977d1c25281f81d","sha512":"e3887b370752ec46a94af5ec02c4c279f001ceab70e14406cfcff8b5cb9d3309dd38c9ae6f02875fce1bd0c6ca4262f1ebbdbf7d1fc12137e50c493c11248215","ssdeep":"384:cQmDdPNYI+FnnBwvIqMBK4uKtXmwkKzgAy7i2NmHC0WxOAyA:cxr5NUBfXmsgA0toHC0WoAyA","tlshash":"8c62cf52c8441559fe05c82324b1f9c7272292ac90c6618b4ffaf7506ce4adf97e9e71","first_seen":"2025-06-19T00:12:00.095831Z","last_seen":"2025-07-17T16:28:03.667293Z","times_seen":19,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xx4848.delilaw.com/5845.gif","fqdn":"xx4848.delilaw.com","domain":"delilaw.com","tld":"com"},"ip":{"addr":"123.6.18.113","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:12.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xx4848.delilaw.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Jun 2025 07:09:52 GMT","end":"Thu, 25 Sep 2025 07:09:51 GMT"},"fingerprint":{"sha1":"2A:B6:BF:40:66:26:91:23:FF:18:08:60:C8:02:1A:0C:87:F0:B8:01","sha256":"E5:47:24:44:B1:54:12:9F:6F:12:E1:0A:F9:77:14:A4:59:E0:09:F1:F9:72:38:AB:0A:4D:3B:49:86:B6:A8:F3"}}},"request":{"raw":"GET /5845.gif HTTP/1.1\r\nHost: xx4848.delilaw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Thu, 10 Jul 2025 08:05:13 GMT\r\ncontent-type: image/gif\r\ncontent-length: 324299\r\nlast-modified: Sat, 15 Feb 2025 12:04:27 GMT\r\netag: \"67b082cb-4f2cb\"\r\nexpires: Mon, 04 Aug 2025 11:52:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":324299,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"4b824f5452a8379a4bb6fa2fb82e8f45","sha1":"0f97bfec583629d21f1737c3c806ba51ab7c9293","sha256":"92ba0c5c9930dc38fbd04c327b93437aba42e38f4fcc846b87a16b4df7ebfd45","sha512":"63850000d20788adb9bc6e6717361f4fb5595fb088a8f03117330ae1ffa548c35520b8a55ff5c5f3233f4872c8865fb5053b10ef7048b20ac89be1926fbbe180","ssdeep":"6144:SaYYr01IgV9vpSy5a0OEJNRflIGIxltJczWpokkkf30akgUJyJm5q8nrx6OJ3:Lr01I6vvNOEJrGGcmzW2kP0akgUJL5qY","tlshash":"146423d208acd8c13702b3de1ead15970ebe84526f712b285e9b9094a75c2bb707df74","first_seen":"2023-08-25T22:48:22Z","last_seen":"2025-12-06T17:55:32.14518Z","times_seen":1903,"resource_available":false,"data":null}},"time_used":2881,"timings":{"blocked":-1,"dns":916,"connect":233,"send":0,"wait":464,"receive":1028,"ssl":240},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x99av.com/static/favicon.ico?aaff","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:14.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x99av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 22:20:57 GMT","end":"Wed, 03 Sep 2025 23:19:07 GMT"},"fingerprint":{"sha1":"AF:23:BB:A5:88:17:F7:8A:63:C4:AC:70:2E:F0:8F:07:B0:8D:F8:9D","sha256":"6C:55:38:6F:78:40:E3:3F:13:AB:10:D1:9F:A1:2D:BD:B0:24:FE:63:15:A9:2A:CE:C6:58:F2:C5:1B:92:0C:AF"}}},"request":{"raw":"GET /static/favicon.ico?aaff HTTP/1.1\r\nHost: x99av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://x99av.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: tguest=guestba3e1c4c44d66a35d237cd5bc921ae4e0c1e98dd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 10 Jul 2025 08:05:14 GMT\r\ncontent-type: image/x-icon\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=y2ObYXRPJjQJt%2FR4Hf8Pgd1VjaiuGJ00fkPUv1GDdq2CqV93rukbDV4cdSWPF1so2sVHHNOM6nD18KdKLAK%2BotlgCRaHaRm3mkFkcQbdlSYCSTxF2KDVyl34siY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 11 Jun 2025 09:22:04 GMT\r\netag: W/\"68494abc-1083e\"\r\nexpires: Sat, 09 Aug 2025 07:00:12 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95ce8e0eac5b56a9-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1508\u0026min_rtt=0\u0026rtt_var=2029\u0026sent=146\u0026recv=160\u0026lost=0\u0026retrans=0\u0026sent_bytes=37484\u0026recv_bytes=10505\u0026delivery_rate=2029564\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=73ea43c08173ea37\u0026ts=6066\u0026inflight_dur=116\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":67646,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, -128x-128, 32 bits/pixel","md5":"9baab5ec1250293ba7c67b9c03d4fb0a","sha1":"10cc740f6f817614ea824588c405a3bd675301b3","sha256":"d75ec6b8ae15bfcceef9fbdc69ce44476f717d0d8e372eac154106ee397ccd31","sha512":"2077eabbff156dcc1e3c0bc0fc0459671532413b7c3fe0d0e050740f9ca2576601c0abc90ea60e3418771e6a8347d409cec4001b75fbc51e37d72d7fbb791f5a","ssdeep":"96:oMLYf7XBHAZ71Pq2EN4BVPnvw++Mm8cSS82jjv1FwHVFF8o4Cy4uNLpoAoh0eaMw:oIYTdAC444naeenH","tlshash":"34630a69122764dcfe72e93da3121b0be0670d4529503ed00be23c97f9b325ba7dd5a8","first_seen":"2023-05-22T12:03:43Z","last_seen":"2026-02-01T05:24:10.886766Z","times_seen":187,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5845-xxpp.oss-accelerate.aliyuncs.com/5845.gif","fqdn":"5845-xxpp.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.186.179","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:11.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 06 May 2025 02:12:11 GMT","end":"Tue, 03 Feb 2026 06:31:07 GMT"},"fingerprint":{"sha1":"82:9E:ED:B3:E5:61:6D:0D:52:77:3B:4A:1E:DF:68:54:AE:39:DA:01","sha256":"6C:66:0F:9B:EB:BF:7F:11:60:E4:7F:B8:4C:F8:F9:9E:79:94:1F:1C:BC:21:10:12:C5:AF:50:F5:4B:90:80:11"}}},"request":{"raw":"GET /5845.gif HTTP/1.1\r\nHost: 5845-xxpp.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: AliyunOSS\r\nDate: Thu, 10 Jul 2025 08:05:12 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nx-oss-request-id: 686F74388BE59FB8497A8B17\r\nLocation: https://xx4848.delilaw.com/5845.gif\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":324299,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":1160,"timings":{"blocked":-1,"dns":720,"connect":20,"send":0,"wait":174,"receive":0,"ssl":242},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x99av.com/static/images/svg/telegram-logo.svg","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:10.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x99av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 22:20:57 GMT","end":"Wed, 03 Sep 2025 23:19:07 GMT"},"fingerprint":{"sha1":"AF:23:BB:A5:88:17:F7:8A:63:C4:AC:70:2E:F0:8F:07:B0:8D:F8:9D","sha256":"6C:55:38:6F:78:40:E3:3F:13:AB:10:D1:9F:A1:2D:BD:B0:24:FE:63:15:A9:2A:CE:C6:58:F2:C5:1B:92:0C:AF"}}},"request":{"raw":"GET /static/images/svg/telegram-logo.svg HTTP/1.1\r\nHost: x99av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/xml, text/xml, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://x99av.com/\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: tguest=guestba3e1c4c44d66a35d237cd5bc921ae4e0c1e98dd\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 10 Jul 2025 08:05:10 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gSH%2BI6zgxh2mo3UkAIZ6Wuh8kZxdQ5pe0wPlAEBhUuwrNjaI0dgcc8Pyt4MBCMQE8uBaqNTgCl6MYhskIERt1A3VJZipqYLFYiE7Lln4gHr7Ek%2FUQW%2FVxkWHFI0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 11 Jun 2025 09:22:04 GMT\r\netag: W/\"68494abc-660\"\r\nexpires: Sat, 09 Aug 2025 07:00:24 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nage: 1\r\ncontent-encoding: br\r\ncf-ray: 95ce8df6cba956a9-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3637\u0026min_rtt=500\u0026rtt_var=1968\u0026sent=122\u0026recv=149\u0026lost=0\u0026retrans=0\u0026sent_bytes=12001\u0026recv_bytes=9442\u0026delivery_rate=418966\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=73ea43c08173ea37\u0026ts=2183\u0026inflight_dur=84\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1632,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"42cb87b6a0379d5ac72d300a233739a1","sha1":"e9e9d221a618d109f65289e346773118433f8bbc","sha256":"24489194131530448bbe788553ee6e48b83cc397a8487720c559fc71cfa7cc92","sha512":"2e9f2f7cdf9352501d28b57a18a768f911a2fbc3a74523c5f202443488944d99ff44931b2093657a7b4bc1067f1dfa2f0c2afc06141a33b248841c8cecce86aa","ssdeep":"","tlshash":"1e3153cc432f88ed7060be71dee212c72a7402f846aa523cb65a9911fc4d7b09e80f74","first_seen":"2024-06-23T20:56:03Z","last_seen":"2026-03-29T22:04:30.194656Z","times_seen":137,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x99av.com/static/images/placeholder-md.jpg","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:09.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x99av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 22:20:57 GMT","end":"Wed, 03 Sep 2025 23:19:07 GMT"},"fingerprint":{"sha1":"AF:23:BB:A5:88:17:F7:8A:63:C4:AC:70:2E:F0:8F:07:B0:8D:F8:9D","sha256":"6C:55:38:6F:78:40:E3:3F:13:AB:10:D1:9F:A1:2D:BD:B0:24:FE:63:15:A9:2A:CE:C6:58:F2:C5:1B:92:0C:AF"}}},"request":{"raw":"GET /static/images/placeholder-md.jpg HTTP/1.1\r\nHost: x99av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://x99av.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 10 Jul 2025 08:05:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14601\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 11 Jun 2025 09:22:04 GMT\r\nvary: Accept-Encoding\r\netag: \"68494abc-3909\"\r\nexpires: Sat, 09 Aug 2025 07:00:25 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xZkh%2Fizl2zf0HiuDgm02oPlhkR5cZXkOs5JE%2Boq51c0lmasnTWaxPamyR2I4zW2tUIYKgDzedDgGOmRSlmeu1dYCil6ERnY%3D\"}]}\r\ncf-ray: 95ce8deb291a0b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14601,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5.1 Windows, datetime=2019:03:31 18:12:59], progressive, precision 8, 336x188, components 3","md5":"ac9ea1a555198470671238d214b2e489","sha1":"4a22f147e57e2781e0b302ac2c156d1999793cdb","sha256":"58be1d54819c76bc997fee25de298613a1565c7f6c8ef01629511315422b7468","sha512":"3c6797f9a97cbe694ccb57bea81651d76061adcb806ae62dcd9fc58114f2784763b0b5b0a97d10b7a5f9e299a177d49546be3737308830ff15c66d6549684cd5","ssdeep":"192:X0qYNMtKwZyKPy4lmJGYNMtKwZyPknviI:XRYNg7U1i9YNg7U8nviI","tlshash":"2262ea39af61ee22f4f0d73444e1dba5b3226b14f3636b42748d7a293770ad14d0e246","first_seen":"2023-05-08T11:53:04Z","last_seen":"2026-04-05T09:28:58.967251Z","times_seen":1205,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/ff2fd8b7717da24ca04fc3b98778aa32a2a96905/cover/1_800?ih=1","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"172.66.155.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:11.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 03:04:17 GMT","end":"Thu, 04 Sep 2025 04:01:55 GMT"},"fingerprint":{"sha1":"77:83:68:54:E0:99:C9:F6:C6:B3:2B:5F:C1:56:9E:4F:34:BE:32:D9","sha256":"E6:71:B6:18:08:78:12:6E:22:71:D7:80:F0:4F:EE:0F:80:3E:05:55:F3:37:C3:5D:2B:BB:9F:A9:DA:EE:50:6D"}}},"request":{"raw":"GET /videos/ff2fd8b7717da24ca04fc3b98778aa32a2a96905/cover/1_800?ih=1 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 10 Jul 2025 08:05:11 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 141734\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Mar 2025 10:13:51 GMT\r\nvary: Accept-Encoding\r\netag: \"67c9755f-229a6\"\r\nexpires: Sat, 19 Jul 2025 08:45:40 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=7200\r\nt-cache: LHIT\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nage: 455890\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x%2Bg6glRX3X27oNqwB4JOo0tMLZmMPOMJ4CwiuEyr9aDAQEAJ3WvBb8pnRyMa3Cpd8%2BDx5YazZbMQV5Z0v8uBBtM3j68gN6ff%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 95ce8dfd0b0d56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":141734,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x500, components 3","md5":"dfc74c13a351db97b9f0dfdd69ce690e","sha1":"c7a9dd4df611a109ce6b9f6d8279321c4ec18d9a","sha256":"aa9efdf3f172e459f6be74238fbbbd998337e8f3255d85fff395911e9fee721a","sha512":"7e55efec431421eb0072938a5dd2b4fe77886d60f3963bc8ebaafc17966a36ecb052e9541ab3df1719f83b15242e7ed934737bd3a204d412b1eca9805a3289ff","ssdeep":"3072:54DtXD3oF5oTUcGzPqSdm8OsHlGlbiyqxFcoI7ctB8HheU:YtX2e9SIylkbiyqXq7cj8HB","tlshash":"f5d313eea44aba319e2938ef1e10c37b721650a27a1d514d57048478917ed82f3273fe","first_seen":"2025-06-20T01:02:10.563632Z","last_seen":"2025-07-12T12:31:04.391657Z","times_seen":10,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.fjyyedu.com/388-960x80.gif","fqdn":"img.fjyyedu.com","domain":"fjyyedu.com","tld":"com"},"ip":{"addr":"123.6.18.16","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:13.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.fjyyedu.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 15 Apr 2025 07:38:14 GMT","end":"Fri, 15 May 2026 07:38:13 GMT"},"fingerprint":{"sha1":"7F:43:AC:F1:18:6B:32:B2:0A:05:20:F3:78:B7:34:A7:CA:79:85:1E","sha256":"3C:21:F3:A8:C2:B2:11:F0:27:93:C3:94:DA:CE:4E:59:AB:E3:39:07:3C:34:6B:CA:E3:13:01:F6:33:BF:BA:88"}}},"request":{"raw":"GET /388-960x80.gif HTTP/1.1\r\nHost: img.fjyyedu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Thu, 10 Jul 2025 08:05:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 282970\r\nx-oss-request-id: 68149AADE2DC5A6785395453\r\netag: \"AA45CC96703850EC0193212A950C0F10\"\r\nlast-modified: Sun, 23 Mar 2025 06:32:58 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4708328741112908902\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000103\r\ncontent-disposition: attachment\r\nx-oss-force-download: true\r\ncontent-md5: qkXMlnA4UOwBkyEqlQwPEA==\r\nx-oss-server-time: 3\r\nx-cache: HIT\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":282970,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"aa45cc96703850ec0193212a950c0f10","sha1":"093c3dc4d498a20afdb58d3f79df6bbafa922baa","sha256":"285347a74deb2ff669f9e3a1e15e7191c5a6239c8381b165ec87403eab4aa34f","sha512":"d082dd6084df251afe21702344efabfdb45697cb1f6a14d591710a6fb401834082e005a2ca8717cdb58499439747958904908488690b4426f5af4153448bdb8b","ssdeep":"6144:54/gyWTeMgaDdacs7A54iHsZ1VdQctaoZJ5d5bv6meKCeDST87yCds:53wcs7yfHsZy699dTNjDG87yCds","tlshash":"d6541305f7ce6024018b21764523b3eda504cdf052b7b0e6ebb92961c70d8faf865af9","first_seen":"2024-12-21T01:21:33.806485Z","last_seen":"2026-02-18T09:59:45.334722Z","times_seen":2497,"resource_available":false,"data":null}},"time_used":2418,"timings":{"blocked":-1,"dns":528,"connect":236,"send":0,"wait":472,"receive":915,"ssl":267},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p.ananas.chaoxing.com/star3/origin/db326d3e8914c8d9580e0bfeeb37a7b6.gif","fqdn":"p.ananas.chaoxing.com","domain":"chaoxing.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:11.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ananas.chaoxing.com","organization":""},"issuer":{"commonName":"WoTrus DV Server CA  [Run by the Issuer]","organization":"WoTrus CA Limited"},"validity":{"start":"Mon, 20 Jan 2025 00:00:00 GMT","end":"Thu, 19 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:90:3C:97:BF:7A:5B:53:A1:6E:0D:A7:92:AE:DF:A3:73:45:B4:ED","sha256":"3F:75:2E:15:D5:6F:7C:34:65:19:4D:5A:7F:6F:F3:D1:0A:9E:3B:DC:EF:1D:6B:A0:15:07:B6:57:B7:A3:34:74"}}},"request":{"raw":"GET /star3/origin/db326d3e8914c8d9580e0bfeeb37a7b6.gif HTTP/1.1\r\nHost: p.ananas.chaoxing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 10 Jul 2025 08:05:12 GMT\r\nContent-Type: image/gif\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nRose: fms-2697320765-msg8s\r\nOrigin-Agent-Cluster: ?0\r\nx-via: 1.1 PS-KIX-01O6w190:11 (Cdn Cache Server V2.0), 1.1 PSygldLON4bk22:13 (Cdn Cache Server V2.0), 1.1 PS-ARN-04kSW118:7 (Cdn Cache Server V2.0)\r\nAge: 572931\r\nx-ws-request-id: 686f7438_PS-ARN-04kSW118_2602-37815\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84004,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"59e915f2d74f97b11c151ad387860545","sha1":"30ed6622ac717135613f3140ba0cb796d32b23f9","sha256":"c26903b94d562f8c4671b990d49b48a1ce086d81d268040c81e31c8f4be110ef","sha512":"e2e9798d398e579da2e949524655373fbfe281216a2a55f01368fdddb9ad74776177b38cc9a2d784148587d490cf3f9d508c33fd5b31a30e26da90374bfec833","ssdeep":"1536:XHgwmxdFBxrpcl2FQ4SkXrLxZ1eR4xjZD3Rk6xI71Bpz2:XAwmxH5eirLi4xND3KB7bpz2","tlshash":"b88312c2b69618620197b3472c03811ce66b26d5fe9c1de47ca14dc1f12adcaf9f4ed9","first_seen":"2023-11-12T17:45:44Z","last_seen":"2025-07-23T09:51:18.293784Z","times_seen":106,"resource_available":false,"data":null}},"time_used":1710,"timings":{"blocked":-1,"dns":968,"connect":22,"send":0,"wait":22,"receive":26,"ssl":668},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xm777111.img8822437445.com:8686/8888/xm/508/80.gif","fqdn":"xm777111.img8822437445.com","domain":"img8822437445.com","tld":"com"},"ip":{"addr":"205.198.65.114","port":8686,"asn":138997,"as":"Eons Data Communications Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:11.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xm777111.img8822437445.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Jul 2025 07:30:58 GMT","end":"Sat, 04 Oct 2025 07:30:57 GMT"},"fingerprint":{"sha1":"0B:FE:F2:B5:1B:06:AC:A7:3D:F4:8E:04:52:6C:6C:EB:1D:26:38:33","sha256":"89:21:DB:2B:7A:27:0C:25:6C:BB:C0:44:B2:DD:05:BF:FA:5A:04:6A:50:81:0B:9D:17:57:10:75:CE:F3:FB:25"}}},"request":{"raw":"GET /8888/xm/508/80.gif HTTP/1.1\r\nHost: xm777111.img8822437445.com:8686\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncontent-type: image/gif\r\ndate: Thu, 10 Jul 2025 08:05:01 GMT\r\netag: \"66b3688a-4e9c7\"\r\nexpires: Sat, 09 Aug 2025 08:05:01 GMT\r\nlast-modified: Wed, 07 Aug 2024 12:28:58 GMT\r\nserver: nginx\r\nx-cache: BYPASS, the disk is full\r\ncontent-length: 321991\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":321991,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"8eb97ba562904f64f2af2389f0d3eda9","sha1":"d484a2e519bf260b9eb53cfa5605220cd47879f2","sha256":"e1d1188c5ea2f2e00d0bb7212087e87ab63c898e2795c95bd1ca8ee0d09725fc","sha512":"3dc76ebf8c5b24a977ccdfae07d5e12b91d2ca2e4a08d4db2f5f9278e83417e27b3c738bf15b18597b3eca766d2766df81c4e99c3435004c6aa2d888efff49b0","ssdeep":"6144:GYfxY0XuOEXuOEXuOEXuYA24yAiwYpsv92JDiq85S92JDiq85S92JDiq85S92JDH:PzNaNaNaDAOAfYvmfDmfDmfDhMDeMDep","tlshash":"e86402bb13074bc9dafa4dc519289bd6af0524642cb39c37408d746e132673faba1f94","first_seen":"2024-08-13T16:44:54Z","last_seen":"2026-04-05T08:45:06.750968Z","times_seen":2920,"resource_available":false,"data":null}},"time_used":1727,"timings":{"blocked":-1,"dns":200,"connect":201,"send":0,"wait":258,"receive":853,"ssl":215},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/ea203467e8cdc95c5207a3f5096954a9edff0294/cover/1_800?ih=f0caf3f80cc8f6fc1ce090aee58e8362","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"172.66.155.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:11.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 03:04:17 GMT","end":"Thu, 04 Sep 2025 04:01:55 GMT"},"fingerprint":{"sha1":"77:83:68:54:E0:99:C9:F6:C6:B3:2B:5F:C1:56:9E:4F:34:BE:32:D9","sha256":"E6:71:B6:18:08:78:12:6E:22:71:D7:80:F0:4F:EE:0F:80:3E:05:55:F3:37:C3:5D:2B:BB:9F:A9:DA:EE:50:6D"}}},"request":{"raw":"GET /videos/ea203467e8cdc95c5207a3f5096954a9edff0294/cover/1_800?ih=f0caf3f80cc8f6fc1ce090aee58e8362 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 10 Jul 2025 08:05:11 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 129839\r\nserver: cloudflare\r\nlast-modified: Sat, 08 Mar 2025 06:47:00 GMT\r\nvary: Accept-Encoding\r\netag: \"67cbe7e4-1fb2f\"\r\nexpires: Tue, 10 Jun 2025 20:56:01 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=7200\r\nt-cache: LHIT\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nage: 368298\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rh3OVqvoEugn6dsBZYnd1Pe9U43JnB8WH1kVJ8AfAhGh0GTEzlJMzfl5Q5BKG0cXEZpJZBodFvzRbM%2BZOJoujVrd231g5wSsGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 95ce8dfd2b3056bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":129839,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x536, components 3","md5":"4450c8ff8854740cc4ffb4be55d0273f","sha1":"c0be0621862d2725b5631adac0d7aa0c9406fcc3","sha256":"cc855d3bb70f15113d99df3a5fd1ba436a9e78529de72736211fe41ce5e8e73a","sha512":"822ef8402fc4824bf6ef4461445656f3c674ad24563bf4c98199ca6852ca6310a3a69ba714d556bea731b1e3684453d0f4974788d4dcdfd2e1490bd9932cf49e","ssdeep":"3072:HDZArJGcFvPpAC3SSCQuIUCj7bKHMRG/Fii+o5:HDSr4I73SSH9/K4zo5","tlshash":"e1c312666a14b6e1aab9f157fed34a344074520b38dff0c03d24a9bb0fe0ade4d66542","first_seen":"2025-06-20T01:02:10.578257Z","last_seen":"2025-07-12T12:31:04.38707Z","times_seen":10,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgsa.baidu.com/forum/pic/item/4610b912c8fcc3ce9c6bd921d445d688d43f207c.jpg","fqdn":"imgsa.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"58.42.14.48","port":443,"asn":139203,"as":"Guizhou GuiAn IDC","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:11.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 08 Jul 2024 01:41:02 GMT","end":"Sat, 09 Aug 2025 01:41:01 GMT"},"fingerprint":{"sha1":"EF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0","sha256":"90:73:DE:D9:D9:93:A9:34:C2:9C:5E:C3:C6:AF:A7:28:6D:2F:0F:88:48:35:2F:94:D0:20:35:86:5D:85:68:E2"}}},"request":{"raw":"GET /forum/pic/item/4610b912c8fcc3ce9c6bd921d445d688d43f207c.jpg HTTP/1.1\r\nHost: imgsa.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: JSP3/2.0.14\r\ndate: Thu, 10 Jul 2025 08:05:12 GMT\r\ncontent-type: image/gif\r\ncontent-length: 428173\r\naccess-control-allow-origin: *\r\netag: a2ee41da4925a3457d847cfefee8c090\r\nexpires: Sat, 09 Aug 2025 08:05:12 GMT\r\nlast-modified: Thu, 01 Jan 1970 00:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":428173,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"a2ee41da4925a3457d847cfefee8c090","sha1":"7c8957ea340924b99d5fc7c75d1857ab3cc11a2c","sha256":"9d7bcefb6844597aee258037f7a9e7bb4c48a805ef70dc1c8784bc528473f2f1","sha512":"f52ad223d4001825075b222fcc80b1917d82d8fcbbd3d173f17c64a74b3821914af8fac9168a16e5f5d06ba4d555beac46db991e8a96168540abb6f924f10637","ssdeep":"6144:MxHHPgqZ1vCpS9iC9iEvIuYeQGm0v3OQ+hiqwK0ZGm0vBINh6FXkYzoiGSIQ+IXG:M9HP/1Kp4ioi+rmbrmrNMFk4ozMonUXy","tlshash":"e694234dc1e9084900dfde6a0de9a86893462cd6a61af41a36baf905f3ee0d453dd3e1","first_seen":"2025-07-01T15:59:54.669368Z","last_seen":"2025-09-20T12:38:25.019618Z","times_seen":357,"resource_available":false,"data":null}},"time_used":2804,"timings":{"blocked":-1,"dns":630,"connect":286,"send":0,"wait":404,"receive":1045,"ssl":431},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfBBc4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:11.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:02:59 GMT","end":"Tue, 09 Sep 2025 20:02:58 GMT"},"fingerprint":{"sha1":"31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07","sha256":"2F:67:D7:7E:00:E7:2B:D9:8F:2E:76:EE:DD:88:CD:48:3C:32:CA:C0:54:77:12:F4:A3:81:9D:74:64:23:E0:65"}}},"request":{"raw":"GET /s/roboto/v18/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://x99av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zgnzw.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15436\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Jul 2025 10:06:24 GMT\r\nexpires: Fri, 03 Jul 2026 10:06:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 597527\r\nlast-modified: Mon, 16 Oct 2017 17:33:12 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15436,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15436, version 1.0","md5":"037d830416495def72b7881024c14b7b","sha1":"619389190b3cafafb5db94113990350acc8a0278","sha256":"1d5b7c64458f4af91dcfee0354be47adde1f739b5aded03a7ab6068a1bb6ca97","sha512":"c8d2808945a9bf2e6ad36c7749313467ff390f195448c326c4d4d7a4a635a11e2ddf4d0779be2db274f1d1d9d022b1f837294f1e12c9f87e3eac8a95cfd8872f","ssdeep":"384:uJ/qNyGt74AcZEG+69hFFHDJ1CggakKt0y:+q/kAc+ohFx9YgB2y","tlshash":"6e62d017f1fe5110ded279ba7e4f003b18e194e6eb308ab8412789266e4c18dacf8d35","first_seen":"2023-04-07T06:04:51Z","last_seen":"2026-04-05T13:08:01.139986Z","times_seen":7455,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gif.fpaixfl.com/388-960x80.gif","fqdn":"gif.fpaixfl.com","domain":"fpaixfl.com","tld":"com"},"ip":{"addr":"98.98.86.10","port":443,"asn":21859,"as":"ZEN-ECN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:11.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gif.fpaixfl.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 13 May 2025 08:25:46 GMT","end":"Fri, 12 Jun 2026 08:25:45 GMT"},"fingerprint":{"sha1":"11:B7:77:59:64:2F:0D:C2:C2:C9:B2:65:F4:5A:A0:50:AA:CC:F2:20","sha256":"C5:5E:2A:26:BE:AA:3D:91:5C:5C:AE:2A:BB:6E:03:42:82:05:56:B7:F0:5D:98:A1:2A:67:DB:72:98:95:7E:61"}}},"request":{"raw":"GET /388-960x80.gif HTTP/1.1\r\nHost: gif.fpaixfl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: NgxFence\r\ndate: Thu, 10 Jul 2025 08:05:12 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 0\r\nlocation: https://img.fjyyedu.com/388-960x80.gif\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":282970,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":1525,"timings":{"blocked":-1,"dns":764,"connect":155,"send":0,"wait":294,"receive":0,"ssl":308},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-10","alert":"Sinkholed","trigger":"fpaixfl.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"x99av.com/static/images/svg/telegram-logo.svg","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:10.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x99av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 22:20:57 GMT","end":"Wed, 03 Sep 2025 23:19:07 GMT"},"fingerprint":{"sha1":"AF:23:BB:A5:88:17:F7:8A:63:C4:AC:70:2E:F0:8F:07:B0:8D:F8:9D","sha256":"6C:55:38:6F:78:40:E3:3F:13:AB:10:D1:9F:A1:2D:BD:B0:24:FE:63:15:A9:2A:CE:C6:58:F2:C5:1B:92:0C:AF"}}},"request":{"raw":"GET /static/images/svg/telegram-logo.svg HTTP/1.1\r\nHost: x99av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/xml, text/xml, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://x99av.com/\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: tguest=guestba3e1c4c44d66a35d237cd5bc921ae4e0c1e98dd\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 10 Jul 2025 08:05:10 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QpQVYRsfvDARoo5gffskNWi%2BEyOayG9%2FIIpstOAwmB9bV2osGPgPM1o9c3LkLnWeySztqIFVU6f5MinsPYEK3M8PyGjcJBD5qmBQGjVutDQ9T2I7rx94rM2arIs%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 11 Jun 2025 09:22:04 GMT\r\netag: W/\"68494abc-660\"\r\nexpires: Sat, 09 Aug 2025 07:00:24 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nage: 1\r\ncontent-encoding: br\r\ncf-ray: 95ce8df6cba856a9-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3637\u0026min_rtt=500\u0026rtt_var=1968\u0026sent=124\u0026recv=149\u0026lost=0\u0026retrans=0\u0026sent_bytes=13626\u0026recv_bytes=9442\u0026delivery_rate=418966\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=73ea43c08173ea37\u0026ts=2184\u0026inflight_dur=84\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1632,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"42cb87b6a0379d5ac72d300a233739a1","sha1":"e9e9d221a618d109f65289e346773118433f8bbc","sha256":"24489194131530448bbe788553ee6e48b83cc397a8487720c559fc71cfa7cc92","sha512":"2e9f2f7cdf9352501d28b57a18a768f911a2fbc3a74523c5f202443488944d99ff44931b2093657a7b4bc1067f1dfa2f0c2afc06141a33b248841c8cecce86aa","ssdeep":"","tlshash":"1e3153cc432f88ed7060be71dee212c72a7402f846aa523cb65a9911fc4d7b09e80f74","first_seen":"2024-06-23T20:56:03Z","last_seen":"2026-03-29T22:04:30.194656Z","times_seen":137,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfBBc4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:10.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:02:59 GMT","end":"Tue, 09 Sep 2025 20:02:58 GMT"},"fingerprint":{"sha1":"31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07","sha256":"2F:67:D7:7E:00:E7:2B:D9:8F:2E:76:EE:DD:88:CD:48:3C:32:CA:C0:54:77:12:F4:A3:81:9D:74:64:23:E0:65"}}},"request":{"raw":"GET /s/roboto/v18/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://x99av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zgnzw.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15436\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Jul 2025 10:06:24 GMT\r\nexpires: Fri, 03 Jul 2026 10:06:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 597526\r\nlast-modified: Mon, 16 Oct 2017 17:33:12 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15436,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15436, version 1.0","md5":"037d830416495def72b7881024c14b7b","sha1":"619389190b3cafafb5db94113990350acc8a0278","sha256":"1d5b7c64458f4af91dcfee0354be47adde1f739b5aded03a7ab6068a1bb6ca97","sha512":"c8d2808945a9bf2e6ad36c7749313467ff390f195448c326c4d4d7a4a635a11e2ddf4d0779be2db274f1d1d9d022b1f837294f1e12c9f87e3eac8a95cfd8872f","ssdeep":"384:uJ/qNyGt74AcZEG+69hFFHDJ1CggakKt0y:+q/kAc+ohFx9YgB2y","tlshash":"6e62d017f1fe5110ded279ba7e4f003b18e194e6eb308ab8412789266e4c18dacf8d35","first_seen":"2023-04-07T06:04:51Z","last_seen":"2026-04-05T13:08:01.139986Z","times_seen":7455,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":136,"dns":1,"connect":7,"send":0,"wait":8,"receive":7,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/4be2d561d0d15123a8ee867cb9364b04ed2e4e7c/cover/5_320_180.webp?ih=1","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"172.66.155.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:10.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 03:04:17 GMT","end":"Thu, 04 Sep 2025 04:01:55 GMT"},"fingerprint":{"sha1":"77:83:68:54:E0:99:C9:F6:C6:B3:2B:5F:C1:56:9E:4F:34:BE:32:D9","sha256":"E6:71:B6:18:08:78:12:6E:22:71:D7:80:F0:4F:EE:0F:80:3E:05:55:F3:37:C3:5D:2B:BB:9F:A9:DA:EE:50:6D"}}},"request":{"raw":"GET /videos/4be2d561d0d15123a8ee867cb9364b04ed2e4e7c/cover/5_320_180.webp?ih=1 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 10 Jul 2025 08:05:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22962\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 04 Mar 2025 15:03:17 GMT\r\netag: \"67c71635-59b2\"\r\nexpires: Tue, 10 Jun 2025 15:07:17 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=7200\r\nt-cache: LHIT\r\ncf-cache-status: HIT\r\nage: 553756\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YN0Ul4QAPfpZjq614UiZAU8Y79P3r6Y8lEeWc0SZ6TJlmRgofM4sDk960n2biLntD48PCVHY3fwABsLbJKNsrJLaVQhNANgjZA%3D%3D\"}]}\r\ncf-ray: 95ce8dfa3f660b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22962,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ea8ac073636ccca007b896ec665dcd3c","sha1":"bb59630027cfba044f788c3de66a7f593b47037b","sha256":"cc4ef32a343b01f76bc3ee66796435b7461da6d5e0bb31fdfbd25602aebff311","sha512":"584266cfb6d6b6cf1c83e9b3cd8b1f8dce52a0fa0a47af91dd6485a02d02043abcc996b4db95f96d30baabd312abf845debc8b30d7b4c5ade82e22058c34dad4","ssdeep":"384:hqSqg/QiHfIAXFmOOTFowyHydKAoGG8JHAT1g9gqR07Ng+59HTRKfOS2hmjddUpX:hqSqwHrN8gqJHATi9ge+Ng+5ZFin24Bg","tlshash":"5da2e0893ce3b1be4d996c0672873be744bcf6545465717e8bd041fa3ac090c895c42a","first_seen":"2024-09-19T22:23:02.385377Z","last_seen":"2025-10-22T10:26:27.160023Z","times_seen":70,"resource_available":false,"data":null}},"time_used":843,"timings":{"blocked":415,"dns":370,"connect":6,"send":0,"wait":10,"receive":1,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"txdytuchuang1.oss-cn-beijing.aliyuncs.com/1329.gif","fqdn":"txdytuchuang1.oss-cn-beijing.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"39.103.20.63","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:11.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cn-beijing.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 02 Jan 2025 06:32:06 GMT","end":"Thu, 04 Sep 2025 00:00:00 GMT"},"fingerprint":{"sha1":"8A:3B:CD:6E:33:73:41:A6:84:C1:C1:D4:33:14:D9:08:13:FC:B3:FD","sha256":"0F:19:CE:E1:BA:5A:38:3C:2B:09:0F:FE:AE:74:8C:D2:80:A0:09:2C:FD:9C:1E:E8:B2:13:00:39:44:DB:2D:8C"}}},"request":{"raw":"GET /1329.gif HTTP/1.1\r\nHost: txdytuchuang1.oss-cn-beijing.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 10 Jul 2025 08:05:12 GMT\r\nContent-Type: image/gif\r\nContent-Length: 339723\r\nConnection: keep-alive\r\nx-oss-request-id: 686F74389DBA1232335176F8\r\nAccept-Ranges: bytes\r\nETag: \"B58B6B1221C88B281476B143F8065AFD\"\r\nLast-Modified: Sat, 28 Jun 2025 12:52:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8593911327511815938\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000104\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: tYtrEiHIiygUdrFD+AZa/Q==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":339723,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"b58b6b1221c88b281476b143f8065afd","sha1":"8ab029042de18f365e0d885beb43f16f34231a38","sha256":"e98878d5096bfda3db02eadb4a30edbaf518b62f2ff997b417429cf5291e2fb2","sha512":"4631fb71bd89984de71d806c34f287892c62f48c56cbe5ee5c3bc69dbad8b920e6b69681da2219775b559ab2452668f8df8216c566e9a64b00e1f39f7b68770b","ssdeep":"6144:LEFGOn8sf+vjEWkb+FLLbSN+FLLRKcXQ2V1e/cLVTZX23isuCOiguubDO6:A58LvjhhlhuGTIXGDt","tlshash":"a474230d2d6b2bb48431297c40c5ada16717bdc89d325c8e7b96acf2815f5a0f24f987","first_seen":"2025-02-13T11:16:43.28729Z","last_seen":"2026-03-29T19:55:31.573393Z","times_seen":1913,"resource_available":false,"data":null}},"time_used":2214,"timings":{"blocked":-1,"dns":286,"connect":259,"send":0,"wait":262,"receive":790,"ssl":617},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p.ananas.chaoxing.com/star3/origin/0f81a0a51bb8c811adaccc27e0f583aa.gif","fqdn":"p.ananas.chaoxing.com","domain":"chaoxing.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:11.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ananas.chaoxing.com","organization":""},"issuer":{"commonName":"WoTrus DV Server CA  [Run by the Issuer]","organization":"WoTrus CA Limited"},"validity":{"start":"Mon, 20 Jan 2025 00:00:00 GMT","end":"Thu, 19 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:90:3C:97:BF:7A:5B:53:A1:6E:0D:A7:92:AE:DF:A3:73:45:B4:ED","sha256":"3F:75:2E:15:D5:6F:7C:34:65:19:4D:5A:7F:6F:F3:D1:0A:9E:3B:DC:EF:1D:6B:A0:15:07:B6:57:B7:A3:34:74"}}},"request":{"raw":"GET /star3/origin/0f81a0a51bb8c811adaccc27e0f583aa.gif HTTP/1.1\r\nHost: p.ananas.chaoxing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 10 Jul 2025 08:05:13 GMT\r\nContent-Type: image/gif\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nRose: fms-2697320765-lb57c\r\nOrigin-Agent-Cluster: ?0\r\nx-via: 1.1 PSrbdbOSA2kv115:2 (Cdn Cache Server V2.0), 1.1 PSygldLON4hz30:10 (Cdn Cache Server V2.0), 1.1 PS-ARN-04kSW118:13 (Cdn Cache Server V2.0)\r\nAge: 601780\r\nx-ws-request-id: 686f7439_PS-ARN-04kSW118_3228-520\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":570747,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"1b3d1e42b95ac5169d1bc43ca25884a9","sha1":"275d28f1070fa33d208ad23ba097e67e21d2201a","sha256":"f0d86b90e018e9bdf678acc74c2b1d1e601898da0468c48b4eb645db18284957","sha512":"70246c7873a50b11e67c56dd6af3eb0d284ad3d9baa3858106aa5cc0b5eacddbe1f56153f8752fa6d71c7740f64709143285c4a93b8fd0e014e8adeba48e6d59","ssdeep":"6144:z04MER7B4HcDwOaFcICLJ5y7uY0aFcICLJ5y7uY0aFcICLJ5y7uY0aFcICLHik9X:qERmHQ9WUWUWJk96Cmg4446","tlshash":"6fc423a0b5cec7661dc816460c8fe3c3644454922d99cf3b66f9d1fb1fb3a181c618ea","first_seen":"2025-05-02T03:31:58.404492Z","last_seen":"2025-07-23T09:51:18.276845Z","times_seen":732,"resource_available":false,"data":null}},"time_used":2232,"timings":{"blocked":-1,"dns":967,"connect":22,"send":0,"wait":22,"receive":147,"ssl":1074},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/3c6d8108b40c4385e62bedcf17533d7d44b5a11e/cover/1_800?ih=7ecd6359dbf08837bb2b4dc8f6a20c6d","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"172.66.155.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:11.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 03:04:17 GMT","end":"Thu, 04 Sep 2025 04:01:55 GMT"},"fingerprint":{"sha1":"77:83:68:54:E0:99:C9:F6:C6:B3:2B:5F:C1:56:9E:4F:34:BE:32:D9","sha256":"E6:71:B6:18:08:78:12:6E:22:71:D7:80:F0:4F:EE:0F:80:3E:05:55:F3:37:C3:5D:2B:BB:9F:A9:DA:EE:50:6D"}}},"request":{"raw":"GET /videos/3c6d8108b40c4385e62bedcf17533d7d44b5a11e/cover/1_800?ih=7ecd6359dbf08837bb2b4dc8f6a20c6d HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 10 Jul 2025 08:05:11 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 56127\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Mar 2025 15:33:37 GMT\r\nvary: Accept-Encoding\r\netag: \"67c71d51-db3f\"\r\nexpires: Sat, 14 Jun 2025 11:43:06 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=7200\r\nt-cache: LHIT\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nage: 560060\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7bwQ4grtk5JCtUu5MN2yLspILR%2FAvSaIpaegE6F6exm9iam7OwX0W7%2Bc8qtwxhhkgwpuV7a7ckIJlRPFd5IIkcRhAwwvz%2Fhwwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 95ce8dfd4b4e56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":56127,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x538, components 3","md5":"894e78f57c6eff835dfcf0221ad2f2e4","sha1":"f9d51897137f84871df78b9f61b856c8496eccc3","sha256":"3ae905fa75248d4e490b9df1ba5ebd25afce0b403ff25ae76e525af35bc64db0","sha512":"7ed9e4976f3fae53f1af739de3ca342cc8262c1023f131bb17002c28b4302f19c40e7b62c7d9454a245189c3ea5bb7f7e8b19eef7f841c1b492bbbc18db1e93d","ssdeep":"1536:19ypIQpaN2ZREsNRgbkYf862fgdSoCe3tIOvUICL:+xa2ZpRgTELgdNp3GOvzCL","tlshash":"4643015f700d4ede14beceb446831806e863cbc2ddf46d784ae9a3c5af087e69366245","first_seen":"2025-06-20T01:02:10.585144Z","last_seen":"2025-07-12T12:31:04.389405Z","times_seen":10,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/x99av/css/b.css?460f26f7de8acc702d75d11f6204d","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:09.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zgnzw.xyz","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 12:49:38 GMT","end":"Sun, 28 Sep 2025 13:47:08 GMT"},"fingerprint":{"sha1":"BA:21:78:F2:C7:9E:D8:A6:DE:B0:D8:84:A6:80:3A:15:8E:EC:53:4E","sha256":"EA:17:D3:36:AF:91:94:B0:35:12:40:84:A0:91:1B:24:6A:BB:37:59:77:2D:6D:87:81:D9:DB:4B:72:B6:E5:B4"}}},"request":{"raw":"GET /x99av/css/b.css?460f26f7de8acc702d75d11f6204d HTTP/1.1\r\nHost: zgnzw.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 10 Jul 2025 08:05:09 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Jul 2025 06:30:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"686f5de9-232ea\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncache-control: max-age=2073600\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fnufdrs%2BST336qXGVAwq1gPPcZ4HX5VcuLI2U3VZkOKIVlpFbtzvv420FIqtH4s1n%2BnrsNmpwERaPXQBKW%2B10kl%2FNDo0hDI%3D\"}]}\r\ncf-ray: 95ce8def2a3456a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":144106,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0460f26f7de8acc702d75d11f6204d62","sha1":"c9ab658589594b0fb8ad74b15552c075b9752576","sha256":"b06388c767f49a3986b880a9247d89477337d1d8a33ca462bb02b4f64b980b27","sha512":"6ed85ac923a8cd6c4b28bc7a0328dc924ce9a5c41e4ed9001da81a64aa8b01bec7c5c71067836c183dcaaa1cf551342392eda99337874e490e206dca3168ebdf","ssdeep":"1536:MnH2ABS4J8C3+iCpdrGHd2r/kuf2NYzfgwE3sozKPBUkHtKt696WM:MnH2pcOGZwE3srM","tlshash":"afe3d83fd982215d40278a55c6c85fe42f3dd563a4924edff312380a878ab9e27d670b","first_seen":"2025-06-17T13:25:41.487394Z","last_seen":"2025-07-10T08:05:35.914842Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1382,"timings":{"blocked":547,"dns":615,"connect":3,"send":0,"wait":199,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpj46-xz.oss-accelerate.aliyuncs.com/xpj.gif","fqdn":"xpj46-xz.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.186.237","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:11.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 06 May 2025 02:12:11 GMT","end":"Tue, 03 Feb 2026 06:31:07 GMT"},"fingerprint":{"sha1":"82:9E:ED:B3:E5:61:6D:0D:52:77:3B:4A:1E:DF:68:54:AE:39:DA:01","sha256":"6C:66:0F:9B:EB:BF:7F:11:60:E4:7F:B8:4C:F8:F9:9E:79:94:1F:1C:BC:21:10:12:C5:AF:50:F5:4B:90:80:11"}}},"request":{"raw":"GET /xpj.gif HTTP/1.1\r\nHost: xpj46-xz.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: AliyunOSS\r\nDate: Thu, 10 Jul 2025 08:05:12 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nx-oss-request-id: 686F7438797B2AAA6FA0BE37\r\nLocation: https://xx4848.delilaw.com/1372.gif\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":385649,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":2305,"timings":{"blocked":1051,"dns":875,"connect":22,"send":0,"wait":177,"receive":1,"ssl":171},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sp0.baidu.com/9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://x99av.com/","fqdn":"sp0.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"103.235.46.102","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:14.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 08 Jul 2024 01:41:02 GMT","end":"Sat, 09 Aug 2025 01:41:01 GMT"},"fingerprint":{"sha1":"EF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0","sha256":"90:73:DE:D9:D9:93:A9:34:C2:9C:5E:C3:C6:AF:A7:28:6D:2F:0F:88:48:35:2F:94:D0:20:35:86:5D:85:68:E2"}}},"request":{"raw":"GET /9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://x99av.com/ HTTP/1.1\r\nHost: sp0.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 0\r\nContent-Type: text/plain; charset=utf-8\r\nDate: Thu, 10 Jul 2025 08:05:15 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":2077,"timings":{"blocked":873,"dns":83,"connect":257,"send":0,"wait":331,"receive":1,"ssl":528},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/x99av/js/t.x99av.js?417abdd002cfd2e3640","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:08.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zgnzw.xyz","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 12:49:38 GMT","end":"Sun, 28 Sep 2025 13:47:08 GMT"},"fingerprint":{"sha1":"BA:21:78:F2:C7:9E:D8:A6:DE:B0:D8:84:A6:80:3A:15:8E:EC:53:4E","sha256":"EA:17:D3:36:AF:91:94:B0:35:12:40:84:A0:91:1B:24:6A:BB:37:59:77:2D:6D:87:81:D9:DB:4B:72:B6:E5:B4"}}},"request":{"raw":"GET /x99av/js/t.x99av.js?417abdd002cfd2e3640 HTTP/1.1\r\nHost: zgnzw.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 10 Jul 2025 08:05:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Jul 2025 06:30:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"686f5de9-125649\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncache-control: max-age=2073600\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wbH3caZyeWxG47mF%2BIdly92K3QBf4K9qFDHrcE5LOkRlkT4QtvAt9dbPfbTVgpy4p2NkH7nvlf6Q18EGnSACNr0KblIeenE%3D\"}]}\r\ncf-ray: 95ce8def2a2f56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1201737,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65026), with no line terminators","md5":"7136e12f8cb87a09fde89d520c36fd80","sha1":"9d27484cdc3a9a0cd3c60884f90623c6ded9273b","sha256":"213ba3587801396d59c1c3caee1f26adf4c5e9d571b573c92473a168e11fd398","sha512":"f53abd1d083a0b3644f95e07ebaac8a0ed97041a0c2eb127130c603f9edddec410d9048653a1cc2d5009f12b9aa8ccbd163fb88863fa4868957bf57adbae1d72","ssdeep":"24576:0xV3wDFugEiQZswBMgtsVFyEJz47RfY/U7:0V3wDFugEiQew+SsVFyEJz47Rf2U7","tlshash":"e4452b8af281b06506d760b5513f1606f2372959e40e805cfe7ae4e96cbca8c51bbf3d","first_seen":"2025-07-10T08:05:35.915494Z","last_seen":"2025-07-10T08:05:35.915494Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1469,"timings":{"blocked":627,"dns":630,"connect":1,"send":0,"wait":195,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x99av.com/?mode=async\u0026action=js_stats\u0026rand=1752134711425","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:11.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x99av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 22:20:57 GMT","end":"Wed, 03 Sep 2025 23:19:07 GMT"},"fingerprint":{"sha1":"AF:23:BB:A5:88:17:F7:8A:63:C4:AC:70:2E:F0:8F:07:B0:8D:F8:9D","sha256":"6C:55:38:6F:78:40:E3:3F:13:AB:10:D1:9F:A1:2D:BD:B0:24:FE:63:15:A9:2A:CE:C6:58:F2:C5:1B:92:0C:AF"}}},"request":{"raw":"GET /?mode=async\u0026action=js_stats\u0026rand=1752134711425 HTTP/1.1\r\nHost: x99av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://x99av.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: tguest=guestba3e1c4c44d66a35d237cd5bc921ae4e0c1e98dd; kt_tcookie=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 10 Jul 2025 08:05:12 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XwiEWBv4YjTi73FNW2na6ViLtVWMtOHRHLAwGt91116Ewef%2Fiin9xgLQMexOcocmP1Wcb3YEfveFClZ2EPdh2nfZ78AYp2x5O5UT5e%2BP8av8bY6FIhsDjxm5Obg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nghash: _ec0ac92667c\r\nt-ray: ws2\r\nipcountry: NO\r\ncache-key: x99av:_ec0ac92667c:/?mode=async\u0026action=js_stats\u0026rand=1752134711425\r\nexpires: Mon, 08 Sep 2025 08:05:12 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=1209600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\nw-cache: MISS\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 95ce8dfbbbca56a9-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3117\u0026min_rtt=0\u0026rtt_var=2556\u0026sent=129\u0026recv=153\u0026lost=0\u0026retrans=0\u0026sent_bytes=16381\u0026recv_bytes=9920\u0026delivery_rate=822885\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=73ea43c08173ea37\u0026ts=4128\u0026inflight_dur=105\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":101360,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (29450)","md5":"52170c2bcd3a33b385fe41fbc24c901e","sha1":"248bd5dc33b98159ac080bd6e0e28875b93cea6e","sha256":"9040906e4cd8b1eb1eccf6746b16ab2183c31804f96383812a89f170a69cb63a","sha512":"4b93a3eae92538881fb79b33cc57e51ddfc9bd4c20e21f44859259754b14ad511117631656e5c5f3dfe4f178f42a7f66abd837e9c827af19c713a3b249b1917e","ssdeep":"768:UwTcjiYvl3NlS+v08YcQkuRsYhqHgs7mFTXmAeIeBbIOIzcrmcf0GHuz:fONxv08YcNukgFmAeIEbIOIzcrm5","tlshash":"ada39723a45a313f273351ce6d11bb2eb383905eeed75e23a6fc1ed98799d00984506e","first_seen":"2025-07-10T08:05:35.916824Z","last_seen":"2025-07-10T08:05:35.916824Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1181,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":1164,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:11.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:02:59 GMT","end":"Tue, 09 Sep 2025 20:02:58 GMT"},"fingerprint":{"sha1":"31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07","sha256":"2F:67:D7:7E:00:E7:2B:D9:8F:2E:76:EE:DD:88:CD:48:3C:32:CA:C0:54:77:12:F4:A3:81:9D:74:64:23:E0:65"}}},"request":{"raw":"GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://x99av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zgnzw.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Jul 2025 10:09:07 GMT\r\nexpires: Fri, 03 Jul 2026 10:09:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 597364\r\nlast-modified: Mon, 16 Oct 2017 17:33:02 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15552,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15552, version 1.0","md5":"285467176f7fe6bb6a9c6873b3dad2cc","sha1":"ea04e4ff5142ddd69307c183def721a160e0a64e","sha256":"5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7","sha512":"5f9bb763406ea8ce978ec675bd51a0263e9547021ea71188dbd62f0212eb00c1421b750d3b94550b50425bebff5f881c41299f6a33bbfa12fb1ff18c12bc7ff1","ssdeep":"384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi","tlshash":"8462e103f2bc4c01e786193ebb5870237205272619efa67780ce7ea4c65ec81a39b457","first_seen":"2023-04-05T04:58:40Z","last_seen":"2026-04-05T13:43:51.461627Z","times_seen":338534,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xx4848.delilaw.com/1.gif","fqdn":"xx4848.delilaw.com","domain":"delilaw.com","tld":"com"},"ip":{"addr":"123.6.18.113","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:12.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xx4848.delilaw.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Jun 2025 07:09:52 GMT","end":"Thu, 25 Sep 2025 07:09:51 GMT"},"fingerprint":{"sha1":"2A:B6:BF:40:66:26:91:23:FF:18:08:60:C8:02:1A:0C:87:F0:B8:01","sha256":"E5:47:24:44:B1:54:12:9F:6F:12:E1:0A:F9:77:14:A4:59:E0:09:F1:F9:72:38:AB:0A:4D:3B:49:86:B6:A8:F3"}}},"request":{"raw":"GET /1.gif HTTP/1.1\r\nHost: xx4848.delilaw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Thu, 10 Jul 2025 08:05:13 GMT\r\ncontent-type: image/gif\r\ncontent-length: 523764\r\nlast-modified: Wed, 25 Dec 2024 12:48:17 GMT\r\netag: \"676bff11-7fdf4\"\r\nexpires: Sun, 27 Jul 2025 08:44:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":523764,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"8102b307619a90c2245da75bc7445fd9","sha1":"21ed3095f76e34fe8134cf4575c75b785616c4a7","sha256":"c2e316430822c76ff6bb32ba2b68876d2d930398f8e3f88cb70578c0b8fe03d7","sha512":"626b85d75d51b59fe4bf33528dfcf5290034db68b4746a9e7f5492f61ab43899d5f63c8efa6933ecaf2afdedf086127cb33cef2ff2d70aa405c2b3b0c0d7d3e4","ssdeep":"12288:uRM7hlTdJE/o5galslzMF7ZnxwWgwirPr:uRgx6/oizM1Jxw9wWPr","tlshash":"46b423ef842de8291f06b8b154610ee5658b9d87f8d5d329f7a4ccb6cac4ce8508473b","first_seen":"2024-12-26T06:54:57.165453Z","last_seen":"2026-02-23T04:20:58.439721Z","times_seen":2571,"resource_available":false,"data":null}},"time_used":3098,"timings":{"blocked":1,"dns":884,"connect":255,"send":0,"wait":970,"receive":718,"ssl":269},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x99av.com/static/images/avatar.svg","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:09.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x99av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 22:20:57 GMT","end":"Wed, 03 Sep 2025 23:19:07 GMT"},"fingerprint":{"sha1":"AF:23:BB:A5:88:17:F7:8A:63:C4:AC:70:2E:F0:8F:07:B0:8D:F8:9D","sha256":"6C:55:38:6F:78:40:E3:3F:13:AB:10:D1:9F:A1:2D:BD:B0:24:FE:63:15:A9:2A:CE:C6:58:F2:C5:1B:92:0C:AF"}}},"request":{"raw":"GET /static/images/avatar.svg HTTP/1.1\r\nHost: x99av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://x99av.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 10 Jul 2025 08:05:09 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 11 Jun 2025 09:22:04 GMT\r\nvary: accept-encoding\r\nexpires: Sat, 09 Aug 2025 07:00:26 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C4KCwSyvr9%2BEq8bZIRUwxP9Pjnp%2BPhHwYpYU8d1BJpd9At3mTtSNPXgaXgjMOKz%2FZ1MjElzoOoqGuR%2F3mzXlfl4GddlMYxU%3D\"}]}\r\netag: W/\"68494abc-3cb\"\r\ncontent-encoding: br\r\ncf-ray: 95ce8deb29190b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":971,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fed71e25fe97867fdd5c73b04d05dbb2","sha1":"1f9924929bfc3e22922cb5dd54973b2bde6acf93","sha256":"70a69c3782812d7096ebc39fc4ba5e000ee35abb208d1030328b15480c7300e1","sha512":"830a32090ac502ca417e7295c4c80f54f182b341c562bcfb79f9c20888c2ad2b07bed1d720af3ca89b9366b28a963402195d81b7326ec91e990eeb49c3db0471","ssdeep":"","tlshash":"c21114e8c2ac8030cd5883a4927870f5860cb0fed2d583df624d95b831396e8f51a5d4","first_seen":"2024-06-23T20:56:03Z","last_seen":"2026-04-02T21:58:28.457402Z","times_seen":140,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yj777222.img0251678113.com:8686/8888/yh/80.gif","fqdn":"yj777222.img0251678113.com","domain":"img0251678113.com","tld":"com"},"ip":{"addr":"205.198.65.114","port":8686,"asn":138997,"as":"Eons Data Communications Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:11.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yj777222.img0251678113.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Jul 2025 07:30:54 GMT","end":"Sat, 04 Oct 2025 07:30:53 GMT"},"fingerprint":{"sha1":"2A:CD:12:FB:CF:6E:8E:A9:EA:B1:28:0B:D3:67:63:30:D5:94:5C:03","sha256":"98:A5:A2:CA:E1:76:A6:CB:9A:B0:0F:08:4A:6D:82:9F:A4:95:C4:E3:5A:3F:C5:48:E8:2C:0D:A5:3D:44:41:B0"}}},"request":{"raw":"GET /8888/yh/80.gif HTTP/1.1\r\nHost: yj777222.img0251678113.com:8686\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncontent-type: image/gif\r\ndate: Thu, 10 Jul 2025 08:05:01 GMT\r\netag: \"664dc9e3-5f697\"\r\nexpires: Sat, 09 Aug 2025 08:05:01 GMT\r\nlast-modified: Wed, 22 May 2024 10:33:07 GMT\r\nserver: nginx\r\nx-cache: UPDATING\r\ncontent-length: 390807\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":390807,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"8d8e0c09a5cb36948161cb7c9ff72553","sha1":"e634de73052eee1f892a920d22f6bd0a913150c1","sha256":"134a4ee4865b3aac479ef1f38645cf311ae5613739e553e2dca3bfa12f1c4627","sha512":"7abcddb73f4059430e6f849b0f4d70eb1cb5b0d95f81965db4ffe27e27193d81ab57ae01f0cf0499cbaad939dce26c7ca3086ba83843673d7befb0ed6a243f98","ssdeep":"6144:ZiZYmRZimRZimRZimRZimRxO7M9SxYhfkSxYhfkSxYhfkSxYhfkSxYh6n8UGeEkJ:Y1999HzYYYY0n8UGcVVVVWV8bF5F5F51","tlshash":"5a8412959382bed0463cbf225f93c2a3af37f8b0d26ba75747445356e3c10542a6a1ce","first_seen":"2024-01-27T19:04:27Z","last_seen":"2026-01-02T07:21:45.610276Z","times_seen":230,"resource_available":false,"data":null}},"time_used":1878,"timings":{"blocked":-1,"dns":211,"connect":214,"send":0,"wait":267,"receive":945,"ssl":236},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:10.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:02:59 GMT","end":"Tue, 09 Sep 2025 20:02:58 GMT"},"fingerprint":{"sha1":"31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07","sha256":"2F:67:D7:7E:00:E7:2B:D9:8F:2E:76:EE:DD:88:CD:48:3C:32:CA:C0:54:77:12:F4:A3:81:9D:74:64:23:E0:65"}}},"request":{"raw":"GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://x99av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zgnzw.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15344\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Jul 2025 10:25:01 GMT\r\nexpires: Fri, 03 Jul 2026 10:25:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 596409\r\nlast-modified: Mon, 16 Oct 2017 17:32:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"5d4aeb4e5f5ef754e307d7ffaef688bd","sha1":"06db651cdf354c64a7383ea9c77024ef4fb4cef8","sha256":"3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc","sha512":"7eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw","tlshash":"5162e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:43:51.414576Z","times_seen":536229,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":164,"dns":0,"connect":20,"send":0,"wait":10,"receive":1,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/de6dcdb7676a2a0602036c876c5653e5ca6f72df90da0226d59afd07fe6813f8/cover/5_320_180.webp?ih=1","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"172.66.155.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:12.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 03:04:17 GMT","end":"Thu, 04 Sep 2025 04:01:55 GMT"},"fingerprint":{"sha1":"77:83:68:54:E0:99:C9:F6:C6:B3:2B:5F:C1:56:9E:4F:34:BE:32:D9","sha256":"E6:71:B6:18:08:78:12:6E:22:71:D7:80:F0:4F:EE:0F:80:3E:05:55:F3:37:C3:5D:2B:BB:9F:A9:DA:EE:50:6D"}}},"request":{"raw":"GET /videos/de6dcdb7676a2a0602036c876c5653e5ca6f72df90da0226d59afd07fe6813f8/cover/5_320_180.webp?ih=1 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 10 Jul 2025 08:05:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28964\r\nserver: cloudflare\r\nt-cache: MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Accept-Encoding, Origin\r\ne2-id: 2a1b0d4\r\naccess-control-allow-origin: *\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Mon, 16 Jun 2025 20:43:07 GMT\r\nx-content-type-options: nosniff\r\netag: \"155f0fd752a7d17fc6370ed052ebb959\"\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nage: 357210\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XQxVpzPpueiV%2BkvcvBKYvmZK1nncyi12U65r1djU2w%2FlpQeLmd05fb3wERzIuIagqftJf4ksxaxseIMNu2CvDZSBumuTs6VQDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 95ce8dfeed9156bd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28964,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"155f0fd752a7d17fc6370ed052ebb959","sha1":"597fe92858a8d38dccb7b922791ec1c5cf534d77","sha256":"9047d8405c62d34338e9261fba701eb694f91217037e3b91655ec0bfff212963","sha512":"d51645275ae304ffb829b94bd7ce77f58377ebcc01a3cf405e36b6288ae5b66443c28ff2127091325469263db7fceb4630b6762289c6d01a93b342386c0f19a4","ssdeep":"768:sEzhpMupopX1LI00k+oalZI9jV9IFAgxK/Plpv:sEzgupaJIpvlmCFyP/v","tlshash":"f6d2e015aa0139e581ad5eb9adaf620d141b17388b28df6950d5f7fd40bdc87336ec01","first_seen":"2025-06-19T00:12:00.091434Z","last_seen":"2025-07-27T20:46:12.921725Z","times_seen":26,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5454ylylgh.oss-accelerate.aliyuncs.com/1.gif","fqdn":"5454ylylgh.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.92","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:11.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 06 May 2025 02:12:11 GMT","end":"Tue, 03 Feb 2026 06:31:07 GMT"},"fingerprint":{"sha1":"82:9E:ED:B3:E5:61:6D:0D:52:77:3B:4A:1E:DF:68:54:AE:39:DA:01","sha256":"6C:66:0F:9B:EB:BF:7F:11:60:E4:7F:B8:4C:F8:F9:9E:79:94:1F:1C:BC:21:10:12:C5:AF:50:F5:4B:90:80:11"}}},"request":{"raw":"GET /1.gif HTTP/1.1\r\nHost: 5454ylylgh.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: AliyunOSS\r\nDate: Thu, 10 Jul 2025 08:05:12 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nx-oss-request-id: 686F743810292091B97BC5E2\r\nLocation: https://xx4848.delilaw.com/1.gif\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":523764,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":2167,"timings":{"blocked":961,"dns":720,"connect":22,"send":0,"wait":221,"receive":0,"ssl":239},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:10.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:02:59 GMT","end":"Tue, 09 Sep 2025 20:02:58 GMT"},"fingerprint":{"sha1":"31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07","sha256":"2F:67:D7:7E:00:E7:2B:D9:8F:2E:76:EE:DD:88:CD:48:3C:32:CA:C0:54:77:12:F4:A3:81:9D:74:64:23:E0:65"}}},"request":{"raw":"GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://x99av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zgnzw.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Jul 2025 10:09:07 GMT\r\nexpires: Fri, 03 Jul 2026 10:09:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 597363\r\nlast-modified: Mon, 16 Oct 2017 17:33:02 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15552,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15552, version 1.0","md5":"285467176f7fe6bb6a9c6873b3dad2cc","sha1":"ea04e4ff5142ddd69307c183def721a160e0a64e","sha256":"5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7","sha512":"5f9bb763406ea8ce978ec675bd51a0263e9547021ea71188dbd62f0212eb00c1421b750d3b94550b50425bebff5f881c41299f6a33bbfa12fb1ff18c12bc7ff1","ssdeep":"384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi","tlshash":"8462e103f2bc4c01e786193ebb5870237205272619efa67780ce7ea4c65ec81a39b457","first_seen":"2023-04-05T04:58:40Z","last_seen":"2026-04-05T13:43:51.461627Z","times_seen":338534,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":160,"dns":1,"connect":21,"send":0,"wait":10,"receive":1,"ssl":134},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/691f433b64ac0b52914f9c81bbc5b4aa/cover/5_320_180.webp?ih=1","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"172.66.155.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:10.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 03:04:17 GMT","end":"Thu, 04 Sep 2025 04:01:55 GMT"},"fingerprint":{"sha1":"77:83:68:54:E0:99:C9:F6:C6:B3:2B:5F:C1:56:9E:4F:34:BE:32:D9","sha256":"E6:71:B6:18:08:78:12:6E:22:71:D7:80:F0:4F:EE:0F:80:3E:05:55:F3:37:C3:5D:2B:BB:9F:A9:DA:EE:50:6D"}}},"request":{"raw":"GET /videos/691f433b64ac0b52914f9c81bbc5b4aa/cover/5_320_180.webp?ih=1 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 10 Jul 2025 08:05:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12118\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 04 Mar 2025 15:03:18 GMT\r\netag: \"67c71636-2f56\"\r\nexpires: Fri, 20 Jun 2025 02:16:27 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=7200\r\nt-cache: LHIT\r\ncf-cache-status: HIT\r\nage: 331109\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fKN0QU3auARKecPmjW6%2FS4jDXRc5eMrrIOMC8zAO6dXaVR2SDJ1JvrDC9WG2e2iBPF9g0z5K8TSCVPxEvywUgr52trmlosNCaw%3D%3D\"}]}\r\ncf-ray: 95ce8dfa5f8c0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12118,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a28b516ab849cb25fa7651dcf3ced6f2","sha1":"7431a123c44b0856a41ede9df061213bd861d532","sha256":"6fd450a95a4c15c4909927199a3443e73919b9652e8f690e1a0b7106e7fc8c37","sha512":"8b7429150df41f3a8b20cd6720875feafb492bc415ee242eddff7bdf50c77591b1a41907a339bd12f5cb4ce3d97f32ee8c2fb1d3dd61b818f5b810e97d33886a","ssdeep":"192:DHVZV3l06O4t0uq5AwIEGz9818k+lv3CZqGjM0+z8ZI4LkALRdcS1p/XgHYLj5KE:bVZJl06d0f5yzz98qCZ9M0i81LRdz/XJ","tlshash":"7342d021ed8267672afd59bf94231c7f2b1936256618ef4ff0d6b14242bd2007f2034a","first_seen":"2025-03-07T08:05:04.696817Z","last_seen":"2025-10-22T10:26:27.210354Z","times_seen":67,"resource_available":false,"data":null}},"time_used":875,"timings":{"blocked":434,"dns":376,"connect":3,"send":0,"wait":9,"receive":2,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/x99av/css/web.x99av.css?e3d5672bf77e7cc","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:09.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zgnzw.xyz","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 12:49:38 GMT","end":"Sun, 28 Sep 2025 13:47:08 GMT"},"fingerprint":{"sha1":"BA:21:78:F2:C7:9E:D8:A6:DE:B0:D8:84:A6:80:3A:15:8E:EC:53:4E","sha256":"EA:17:D3:36:AF:91:94:B0:35:12:40:84:A0:91:1B:24:6A:BB:37:59:77:2D:6D:87:81:D9:DB:4B:72:B6:E5:B4"}}},"request":{"raw":"GET /x99av/css/web.x99av.css?e3d5672bf77e7cc HTTP/1.1\r\nHost: zgnzw.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 10 Jul 2025 08:05:09 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Jul 2025 06:30:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"686f5de9-e4f16\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncache-control: max-age=2073600\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AtQbSTz9TwmS2w%2BiYJHf11Yr9pItmJdSlakq5ZZJZdWNi0eP1c0b0oNAPxCwF16R9SRkEuCCUS5LBDTHsnovXt6txoskw74%3D\"}]}\r\ncf-ray: 95ce8def2a3956a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":937750,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ae3d5672bf77e7cc89e5bc287d87c85a","sha1":"962dccc971a5a5cb66a47660a805b988e1705d1a","sha256":"d42779fbbd544be7e693ff3bbbcb3a79841447f709430ae96f636ea6c4d384bd","sha512":"58cd25dce70fab5c97aedea443ec032b23b8a99feef19d2b2c229b3d0a4fab338963e4c59963a3c0020afaecd3aa59b95387acdb13cb2266a9bba456fd3906ce","ssdeep":"6144:JueaMEws0LxzzYPWmIOAnenQNk6hNO6Lyt8CNmHgKyuKt8/QEi4DBN:4eaMZJLxzEPZcdyuKt4","tlshash":"0c15d6b6f580214c6723c186a6d076e9777ed051ea224fe7f0277a748bc25db18b370a","first_seen":"2025-07-10T08:05:35.923449Z","last_seen":"2025-07-10T08:05:35.923449Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1466,"timings":{"blocked":629,"dns":629,"connect":3,"send":0,"wait":186,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/d66ff3609fd974b6d1a3ec6491cb493cd2b3ed63/cover/1_800?ih=1","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"172.66.155.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:11.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 03:04:17 GMT","end":"Thu, 04 Sep 2025 04:01:55 GMT"},"fingerprint":{"sha1":"77:83:68:54:E0:99:C9:F6:C6:B3:2B:5F:C1:56:9E:4F:34:BE:32:D9","sha256":"E6:71:B6:18:08:78:12:6E:22:71:D7:80:F0:4F:EE:0F:80:3E:05:55:F3:37:C3:5D:2B:BB:9F:A9:DA:EE:50:6D"}}},"request":{"raw":"GET /videos/d66ff3609fd974b6d1a3ec6491cb493cd2b3ed63/cover/1_800?ih=1 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 10 Jul 2025 08:05:11 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 22682\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Mar 2025 14:54:05 GMT\r\nvary: Accept-Encoding\r\netag: \"67cdab8d-589a\"\r\nexpires: Sat, 19 Jul 2025 08:45:40 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=7200\r\nt-cache: LHIT\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nage: 560061\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8OROzz33MlP27BLA62HlWIBKFVW6Kaa%2Fgh8i7x%2Bu4fQ0a%2BtM09I8tSU5yGEEte9%2FjKOB1rZF425CdmGKvmPRdYvLdDz%2F0LNQDA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 95ce8dfd0b1056bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22682,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.107.100\", baseline, precision 8, 800x450, components 3","md5":"442a7df9f385a8fb731c6e72afb0411e","sha1":"6bffd1be65b10644a3f086a3efb66b1f6fcc28c4","sha256":"6f2074587bd6b25f7ba9c2d2ed71572b74ffae2a3bd220382b717136fdb61e4d","sha512":"65e340e397c3016b8575054c1fd43d03a6d5a446d7751e856d5638e68c81eb1508afd6584c6b8cba6656f9a2a37a22a9a95f8beeeffd7028ed13c999ae1d582c","ssdeep":"384:QMBL7ZOM91EfuVpJ2CdwKvS08/JW2Jq0Q+ojZXFWjL3U5TBEx6SYfpNWCIcDm0M2:9Bp5WuVp4SL8/gWu/FXFWn3U5TBp/6sv","tlshash":"2aa2c003b20a492e2ea9df39674343e3e9c4cd65b0137a1c5f20a5b7dfa2c6654cd718","first_seen":"2025-06-20T01:02:10.596781Z","last_seen":"2025-07-12T12:31:04.392205Z","times_seen":10,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:11.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:02:59 GMT","end":"Tue, 09 Sep 2025 20:02:58 GMT"},"fingerprint":{"sha1":"31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07","sha256":"2F:67:D7:7E:00:E7:2B:D9:8F:2E:76:EE:DD:88:CD:48:3C:32:CA:C0:54:77:12:F4:A3:81:9D:74:64:23:E0:65"}}},"request":{"raw":"GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://x99av.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zgnzw.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15344\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Jul 2025 10:25:01 GMT\r\nexpires: Fri, 03 Jul 2026 10:25:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 596410\r\nlast-modified: Mon, 16 Oct 2017 17:32:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"5d4aeb4e5f5ef754e307d7ffaef688bd","sha1":"06db651cdf354c64a7383ea9c77024ef4fb4cef8","sha256":"3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc","sha512":"7eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw","tlshash":"5162e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:43:51.414576Z","times_seen":536229,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":3,"dns":2,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz.bdstatic.com/linksubmit/push.js","fqdn":"zz.bdstatic.com","domain":"bdstatic.com","tld":"com"},"ip":{"addr":"157.255.63.48","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:12.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 08 Jul 2024 01:41:02 GMT","end":"Sat, 09 Aug 2025 01:41:01 GMT"},"fingerprint":{"sha1":"EF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0","sha256":"90:73:DE:D9:D9:93:A9:34:C2:9C:5E:C3:C6:AF:A7:28:6D:2F:0F:88:48:35:2F:94:D0:20:35:86:5D:85:68:E2"}}},"request":{"raw":"GET /linksubmit/push.js HTTP/1.1\r\nHost: zz.bdstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: JSP3/2.0.14\r\ndate: Thu, 10 Jul 2025 08:05:13 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Sat, 07 Jun 2025 11:14:47 GMT\r\netag: \"68441f27-134\"\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\nage: 19560\r\naccept-ranges: bytes\r\ntracecode: 23531590030189437706071010\r\nohc-global-saved-time: Thu, 10 Jul 2025 02:39:13 GMT\r\nohc-cache-hit: gz5un51 [2], zhuzuncache54 [2]\r\nohc-response-time: 1 0 0 0 0 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":308,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (308), with no line terminators","md5":"f9fc52ab67f035b8baf5d558714cc94d","sha1":"37062a6fb1ef410d496137d44275738ae743c747","sha256":"c31f2003f1c93ac1e34b09f376d97a65da6e110bf451cf1e0e50a7946c5e7212","sha512":"ebb0415852fbb5b964094e2e55a28b90f701dff1977c8b98c6f24d65d09067dc0c417d01492ca28a4be6747816d7c0bfac87b73a33725aee047a5d2f7ab83182","ssdeep":"","tlshash":"11e0cde86054c01c0dcb107135bb324ce7771d675a645545c04d9445396cb1f8247fe9","first_seen":"2023-03-07T01:18:58Z","last_seen":"2026-04-05T13:00:53.968011Z","times_seen":18980,"resource_available":true,"data":null}},"time_used":1939,"timings":{"blocked":787,"dns":284,"connect":275,"send":0,"wait":293,"receive":0,"ssl":294},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/228b731f79123a2e7caab902b4a1cef7/cover/5_320_180.webp?ih=1","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"172.66.155.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:10.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 03:04:17 GMT","end":"Thu, 04 Sep 2025 04:01:55 GMT"},"fingerprint":{"sha1":"77:83:68:54:E0:99:C9:F6:C6:B3:2B:5F:C1:56:9E:4F:34:BE:32:D9","sha256":"E6:71:B6:18:08:78:12:6E:22:71:D7:80:F0:4F:EE:0F:80:3E:05:55:F3:37:C3:5D:2B:BB:9F:A9:DA:EE:50:6D"}}},"request":{"raw":"GET /videos/228b731f79123a2e7caab902b4a1cef7/cover/5_320_180.webp?ih=1 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 10 Jul 2025 08:05:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15746\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 04 Mar 2025 15:03:18 GMT\r\netag: \"67c71636-3d82\"\r\nexpires: Tue, 10 Jun 2025 15:07:03 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=7200\r\nt-cache: LHIT\r\ncf-cache-status: HIT\r\nage: 524900\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A3H8G14fOso4OkkZJS6s1Ie9l8DdY0aXdIj7l%2FKzZIBbjHiwnp%2BaSjPAUC%2Fxf3aKX93pBBs6OpTMfGFBfx8wfMw8tJTbtReWxw%3D%3D\"}]}\r\ncf-ray: 95ce8dfa3f5c0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15746,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4d1367763da9abf59d62fb9380cecb8b","sha1":"c6e2ea8334e74bfa976b84572218ef1da63700d8","sha256":"05b9f72196e60f81f01b1722dc690fdb9c791ab7e9d7f629174789f90d79555a","sha512":"693d0367356015d8344cee0f59fffeda0bc5a80e1731cb49ba4a0c88477df57a96a3b2f87c79f9aeac2ff506ac12f3112d2dea42b3872dd824006b1b7d50d221","ssdeep":"384:84yUzOdu/DzqAkuEGmOLHMBhqFcDT3wQgiPjAg+63x8XH:8uzOY3qAFf4hiNiP0gh3xa","tlshash":"7862c13fcefbc0d55c223419b5db1b9da5b057a83ba66334840569c38eae50c5ac3cc8","first_seen":"2025-02-23T00:46:37.628504Z","last_seen":"2025-10-22T10:26:27.213452Z","times_seen":69,"resource_available":false,"data":null}},"time_used":829,"timings":{"blocked":401,"dns":372,"connect":1,"send":0,"wait":15,"receive":2,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"canon.intell0330.top/97f7aa028eeb69db9ea73e73834fce9e.gif","fqdn":"canon.intell0330.top","domain":"intell0330.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:11.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canon.intell0330.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 May 2025 04:51:09 GMT","end":"Tue, 12 Aug 2025 04:51:08 GMT"},"fingerprint":{"sha1":"B0:31:45:F8:54:7B:E0:FB:4C:8E:B3:FB:F1:6F:1E:F8:2E:60:C5:3A","sha256":"80:4F:20:E2:5B:90:C6:5E:01:B2:CD:AD:87:13:2D:CE:A0:A1:80:8C:33:0B:64:3D:F1:5B:96:46:CC:88:9C:91"}}},"request":{"raw":"GET /97f7aa028eeb69db9ea73e73834fce9e.gif HTTP/1.1\r\nHost: canon.intell0330.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":1504,"timings":{"blocked":-1,"dns":1413,"connect":33,"send":0,"wait":0,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/92c4a1095d771bcae686836c504294cfeb0830a53e45e7791265a999bfe99e3a/cover/5_320_180.webp?ih=1","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"172.66.155.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:12.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 03:04:17 GMT","end":"Thu, 04 Sep 2025 04:01:55 GMT"},"fingerprint":{"sha1":"77:83:68:54:E0:99:C9:F6:C6:B3:2B:5F:C1:56:9E:4F:34:BE:32:D9","sha256":"E6:71:B6:18:08:78:12:6E:22:71:D7:80:F0:4F:EE:0F:80:3E:05:55:F3:37:C3:5D:2B:BB:9F:A9:DA:EE:50:6D"}}},"request":{"raw":"GET /videos/92c4a1095d771bcae686836c504294cfeb0830a53e45e7791265a999bfe99e3a/cover/5_320_180.webp?ih=1 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 10 Jul 2025 08:05:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30308\r\nserver: cloudflare\r\nt-cache: MISS\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Accept-Encoding, Origin\r\ne2-id: 2a82a6d\r\netag: \"4162d7e0bd36d309de70915b45b1eb61\"\r\nlast-modified: Wed, 18 Jun 2025 08:18:10 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=31536000\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nage: 455891\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-csp-endpoint\",\"max_age\":86400,\"endpoints\":[{\"url\":\"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ZsGH0xAjIzWD7Kbf5dourO9pOAajO.w7JYgR.8lKpK4-1752134712.1401007-1.0.1.1-nOHro6FNKtov3Bupsy6Q3A.ZodE0eSztamZ.AQrlKcMjyjMS3n4iS9vKNZE0iLOxI3KqED1TAbIcmRUOljbMq9hpcNJCmTCFrmTNfZc.gBeGAYD0mg5RYHwKjgBil6OKttNi7AZ_oeVNq9K.WAg7Bw\"}]}\r\ncontent-security-policy-report-only: script-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ZsGH0xAjIzWD7Kbf5dourO9pOAajO.w7JYgR.8lKpK4-1752134712.1401007-1.0.1.1-nOHro6FNKtov3Bupsy6Q3A.ZodE0eSztamZ.AQrlKcMjyjMS3n4iS9vKNZE0iLOxI3KqED1TAbIcmRUOljbMq9hpcNJCmTCFrmTNfZc.gBeGAYD0mg5RYHwKjgBil6OKttNi7AZ_oeVNq9K.WAg7Bw; report-to cf-csp-endpoint\r\ncf-ray: 95ce8dfedd7b56bd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30308,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4162d7e0bd36d309de70915b45b1eb61","sha1":"b682c5a9c32e22321441fb3b7e141e6c3a6d1050","sha256":"f35a895c15116ebe3fa02ddef52725b2ae345be1173a314ae1ccc05201a29cd9","sha512":"64924068b0f9a6ade0cce999b618b28106b0e76ad94148c63e2acc8ef60b37347cbba9e393b77e68784e99f0fe5861aab791822c4479a48fb244cb4d8d3d9dfd","ssdeep":"768:fH34xmfa0UR0yNtIyHrVCpaM1ERgU2BMY2HqAI1TtPE9qj:fH0mSRD5pDRgjW7Iswj","tlshash":"e7d2e0ae805358e1c14da9023c0c27ad63d0c995e3ecaf4a28bdb52e9ee35e3d54a552","first_seen":"2025-06-20T01:02:10.567987Z","last_seen":"2025-07-27T20:46:12.919652Z","times_seen":22,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xx4848.delilaw.com/1372.gif","fqdn":"xx4848.delilaw.com","domain":"delilaw.com","tld":"com"},"ip":{"addr":"123.6.18.113","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:12.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xx4848.delilaw.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Jun 2025 07:09:52 GMT","end":"Thu, 25 Sep 2025 07:09:51 GMT"},"fingerprint":{"sha1":"2A:B6:BF:40:66:26:91:23:FF:18:08:60:C8:02:1A:0C:87:F0:B8:01","sha256":"E5:47:24:44:B1:54:12:9F:6F:12:E1:0A:F9:77:14:A4:59:E0:09:F1:F9:72:38:AB:0A:4D:3B:49:86:B6:A8:F3"}}},"request":{"raw":"GET /1372.gif HTTP/1.1\r\nHost: xx4848.delilaw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Thu, 10 Jul 2025 08:05:13 GMT\r\ncontent-type: image/gif\r\ncontent-length: 385649\r\nlast-modified: Tue, 04 Feb 2025 08:08:31 GMT\r\netag: \"67a1caff-5e271\"\r\nexpires: Sun, 27 Jul 2025 09:10:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":385649,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"99420771ab574e6197a995c28a8e22fb","sha1":"eb51cd497134b44e1c957b10caf4d2c9569668a5","sha256":"e0f9613ae55c18751ed65c2b466290eec01e4d71bc4881c52d71578456582d8a","sha512":"f2bed60584e1307fdff179ecb6be097cf285fb3a59d8cec05d20b695c58ad1e0ca2836abfa38e9da00ff4d56affe5b108259811b1150ec35648aa73afcc260e6","ssdeep":"6144:PnRDG1hP90xJ2rBHVOgsGOnWeDLBWo5mrONv5ARJU5yx4j7E+BhniaILOXpQRd2I:PdG1h1KJyBHVOIOnFFWomONvYUcxOX8b","tlshash":"c284230c8a584826169788fc19f67f2e615e0c12912aa13dc9cff7427ecb1f6745aed3","first_seen":"2025-01-26T00:52:56.462418Z","last_seen":"2025-12-29T03:34:17.287286Z","times_seen":1695,"resource_available":false,"data":null}},"time_used":2989,"timings":{"blocked":-1,"dns":850,"connect":309,"send":0,"wait":852,"receive":643,"ssl":330},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"768tup.oss-cn-hongkong.aliyuncs.com/ggt/768-1960x80.gif","fqdn":"768tup.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:11.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 17 Feb 2025 02:06:14 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"E8:86:4B:08:59:62:43:D3:2A:45:B3:DB:1A:31:4B:2D:FF:76:A9:5C","sha256":"B0:4E:42:89:7F:C7:3C:41:E5:8A:71:4B:CD:26:5B:52:76:46:47:AD:76:27:21:9B:9E:4F:05:16:35:7D:6E:3A"}}},"request":{"raw":"GET /ggt/768-1960x80.gif HTTP/1.1\r\nHost: 768tup.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Thu, 10 Jul 2025 08:05:12 GMT\r\nContent-Type: image/gif\r\nContent-Length: 201726\r\nConnection: keep-alive\r\nx-oss-request-id: 686F7438FC567C3034B8A159\r\nAccept-Ranges: bytes\r\nETag: \"C6C54A7EE15C07BE38E3613F3CE8783D\"\r\nLast-Modified: Sat, 21 Jun 2025 03:22:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7084945504932346765\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: xsVKfuFcB74442E/POh4PQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":201726,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"c6c54a7ee15c07be38e3613f3ce8783d","sha1":"61c4b74dc3caa6a585ce8bcc4ad753609f124a94","sha256":"c8c41978318135faaf588755a3899a3400f071d817b2d4f59c2f9eb6b4fe16cd","sha512":"da9245df50275aec0fa2fa87d895733caff96051e3095f8bbbb2ab69e3d59696ca342fbfb18d4e63cfe52b88025c58a8281e2281c8eed03c0db09328802db8d0","ssdeep":"6144:SLsefhvklJBBYmGgMHNaDrAXjj6999IMO:SL/kbBNGgE0w2rIMO","tlshash":"4114138ef1376670893578b4fafac75da37a0377c95239a0e83e13e5746470570a8da0","first_seen":"2024-05-06T13:48:10Z","last_seen":"2026-04-05T08:33:02.856634Z","times_seen":2675,"resource_available":false,"data":null}},"time_used":3021,"timings":{"blocked":1074,"dns":38,"connect":269,"send":0,"wait":271,"receive":548,"ssl":817},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x99av.com/static/images/svg/telegram-logo.svg","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:09.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x99av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 22:20:57 GMT","end":"Wed, 03 Sep 2025 23:19:07 GMT"},"fingerprint":{"sha1":"AF:23:BB:A5:88:17:F7:8A:63:C4:AC:70:2E:F0:8F:07:B0:8D:F8:9D","sha256":"6C:55:38:6F:78:40:E3:3F:13:AB:10:D1:9F:A1:2D:BD:B0:24:FE:63:15:A9:2A:CE:C6:58:F2:C5:1B:92:0C:AF"}}},"request":{"raw":"GET /static/images/svg/telegram-logo.svg HTTP/1.1\r\nHost: x99av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://x99av.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 10 Jul 2025 08:05:09 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 11 Jun 2025 09:22:04 GMT\r\nvary: accept-encoding\r\nexpires: Sat, 09 Aug 2025 07:00:24 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fgTxOXyUZdWr%2FsipUR7ywM1YsElPsc7cKyrALif67ikL3U6aVBQC6rwwjmZxFTDFjZCFhIaWrAO2sRpnfTEnXSlz9K8%2FHYs%3D\"}]}\r\netag: W/\"68494abc-660\"\r\ncontent-encoding: br\r\ncf-ray: 95ce8deb29160b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1632,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"42cb87b6a0379d5ac72d300a233739a1","sha1":"e9e9d221a618d109f65289e346773118433f8bbc","sha256":"24489194131530448bbe788553ee6e48b83cc397a8487720c559fc71cfa7cc92","sha512":"2e9f2f7cdf9352501d28b57a18a768f911a2fbc3a74523c5f202443488944d99ff44931b2093657a7b4bc1067f1dfa2f0c2afc06141a33b248841c8cecce86aa","ssdeep":"","tlshash":"1e3153cc432f88ed7060be71dee212c72a7402f846aa523cb65a9911fc4d7b09e80f74","first_seen":"2024-06-23T20:56:03Z","last_seen":"2026-03-29T22:04:30.194656Z","times_seen":137,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gif.fpaixfl.com/hk1991-960x80.gif","fqdn":"gif.fpaixfl.com","domain":"fpaixfl.com","tld":"com"},"ip":{"addr":"98.98.86.10","port":443,"asn":21859,"as":"ZEN-ECN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:11.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gif.fpaixfl.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 13 May 2025 08:25:46 GMT","end":"Fri, 12 Jun 2026 08:25:45 GMT"},"fingerprint":{"sha1":"11:B7:77:59:64:2F:0D:C2:C2:C9:B2:65:F4:5A:A0:50:AA:CC:F2:20","sha256":"C5:5E:2A:26:BE:AA:3D:91:5C:5C:AE:2A:BB:6E:03:42:82:05:56:B7:F0:5D:98:A1:2A:67:DB:72:98:95:7E:61"}}},"request":{"raw":"GET /hk1991-960x80.gif HTTP/1.1\r\nHost: gif.fpaixfl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: NgxFence\r\ndate: Thu, 10 Jul 2025 08:05:12 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 0\r\nlocation: https://img.fjyyedu.com/hk1991-960x80.gif\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":425369,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":1523,"timings":{"blocked":-1,"dns":764,"connect":176,"send":0,"wait":294,"receive":1,"ssl":288},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-10","alert":"Sinkholed","trigger":"fpaixfl.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p.ananas.chaoxing.com/star3/origin/585f1e5e9491df6b90c29ae50643c103.gif","fqdn":"p.ananas.chaoxing.com","domain":"chaoxing.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:11.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ananas.chaoxing.com","organization":""},"issuer":{"commonName":"WoTrus DV Server CA  [Run by the Issuer]","organization":"WoTrus CA Limited"},"validity":{"start":"Mon, 20 Jan 2025 00:00:00 GMT","end":"Thu, 19 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C3:90:3C:97:BF:7A:5B:53:A1:6E:0D:A7:92:AE:DF:A3:73:45:B4:ED","sha256":"3F:75:2E:15:D5:6F:7C:34:65:19:4D:5A:7F:6F:F3:D1:0A:9E:3B:DC:EF:1D:6B:A0:15:07:B6:57:B7:A3:34:74"}}},"request":{"raw":"GET /star3/origin/585f1e5e9491df6b90c29ae50643c103.gif HTTP/1.1\r\nHost: p.ananas.chaoxing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 10 Jul 2025 08:05:12 GMT\r\nContent-Type: image/gif\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nRose: fms-2697320765-rpbss\r\nOrigin-Agent-Cluster: ?0\r\nx-via: 1.1 PSrbdbOSA2ps111:6 (Cdn Cache Server V2.0), 1.1 PSygldLON4gd24:8 (Cdn Cache Server V2.0), 1.1 PS-ARN-04kSW118:9 (Cdn Cache Server V2.0)\r\nAge: 572931\r\nx-ws-request-id: 686f7438_PS-ARN-04kSW118_2888-7267\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72733,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"52e6b99ac9fbcbeb49a91ec30ac97505","sha1":"08fb9b0f3aed36da7be35f283ff9e11cfdf3000e","sha256":"7734de63520c09b4891dbafbdd995389d9aa5e0d0c164da15cde3aa5314dc12f","sha512":"eb2dcc73a1a33c19ed34e06c7b880465bef73979d2766eaf2066f064e2e5460f52664be89fc2c981962517f31db5d7a2d4ed18d443dbb4b2d695199dc88156bb","ssdeep":"1536:Cen+uydwAOyRefei6nKrTFLpzKLbR2h1nlyt0XXZUW6Ydl/:Cen8wAOywmiRLpzIwjnlytXWff/","tlshash":"ac6302c45afca6d61d26d1b0ced72bfe5a969866eefff42022345420d3170ee0146b62","first_seen":"2024-06-19T03:12:16Z","last_seen":"2025-07-23T09:51:18.263989Z","times_seen":104,"resource_available":false,"data":null}},"time_used":1403,"timings":{"blocked":-1,"dns":954,"connect":37,"send":0,"wait":22,"receive":24,"ssl":363},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/6bf2e0b3cf8009443d0d1276386c8377b282e045/cover/1_800?ih=1","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"172.66.155.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:11.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 03:04:17 GMT","end":"Thu, 04 Sep 2025 04:01:55 GMT"},"fingerprint":{"sha1":"77:83:68:54:E0:99:C9:F6:C6:B3:2B:5F:C1:56:9E:4F:34:BE:32:D9","sha256":"E6:71:B6:18:08:78:12:6E:22:71:D7:80:F0:4F:EE:0F:80:3E:05:55:F3:37:C3:5D:2B:BB:9F:A9:DA:EE:50:6D"}}},"request":{"raw":"GET /videos/6bf2e0b3cf8009443d0d1276386c8377b282e045/cover/1_800?ih=1 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 10 Jul 2025 08:05:11 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 24192\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Mar 2025 03:09:22 GMT\r\nvary: Accept-Encoding\r\netag: \"67ca6362-5e80\"\r\nexpires: Wed, 11 Jun 2025 19:17:46 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=7200\r\nt-cache: LHIT\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nage: 181210\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wwNZSzsW9DIR2doLFvqhyp%2BDL9zr%2F12W1Ma2biDyX48FmCgkL%2FrnbRFXx%2F9Is25jFVNr1Tlh9OXS6v%2FPE9FwP4HpgQKVJbdllA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 95ce8dfd2b2e56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24192,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.107.100\", baseline, precision 8, 800x450, components 3","md5":"52ab0ae18c85ba3365ad044fba3e2fde","sha1":"a2e5f61e88761d57e63b505e120e3167f317bdce","sha256":"4486c9db8f8cde1fc2c84b5dc8a8759f1536f6b24f0acee86d6770bd08a650ee","sha512":"3feff4cbfe5ef9c89f7eb51a545c02f0cd40c91315ef74c7b244ca0510c230f99cc0be84a0cef064d9cfdda86e94ffac386c924d9c2a332b1ac3ebde15466f94","ssdeep":"384:QMUA2kdByoGn2qU7RHY6yGWfj1boWvQ9y5Cy6rTJSLplL612aAlLCqX3//1eNPV8:9UA//dqU7ly1fB74u6nSt612df33qM2Q","tlshash":"ceb2e1b97f243a687184c273e9b41c2a41593156b1132edfe834ab2903b04fdbec7b81","first_seen":"2025-06-20T01:02:10.622334Z","last_seen":"2025-07-12T12:31:04.411227Z","times_seen":10,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/03fd455f5f7527cf26385063530c806b628811a37a6ed7fbde17ab4233a21da0/cover/5_320_180.webp?ih=1","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"172.66.155.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:12.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 03:04:17 GMT","end":"Thu, 04 Sep 2025 04:01:55 GMT"},"fingerprint":{"sha1":"77:83:68:54:E0:99:C9:F6:C6:B3:2B:5F:C1:56:9E:4F:34:BE:32:D9","sha256":"E6:71:B6:18:08:78:12:6E:22:71:D7:80:F0:4F:EE:0F:80:3E:05:55:F3:37:C3:5D:2B:BB:9F:A9:DA:EE:50:6D"}}},"request":{"raw":"GET /videos/03fd455f5f7527cf26385063530c806b628811a37a6ed7fbde17ab4233a21da0/cover/5_320_180.webp?ih=1 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 10 Jul 2025 08:05:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4844\r\nserver: cloudflare\r\nt-cache: MISS\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Accept-Encoding, Origin\r\ne2-id: 2a82977\r\netag: \"3dcbe39012c3417d0e50752739485b69\"\r\nlast-modified: Wed, 18 Jun 2025 07:20:53 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=31536000\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nage: 181211\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cyE5VLgRjnFPWMPo5CyGoK3Qc1MlxCaTCUSzlpgAx62Hlu%2FVkxMKXPppOx5JglwGzOTTxh8fn%2BBYuoUgrcf9y%2BzDHl37CHcPhA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 95ce8dfedd7d56bd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4844,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3dcbe39012c3417d0e50752739485b69","sha1":"225eb69cb5f321cbf5c14fcde68a2c595d1734f4","sha256":"245aded41e531f56cf22dbf7ef6aada323a23ef422d64109c74c70f7c81f75f0","sha512":"86737c4d1dc34ff51ef1ea5adff30a3c8a2061dd2efef20da9f428565fd256a77c534a31eeb28162f477f566fd372c416fd4d7577d230dee737c74f7d41029c1","ssdeep":"96:s0LGh+9lUQo5g7Ww+N6QkhfxPW51APRSMkfsemnnSOuYreqbgHi09:nA+9CQygiw+N6QGk1hMmseGhuYreqcCI","tlshash":"e0a18c91ea8199bdbf43a026e2a0047e44745e8a75bec887d1ec6c9bc50e5d0b816383","first_seen":"2025-06-20T01:02:10.604106Z","last_seen":"2025-07-27T20:46:12.9111Z","times_seen":22,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.fjyyedu.com/hk1991-960x80.gif","fqdn":"img.fjyyedu.com","domain":"fjyyedu.com","tld":"com"},"ip":{"addr":"123.6.18.16","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:13.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.fjyyedu.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 15 Apr 2025 07:38:14 GMT","end":"Fri, 15 May 2026 07:38:13 GMT"},"fingerprint":{"sha1":"7F:43:AC:F1:18:6B:32:B2:0A:05:20:F3:78:B7:34:A7:CA:79:85:1E","sha256":"3C:21:F3:A8:C2:B2:11:F0:27:93:C3:94:DA:CE:4E:59:AB:E3:39:07:3C:34:6B:CA:E3:13:01:F6:33:BF:BA:88"}}},"request":{"raw":"GET /hk1991-960x80.gif HTTP/1.1\r\nHost: img.fjyyedu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Thu, 10 Jul 2025 08:05:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 425369\r\nx-oss-request-id: 685A18A6B7AB94E84431F4C7\r\netag: \"CB8BCCB6F3E07593B65FDFFB5979D729\"\r\nlast-modified: Fri, 06 Jun 2025 05:09:25 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3394078432234823469\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000103\r\ncontent-disposition: attachment\r\nx-oss-force-download: true\r\ncontent-md5: y4vMtvPgdZO2X9/7WXnXKQ==\r\nx-oss-server-time: 9\r\nx-cache: HIT\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":425369,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"cb8bccb6f3e07593b65fdffb5979d729","sha1":"6851550301ee9d3e930d12b643a003d90a18b09c","sha256":"15442321442aac95b2686f6e83346aad8de50516e5bce95b26df6df715c4a07f","sha512":"9d782a846476d2a62344699ff4029bf83720619df8942726febcc0cff2224192ec7082f658e53f6ab0ff2913abcbbc29a1216a10dba28e9ddb7ab1f15d21bb59","ssdeep":"12288:PGSMsBQyaZNDDJslHdhVYU7lF7OH8A2dxaeVQfxp:PZHfaZNPJsvXpRPA2dxoX","tlshash":"5394235e13d16cd68f76b01762aa013a2a019adc3d52f273bc1159f59b8f46cb13bec2","first_seen":"2025-06-06T16:34:57.023837Z","last_seen":"2025-07-21T15:28:52.226772Z","times_seen":428,"resource_available":false,"data":null}},"time_used":3658,"timings":{"blocked":1036,"dns":532,"connect":239,"send":0,"wait":1001,"receive":581,"ssl":265},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x99av.com/","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-10T08:05:08.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x99av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 22:20:57 GMT","end":"Wed, 03 Sep 2025 23:19:07 GMT"},"fingerprint":{"sha1":"AF:23:BB:A5:88:17:F7:8A:63:C4:AC:70:2E:F0:8F:07:B0:8D:F8:9D","sha256":"6C:55:38:6F:78:40:E3:3F:13:AB:10:D1:9F:A1:2D:BD:B0:24:FE:63:15:A9:2A:CE:C6:58:F2:C5:1B:92:0C:AF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: x99av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 10 Jul 2025 08:05:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nghash: _ec0ac92667c\r\nt-ray: ws2\r\nipcountry: BR\r\ncache-key: x99av:_ec0ac92667c:/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zns3T3DpZpJbGBiswsCodF3BF9EoJJWlcsP%2Bb8%2FtAWQXjta3wvAFNDQ4yX2CCkNnqeBHNPxF%2F4GTZ3EUAL60GmSjV1DdKJg%3D\"}]}\r\nw-cache: HIT\r\nexpires: Mon, 08 Sep 2025 07:00:21 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=1209600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95ce8de8ae620b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":101360,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (29450)","md5":"ad468124ed2afe945c0cc4502aa71834","sha1":"54b0a9daf629b54ca3acc8ac6cec8034a98a1ce2","sha256":"9cc2ff965c167628fd7494ac726781f876585533b07979ffd00060c67544ec53","sha512":"e781abfaae4a84c6adb9e7be67604be8185302938f2fa613cbe3488e165d66a6fe7c8913332286392e9873929813323417ef349bf31cbcac2eadeb3cf39fdeee","ssdeep":"768:AwTcjiYvl3NlS+v08YcQkuRsYhqHgs7mFTXmAeIeBbIOIzcrmcf0GHuz:rONxv08YcNukgFmAeIEbIOIzcrm5","tlshash":"81a3a723a45a313f273351ce6d11bb2eb383905eeed75e23a6fc1ed98799d00984506e","first_seen":"2025-07-10T08:05:35.930681Z","last_seen":"2025-07-10T08:05:35.930681Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":31,"dns":8,"connect":1,"send":0,"wait":70,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/x99av/js/b.x99av.js?33ac1d67ca8294babd96e2","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:10.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zgnzw.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 12:49:51 GMT","end":"Sun, 28 Sep 2025 13:49:44 GMT"},"fingerprint":{"sha1":"FC:1C:37:7E:A1:78:89:8B:86:9B:95:F1:4A:B6:CD:01:63:AE:49:C2","sha256":"75:D2:B3:A9:7E:6F:0C:D0:61:11:3B:CE:AB:1D:62:88:7D:50:26:1F:B0:3E:A7:70:62:0B:67:ED:E9:21:3E:DC"}}},"request":{"raw":"GET /x99av/js/b.x99av.js?33ac1d67ca8294babd96e2 HTTP/1.1\r\nHost: zgnzw.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 10 Jul 2025 08:05:11 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=K4PaNfRMqUSykMVjuo4HQTmm%2Ff8FdcYtLjjtjiJ%2FlILk%2FNIpqREPXlVn6afIkyepMuyo74swfcS1h0t0wiIvSCYEkU2h6ThE8mIOzcjlF4zf9GAa4EcPUsfoPLQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 09 Jul 2025 14:34:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"686e7df8-1a80d\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncache-control: max-age=2073600\r\ncf-cache-status: HIT\r\ncf-ray: 95ce8df67a9a56bd-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2203\u0026min_rtt=551\u0026rtt_var=2002\u0026sent=134\u0026recv=171\u0026lost=0\u0026retrans=0\u0026sent_bytes=11738\u0026recv_bytes=9651\u0026delivery_rate=633751\u0026ss_exit_cwnd=14886\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=8bfa0c7364f46390\u0026ts=1159\u0026inflight_dur=51\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":108557,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65222), with no line terminators","md5":"c213430fcc657fc410594b549e17765a","sha1":"8dd04d5d7efb86058958153cef72ecf7bcb3573d","sha256":"685c04a933797e49b1b0d8436eb12f60d5d9d507ca3959eb7a8c2a919df36440","sha512":"9246c9e6b33acbfdefa41fd27f8588941944325c64805af4c1c954eb548394770a211e9c6e0824e1aeacf1651f89305880ac8950ef72e3ec9aa7e95e1eb4ff37","ssdeep":"1536:nCOBMJAhqbEaC4oNQxsr6Ilw22aMLTr9hk4il67QQZ+jtcb:n5qbEaCgxYv+9hkbR0","tlshash":"f7b390cdb692b06113a770b1807f600bf33b68a9684d4524f655e8d67cb9a4dd23bf2c","first_seen":"2025-07-09T06:33:40.491412Z","last_seen":"2025-07-10T08:05:35.931705Z","times_seen":2,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x99av.com/anyalytics?v=_ec0ac92667c","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:10.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x99av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 22:20:57 GMT","end":"Wed, 03 Sep 2025 23:19:07 GMT"},"fingerprint":{"sha1":"AF:23:BB:A5:88:17:F7:8A:63:C4:AC:70:2E:F0:8F:07:B0:8D:F8:9D","sha256":"6C:55:38:6F:78:40:E3:3F:13:AB:10:D1:9F:A1:2D:BD:B0:24:FE:63:15:A9:2A:CE:C6:58:F2:C5:1B:92:0C:AF"}}},"request":{"raw":"GET /anyalytics?v=_ec0ac92667c HTTP/1.1\r\nHost: x99av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://x99av.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: tguest=guestba3e1c4c44d66a35d237cd5bc921ae4e0c1e98dd\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 10 Jul 2025 08:05:10 GMT\r\ncontent-type: text/html\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=K4ErD2bPgAbGJ5Ese6aN4JEXAuOtlfk0jE1xzzyUmwbNWMyDdySX7bVPz%2B4%2Ba0g0mvXKMR0%2FK%2F6g3mpHJZamlN5wJ70nqT9khWbdZa9xjqXF5x0axQSjhGI5g3I%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nf: opr\r\nlast-modified: Thu, 10 Jul 2025 07:02:36 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 95ce8df69ba756a9-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2798\u0026min_rtt=0\u0026rtt_var=2557\u0026sent=127\u0026recv=151\u0026lost=0\u0026retrans=0\u0026sent_bytes=15279\u0026recv_bytes=9530\u0026delivery_rate=822885\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=73ea43c08173ea37\u0026ts=2199\u0026inflight_dur=87\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":799,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (799), with no line terminators","md5":"2713a2096f61d8e497aaa77917121061","sha1":"78c499d1efc4d004512d40bf3338c5b5d92c0712","sha256":"cd4529cda9955a4ef33aa20e16f1e26f673b0ec63d957bc62eff80f7708877e4","sha512":"e9ab41819131c8c923bbc70e4898bac47e5b4b36f0a496ce2ebe0aca63ba22b62fb980bbb627857885a99648ee0e8e5a0225c67a71f850462458cd33dcdc2a27","ssdeep":"","tlshash":"4e01fd2a0c0ac62c0ca0b98060fae77e24d932a46ea3c606b698d829c51dfc40c123ed","first_seen":"2025-01-08T00:57:30.602177Z","last_seen":"2026-01-30T03:15:49.328663Z","times_seen":966,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/1cb6164debca89a2eaab520dcaf6a672ba47783f/cover/1_800?ih=7dc1ec7da7a2a67ae402e16732b08d73","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"172.66.155.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:11.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 03:04:17 GMT","end":"Thu, 04 Sep 2025 04:01:55 GMT"},"fingerprint":{"sha1":"77:83:68:54:E0:99:C9:F6:C6:B3:2B:5F:C1:56:9E:4F:34:BE:32:D9","sha256":"E6:71:B6:18:08:78:12:6E:22:71:D7:80:F0:4F:EE:0F:80:3E:05:55:F3:37:C3:5D:2B:BB:9F:A9:DA:EE:50:6D"}}},"request":{"raw":"GET /videos/1cb6164debca89a2eaab520dcaf6a672ba47783f/cover/1_800?ih=7dc1ec7da7a2a67ae402e16732b08d73 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x99av.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 10 Jul 2025 08:05:11 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 120196\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Mar 2025 08:41:55 GMT\r\nvary: Accept-Encoding\r\netag: \"67cd5453-1d584\"\r\nexpires: Thu, 12 Jun 2025 15:53:05 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=7200\r\nt-cache: LHIT\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nage: 560060\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K0pfFGybhLHDZH5v7fMfBdIX5ld5gb7Lsluuvv39YTbsDJqG7x1bLFuKRAXXYpM644gbmqgiu3rUfunaLl5AXrcgl5agxAsy4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 95ce8dfd6ba556bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":120196,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x538, components 3","md5":"6bdf1634426e933957216a7baf49b475","sha1":"94f23c963899cf82852480145fa034a449afbe3c","sha256":"0de6ee0fc1564e693c46a1d0a3b32393d9c334d760b456f4d1eca3058097c2de","sha512":"ce36b2cfe9ab058e088fad6b5c055000e5321561e5c9bc469a625dfc6e02bf05904a4e724edce4dd6d1c694b53c4e75230def90e7c00b38ae1ed4fdef63a4686","ssdeep":"3072:L5ExqvodXWxnjCDuMIFGJiAJEOcN4m+/XOL+yh/j+pYgGxM:WiodGp0uMMGJiCcO/XOL+yRIKxM","tlshash":"44c31278505ca9261f36c4d2d80b5fda869d5f81f084d1d816a8aafca31c27cceeda0d","first_seen":"2025-06-20T01:02:10.54831Z","last_seen":"2025-07-12T12:31:04.396209Z","times_seen":10,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":35,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x99av.com/app/user/info?reactive=true","fqdn":"x99av.com","domain":"x99av.com","tld":"com"},"ip":{"addr":"172.67.206.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://x99av.com/","date":"2025-07-10T08:05:10.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x99av.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Jun 2025 22:20:57 GMT","end":"Wed, 03 Sep 2025 23:19:07 GMT"},"fingerprint":{"sha1":"AF:23:BB:A5:88:17:F7:8A:63:C4:AC:70:2E:F0:8F:07:B0:8D:F8:9D","sha256":"6C:55:38:6F:78:40:E3:3F:13:AB:10:D1:9F:A1:2D:BD:B0:24:FE:63:15:A9:2A:CE:C6:58:F2:C5:1B:92:0C:AF"}}},"request":{"raw":"GET /app/user/info?reactive=true HTTP/1.1\r\nHost: x99av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://x99av.com/\r\nwebhash: _ec0ac92667c\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 10 Jul 2025 08:05:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DkpZ4dPIfGwK0fpTpILY%2B3h62egO%2FbotdeQW5YXp%2FkiMu5DHW7nNhvjK4v4SyAHviFqQbBRZsoNoOkImcG5m8gq3oDiu68sq2dJNSbPYO7DGfPrCI498YAKHQeg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nghash: _ec0ac92667c\r\nt-ray: ws2\r\naccess-control-allow-credentials: True\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization,token,app-lang,uuid,version\r\naccess-control-allow-methods: POST, GET, OPTIONS, GET,HEAD,OPTIONS\r\nx-ray: unkown-unkown\r\nset-cookie: tguest=guestba3e1c4c44d66a35d237cd5bc921ae4e0c1e98dd; Path=/\r\ncache-control: public, max-age=31536000, stale-if-error=1209600\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 95ce8df32b8e56a9-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3526\u0026min_rtt=500\u0026rtt_var=2327\u0026sent=118\u0026recv=145\u0026lost=0\u0026retrans=0\u0026sent_bytes=10876\u0026recv_bytes=8330\u0026delivery_rate=418966\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=73ea43c08173ea37\u0026ts=1974\u0026inflight_dur=59\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":216,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"0bb0ebbf7763b7b3b1659cb5bd9185a9","sha1":"68428413018ef0dbbbc5a8d4f3913bae19b9c3c3","sha256":"b6dbf98fddd3c704d774a6d131a9c158f4aabca4ce50a62fb5c70d50f6febb1d","sha512":"c0013e12cf84f6bc0e1a4722b803d6eafce9d5b803ef7e4ee9922c8de096f40c7646b10117b17661354393007fa11a77198800088eb19e89c0b97596f093741f","ssdeep":"","tlshash":"74d02225ac2a8abba885c3ad9db68782033da3849644c3088de41e0d010caf01783a32","first_seen":"2025-07-10T08:05:35.934468Z","last_seen":"2025-07-10T08:05:35.934468Z","times_seen":1,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":381,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}