{"report_id":"bb6d8042-d054-4c0a-a10d-08c68ec33d57","version":6,"status":"done","tags":[],"date":"2025-04-25T04:54:13Z","url":{"schema":"http","addr":"91x553.cc/","fqdn":"91x553.cc","domain":"91x553.cc","tld":"cc"},"ip":{"addr":"172.67.201.122","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"title":"成人高清在线视频,日本AV,国产AV,欧美AV - 91XAV"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-04T04:54:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"y.gtimg.cn","ip":{"addr":"95.101.10.34","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2008-10-09","domain_rank":24534,"first_seen":"2016-06-06T04:34:32Z","last_seen":"2025-04-25T04:08:46.521834Z","alert_count":0,"request_count":1,"received_data":431158,"sent_data":455,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xpj46-xz.oss-accelerate.aliyuncs.com","ip":{"addr":"47.254.186.254","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2023-10-26T16:53:01Z","last_seen":"2025-04-23T19:37:38.987958Z","alert_count":0,"request_count":1,"received_data":386199,"sent_data":446,"comment":"","tags":null,"fingerprints":null},{"fqdn":"91xav.cc","ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-03-13","domain_rank":0,"first_seen":"2021-03-13T13:29:00Z","last_seen":"2025-04-20T07:58:29.156158Z","alert_count":0,"request_count":5,"received_data":104929,"sent_data":2450,"comment":"","tags":null,"fingerprints":null},{"fqdn":"zz.bdstatic.com","ip":{"addr":"157.255.63.48","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"domain_registered":"2011-12-26","domain_rank":27702,"first_seen":"2017-01-30T07:45:48Z","last_seen":"2025-04-19T16:37:14.431229Z","alert_count":0,"request_count":1,"received_data":768,"sent_data":415,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gif.zhidi66.com","ip":{"addr":"98.98.86.10","port":443,"asn":21859,"as":"ZEN-ECN","country":"United States","country_code":"US"},"domain_registered":"2024-08-29","domain_rank":0,"first_seen":"2025-03-27T19:51:44.46771Z","last_seen":"2025-04-18T09:36:46.479097Z","alert_count":0,"request_count":2,"received_data":608451,"sent_data":867,"comment":"","tags":null,"fingerprints":null},{"fqdn":"768guanggaot.oss-cn-hangzhou.aliyuncs.com","ip":{"addr":"118.178.60.162","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2024-07-25T07:33:23Z","last_seen":"2025-04-23T07:57:41.432889Z","alert_count":0,"request_count":1,"received_data":202276,"sent_data":454,"comment":"","tags":null,"fingerprints":null},{"fqdn":"91x553.cc","ip":{"addr":"104.21.76.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":81483,"sent_data":478,"comment":"","tags":null,"fingerprints":null},{"fqdn":"seyoutupian.dqntwl.com","ip":{"addr":"117.68.89.108","port":443,"asn":140527,"as":"China Telecom","country":"China","country_code":"CN"},"domain_registered":"2023-05-22","domain_rank":0,"first_seen":"2025-02-26T22:37:21.283752Z","last_seen":"2025-04-24T21:51:18.657838Z","alert_count":0,"request_count":1,"received_data":340432,"sent_data":435,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.wixstatic.com","ip":{"addr":"3.167.2.70","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2013-04-10","domain_rank":5648,"first_seen":"2013-06-07T16:55:33Z","last_seen":"2025-04-24T22:00:55.373748Z","alert_count":0,"request_count":2,"received_data":1154,"sent_data":952,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sp0.baidu.com","ip":{"addr":"103.235.46.115","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"1999-10-11","domain_rank":18423,"first_seen":"2014-12-05T23:12:12Z","last_seen":"2025-04-20T05:18:40.727153Z","alert_count":0,"request_count":1,"received_data":116,"sent_data":468,"comment":"","tags":null,"fingerprints":null},{"fqdn":"365guanggao.oss-cn-shenzhen.aliyuncs.com","ip":{"addr":"120.78.115.82","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2022-12-09T04:35:43Z","last_seen":"2025-04-23T19:37:38.775401Z","alert_count":0,"request_count":1,"received_data":158427,"sent_data":457,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img.feichai.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2007-05-02","domain_rank":0,"first_seen":"2025-04-24T21:51:18.104395Z","last_seen":"2025-04-24T21:51:18.104395Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":440,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img.fjyyedu.com","ip":{"addr":"123.6.18.110","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"domain_registered":"2015-12-30","domain_rank":0,"first_seen":"2025-04-16T03:14:18.953413Z","last_seen":"2025-04-23T19:37:38.759145Z","alert_count":0,"request_count":2,"received_data":609114,"sent_data":811,"comment":"","tags":null,"fingerprints":null},{"fqdn":"txdytuchuang1.oss-cn-beijing.aliyuncs.com","ip":{"addr":"39.103.20.63","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2024-12-01T01:06:49.447195Z","last_seen":"2025-04-23T19:37:38.739014Z","alert_count":0,"request_count":1,"received_data":324335,"sent_data":452,"comment":"","tags":null,"fingerprints":null},{"fqdn":"2025xm.img9580903245.com","ip":{"addr":"154.83.95.216","port":8686,"asn":984,"as":"OWS","country":"Seychelles","country_code":"SC"},"domain_registered":"2025-03-24","domain_rank":0,"first_seen":"2025-04-11T04:08:19.94901Z","last_seen":"2025-04-18T08:21:01.724999Z","alert_count":0,"request_count":1,"received_data":322321,"sent_data":450,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cc999img.dqsldz.com","ip":{"addr":"117.68.89.108","port":443,"asn":140527,"as":"China Telecom","country":"China","country_code":"CN"},"domain_registered":"2024-07-01","domain_rank":0,"first_seen":"2025-01-26T03:50:21.367038Z","last_seen":"2025-04-19T06:11:08.030411Z","alert_count":0,"request_count":1,"received_data":86133,"sent_data":440,"comment":"","tags":null,"fingerprints":null},{"fqdn":"zgnzw.xyz","ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-24","domain_rank":0,"first_seen":"2025-03-06T03:09:27.561462Z","last_seen":"2025-04-24T02:11:13.530098Z","alert_count":0,"request_count":6,"received_data":2074124,"sent_data":2756,"comment":"","tags":null,"fingerprints":null},{"fqdn":"5845-xxpp.oss-accelerate.aliyuncs.com","ip":{"addr":"47.254.187.165","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2023-11-14T16:55:03Z","last_seen":"2025-04-20T05:19:19.434753Z","alert_count":0,"request_count":1,"received_data":324850,"sent_data":448,"comment":"","tags":null,"fingerprints":null},{"fqdn":"5454ylylgh.oss-accelerate.aliyuncs.com","ip":{"addr":"47.254.187.152","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2024-07-25T07:33:23Z","last_seen":"2025-04-22T05:21:16.180265Z","alert_count":0,"request_count":1,"received_data":524315,"sent_data":446,"comment":"","tags":null,"fingerprints":null},{"fqdn":"timg215.top","ip":{"addr":"172.67.25.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-25","domain_rank":0,"first_seen":"2025-04-20T15:23:53.489463Z","last_seen":"2025-04-20T15:23:53.489463Z","alert_count":0,"request_count":4,"received_data":167175,"sent_data":1988,"comment":"","tags":null,"fingerprints":null},{"fqdn":"2025pg.img9490563646.com","ip":{"addr":"154.83.95.216","port":8585,"asn":984,"as":"OWS","country":"Seychelles","country_code":"SC"},"domain_registered":"2025-04-09","domain_rank":0,"first_seen":"2025-04-11T04:08:19.950863Z","last_seen":"2025-04-18T09:36:46.413894Z","alert_count":0,"request_count":1,"received_data":762129,"sent_data":449,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2025-04-25T04:53:53Z","timestamp":1745556833,"ip_dst":{"addr":"47.254.186.254","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.5","port":40330,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-04-25T04:53:53.233226+0000\",\"flow_id\":1868497963573021,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":40330,\"dest_ip\":\"47.254.186.254\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"xpj46-xz.oss-accelerate.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":902,\"bytes_toclient\":6703,\"start\":\"2025-04-25T04:53:53.188189+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-04-25T04:53:53Z","timestamp":1745556833,"ip_dst":{"addr":"47.254.187.165","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.5","port":47416,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-04-25T04:53:53.457233+0000\",\"flow_id\":1948401535106731,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":47416,\"dest_ip\":\"47.254.187.165\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"5845-xxpp.oss-accelerate.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6703,\"start\":\"2025-04-25T04:53:53.409259+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-04-25T04:53:53Z","timestamp":1745556833,"ip_dst":{"addr":"118.178.60.162","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"ip_src":{"addr":"172.18.0.5","port":53280,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-04-25T04:53:53.491962+0000\",\"flow_id\":1174244417433827,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":53280,\"dest_ip\":\"118.178.60.162\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"768guanggaot.oss-cn-hangzhou.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":943,\"bytes_toclient\":6196,\"start\":\"2025-04-25T04:53:53.028899+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-04-25T04:53:53Z","timestamp":1745556833,"ip_dst":{"addr":"47.254.187.152","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.5","port":51594,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-04-25T04:53:53.610661+0000\",\"flow_id\":1886925520739803,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":51594,\"dest_ip\":\"47.254.187.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"5454ylylgh.oss-accelerate.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":753,\"bytes_toclient\":3148,\"start\":\"2025-04-25T04:53:53.564699+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-04-25T04:53:53Z","timestamp":1745556833,"ip_dst":{"addr":"120.78.115.82","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"ip_src":{"addr":"172.18.0.5","port":37268,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-04-25T04:53:53.625681+0000\",\"flow_id\":544913597003645,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":37268,\"dest_ip\":\"120.78.115.82\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"365guanggao.oss-cn-shenzhen.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2025-04-25T04:53:53.128893+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-04-25T04:53:53Z","timestamp":1745556833,"ip_dst":{"addr":"39.103.20.63","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"ip_src":{"addr":"172.18.0.5","port":41896,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-04-25T04:53:53.728220+0000\",\"flow_id\":1952256268269297,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":41896,\"dest_ip\":\"39.103.20.63\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"txdytuchuang1.oss-cn-beijing.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":907,\"bytes_toclient\":6467,\"start\":\"2025-04-25T04:53:53.227057+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3e7b894d1aad2b33f9c1a9e429fb9c40","sha1":"cfb6fa58f1faf5ae4240fc4159addfff1ce11dd2","sha256":"52f10012018d906d178bc0840c0bec38cea7fd9fb3ea81503d817fb98807e76e","sha512":"fb2d346eb93f010881292b7c711ff3d66105bd816528618d3df22bfdfa9cc5aa1d02a6df98baa4896cdbad9ade30c440aeedb2c5e1451779db56639539511c03","ssdeep":"","tlshash":"60d0a7a718cd98351981759540553e7af00a24e480208c89c1a9dd3d4564130172e97c","size":219,"data":"","first_seen":"2023-04-18T01:32:18Z","last_seen":"2026-02-04T16:01:22.353676Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5ebe418e9847bd6cbc82053ac6b3f5a3","sha1":"99b11bda8c7517263fa4fb3dd77fe7bb15352f29","sha256":"d77f248b34aacc48337d1750092695ea7550f459800d84804022519262da93d3","sha512":"4f0549d41f3aac14ec9812a6c723dd041d69a8cab7e0ac5aca5ee3a0fd97c20a6b42e5663d33dd12b05e03bdd920fdb8e0595e39abffc4b7acb2896f0ba7b10b","ssdeep":"","tlshash":"9aa0027d81c5999e74456830f14f372675041d51c792f3818265e068c767aa859ab522","size":68,"data":"","first_seen":"2024-06-29T09:06:14Z","last_seen":"2026-02-04T07:15:49.791074Z","times_seen":215,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"899461228c938e88a7709d8fa4f245a7","sha1":"103b4daba610df082170c3aba2221b6be34e954f","sha256":"b1114d93ff83a0c8f411faf7fd4465ef515ca2c1f079c4bc780f2a1cc2ead650","sha512":"bcbcbf40c4a527c4eb97b9e60cd8dcfa1c7413e328803ccf7fd27813d2adaaca6e7cc729a6a603b5310a2732df6c3c5eb5a1ce1953f6dfda5a48c37732520bfc","ssdeep":"","tlshash":"80c02be720ce213a07816a90d0173e4b700b24b81860c946c17ccc14ed33270cf050fc","size":146,"data":"","first_seen":"2025-04-25T04:54:22.104758Z","last_seen":"2025-04-25T04:54:22.104758Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"582f710e116c714d83e9c110b67b1e0f","sha1":"9784d59acc4432b403da759bc37868f8ed132f4f","sha256":"41561dfca19489f665602808e8b7c83fa0fd0cc59e59fe6dd5a4f2ba177b029e","sha512":"623f053211dc9cae97a43e0faae9bf5d76de924dfa14f5413feb6739cf2082251822efca9adaff52ad1ed21e5de6c80b4b96d18ca669d49181ffb1912a132b3a","ssdeep":"","tlshash":"6ac02bb314cdd4b54d83385540253e52700e38e4a450c889e1fcd82495323302b1985e","size":146,"data":"","first_seen":"2023-04-18T01:32:18Z","last_seen":"2026-02-11T02:12:47.443548Z","times_seen":794,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59b2e0186b53de0febec4649e2b730ff","sha1":"fe599047e2a83b588b068d6d55c25b2e33cec9d7","sha256":"d403bb7f7fc13a2165b8a7d2baa883c0d0dc7434008b5d32b5e7ca4ab7376d14","sha512":"dfda48822081757bb191b6f67e54d344d8cdd40d6332d852c71c1879cd9cd68e133582608179a8adbbdb728ecef883ae9672f1c6874d27f52fe1605f57aa6a3d","ssdeep":"","tlshash":"49216d7341eef5b5dd067806441839b9e00b78f9e42568ede17acc729520eb00f1e4ae","size":1360,"data":"","first_seen":"2023-08-02T21:52:08Z","last_seen":"2025-06-27T06:32:15.040726Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"47faef89f1b8d23eb41a768f49eeb77b","sha1":"479dbe894b8a9eba2bc7808ae0b1e38a18378d0a","sha256":"9c66b2bdce9c5b7cdf1374e12ae1b6e3b5a4aa263bdb02b8414a673efedb4abc","sha512":"5c46900e8ab403c632f28ef7bd869b0d372ad61e720732b57f93ef13060774642aa6a99bad2c293f1ea969034318788d973be7be534ea6cad74692a84e098aea","ssdeep":"","tlshash":"d2c012b114cdd2b28f476754601b3fbaf10614f84594f494d66888a99992520472d17e","size":184,"data":"","first_seen":"2023-05-22T23:47:04Z","last_seen":"2026-02-11T02:12:47.410258Z","times_seen":691,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8afc83d72e4cd440cba35f77b915b9db","sha1":"062c91891a4f34cfcd6ded4279f46bd8f357c477","sha256":"f89213c596b7a6a089ab7c8c06a5a6263a6ad0c15c7bbc7c1789a9aef46aef23","sha512":"2f0d6008e346fe2637f88faaf7e8877b028872da02f8202f864a6e67f087aa8e77bdb80b2e84c0be3ae018e92d18a7dce5eaabca589fded1795da6f58cd58000","ssdeep":"","tlshash":"e911ad05a848cc3c66f5133e4e4fb357a3215e66613bae56e8b0d08eb9a090796a14e3","size":1083,"data":"","first_seen":"2024-07-03T01:45:41Z","last_seen":"2026-02-11T02:12:47.376059Z","times_seen":2439,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3791e8dc1524c21d2cb1bed4ccae14ee","sha1":"c17fdaf389450c389eb2009ae8663b04bb2aa25b","sha256":"d127b272f2b912de67581e2fdf14d1c679a084c5829fee536f577c3d4e49517f","sha512":"299e9a51dba66b7fb084fd4404031a6ab4c029f01ead527e774037a450269b812ef58025b10232e88b1ec7f889d19676f3a262e76e64b1d06e59ef636deba9c2","ssdeep":"","tlshash":"f4f0dc18f2c4254800165bb6e4ffa214b1af282abe181531a03d0082dd0960da223dda","size":444,"data":"","first_seen":"2024-06-28T19:40:51Z","last_seen":"2026-02-11T02:12:47.380949Z","times_seen":772,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d66b2a07ae7d0fcb76b2fcda29f72589","sha1":"c31d6299c5a8a13ac46c1f5e0fd8df5c525a67cb","sha256":"b4baa72bb6d3bbf9fbe70cfbc2135d74aea0065a750430937ef698e2b128b355","sha512":"83a080bb23700ad4257191a06cf67506921ee33d107d9768b3813fca91efd06e9790c79b9ed6008f4a4cb32dabbb5857c3dcd929c84744a4e567aace2320cae8","ssdeep":"","tlshash":"5421512160ddae361e4360230d1bfe73e02e0cedf3689f95a6b8cc4569c02b18b480ce","size":1241,"data":"","first_seen":"2023-07-06T13:04:16Z","last_seen":"2026-02-11T02:12:47.429576Z","times_seen":2548,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"33bee2ec60de189b5058e98a9dc66156","sha1":"59605dbb2bc482d2197a78342e23f6fd2c8cd454","sha256":"1f6a6ecf2b7bf555b0a51beae4790bb6e87a26adda6eb4b7a6a4386697ebdfdf","sha512":"2e2e687f5945c66ac56e744c3f52dbbee7f7e40afd20949f185fb16794e3125bde186e1b1e3ad97cab1fa0c92154b776ff675923e09483e564dd89c2b63fccfa","ssdeep":"","tlshash":"cb61baa3acdff2bacd129c4684493a74e0492dfdc124b5e8e238cc69d199a701f0e47d","size":3207,"data":"","first_seen":"2024-09-24T04:58:47Z","last_seen":"2025-09-01T00:05:31.440694Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a0fd9f651b93379675accebb98857473","sha1":"78e37337c2f490303733ad3152fa8735dfbdf36c","sha256":"47959577a9bf45217bfabb7ba5625ff0795e19f563a13c308f7bb555909ab449","sha512":"1937832ba48ea4eb413aa3483f31e6b786c99c5d465305bbe20d92e115df1cd6831d395d5cd812f076b2bd84ac37633cf5a392edfeac71ec206042019b054747","ssdeep":"","tlshash":"03c08ca324ce90b5898238a400253d7a600e38b4844488c9d1ad886090627301ba995c","size":154,"data":"","first_seen":"2023-04-18T01:32:18Z","last_seen":"2026-02-11T02:12:47.450332Z","times_seen":794,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b0cd4a330b1dccdf6b209c563a217584","sha1":"b949303fb2021d5c4016bef8efebd48e30eb714d","sha256":"3479b05950acb53c185a2d506052f7ef4d261b2425882be605646c19bd1ca978","sha512":"a6271c24ecc6ba9081a8bbd03f486b7fe1c3df21983d28260b4583db23b1bfa6540305df3c265f728b595f20473efb2d77feb0c0fef0b85655cd0af16955ba2e","ssdeep":"","tlshash":"d301101370cc9432634379421e2fdd07720e48e6b8204e09c3e88c8e2a45336eda50de","size":739,"data":"","first_seen":"2025-04-22T05:21:18.542902Z","last_seen":"2025-05-29T21:12:51.318647Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"87967d9ce1f7030f05cf40d6f0a94b44","sha1":"cb8825a58e4d82f59abf5ca2837fa2ef76347471","sha256":"54a58f41790cd8ee79389bfba94289790b2f58e73d061fcab8423352eb084f78","sha512":"d1abc5783ca7d64d3aff9b9d1379de5abc5b87f340efcab2bdc83396d9f2c2a5a29229ce1994bfde001164a87f54d8d4bba388eaab889e34693c2a854c00cf12","ssdeep":"","tlshash":"4fe026d331eee0b74e572486510a2e25f04d28e58000a8d9d72dd9d1e9a65742b8e4ad","size":355,"data":"","first_seen":"2025-04-25T04:54:22.116055Z","last_seen":"2025-04-25T04:54:22.116055Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"92bd47a4c3ed572c2eb0e548db5554db","sha1":"2b90dcefcdb3486e63e9d090456c3ba5768128ff","sha256":"a38eb97d07f24244656d40eec82b7ffd448a70b96275de2495779e3c29faadeb","sha512":"67dd5dbeb710e4e5f7e7b2f352c70af86fe196916b913ab2dd4f846e5ff8d47139c6791d5026a57523718a3b0d7193db69ac69e960317081cd9fd9cc3b34cf10","ssdeep":"","tlshash":"78d02e9a20cce0e0cd872455401a2ab0e00e28f9800094caf33ccc509d17a30af0d2ac","size":260,"data":"","first_seen":"2023-05-09T12:43:45Z","last_seen":"2026-02-04T16:01:22.355525Z","times_seen":365,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/anyalytics?v=_51606e07ab2","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"077ed722e2a8356d95b20f4519b194e1","sha1":"f20b49c36fe7de5cb2444e429d30e13f45be8faa","sha256":"7c77cc2e92c2bfad6b2437fab2254440559d2fb5a1f6491724ff44409fb75bc7","sha512":"da159757e3d5a4dacebd3a84fb2d8d6a626de327c597f766e9a65a6ddc803f4ea2aaf8dce5c815bd2ea2ea7063ff3501c61e60aeb7f124dad694e73c77ce5f80","ssdeep":"","tlshash":"03f0e52a295a8b3c0ce5794261bdc97d30e839a55db3d026b20dc86dc42efc51c266ae","size":444,"data":"","first_seen":"2024-06-28T14:46:02Z","last_seen":"2026-01-25T04:52:32.273062Z","times_seen":1620,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bb28dcbc28cd9d4c3d91dfc0ac66e0c5","sha1":"2587efd4151f7bc3962c1dd5f9fc695f4fb72311","sha256":"fe6943415ed74159de2ae82509ae5ba036de4a16a4b7b4f4f9c78c836eea1fb8","sha512":"d693ddce3de61fdf22e0682ac8616afe45dc0868bd38829b39adbfb5dbecc856d8ccf4207805c10aae356657582a528dbc72d59743046124c91f1f98f73b4147","ssdeep":"","tlshash":"2b3138ae94eef97ace47a50204047270f00b38aed890bdf1703d8c7ad475e619b1e0ad","size":1492,"data":"","first_seen":"2023-05-09T12:43:45Z","last_seen":"2025-12-05T09:37:09.319134Z","times_seen":665,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc8f62da5348ebd0af3046331a9b3877","sha1":"b5e8792d5bec5a1d1f75e119e08945dec05f8de6","sha256":"16c0b4a4003ed564f8eed13d7c17ef8cfe7193c9de4ff17d821938143081ca7f","sha512":"bba7ebe7a2b102148689b6d4598b47c4c2ce8d59bca478e7c66fbe971afdf92090b4c332a675e34e84256e8f3d2a9720bdc54ed49e0358dbfa39bd29bfd5d888","ssdeep":"","tlshash":"dbe0c04ff6c57223191d46c8a8075409310539b52c612bba70ec54c48863503c639c3f","size":357,"data":"","first_seen":"2024-09-24T04:58:47Z","last_seen":"2026-02-04T16:01:22.331874Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"225578dd008fdb4f91e48134d9295a15","sha1":"b335a8c3e5567f45a7e129c95331d6aa07a7d189","sha256":"23f4f8697ebd03f522696fc7530d04be1f664d956f8c108470e3d4f6852de660","sha512":"e9d0d99af8e63816edad0b9ccd550262070d47117a85211fbb11e0404d388c815f11b1e676d632f2cac14e05442d5d77ca35704d70aadad3129bfe2ab2e0bbbb","ssdeep":"","tlshash":"a911c02220ed6d774d0bb473292d7ea2e06e4ed9e0418799a5f9cc024aea6705f844de","size":1093,"data":"","first_seen":"2025-04-13T06:37:08.572266Z","last_seen":"2026-02-11T02:12:47.412547Z","times_seen":1620,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz.bdstatic.com/linksubmit/push.js","fqdn":"zz.bdstatic.com","domain":"bdstatic.com","tld":"com"},"ip":{"addr":"157.255.63.48","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9fc52ab67f035b8baf5d558714cc94d","sha1":"37062a6fb1ef410d496137d44275738ae743c747","sha256":"c31f2003f1c93ac1e34b09f376d97a65da6e110bf451cf1e0e50a7946c5e7212","sha512":"ebb0415852fbb5b964094e2e55a28b90f701dff1977c8b98c6f24d65d09067dc0c417d01492ca28a4be6747816d7c0bfac87b73a33725aee047a5d2f7ab83182","ssdeep":"","tlshash":"11e0cde86054c01c0dcb107135bb324ce7771d675a645545c04d9445396cb1f8247fe9","size":308,"data":"","first_seen":"2023-03-07T01:18:58Z","last_seen":"2026-04-05T14:58:49.592056Z","times_seen":18985,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e9ad9690a6924c0966316ee0833a0b0","sha1":"20fd84ea4c24131f463db5a0edeb452fdf2d2a35","sha256":"7273e8ff2c7684a7389f52dd7b0f39e7c477953a342cabdb251826e1ff0a756e","sha512":"144014f87ccdc35fd90690cc70cc3bcadba07ffd64c594bce8596492df683081e5de1a655c64159eab618d4b71dbabdcea7a04f27afba1d7daf6ff49b6d012e6","ssdeep":"","tlshash":"eff0e19730ccb5323bc361629c6ff50e75116e62785464186018cce7ef498039538698","size":577,"data":"","first_seen":"2025-04-22T05:21:18.529211Z","last_seen":"2025-05-29T21:12:51.319851Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4e1880a2a6101e523d848933b60d64ab","sha1":"8666189ecdd761424d1e78cab4d30fa7b0598a5b","sha256":"9908e0c4dbcd000b4993dea2031b195523f664f6e2312fe647b9f63f616af233","sha512":"becc14a8208cca3890b635382c0e6bea824417c459cf29e65278e1e6bb6601a378ac4566e7a14046df708d48096ed8fd4389c681a8836cabd26ebc83ab67b068","ssdeep":"","tlshash":"3261386704fff5f6dc06a81a009c3ab1e58628f6c034e4d6f8b5cda59554e700b0ed6e","size":3284,"data":"","first_seen":"2023-10-31T15:11:09Z","last_seen":"2025-06-18T16:47:14.143376Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"de1d9d2675b55b30af57b040d7f2b856","sha1":"950ab7a50e8b05eb61c45b82d74647db661a1999","sha256":"cd4f3bd41e78fe7e32f49001302e69184dd608dfad821f3aac5d8e75938d6f70","sha512":"61d02b278cb401a510d6562a4aab0d7ae194fc8fa8f2045a8f573d8356e3e7115a18f6fa07fae14906a4b9f72d1a47bfaeb45f758b2792c697b44dabde2a205f","ssdeep":"","tlshash":"9f01cb51c458e8b0ce8366742d37ef23d73608e6b658ec8cf825ed017e69dc0178528d","size":696,"data":"","first_seen":"2023-04-18T01:32:18Z","last_seen":"2026-03-29T19:55:31.585755Z","times_seen":1784,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8b776fef1b554e093c9c3ed9c1e1e27","sha1":"838244e76f03ea75b79f2f46d53a3d157df8bf9b","sha256":"10594e1eb0618408a1682ca862ed5f87e9fb78237662cd357703f76f570f9729","sha512":"510982ce85738201bd5d1c4005b41082db5411afc5b0e7bcd797b1679cc979cca3c3ac2bf7f95b69ad4909a7594069454e0197787392bed6fdaafdc4e6b4eafa","ssdeep":"","tlshash":"b7e0ed22d64a6039db0261b48d2bff0742344a553612fca2783af086ab98d8037188e3","size":407,"data":"","first_seen":"2024-06-29T09:06:14Z","last_seen":"2026-02-11T00:28:12.224137Z","times_seen":1476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"44482b4b64c8d5838ac2e0b965e53d4b","sha1":"158ef0fbe17f5d1c9bf8bd885f0efabc7e5e5121","sha256":"32b25e585c252e6cd9103b810d9eaafc665a87a87fe6256c013f18fd719f0ae4","sha512":"afe29fd73f74102714a8499521cc5831581f27eaf20ec8406470a244d009fdf650f8101a2f39fa6d4ff481839d3072576b260b5dacee8cdb053494c2fdbec4e8","ssdeep":"","tlshash":"f3e06d987b5660f8522233763eae6e82f48ffdf90d061294f50870194f792d024aca02","size":399,"data":"","first_seen":"2024-06-29T09:06:15Z","last_seen":"2026-02-04T16:01:22.340786Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f67c27347d821e4f626848d678458d16","sha1":"0cc4e3d0b0a4bc031160c4869f344f1e0e21a1e7","sha256":"92e8aa0fa734ee4dd5814c7e4125743f9d2d664cc211b49f97639f563273322b","sha512":"030bedd44b91bdc1300e3ee9ae0708fea7f3e944ae01184e3429d8401d0ac8a0bee0d4e7933ece51d3e643036c887051147b13aa3116d7cc8510624ea7a03d4a","ssdeep":"","tlshash":"1c01dcc0b6ac5866730a00bc5e0bf007c4a06fe87c7ca519f6f06cc3a89b14693d98b2","size":747,"data":"","first_seen":"2025-04-13T06:37:08.571365Z","last_seen":"2025-12-05T09:37:09.366874Z","times_seen":1060,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"778432374d7f9ed2df947f0b7eaca342","sha1":"7bf72a31a6e1ee18675701bfe789811e0e352f17","sha256":"4f00269666a401de18b5bd4892a45e30e3b1418586f04581d846c8281d7317cb","sha512":"ee9e2804749a133664a9b564f7b219d3bd24840ce2b27df8f1c1fce5be5decefc5addcf479e03690d5d8383ea6cce611214933abb49ba75af6750e5af990f662","ssdeep":"","tlshash":"04d0235710cdd1758e46154210176a55500f14b44810e890d135d81ce9525706b0d6bc","size":207,"data":"","first_seen":"2023-08-02T21:52:09Z","last_seen":"2025-09-01T00:05:31.448091Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"918475375772b3852e8b4d9ae9fe10ea","sha1":"347683f056cff259c72396f8fe55cfa0948accb2","sha256":"13cb4897f82ad636f5245c897c9ce2d916ad11e8d91e6034f4023eed316eb49d","sha512":"ef1de543a05adc7291aef2ccd9067def216dd195acd90273cbd04719e5b627da00a407a85583c1c08277418f2fd655b530a482c11e68b002c0fb7a2ee336e092","ssdeep":"","tlshash":"3ec080a351ed71794e4266d0546e3f77e00e14e48450d545d57ccc5242326705b698ad","size":175,"data":"","first_seen":"2024-09-24T04:58:47Z","last_seen":"2025-12-07T21:09:21.921493Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/91xav/js/t.91xav.js?f3fefe7b6e3f0fcd90b","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ac20dfb93e7c8975edd25fd5b93a70e","sha1":"5f729a697b1a851f9c55e4e899c3276dbfb6e350","sha256":"ff32b61b501f22c8795bb48c86aa27abf254211b12396780af24778a0c71e490","sha512":"b11764d0c77d30620755153e45cddf0c0ffb2ee00d8476d5ad5ebd2b108b7b6fc5e5548dabd4004362df1befcf1476cda53f081c0453e0300ca98656c6e0b67d","ssdeep":"12288:pofr4M4o2TqVgtETnSkc174FaFOFyEJz47RfY/U8v:p1MeMgtsVFyEJz47RfY/Ua","tlshash":"37051b8af181b07406d760b5907f1606f13b2998744e849cf6b6e4e6acbca8d507bf3d","size":796145,"data":"","first_seen":"2025-04-25T04:54:22.095606Z","last_seen":"2025-04-25T04:54:22.095606Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6e9c78e676f606d9d60c776055b92d72","sha1":"0c3d7427d52a1a19019d8085199a2069a8ac778f","sha256":"22fe6aa46a83662966de268bb2a3bd842b83ba101daa71fa62339e8538fa5f4c","sha512":"8703a55932b2e3de46730d539dc3d0cb929b30808a5203d05ac982fa95352716bb90857272954e9c8a445e3809e4051cf2ac078ab8ca39fc700ba3cd2c3e4c23","ssdeep":"","tlshash":"c6c02ba318ce90758e83385000243e62700e38f48098c889f1bcc821e5223305f19c5c","size":150,"data":"","first_seen":"2023-04-18T01:32:18Z","last_seen":"2026-02-11T02:12:47.373032Z","times_seen":724,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a9b9392887aae2967cd86057ffbd0c20","sha1":"1569787ed5ca5b97db28df054de03086746008b8","sha256":"d173240289b270b8381fff975bdceb23835f4df7930247ffb1286f7a573667b8","sha512":"933126c25176f09362016770d8f3feca5680d6ca6b794ed1beccdd2d3cf0e1f1dea18450f7b4c8247bfe72bd663a0ddf574082075a0c48b8fd7774fe559cb9af","ssdeep":"","tlshash":"d9d012a720dce1b5cda63455403b3b61b00b1ce95c48d88de63ca851aa12b317f5e69f","size":203,"data":"","first_seen":"2023-04-18T01:32:18Z","last_seen":"2026-02-04T16:01:22.371585Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"402261658de9f1c3a3d5b0ce5bd0ef2a","sha1":"b50ddeaf11380072c1d145022881cd710eb2c7b6","sha256":"c5fa49198e731fe4c8bcd963ad748a4a4fe14f9b52f0ab7811e4f49954eb7a84","sha512":"4376de88880c3994e035bf9c57cba396c6c5998f817dff2a663187b2d24fae9996d34216cbb0a03f41918f0393c915d04cb355951292372938b8e79b04bcb5c3","ssdeep":"","tlshash":"cfc022a310df20300a81ba9090be3d8b600310e8c4844409cd2ccc3301963308f560ec","size":193,"data":"","first_seen":"2025-03-18T21:51:03.93887Z","last_seen":"2025-05-09T05:00:24.378084Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/91xav/js/b.91xav.js?d1b4eff0ac52381fc8e","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"450e995494eb78c18df1d53c5ba3997f","sha1":"723c5d6f427a306d2a50482a3bf808058ae91159","sha256":"9a649a7f50ed8b6f5eec1cf9a0eeee2362c6fc49eb4c9648b0f8ab01bf122c3d","sha512":"1bbc816eb33c677af2f833aa4b5f68085a555e02241aec427807520093a246757891314955596ec9116eefb6623cc7f4b7f548d6bbc12159738ad72c297280fb","ssdeep":"6144:Se49ZDSnQkcxQkc2yDsWORpvjUpqU68VVBBAMMMOka/sBUd:F4a8EkaukvBUd","tlshash":"33641989f590316617eb607690af310eb2361d659e0ac060b939c1e8beb5e8c1377f7d","size":329305,"data":"","first_seen":"2025-04-24T21:51:23.950828Z","last_seen":"2025-04-25T06:14:38.740148Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"16f6c04a011d42df0d7b2fa0d91ea0be","sha1":"a052af65bfeeff8d765f23590c5469b72f9de085","sha256":"1acf62ec801c2dc7d99e8d9725c45210c7203cf480fd545ef1651bf28ce9c8d8","sha512":"b05b9ceb9784b881a6d0b8758fb1840f1fb2cc84efb089fd1698ecbd5fe230b058ee60fa62c627f774c0069f2f5f682112823c49ce20487e62db2547554a7c99","ssdeep":"","tlshash":"3c1189a308bee1f6cd46a45b502fbb70e54a0cf6c0a0a4c9fa35cca04484e71070c57e","size":1074,"data":"","first_seen":"2024-06-29T09:06:15Z","last_seen":"2025-08-29T16:04:32.564772Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"899461228c938e88a7709d8fa4f245a7","sha1":"103b4daba610df082170c3aba2221b6be34e954f","sha256":"b1114d93ff83a0c8f411faf7fd4465ef515ca2c1f079c4bc780f2a1cc2ead650","sha512":"bcbcbf40c4a527c4eb97b9e60cd8dcfa1c7413e328803ccf7fd27813d2adaaca6e7cc729a6a603b5310a2732df6c3c5eb5a1ce1953f6dfda5a48c37732520bfc","ssdeep":"","tlshash":"80c02be720ce213a07816a90d0173e4b700b24b81860c946c17ccc14ed33270cf050fc","size":146,"data":"","first_seen":"2025-04-25T04:54:22.104758Z","last_seen":"2025-04-25T04:54:22.104758Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f99a9015cafa58f848af069e5d232573","sha1":"6c511fff3fcc3b3afc72a195f63208dd91e1b170","sha256":"f0e98dda6ff63142ecd40693197bd6696b49021df8a68687dc97e06e8abc167e","sha512":"a59e2378b95cbcda260b6e648850aa71c68584440f2953f783e2091d779bd92a1fbe8862b8eaaa01811b0936bed7ef80e71379788f4906e9ca7e595e7b66214a","ssdeep":"","tlshash":"a8c02b43032443448094b0d9c40c230f8013c2a25cfbc0d38a9e0506120b0ee3270371","size":139,"data":"","first_seen":"2025-04-25T04:54:22.131319Z","last_seen":"2025-07-21T15:28:52.288666Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a1347faa32c3a26b1ac7930734a1370","sha1":"d64b9ea40b292491f51b2bf583e8db50e53b3fba","sha256":"bbae869dc7553bb485542e8db87dd7aebb8e882c00b9d814be44a218222ec80c","sha512":"b14cc4a8cda4705381b13ed3094ae8a433d8300da20cf3950a6352f301662c170b99cb9de8e8397d92e3a1c550752fd75ed42061627002e1c3d8453ecd6ae6a4","ssdeep":"","tlshash":"1fb092a75568118c8269b4e4d21e43088523da8b5afcf8d58b445ca269230cb201994c","size":122,"data":"","first_seen":"2025-04-25T04:54:22.132897Z","last_seen":"2025-04-25T04:54:22.132897Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"11bfa06d4cb2bf60c030ae252d447af8","sha1":"cc75c3cddf456ffc1dcc68928ef48d62a99b46d3","sha256":"800345fe23ac2c6c6df4449cfa13bae18d66fe1a121f7feb5f4893c1a17247dd","sha512":"4b6480a8e7c6d563e9c5e49374281c86dbe463eeda532af426d8616030fe65ee0b3b03d21b0f8a6d8fffb412024cd4c9ed2f6e1aa143c52b7a3b63a5a44d1142","ssdeep":"","tlshash":"6ee0611e29478a3c0ce57d0160bdc57d34f434945973c056b21dc86cc42dfc50c215dd","size":403,"data":"","first_seen":"2024-06-29T09:06:15Z","last_seen":"2025-12-21T11:07:03.395019Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e38d8dbe162ec560927b553bb78f139c","sha1":"0b79d9b36c15d02931b9cb73978bd9ba6c4e050a","sha256":"773796e797fcf022639c5f3c876d344c4d518a3fc8ea164975929c232c7ab10b","sha512":"1e65843f532abd18b0442133cf7a922ded73ccfc53f60f6318a1f81f638a48a099dcb41088787d4e5acb60cca389fe92ecdfa60b49f3707d9af0a46dcfb30a79","ssdeep":"","tlshash":"73a02203f28838b20ccf0f832020c3cef030a3002c28ab3303380aa08320aa200e3000","size":78,"data":"","first_seen":"2024-06-28T15:30:14Z","last_seen":"2026-01-30T03:15:49.492204Z","times_seen":1896,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"402261658de9f1c3a3d5b0ce5bd0ef2a","sha1":"b50ddeaf11380072c1d145022881cd710eb2c7b6","sha256":"c5fa49198e731fe4c8bcd963ad748a4a4fe14f9b52f0ab7811e4f49954eb7a84","sha512":"4376de88880c3994e035bf9c57cba396c6c5998f817dff2a663187b2d24fae9996d34216cbb0a03f41918f0393c915d04cb355951292372938b8e79b04bcb5c3","ssdeep":"","tlshash":"cfc022a310df20300a81ba9090be3d8b600310e8c4844409cd2ccc3301963308f560ec","size":193,"data":"","first_seen":"2025-03-18T21:51:03.93887Z","last_seen":"2025-05-09T05:00:24.378084Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"91xav.cc/","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-04-25T04:53:50.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"91xav.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Mar 2025 03:03:20 GMT","end":"Tue, 03 Jun 2025 04:01:43 GMT"},"fingerprint":{"sha1":"CC:86:87:2D:45:7F:95:6A:A8:91:2D:55:1E:9F:3D:FE:60:15:C1:11","sha256":"89:30:E7:E9:F6:E3:98:C5:8D:7E:F5:94:EA:07:07:0D:BF:CE:90:C5:15:66:13:59:B7:3C:D3:A2:15:08:B0:4B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 91xav.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 25 Apr 2025 04:53:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nghash: _8fa420010e2\r\nipcountry: HK\r\ncache-key: 91xav:_8fa420010e2:/\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nexpires: Sat, 21 Jun 2025 23:30:30 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=1209600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\nw-cache: HIT\r\nage: 178490\r\ncontent-encoding: br\r\ncf-ray: 935b3d2dbb2b0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":81315,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (22217)","md5":"d810f457bd038457506a6ebb861c91a7","sha1":"b219aac206b4efe7015d8f8f2070f2348aea5d40","sha256":"03ddad48a31cd986e38aa94bd314fac9ee7a3287212c2e2860402b1f8f8c3468","sha512":"58964c637196f09ecd500ad785c6c68bdb2f1cc3fe72437cea5c95fbbd6d811bff87296a439f9931567d45689be28aa50764f4cd9a88538fa649ea6d19a1e608","ssdeep":"1536:pb08tshd+CAMtmnccdNXVxg1vsJvBEvPLmviv/Qk4bjvBv1v+vavmRvuDvCv9+co:pI8S+CAKmnccdNXVxgB+wi3","tlshash":"d8838471b9d6653b4263c0ca1aa6776a73d2e15ecfa3494077fc0bb957cac40f8035a8","first_seen":"2025-04-25T04:54:22.078333Z","last_seen":"2025-04-25T04:54:22.078333Z","times_seen":1,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":48,"dns":24,"connect":1,"send":0,"wait":49,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wixstatic.com/media/1ef992_53e86bd6ad71433481cc3d3ebd964fbb~mv2.gif","fqdn":"static.wixstatic.com","domain":"wixstatic.com","tld":"com"},"ip":{"addr":"3.167.2.70","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:53.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wixstatic.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Apr 2025 13:20:48 GMT","end":"Mon, 30 Jun 2025 13:20:47 GMT"},"fingerprint":{"sha1":"00:D2:25:13:B3:EB:D4:B1:02:1F:CA:15:18:D8:2A:26:B4:C7:83:3E","sha256":"18:4C:5E:53:BB:4D:6C:90:DF:D9:B5:4E:49:B7:84:25:B3:82:EB:C7:52:23:10:C5:54:3A:CA:0E:32:D7:BD:4A"}}},"request":{"raw":"GET /media/1ef992_53e86bd6ad71433481cc3d3ebd964fbb~mv2.gif HTTP/1.1\r\nHost: static.wixstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91xav.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/plain\r\ncontent-length: 9\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: openresty/1.27.1.1\r\ndate: Fri, 25 Apr 2025 04:53:53 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, private, must-revalidate, proxy-revalidate, no-store\r\ntiming-allow-origin: *\r\nx-seen-by: gcp.us-central-1.media-router-549f5bfdd-q4z5p\r\nvia: 1.1 google, 1.1 4e0a1f367f79652e0e7d03fa585de7b2.cloudfront.net (CloudFront)\r\nx-cache: Error from cloudfront\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: FtzNUHkDrqQtrgHeknbbLA8uN6vOVm5naaOKyP9rRvHoQhUSS8Q6Qw==\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sp0.baidu.com/9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://91xav.cc/","fqdn":"sp0.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"103.235.46.115","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:55.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 08 Jul 2024 01:41:02 GMT","end":"Sat, 09 Aug 2025 01:41:01 GMT"},"fingerprint":{"sha1":"EF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0","sha256":"90:73:DE:D9:D9:93:A9:34:C2:9C:5E:C3:C6:AF:A7:28:6D:2F:0F:88:48:35:2F:94:D0:20:35:86:5D:85:68:E2"}}},"request":{"raw":"GET /9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://91xav.cc/ HTTP/1.1\r\nHost: sp0.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91xav.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":768,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,null,[1,0,1]]],373,[[\"1745556823970\",null,null,null,null,null,null,\"[1,40400,30,null,\\\"749637900.0\\\",\\\"VxULaPw-l4WS9A_mxf3wBw\\\",null,null,null,\\\"no\\\",\\\"NOR\\\",0,7,1568,null,0,0,null,\\\"og-73f86d12-fdf2-4b89-98b6-6d9c005da515\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,0,null,[2,5,\\\"ug\\\",116],null,null,0,0,1]\",null,null,null,null,null,null,0,[null,null,null,\"[]\"],null,null,null,null,1]],\"1745556827109\",null,null,null,null,null,null,null,null,null,null,null,null,null,[[null,[null,null,null,null,null,null,null,null,null,null,null,null,122505695]],9]]"}},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 0\r\nContent-Type: text/plain; charset=utf-8\r\nDate: Fri, 25 Apr 2025 04:53:57 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":3145,"timings":{"blocked":1408,"dns":622,"connect":254,"send":0,"wait":330,"receive":0,"ssl":528},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/static/favicon.ico?aaff","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:56.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"91xav.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Mar 2025 03:03:20 GMT","end":"Tue, 03 Jun 2025 04:01:43 GMT"},"fingerprint":{"sha1":"CC:86:87:2D:45:7F:95:6A:A8:91:2D:55:1E:9F:3D:FE:60:15:C1:11","sha256":"89:30:E7:E9:F6:E3:98:C5:8D:7E:F5:94:EA:07:07:0D:BF:CE:90:C5:15:66:13:59:B7:3C:D3:A2:15:08:B0:4B"}}},"request":{"raw":"GET /static/favicon.ico?aaff HTTP/1.1\r\nHost: 91xav.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://91xav.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: tguest=guesta1c6ac24268a913b6ed6ff6cac64365727730cd4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 25 Apr 2025 04:53:56 GMT\r\ncontent-type: image/x-icon\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fu2PVynkRm2IoHpjWuWTshueyR0B1kTDWlteCNeSIQJPDtFoSxAWrrfV9LkDgKZrozbND20%2BOcWxzPk0gw0qeBNk2mS7HyBoSlLiUmXrLxoDy94s8nDzd4nJ2Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Sun, 23 Mar 2025 03:58:21 GMT\r\netag: W/\"67df86dd-4486\"\r\nexpires: Thu, 22 May 2025 21:05:47 GMT\r\ncache-control: max-age=31536000\r\nage: 172633\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 935b3d548e8256c1-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=6242\u0026min_rtt=1024\u0026rtt_var=5014\u0026sent=123\u0026recv=193\u0026lost=0\u0026retrans=0\u0026sent_bytes=11630\u0026recv_bytes=11376\u0026delivery_rate=37470\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=4de76f64acfa709c\u0026ts=6159\u0026x=16\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17542,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"854e8565006bf205604a433890fe215e","sha1":"12d2862a94606af59aa5b4352c268388d0f024a8","sha256":"dfb6f11694c7a9fedc45057fff1bae41e198237ff3e6a79f57d819047bb90d75","sha512":"12b5be65a2fd21180bf12fd4529cf90767038e21722a1c57b2699746d22b2002c4ec19e3823f88e0605b7f29d642a0955084e32d0a6b92bcf137a0e6d1114208","ssdeep":"96:Z7wedd0C6NwSpthz7A/N0MWRal3tKa/9MZZlPHHic+kFpQG2uT3+G9QiZ7q4:atHthtmtLalKcTFaGBLf9QMW4","tlshash":"a972a75fb693c7c0f8078d774846fbf02aeb6cbb0481a6d26327b15de5a74f84821691","first_seen":"2023-08-24T20:40:19Z","last_seen":"2026-02-04T16:01:22.291119Z","times_seen":128,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/91xav/css/b.css?2da12e525d19ed37138259e3a9e34","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:51.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zgnzw.xyz","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Mar 2025 05:27:43 GMT","end":"Mon, 02 Jun 2025 06:26:28 GMT"},"fingerprint":{"sha1":"16:F9:5D:BB:EE:97:C1:0C:3C:5B:B8:94:E0:AC:D1:CC:34:97:AF:AE","sha256":"DE:0E:EA:74:1F:01:60:51:C0:D3:CF:2C:56:62:15:FA:14:38:2E:CF:0E:26:20:F7:43:31:4F:94:5A:66:0E:35"}}},"request":{"raw":"GET /91xav/css/b.css?2da12e525d19ed37138259e3a9e34 HTTP/1.1\r\nHost: zgnzw.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91xav.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":767,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,null,[1,0,1]]],373,[[\"1745556824297\",null,null,null,null,null,null,\"[1,40400,30,null,\\\"749637900.0\\\",\\\"VxULaMa8Gfb-wbkPhpzhyQM\\\",null,null,null,\\\"no\\\",\\\"NOR\\\",0,7,2034,null,0,0,null,\\\"og-b8e1e406-0135-49f0-8b56-f1511dae182c\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,0,null,[2,5,\\\"ug\\\",7],null,null,0,0,1]\",null,null,null,null,null,null,0,[null,null,null,\"[]\"],null,null,null,null,1]],\"1745556827536\",null,null,null,null,null,null,null,null,null,null,null,null,null,[[null,[null,null,null,null,null,null,null,null,null,null,null,null,122505695]],9]]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 25 Apr 2025 04:53:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 24 Apr 2025 15:27:45 GMT\r\nvary: Accept-Encoding\r\netag: \"680a5871-232ea\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncache-control: max-age=2073600\r\ncf-cache-status: HIT\r\ncf-ray: 935b3d359f730b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":144106,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e2da12e525d19ed37138259e3a9e3405","sha1":"a356022f71c917a322fce3ad2244700ea640e8d7","sha256":"f39a4c3fca921bd9dfba9571c131d96c363c1adcf8e3c83d0dfa7f6be23ad6d5","sha512":"5f8d05fe9987c33a02bb0d69cb1cb157830cdefaa202a0f9449b79ff191b4ecbfbf20022fd1e983b11a4030f64c8628ec9cdebb0a8fb4ae8b98d9f737282e547","ssdeep":"1536:FnH2ABS4J8C3+iCpdrGHd2r/kuf2NYzfgwE3sozKPBUkHtKt696WM:FnH2pcOGZwE3srM","tlshash":"40e3d83fd982215d40278a55c6c85fe42f3dd563a4924edff312380a878ab9e27d670b","first_seen":"2025-03-24T01:21:15.047383Z","last_seen":"2025-05-21T09:36:36.612812Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1363,"timings":{"blocked":577,"dns":552,"connect":6,"send":0,"wait":196,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/91xav/css/web.91xav.css?18d7e4e94bd4c4b","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:51.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zgnzw.xyz","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Mar 2025 05:27:43 GMT","end":"Mon, 02 Jun 2025 06:26:28 GMT"},"fingerprint":{"sha1":"16:F9:5D:BB:EE:97:C1:0C:3C:5B:B8:94:E0:AC:D1:CC:34:97:AF:AE","sha256":"DE:0E:EA:74:1F:01:60:51:C0:D3:CF:2C:56:62:15:FA:14:38:2E:CF:0E:26:20:F7:43:31:4F:94:5A:66:0E:35"}}},"request":{"raw":"GET /91xav/css/web.91xav.css?18d7e4e94bd4c4b HTTP/1.1\r\nHost: zgnzw.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91xav.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":767,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,null,[1,0,2]]],373,[[\"1745556824297\",null,null,null,null,null,null,\"[1,40400,30,null,\\\"749637900.0\\\",\\\"VxULaMa8Gfb-wbkPhpzhyQM\\\",null,null,null,\\\"no\\\",\\\"NOR\\\",0,7,2034,null,0,0,null,\\\"og-b8e1e406-0135-49f0-8b56-f1511dae182c\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,0,null,[2,5,\\\"ug\\\",7],null,null,0,0,1]\",null,null,null,null,null,null,0,[null,null,null,\"[]\"],null,null,null,null,1]],\"1745556831618\",null,null,null,null,null,null,null,null,null,null,null,null,null,[[null,[null,null,null,null,null,null,null,null,null,null,null,null,122505695]],9]]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 25 Apr 2025 04:53:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 24 Apr 2025 15:27:45 GMT\r\nvary: Accept-Encoding\r\netag: \"680a5871-b95e5\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncache-control: max-age=2073600\r\ncf-cache-status: HIT\r\ncf-ray: 935b3d35af750b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":759269,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"918d7e4e94bd4c4b43c8ee7c04ebb64e","sha1":"4c667cee04d07277f5d6ac128154d02de9d615f3","sha256":"8722ed96d5c6e34372e1bab52b85e41da108022a4643e43770fb48324c2a1c93","sha512":"14b2577bf3283dcf2aea1b637d26a613c0b359cc1b513c7ec62042b52319d5c501b0bba4fbfc99d4594c8371a90c87462fca36b56ce704b6801cbd60964591d0","ssdeep":"6144:+hQeaMEws0LxzAaeAGgJgKyuKt8/QEi4cBO:+ieaMZJLxzAaeA9TyuKtM","tlshash":"a4f4f8b6e584244d6723c186a7c076e87b7d9050fa228fa7f027bab44bc25d71cb3716","first_seen":"2025-04-20T07:58:34.8178Z","last_seen":"2025-04-25T04:54:22.081996Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1357,"timings":{"blocked":583,"dns":555,"connect":6,"send":0,"wait":179,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/static/img/cd-top-arrow.svg","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:52.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zgnzw.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Mar 2025 05:27:55 GMT","end":"Mon, 02 Jun 2025 06:27:49 GMT"},"fingerprint":{"sha1":"A5:7F:AC:1D:E0:5E:5F:2B:CC:91:16:D9:E6:91:DA:B0:88:A4:88:91","sha256":"EF:CF:AC:4B:57:74:00:D9:C4:2F:C3:C8:A3:39:E9:70:9F:C9:72:F2:08:39:2F:1F:B3:1B:E5:DD:F2:EA:C2:71"}}},"request":{"raw":"GET /static/img/cd-top-arrow.svg HTTP/1.1\r\nHost: zgnzw.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zgnzw.xyz/91xav/css/web.91xav.css?18d7e4e94bd4c4b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":768,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,null,[1,0,2]]],373,[[\"1745556823970\",null,null,null,null,null,null,\"[1,40400,30,null,\\\"749637900.0\\\",\\\"VxULaPw-l4WS9A_mxf3wBw\\\",null,null,null,\\\"no\\\",\\\"NOR\\\",0,7,1568,null,0,0,null,\\\"og-73f86d12-fdf2-4b89-98b6-6d9c005da515\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,0,null,[2,5,\\\"ug\\\",116],null,null,0,0,1]\",null,null,null,null,null,null,0,[null,null,null,\"[]\"],null,null,null,null,1]],\"1745556831478\",null,null,null,null,null,null,null,null,null,null,null,null,null,[[null,[null,null,null,null,null,null,null,null,null,null,null,null,122505695]],9]]"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 25 Apr 2025 04:53:52 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=t7sn0yTzqMTLHhm1BjOR93hwASTpn%2BAoyoX5I689mWu9P0HsIAudTztfcKoLTfqv503J9r0MrwcL4bLIiL6hoGeHPL0GB%2BStwRBIyEhlYv3ZJDUb%2BHLqP0ZSRqo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Mon, 24 Feb 2025 05:07:17 GMT\r\netag: W/\"67bbfe85-22b\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\ncache-control: public, max-age=2073600, stale-if-error=7200\r\nage: 25165\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 935b3d3aba2eb505-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5027\u0026min_rtt=801\u0026rtt_var=2674\u0026sent=102\u0026recv=161\u0026lost=0\u0026retrans=0\u0026sent_bytes=8604\u0026recv_bytes=9184\u0026delivery_rate=2117\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=cbbec0019b3887a3\u0026ts=647\u0026x=16\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":555,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c2bab96d57583d68d57a99dc04f16482","sha1":"17f5b39cdf2f8cd02d5f3ff422372dcefd1bea53","sha256":"d94bbee4b8120bf8e4937e3e9c54de44bdb866291db81088601bde90085092da","sha512":"f051254752272650363d33cf555bf2263280ac87b5c1cd080cd794b8d3e97c468df276c454d93f8b949102ab8059744a9c91f4fe04336469de2a6c914757d353","ssdeep":"","tlshash":"43f0e19ca3499478f055471122b896c353a1b081909204ecd4c13cf9d156da55bd52bc","first_seen":"2023-05-08T12:47:37Z","last_seen":"2026-04-05T03:23:53.506354Z","times_seen":1293,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5845-xxpp.oss-accelerate.aliyuncs.com/5845.gif","fqdn":"5845-xxpp.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.165","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:52.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 02 Jan 2025 06:31:08 GMT","end":"Tue, 03 Feb 2026 06:31:07 GMT"},"fingerprint":{"sha1":"B3:BB:12:E7:D4:6D:F1:5A:23:12:6C:19:FB:2A:F7:79:1A:67:C7:FA","sha256":"C0:FA:50:1F:8B:F3:F4:9A:0E:3E:11:FA:3A:C5:C8:A4:94:DF:E2:DE:F2:7C:6B:61:36:E4:2A:40:08:09:BD:1A"}}},"request":{"raw":"GET /5845.gif HTTP/1.1\r\nHost: 5845-xxpp.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91xav.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":768,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,null,[1,0,3]]],373,[[\"1745556823970\",null,null,null,null,null,null,\"[1,40400,30,null,\\\"749637900.0\\\",\\\"VxULaPw-l4WS9A_mxf3wBw\\\",null,null,null,\\\"no\\\",\\\"NOR\\\",0,7,1568,null,0,0,null,\\\"og-73f86d12-fdf2-4b89-98b6-6d9c005da515\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,0,null,[2,5,\\\"ug\\\",116],null,null,0,0,1]\",null,null,null,null,null,null,0,[null,null,null,\"[]\"],null,null,null,null,1]],\"1745556838794\",null,null,null,null,null,null,null,null,null,null,null,null,null,[[null,[null,null,null,null,null,null,null,null,null,null,null,null,122505695]],9]]"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 25 Apr 2025 04:53:53 GMT\r\nContent-Type: image/gif\r\nContent-Length: 324299\r\nConnection: keep-alive\r\nx-oss-request-id: 680B15610B9F1001CC224994\r\nAccept-Ranges: bytes\r\nETag: \"4B824F5452A8379A4BB6FA2FB82E8F45\"\r\nLast-Modified: Fri, 18 Apr 2025 06:23:26 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12781593188817417989\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000104\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: S4JPVFKoN5pLtvovuC6PRQ==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":324299,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"4b824f5452a8379a4bb6fa2fb82e8f45","sha1":"0f97bfec583629d21f1737c3c806ba51ab7c9293","sha256":"92ba0c5c9930dc38fbd04c327b93437aba42e38f4fcc846b87a16b4df7ebfd45","sha512":"63850000d20788adb9bc6e6717361f4fb5595fb088a8f03117330ae1ffa548c35520b8a55ff5c5f3233f4872c8865fb5053b10ef7048b20ac89be1926fbbe180","ssdeep":"6144:SaYYr01IgV9vpSy5a0OEJNRflIGIxltJczWpokkkf30akgUJyJm5q8nrx6OJ3:Lr01I6vvNOEJrGGcmzW2kP0akgUJL5qY","tlshash":"146423d208acd8c13702b3de1ead15970ebe84526f712b285e9b9094a75c2bb707df74","first_seen":"2023-08-25T22:48:22Z","last_seen":"2025-12-06T17:55:32.14518Z","times_seen":1903,"resource_available":false,"data":null}},"time_used":1102,"timings":{"blocked":-1,"dns":542,"connect":23,"send":0,"wait":259,"receive":96,"ssl":182},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz.bdstatic.com/linksubmit/push.js","fqdn":"zz.bdstatic.com","domain":"bdstatic.com","tld":"com"},"ip":{"addr":"157.255.63.48","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:53.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 08 Jul 2024 01:41:02 GMT","end":"Sat, 09 Aug 2025 01:41:01 GMT"},"fingerprint":{"sha1":"EF:0F:BE:13:02:E2:C4:D4:89:BA:8F:BA:88:EF:6F:95:DC:CF:7B:E0","sha256":"90:73:DE:D9:D9:93:A9:34:C2:9C:5E:C3:C6:AF:A7:28:6D:2F:0F:88:48:35:2F:94:D0:20:35:86:5D:85:68:E2"}}},"request":{"raw":"GET /linksubmit/push.js HTTP/1.1\r\nHost: zz.bdstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91xav.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: JSP3/2.0.14\r\ndate: Fri, 25 Apr 2025 04:53:55 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Tue, 01 Apr 2025 18:11:31 GMT\r\netag: \"67ec2c53-134\"\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\nage: 5418\r\naccept-ranges: bytes\r\ntracecode: 11172726270190027786042411\r\nohc-global-saved-time: Fri, 25 Apr 2025 03:18:37 GMT\r\nohc-cache-hit: gz5un64 [2], zhuzuncache59 [2]\r\nohc-response-time: 1 0 0 0 0 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":308,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (308), with no line terminators","md5":"f9fc52ab67f035b8baf5d558714cc94d","sha1":"37062a6fb1ef410d496137d44275738ae743c747","sha256":"c31f2003f1c93ac1e34b09f376d97a65da6e110bf451cf1e0e50a7946c5e7212","sha512":"ebb0415852fbb5b964094e2e55a28b90f701dff1977c8b98c6f24d65d09067dc0c417d01492ca28a4be6747816d7c0bfac87b73a33725aee047a5d2f7ab83182","ssdeep":"","tlshash":"11e0cde86054c01c0dcb107135bb324ce7771d675a645545c04d9445396cb1f8247fe9","first_seen":"2023-03-07T01:18:58Z","last_seen":"2026-04-05T14:58:49.592056Z","times_seen":18985,"resource_available":true,"data":null}},"time_used":1598,"timings":{"blocked":-1,"dns":687,"connect":275,"send":0,"wait":285,"receive":0,"ssl":350},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/static/images/placeholder.png","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:51.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"91xav.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Mar 2025 03:03:20 GMT","end":"Tue, 03 Jun 2025 04:01:43 GMT"},"fingerprint":{"sha1":"CC:86:87:2D:45:7F:95:6A:A8:91:2D:55:1E:9F:3D:FE:60:15:C1:11","sha256":"89:30:E7:E9:F6:E3:98:C5:8D:7E:F5:94:EA:07:07:0D:BF:CE:90:C5:15:66:13:59:B7:3C:D3:A2:15:08:B0:4B"}}},"request":{"raw":"GET /static/images/placeholder.png HTTP/1.1\r\nHost: 91xav.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://91xav.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 25 Apr 2025 04:53:51 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sun, 23 Mar 2025 03:58:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67df86dc-466\"\r\nexpires: Thu, 22 May 2025 21:10:51 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 9920\r\ncf-cache-status: HIT\r\ncf-ray: 935b3d31ea4f0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1126,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 505 x 259, 8-bit/color RGBA, non-interlaced","md5":"1f5665f8bdc8aed6cf6f2aa10e48ac18","sha1":"e44c3c49bd2f14eaadef5b3775fc3f5da039288e","sha256":"9a66cac0788d315c4909b62c9290287c0ff9db72ea53bed8754661ca423c2014","sha512":"44229477b6613f7a1a11e5aa9ce5e437611204b3ad63426b31e7fcf8094feed44d7eeb71a2bb2aa6a4a92d0f7ba090a4328b17a6c3a39bfa56a6ed4956171241","ssdeep":"","tlshash":"cd2114c77354cc3055350551033d5573f57f30d40551404f050d5453045175441771f7","first_seen":"2023-05-05T00:33:54Z","last_seen":"2026-03-05T15:32:54.619918Z","times_seen":1674,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/app/user/info?reactive=true","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:52.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"91xav.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Mar 2025 03:03:20 GMT","end":"Tue, 03 Jun 2025 04:01:43 GMT"},"fingerprint":{"sha1":"CC:86:87:2D:45:7F:95:6A:A8:91:2D:55:1E:9F:3D:FE:60:15:C1:11","sha256":"89:30:E7:E9:F6:E3:98:C5:8D:7E:F5:94:EA:07:07:0D:BF:CE:90:C5:15:66:13:59:B7:3C:D3:A2:15:08:B0:4B"}}},"request":{"raw":"GET /app/user/info?reactive=true HTTP/1.1\r\nHost: 91xav.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://91xav.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 25 Apr 2025 04:53:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uhL9ZkiOXQOaGlqc0WuuFwVg%2BWEbpOx0O2Mq00kX7k32WYUIER5Vedj95%2BBUHp%2FybxQdzTU6CD2fAsX0YviI1zYuWuTeLDfr8k6O4hVeLn6JOeKjRvzvcsO5Iw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nghash: _51606e07ab2\r\naccess-control-allow-credentials: True\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization,token,app-lang,uuid,version\r\naccess-control-allow-methods: POST, GET, OPTIONS, GET,HEAD,OPTIONS\r\nx-ray: unkown-unkown\r\nset-cookie: tguest=guesta1c6ac24268a913b6ed6ff6cac64365727730cd4; Path=/\r\ncache-control: public, max-age=31536000, stale-if-error=1209600\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 935b3d391af356c1-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=7736\u0026min_rtt=1024\u0026rtt_var=4331\u0026sent=117\u0026recv=189\u0026lost=0\u0026retrans=0\u0026sent_bytes=9473\u0026recv_bytes=10603\u0026delivery_rate=1954\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=4de76f64acfa709c\u0026ts=2155\u0026x=16\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":215,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"5d5e5c81eaada8ac11cfd8c062251269","sha1":"46232c44244996cb06f89ba827fe16926df0b566","sha256":"4e460c385d8f1b4eb203dcf143ec90376cb834948417bb870661d4b2d8ceded0","sha512":"ec78ab595428776ba21e8d6d7804a435894136cae1632621c24d78864f88f98ab1fc81de27f9d1d772095facb2f250f5ed67ea77ce2905166b5d9dfdccb268bf","ssdeep":"","tlshash":"8cd02311b821527f9cd8817c5e76d751437d7245570dd7058ec4590e14086f05984ef5","first_seen":"2025-04-25T04:54:22.085631Z","last_seen":"2025-04-25T04:54:22.085631Z","times_seen":1,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg215.top/videos/8e05d6ac6d7f876533d4e57aceb20e10/cover/5_505_259.webp?ih=1","fqdn":"timg215.top","domain":"timg215.top","tld":"top"},"ip":{"addr":"172.67.25.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:52.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg215.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Apr 2025 03:41:21 GMT","end":"Thu, 03 Jul 2025 04:39:58 GMT"},"fingerprint":{"sha1":"E9:20:9E:9C:82:A7:A6:41:22:41:BD:A9:54:E8:EB:0E:E9:CE:E3:AB","sha256":"51:D3:A2:FB:02:0C:6C:CA:4C:06:F0:05:DD:C5:57:36:7D:D8:7A:6A:F3:FC:C7:78:48:0C:59:38:A6:D6:3B:5D"}}},"request":{"raw":"GET /videos/8e05d6ac6d7f876533d4e57aceb20e10/cover/5_505_259.webp?ih=1 HTTP/1.1\r\nHost: timg215.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91xav.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 25 Apr 2025 04:53:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27668\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nlast-modified: Tue, 04 Mar 2025 09:50:49 GMT\r\netag: \"67c6ccf9-6c14\"\r\nexpires: Tue, 20 May 2025 13:57:57 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=7200\r\nt-cache: LHIT\r\ncf-cache-status: HIT\r\nage: 383216\r\ncf-ray: 935b3d412a1256bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27668,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 505x259, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"66abab58df191db8e737dbbdf428f4e1","sha1":"c41d0ba4b3d0bb64d50ece64117b73aeaf566538","sha256":"a3b88394b1ba754849edcfd1c3b089f05a4d8c6894c6b075981d8e970c14aa38","sha512":"8a5395ae9476d0683bde1c8f9f804cf3fb4ac7d3c23b2c7ab12ad98f35431ccdc64674d594813e963bd4982ee5e0312b98d1779f24e5517eeea1c00924fcfd07","ssdeep":"768:yEC3KctHaaRhQE+OIV2poGOWWq0ukG+4docF:yB3xtHaaRiE+ONoGbGEh","tlshash":"2ac2f16ab9c6cb18b48f1ea173fd360514ca496e56c8093f44cce6c2e36a748def9007","first_seen":"2025-03-18T01:55:05.590721Z","last_seen":"2025-10-30T02:42:11.357575Z","times_seen":456,"resource_available":false,"data":null}},"time_used":1383,"timings":{"blocked":679,"dns":645,"connect":4,"send":0,"wait":21,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"365guanggao.oss-cn-shenzhen.aliyuncs.com/365-960x60.gif","fqdn":"365guanggao.oss-cn-shenzhen.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"120.78.115.82","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:52.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-cn-shenzhen.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 03 Jan 2025 03:21:02 GMT","end":"Wed, 04 Feb 2026 03:21:01 GMT"},"fingerprint":{"sha1":"03:70:E9:00:74:25:16:B5:BF:FF:00:CD:AB:10:06:8B:47:77:44:19","sha256":"22:DE:75:E4:0A:86:BA:6F:6F:7E:CC:B4:00:6F:BA:50:83:66:18:D2:A6:E6:ED:60:40:43:7A:4F:76:26:13:DF"}}},"request":{"raw":"GET /365-960x60.gif HTTP/1.1\r\nHost: 365guanggao.oss-cn-shenzhen.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91xav.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":766,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,null,[1,0]]],373,[[\"1745556823970\",null,null,null,null,null,null,\"[1,40400,30,null,\\\"749637900.0\\\",\\\"VxULaPw-l4WS9A_mxf3wBw\\\",null,null,null,\\\"no\\\",\\\"NOR\\\",0,7,1568,null,0,0,null,\\\"og-73f86d12-fdf2-4b89-98b6-6d9c005da515\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,0,null,[2,5,\\\"ug\\\",116],null,null,0,0,1]\",null,null,null,null,null,null,0,[null,null,null,\"[]\"],null,null,null,null,1]],\"1745556824972\",null,null,null,null,null,null,null,null,null,null,null,null,null,[[null,[null,null,null,null,null,null,null,null,null,null,null,null,122505695]],9]]"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 25 Apr 2025 04:53:53 GMT\r\nContent-Type: image/gif\r\nContent-Length: 157877\r\nConnection: keep-alive\r\nx-oss-request-id: 680B156176527934312EA141\r\nAccept-Ranges: bytes\r\nETag: \"2A23DA3C3D5C32A6EEB00DEEB9E28873\"\r\nLast-Modified: Mon, 10 Mar 2025 05:31:19 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7805553243335478259\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000103\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: KiPaPD1cMqbusA3uueKIcw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":157877,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 60","md5":"2a23da3c3d5c32a6eeb00deeb9e28873","sha1":"c198d9b5428705f502b71f689ef55dafbd4ab416","sha256":"d9d5b315c193203487e2cc905c86cda3f48007c80805622459e533c8d166fdef","sha512":"a41d0e30082ebe43c0451851fba15de15d2c598a6ee99d1df0b927df684fe513b136b0d1590573442d188fcf5f123ce0b603e6621e1c04c173368d1ff0ee99da","ssdeep":"3072:0xOWul5bxEfeAmS2WWZHdgDWqSEhbokW8OTU6xYoirO:0duPb+febSvWZGXSkUkWv3Y5rO","tlshash":"38f313b5eb4bc233851615e64a4fa2902cdf7b766a44b85f9c85d4d32073abb95c02cc","first_seen":"2025-03-12T03:26:09.173352Z","last_seen":"2025-06-22T10:55:25.064805Z","times_seen":302,"resource_available":false,"data":null}},"time_used":1751,"timings":{"blocked":-1,"dns":233,"connect":246,"send":0,"wait":251,"receive":521,"ssl":500},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gif.zhidi66.com/am1991-960x80.gif","fqdn":"gif.zhidi66.com","domain":"zhidi66.com","tld":"com"},"ip":{"addr":"98.98.86.10","port":443,"asn":21859,"as":"ZEN-ECN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:52.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gif.zhidi66.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Sun, 23 Mar 2025 06:58:52 GMT","end":"Wed, 22 Apr 2026 06:58:51 GMT"},"fingerprint":{"sha1":"9C:B5:97:BC:19:88:96:53:FF:B1:C4:D2:98:3D:26:57:B8:71:53:D3","sha256":"4F:42:67:5E:AA:7A:5B:E3:9D:BB:21:20:19:4F:08:C5:5C:76:E1:49:72:72:E9:50:DD:15:83:E0:98:22:6F:9F"}}},"request":{"raw":"GET /am1991-960x80.gif HTTP/1.1\r\nHost: gif.zhidi66.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91xav.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: NgxFence\r\ndate: Fri, 25 Apr 2025 04:53:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 0\r\nlocation: http://img.fjyyedu.com/am1991-960x80.gif\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":324884,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":1091,"timings":{"blocked":-1,"dns":532,"connect":150,"send":0,"wait":147,"receive":2,"ssl":260},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gif.zhidi66.com/388-960x80.gif","fqdn":"gif.zhidi66.com","domain":"zhidi66.com","tld":"com"},"ip":{"addr":"98.98.86.10","port":443,"asn":21859,"as":"ZEN-ECN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:52.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gif.zhidi66.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Sun, 23 Mar 2025 06:58:52 GMT","end":"Wed, 22 Apr 2026 06:58:51 GMT"},"fingerprint":{"sha1":"9C:B5:97:BC:19:88:96:53:FF:B1:C4:D2:98:3D:26:57:B8:71:53:D3","sha256":"4F:42:67:5E:AA:7A:5B:E3:9D:BB:21:20:19:4F:08:C5:5C:76:E1:49:72:72:E9:50:DD:15:83:E0:98:22:6F:9F"}}},"request":{"raw":"GET /388-960x80.gif HTTP/1.1\r\nHost: gif.zhidi66.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91xav.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: NgxFence\r\ndate: Fri, 25 Apr 2025 04:53:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 0\r\nlocation: http://img.fjyyedu.com/388-960x80.gif\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":282970,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":1085,"timings":{"blocked":-1,"dns":526,"connect":146,"send":0,"wait":147,"receive":0,"ssl":264},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/91xav/js/b.91xav.js?d1b4eff0ac52381fc8e","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:52.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zgnzw.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Mar 2025 05:27:55 GMT","end":"Mon, 02 Jun 2025 06:27:49 GMT"},"fingerprint":{"sha1":"A5:7F:AC:1D:E0:5E:5F:2B:CC:91:16:D9:E6:91:DA:B0:88:A4:88:91","sha256":"EF:CF:AC:4B:57:74:00:D9:C4:2F:C3:C8:A3:39:E9:70:9F:C9:72:F2:08:39:2F:1F:B3:1B:E5:DD:F2:EA:C2:71"}}},"request":{"raw":"GET /91xav/js/b.91xav.js?d1b4eff0ac52381fc8e HTTP/1.1\r\nHost: zgnzw.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91xav.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":767,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,null,[1,0,3]]],373,[[\"1745556824297\",null,null,null,null,null,null,\"[1,40400,30,null,\\\"749637900.0\\\",\\\"VxULaMa8Gfb-wbkPhpzhyQM\\\",null,null,null,\\\"no\\\",\\\"NOR\\\",0,7,2034,null,0,0,null,\\\"og-b8e1e406-0135-49f0-8b56-f1511dae182c\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,0,null,[2,5,\\\"ug\\\",7],null,null,0,0,1]\",null,null,null,null,null,null,0,[null,null,null,\"[]\"],null,null,null,null,1]],\"1745556839644\",null,null,null,null,null,null,null,null,null,null,null,null,null,[[null,[null,null,null,null,null,null,null,null,null,null,null,null,122505695]],9]]"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 25 Apr 2025 04:53:52 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=eNSMXl3ICrRrpebrw%2F26gy9ayi0lgPGmGs%2FwwuciDl%2B37vumZmIaI6%2BJsQu1%2FXmvE2uX2e5EfAwBXNmWAkDpHYYU92OhPpUxvuw5mLA6Zau761SjyZDhQ02EjNI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Thu, 24 Apr 2025 15:27:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"680a5871-50699\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncache-control: max-age=2073600\r\ncf-cache-status: HIT\r\ncf-ray: 935b3d3bea62b505-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4700\u0026min_rtt=801\u0026rtt_var=2659\u0026sent=105\u0026recv=163\u0026lost=0\u0026retrans=0\u0026sent_bytes=9730\u0026recv_bytes=9488\u0026delivery_rate=32776\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=cbbec0019b3887a3\u0026ts=1002\u0026x=16\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":329369,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65240), with no line terminators","md5":"450e995494eb78c18df1d53c5ba3997f","sha1":"723c5d6f427a306d2a50482a3bf808058ae91159","sha256":"9a649a7f50ed8b6f5eec1cf9a0eeee2362c6fc49eb4c9648b0f8ab01bf122c3d","sha512":"1bbc816eb33c677af2f833aa4b5f68085a555e02241aec427807520093a246757891314955596ec9116eefb6623cc7f4b7f548d6bbc12159738ad72c297280fb","ssdeep":"6144:Se49ZDSnQkcxQkc2yDsWORpvjUpqU68VVBBAMMMOka/sBUd:F4a8EkaukvBUd","tlshash":"33641989f590316617eb607690af310eb2361d659e0ac060b939c1e8beb5e8c1377f7d","first_seen":"2025-04-24T21:51:23.950828Z","last_seen":"2025-04-25T06:14:38.740148Z","times_seen":3,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":190,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"768guanggaot.oss-cn-hangzhou.aliyuncs.com/960x80.gif","fqdn":"768guanggaot.oss-cn-hangzhou.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"118.178.60.162","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:52.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cn-hangzhou.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 13 Jan 2025 06:51:20 GMT","end":"Sat, 14 Feb 2026 06:51:19 GMT"},"fingerprint":{"sha1":"30:46:D3:16:A6:4A:68:73:CD:4B:FA:F8:AC:88:D7:0E:21:20:5A:AC","sha256":"B8:74:0E:DD:BD:40:67:19:5F:67:52:61:D9:05:16:3A:12:72:14:45:CD:B6:04:80:18:65:B6:F5:B0:45:16:4F"}}},"request":{"raw":"GET /960x80.gif HTTP/1.1\r\nHost: 768guanggaot.oss-cn-hangzhou.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91xav.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 25 Apr 2025 04:53:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 201726\r\nConnection: keep-alive\r\nx-oss-request-id: 680B15622B654B313969AB67\r\nAccept-Ranges: bytes\r\nETag: \"C6C54A7EE15C07BE38E3613F3CE8783D\"\r\nLast-Modified: Tue, 03 Dec 2024 15:13:55 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7084945504932346765\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000105\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: xsVKfuFcB74442E/POh4PQ==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":201726,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"c6c54a7ee15c07be38e3613f3ce8783d","sha1":"61c4b74dc3caa6a585ce8bcc4ad753609f124a94","sha256":"c8c41978318135faaf588755a3899a3400f071d817b2d4f59c2f9eb6b4fe16cd","sha512":"da9245df50275aec0fa2fa87d895733caff96051e3095f8bbbb2ab69e3d59696ca342fbfb18d4e63cfe52b88025c58a8281e2281c8eed03c0db09328802db8d0","ssdeep":"6144:SLsefhvklJBBYmGgMHNaDrAXjj6999IMO:SL/kbBNGgE0w2rIMO","tlshash":"4114138ef1376670893578b4fafac75da37a0377c95239a0e83e13e5746470570a8da0","first_seen":"2024-05-06T13:48:10Z","last_seen":"2026-04-05T08:33:02.856634Z","times_seen":2675,"resource_available":false,"data":null}},"time_used":3861,"timings":{"blocked":1544,"dns":184,"connect":229,"send":0,"wait":234,"receive":522,"ssl":1144},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5454ylylgh.oss-accelerate.aliyuncs.com/1.gif","fqdn":"5454ylylgh.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.152","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:52.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 02 Jan 2025 06:31:08 GMT","end":"Tue, 03 Feb 2026 06:31:07 GMT"},"fingerprint":{"sha1":"B3:BB:12:E7:D4:6D:F1:5A:23:12:6C:19:FB:2A:F7:79:1A:67:C7:FA","sha256":"C0:FA:50:1F:8B:F3:F4:9A:0E:3E:11:FA:3A:C5:C8:A4:94:DF:E2:DE:F2:7C:6B:61:36:E4:2A:40:08:09:BD:1A"}}},"request":{"raw":"GET /1.gif HTTP/1.1\r\nHost: 5454ylylgh.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91xav.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 25 Apr 2025 04:53:53 GMT\r\nContent-Type: image/gif\r\nContent-Length: 523764\r\nConnection: keep-alive\r\nx-oss-request-id: 680B156143844E026EBAB0C3\r\nAccept-Ranges: bytes\r\nETag: \"8102B307619A90C2245DA75BC7445FD9\"\r\nLast-Modified: Thu, 17 Apr 2025 18:55:30 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11887648198025140144\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000104\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: gQKzB2GakMIkXadbx0Rf2Q==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":523764,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"8102b307619a90c2245da75bc7445fd9","sha1":"21ed3095f76e34fe8134cf4575c75b785616c4a7","sha256":"c2e316430822c76ff6bb32ba2b68876d2d930398f8e3f88cb70578c0b8fe03d7","sha512":"626b85d75d51b59fe4bf33528dfcf5290034db68b4746a9e7f5492f61ab43899d5f63c8efa6933ecaf2afdedf086127cb33cef2ff2d70aa405c2b3b0c0d7d3e4","ssdeep":"12288:uRM7hlTdJE/o5galslzMF7ZnxwWgwirPr:uRgx6/oizM1Jxw9wWPr","tlshash":"46b423ef842de8291f06b8b154610ee5658b9d87f8d5d329f7a4ccb6cac4ce8508473b","first_seen":"2024-12-26T06:54:57.165453Z","last_seen":"2026-02-23T04:20:58.439721Z","times_seen":2571,"resource_available":false,"data":null}},"time_used":1926,"timings":{"blocked":-1,"dns":715,"connect":21,"send":0,"wait":295,"receive":845,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.wixstatic.com/media/1ef992_c2cc8d6599e7429289c672257e911c4d~mv2.gif","fqdn":"static.wixstatic.com","domain":"wixstatic.com","tld":"com"},"ip":{"addr":"3.167.2.70","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:52.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wixstatic.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Apr 2025 13:20:48 GMT","end":"Mon, 30 Jun 2025 13:20:47 GMT"},"fingerprint":{"sha1":"00:D2:25:13:B3:EB:D4:B1:02:1F:CA:15:18:D8:2A:26:B4:C7:83:3E","sha256":"18:4C:5E:53:BB:4D:6C:90:DF:D9:B5:4E:49:B7:84:25:B3:82:EB:C7:52:23:10:C5:54:3A:CA:0E:32:D7:BD:4A"}}},"request":{"raw":"GET /media/1ef992_c2cc8d6599e7429289c672257e911c4d~mv2.gif HTTP/1.1\r\nHost: static.wixstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91xav.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/plain\r\ncontent-length: 9\r\nserver: openresty/1.27.1.1\r\ndate: Fri, 25 Apr 2025 04:53:53 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, private, must-revalidate, proxy-revalidate, no-store\r\ntiming-allow-origin: *\r\nx-seen-by: gcp.us-central-1.media-router-549f5bfdd-m5n6z\r\nvia: 1.1 google, 1.1 0091ee978574700d165730d7f2557c34.cloudfront.net (CloudFront)\r\nx-cache: Error from cloudfront\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Nk7OwFg-NG3DV4QdWbHtFl9PdoRSoiFzHax2oZk90BYLCIEQwU0g5Q==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":143,"connect":1,"send":0,"wait":262,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.feichai.com/i/2025/04/24/as4pw.gif","fqdn":"img.feichai.com","domain":"feichai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:52.925Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /i/2025/04/24/as4pw.gif HTTP/1.1\r\nHost: img.feichai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91xav.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":765,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,null,[1,0]]],373,[[\"1745556824297\",null,null,null,null,null,null,\"[1,40400,30,null,\\\"749637900.0\\\",\\\"VxULaMa8Gfb-wbkPhpzhyQM\\\",null,null,null,\\\"no\\\",\\\"NOR\\\",0,7,2034,null,0,0,null,\\\"og-b8e1e406-0135-49f0-8b56-f1511dae182c\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,0,null,[2,5,\\\"ug\\\",7],null,null,0,0,1]\",null,null,null,null,null,null,0,[null,null,null,\"[]\"],null,null,null,null,1]],\"1745556825298\",null,null,null,null,null,null,null,null,null,null,null,null,null,[[null,[null,null,null,null,null,null,null,null,null,null,null,null,122505695]],9]]"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":343,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y.gtimg.cn/music/photo_new/T053M000003Tu94k2hPOME.gif","fqdn":"y.gtimg.cn","domain":"gtimg.cn","tld":"cn"},"ip":{"addr":"95.101.10.34","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:52.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wetv.acc.qq.com","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 01 Sep 2024 00:00:00 GMT","end":"Wed, 03 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"63:66:F6:13:09:B0:E7:FC:86:1C:D7:0F:6E:E2:20:35:3B:DF:A8:5A","sha256":"2D:ED:C1:4E:AF:D1:17:7F:35:94:0A:5C:59:42:A5:8B:BA:B6:9E:1D:76:63:64:E1:C2:FC:90:B5:35:9B:D4:02"}}},"request":{"raw":"GET /music/photo_new/T053M000003Tu94k2hPOME.gif HTTP/1.1\r\nHost: y.gtimg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91xav.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 430794\r\nserver: tws\r\nlast-modified: Wed, 23 Apr 2025 10:31:12 GMT\r\nx-delay: 6739 us\r\nx-info: real data\r\nx-bcheck: 0_1\r\nx-cpt: filename=0\r\nuser-returncode: 0\r\nx-datasrc: 1\r\nx-reqgue: 0\r\nsize: 430794\r\nchid: 0\r\nfid: 0\r\ncache-control: max-age=2412032\r\ndate: Fri, 25 Apr 2025 04:53:53 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":430794,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"24b27eca7fa7d19f0da2e148098b6ec8","sha1":"2394bede7e79fc6efb1c418241bf6d094fd358b5","sha256":"00fc19f43a097a594d8847ce755b83628a565ac12d17e7db894a832607ee1362","sha512":"8fa74b0c2de071f1ac2b8451e9adc7ea018657386a4c62fa1bf5bc03662357a9688054ff1e258e40d5b39e9752eb60ce38933a77efeec3f038693fea47fc111a","ssdeep":"12288:oFan4a6t+fLvqURwAM7QNgSxSIoWDCZZw:oMdXfLvqURXlSIJCo","tlshash":"7e942386fda54b34c48192c61ec13ffa91c3556348fbe6dde2f0d68802a76f44392d5a","first_seen":"2025-03-29T18:46:36.210752Z","last_seen":"2025-04-28T04:52:45.228112Z","times_seen":180,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":470,"connect":1,"send":0,"wait":4,"receive":14,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.fjyyedu.com/am1991-960x80.gif","fqdn":"img.fjyyedu.com","domain":"fjyyedu.com","tld":"com"},"ip":{"addr":"123.6.18.110","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:54.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.fjyyedu.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 15 Apr 2025 07:38:14 GMT","end":"Fri, 15 May 2026 07:38:13 GMT"},"fingerprint":{"sha1":"7F:43:AC:F1:18:6B:32:B2:0A:05:20:F3:78:B7:34:A7:CA:79:85:1E","sha256":"3C:21:F3:A8:C2:B2:11:F0:27:93:C3:94:DA:CE:4E:59:AB:E3:39:07:3C:34:6B:CA:E3:13:01:F6:33:BF:BA:88"}}},"request":{"raw":"GET /am1991-960x80.gif HTTP/1.1\r\nHost: img.fjyyedu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Fri, 25 Apr 2025 04:53:55 GMT\r\ncontent-type: image/gif\r\ncontent-length: 324884\r\nx-oss-request-id: 68010AD3E5E963D2D586601E\r\netag: \"76C92ABAC3549E5C0D2617877777FC85\"\r\nlast-modified: Sun, 23 Mar 2025 06:33:37 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1133992588214598428\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000103\r\ncontent-disposition: attachment\r\nx-oss-force-download: true\r\ncontent-md5: dskqusNUnlwNJheHd3f8hQ==\r\nx-oss-server-time: 2\r\nx-cache: HIT\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":324884,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"76c92abac3549e5c0d2617877777fc85","sha1":"5c24dec769a78278fcde3b783567af3ee0c6dbe8","sha256":"86644637eae7c8932e3738c56f14aeff3c23f7f864a64e32fbea8ce936f6be8e","sha512":"235fc385c306ba1e0424817ccfe4ab80a3b745a523a18de3e76c90d0aa654370cd93465f04755639ca99fc6e62eb39b51a359add9e9e7fe28b9f82b9a04216e3","ssdeep":"6144:f8jZkV43ueyRQQewKU3GFyEralNHCxuNcR2q8mRSIkIL9yR0+CuX5hJhWHBdidZD:kV9qzEeHHaR9kIpyXX5LdOINIf8T","tlshash":"ae641397e49ea1f9b4a398352d57c661b0b3535bacdcf91e14743b2e28c7709c0b2683","first_seen":"2025-03-05T23:26:40.080751Z","last_seen":"2025-06-07T10:44:22.775606Z","times_seen":534,"resource_available":false,"data":null}},"time_used":3393,"timings":{"blocked":1070,"dns":495,"connect":245,"send":0,"wait":971,"receive":279,"ssl":323},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"txdytuchuang1.oss-cn-beijing.aliyuncs.com/1329.gif","fqdn":"txdytuchuang1.oss-cn-beijing.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"39.103.20.63","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:52.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cn-beijing.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 02 Jan 2025 06:32:06 GMT","end":"Thu, 04 Sep 2025 00:00:00 GMT"},"fingerprint":{"sha1":"8A:3B:CD:6E:33:73:41:A6:84:C1:C1:D4:33:14:D9:08:13:FC:B3:FD","sha256":"0F:19:CE:E1:BA:5A:38:3C:2B:09:0F:FE:AE:74:8C:D2:80:A0:09:2C:FD:9C:1E:E8:B2:13:00:39:44:DB:2D:8C"}}},"request":{"raw":"GET /1329.gif HTTP/1.1\r\nHost: txdytuchuang1.oss-cn-beijing.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91xav.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 25 Apr 2025 04:53:54 GMT\r\nContent-Type: image/gif\r\nContent-Length: 323784\r\nConnection: keep-alive\r\nx-oss-request-id: 680B156251FCAD3338BB6B11\r\nAccept-Ranges: bytes\r\nETag: \"CCD7E7F2EAD489596A0E092D3D763C7A\"\r\nLast-Modified: Wed, 26 Feb 2025 08:41:31 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17686081832368253187\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000104\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: zNfn8urUiVlqDgktPXY8eg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":323784,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"ccd7e7f2ead489596a0e092d3d763c7a","sha1":"b6bc1f350e3944cded69da6004fb38c3da1272ae","sha256":"0b2e1cb25f8d400b2ffa3b3de2fd34535a2fd8f714722bb924844065fbce7012","sha512":"352cafbe1307471c66f3ab5b8f5314faa7f34d7941f562c1cd68f9f61530e2a940ca26f17fc460cad66b7bb841807d3a9cd244a8e1537bdaf3e8fb9be019d667","ssdeep":"6144:QHpmpwBk1qooL1yPZbi+wjvrfVnFcZuir5HPt4AIRso+9ZQ1GiZ0c94:opmSoqoouZlwjJ6ZDr5V4AMUvxpS4","tlshash":"1264230d31b41a73dc1c72ff9b3f13e9a58a054636a9a012de37f82123126f2656996f","first_seen":"2025-02-27T23:48:31.627262Z","last_seen":"2025-06-29T23:37:47.087525Z","times_seen":725,"resource_available":false,"data":null}},"time_used":2374,"timings":{"blocked":-1,"dns":356,"connect":248,"send":0,"wait":251,"receive":1015,"ssl":504},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.fjyyedu.com/388-960x80.gif","fqdn":"img.fjyyedu.com","domain":"fjyyedu.com","tld":"com"},"ip":{"addr":"123.6.18.110","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:54.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.fjyyedu.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 15 Apr 2025 07:38:14 GMT","end":"Fri, 15 May 2026 07:38:13 GMT"},"fingerprint":{"sha1":"7F:43:AC:F1:18:6B:32:B2:0A:05:20:F3:78:B7:34:A7:CA:79:85:1E","sha256":"3C:21:F3:A8:C2:B2:11:F0:27:93:C3:94:DA:CE:4E:59:AB:E3:39:07:3C:34:6B:CA:E3:13:01:F6:33:BF:BA:88"}}},"request":{"raw":"GET /388-960x80.gif HTTP/1.1\r\nHost: img.fjyyedu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: NgxFence\r\ndate: Fri, 25 Apr 2025 04:53:55 GMT\r\ncontent-type: image/gif\r\ncontent-length: 282970\r\nx-oss-request-id: 67FE2C78817FCE1B3BB63812\r\netag: \"AA45CC96703850EC0193212A950C0F10\"\r\nlast-modified: Sun, 23 Mar 2025 06:32:58 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4708328741112908902\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000103\r\ncontent-disposition: attachment\r\nx-oss-force-download: true\r\ncontent-md5: qkXMlnA4UOwBkyEqlQwPEA==\r\nx-oss-server-time: 2\r\nx-cache: HIT\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":282970,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"aa45cc96703850ec0193212a950c0f10","sha1":"093c3dc4d498a20afdb58d3f79df6bbafa922baa","sha256":"285347a74deb2ff669f9e3a1e15e7191c5a6239c8381b165ec87403eab4aa34f","sha512":"d082dd6084df251afe21702344efabfdb45697cb1f6a14d591710a6fb401834082e005a2ca8717cdb58499439747958904908488690b4426f5af4153448bdb8b","ssdeep":"6144:54/gyWTeMgaDdacs7A54iHsZ1VdQctaoZJ5d5bv6meKCeDST87yCds:53wcs7yfHsZy699dTNjDG87yCds","tlshash":"d6541305f7ce6024018b21764523b3eda504cdf052b7b0e6ebb92961c70d8faf865af9","first_seen":"2024-12-21T01:21:33.806485Z","last_seen":"2026-02-18T09:59:45.334722Z","times_seen":2497,"resource_available":false,"data":null}},"time_used":2029,"timings":{"blocked":-1,"dns":492,"connect":245,"send":0,"wait":262,"receive":701,"ssl":329},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/91xav/js/t.91xav.js?f3fefe7b6e3f0fcd90b","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:51.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zgnzw.xyz","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Mar 2025 05:27:43 GMT","end":"Mon, 02 Jun 2025 06:26:28 GMT"},"fingerprint":{"sha1":"16:F9:5D:BB:EE:97:C1:0C:3C:5B:B8:94:E0:AC:D1:CC:34:97:AF:AE","sha256":"DE:0E:EA:74:1F:01:60:51:C0:D3:CF:2C:56:62:15:FA:14:38:2E:CF:0E:26:20:F7:43:31:4F:94:5A:66:0E:35"}}},"request":{"raw":"GET /91xav/js/t.91xav.js?f3fefe7b6e3f0fcd90b HTTP/1.1\r\nHost: zgnzw.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91xav.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 25 Apr 2025 04:53:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 24 Apr 2025 15:27:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"680a5871-c2689\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncache-control: max-age=2073600\r\ncf-cache-status: HIT\r\ncf-ray: 935b3d358f530b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":796297,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65006), with no line terminators","md5":"3ac20dfb93e7c8975edd25fd5b93a70e","sha1":"5f729a697b1a851f9c55e4e899c3276dbfb6e350","sha256":"ff32b61b501f22c8795bb48c86aa27abf254211b12396780af24778a0c71e490","sha512":"b11764d0c77d30620755153e45cddf0c0ffb2ee00d8476d5ad5ebd2b108b7b6fc5e5548dabd4004362df1befcf1476cda53f081c0453e0300ca98656c6e0b67d","ssdeep":"12288:pofr4M4o2TqVgtETnSkc174FaFOFyEJz47RfY/U8v:p1MeMgtsVFyEJz47RfY/Ua","tlshash":"37051b8af181b07406d760b5907f1606f13b2998744e849cf6b6e4e6acbca8d507bf3d","first_seen":"2025-04-25T04:54:22.095606Z","last_seen":"2025-04-25T04:54:22.095606Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1402,"timings":{"blocked":572,"dns":604,"connect":1,"send":0,"wait":199,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/static/css/themes/default/assets/fonts/icons.woff2?aw11","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:52.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zgnzw.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Mar 2025 05:27:55 GMT","end":"Mon, 02 Jun 2025 06:27:49 GMT"},"fingerprint":{"sha1":"A5:7F:AC:1D:E0:5E:5F:2B:CC:91:16:D9:E6:91:DA:B0:88:A4:88:91","sha256":"EF:CF:AC:4B:57:74:00:D9:C4:2F:C3:C8:A3:39:E9:70:9F:C9:72:F2:08:39:2F:1F:B3:1B:E5:DD:F2:EA:C2:71"}}},"request":{"raw":"GET /static/css/themes/default/assets/fonts/icons.woff2?aw11 HTTP/1.1\r\nHost: zgnzw.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://91xav.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zgnzw.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 25 Apr 2025 04:53:52 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40148\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JwnIovSOUNqX3EPxCDG2%2BvxVQ2vfjfr9p%2FIS6Ax%2BBPX37QtM%2FPNIQRUNYiMIfBiWjML4OT5JqvVl6wgTLBzhxB%2BrKr1VgnU%2BiLexIMUcos9QvYS8ccz4hOPH3As%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Mon, 24 Feb 2025 05:07:17 GMT\r\netag: \"67bbfe85-9cd4\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\ncache-control: public, max-age=2073600, stale-if-error=7200\r\naccept-ranges: bytes\r\nage: 44045\r\ncf-cache-status: HIT\r\ncf-ray: 935b3d3a88c31bfa-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4870\u0026min_rtt=1883\u0026rtt_var=2227\u0026sent=11\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3697\u0026recv_bytes=1252\u0026delivery_rate=2175\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=6b49085591613337\u0026ts=71\u0026x=16\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40148,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40148, version 1.0","md5":"0ab54153eeeca0ce03978cc463b257f7","sha1":"6ec6d36cb2464b4e821cfabb532f310bd342601c","sha256":"434466b59545a8a1cac6ddb38197cdc6b35995a98c3f3812fb88d61b1c300dd3","sha512":"f4b03963386fc05a28adc3905cdd361905bdbad1386ec8d1e8a4440af778e311bb46b41da4b46288291ac3c174d727addd62ab7c27513bca34079c6a2c3cadc2","ssdeep":"768:Ne7m/za8SSvlojVj1lmEpnBxR+ug6bwKoAEjg7guFL/UFd9nwXk8M8Mgs6L:ymzRojVjmOBxRHtsg58PhB83","tlshash":"0503f1ae90ece50b926c4afd7adb0ffc7211914ed87ac2f1c8f4b5970f2aa028451255","first_seen":"2023-04-13T18:56:12Z","last_seen":"2026-04-05T13:05:31.409493Z","times_seen":5005,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":50,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91xav.cc/anyalytics?v=_51606e07ab2","fqdn":"91xav.cc","domain":"91xav.cc","tld":"cc"},"ip":{"addr":"104.21.33.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:52.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"91xav.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Mar 2025 03:03:20 GMT","end":"Tue, 03 Jun 2025 04:01:43 GMT"},"fingerprint":{"sha1":"CC:86:87:2D:45:7F:95:6A:A8:91:2D:55:1E:9F:3D:FE:60:15:C1:11","sha256":"89:30:E7:E9:F6:E3:98:C5:8D:7E:F5:94:EA:07:07:0D:BF:CE:90:C5:15:66:13:59:B7:3C:D3:A2:15:08:B0:4B"}}},"request":{"raw":"GET /anyalytics?v=_51606e07ab2 HTTP/1.1\r\nHost: 91xav.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://91xav.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: tguest=guesta1c6ac24268a913b6ed6ff6cac64365727730cd4\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 25 Apr 2025 04:53:52 GMT\r\ncontent-type: text/html\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=u8IFQfai4qCUfieNez8B6Ra%2F50R4LKs4m%2BdrA7jEgPiLJO%2F61R%2F9afRblWUFX%2BrqB24ewt2ws0AfIWh62k81i3%2FErNdt4G8P8Ojb8gRRP0sVlPjo8SCgdTexOw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nf: opr\r\nlast-modified: Thu, 24 Apr 2025 17:36:49 GMT\r\nage: 9919\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 935b3d3beb6256c1-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=6917\u0026min_rtt=1024\u0026rtt_var=4886\u0026sent=120\u0026recv=191\u0026lost=0\u0026retrans=0\u0026sent_bytes=10531\u0026recv_bytes=11015\u0026delivery_rate=2540\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=4de76f64acfa709c\u0026ts=2223\u0026x=16\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":799,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (799), with no line terminators","md5":"2713a2096f61d8e497aaa77917121061","sha1":"78c499d1efc4d004512d40bf3338c5b5d92c0712","sha256":"cd4529cda9955a4ef33aa20e16f1e26f673b0ec63d957bc62eff80f7708877e4","sha512":"e9ab41819131c8c923bbc70e4898bac47e5b4b36f0a496ce2ebe0aca63ba22b62fb980bbb627857885a99648ee0e8e5a0225c67a71f850462458cd33dcdc2a27","ssdeep":"","tlshash":"4e01fd2a0c0ac62c0ca0b98060fae77e24d932a46ea3c606b698d829c51dfc40c123ed","first_seen":"2025-01-08T00:57:30.602177Z","last_seen":"2026-01-30T03:15:49.328663Z","times_seen":966,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg215.top/videos/1755c4840a18249d3df15e29e8b045aaf51672b7903b8e9d70195f401f30cf92/cover/5_505_259.webp?ih=1","fqdn":"timg215.top","domain":"timg215.top","tld":"top"},"ip":{"addr":"172.67.25.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:52.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg215.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Apr 2025 03:41:21 GMT","end":"Thu, 03 Jul 2025 04:39:58 GMT"},"fingerprint":{"sha1":"E9:20:9E:9C:82:A7:A6:41:22:41:BD:A9:54:E8:EB:0E:E9:CE:E3:AB","sha256":"51:D3:A2:FB:02:0C:6C:CA:4C:06:F0:05:DD:C5:57:36:7D:D8:7A:6A:F3:FC:C7:78:48:0C:59:38:A6:D6:3B:5D"}}},"request":{"raw":"GET /videos/1755c4840a18249d3df15e29e8b045aaf51672b7903b8e9d70195f401f30cf92/cover/5_505_259.webp?ih=1 HTTP/1.1\r\nHost: timg215.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91xav.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 25 Apr 2025 04:53:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27512\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nlast-modified: Fri, 28 Mar 2025 03:16:43 GMT\r\netag: \"67e6149b-6b78\"\r\nexpires: Tue, 20 May 2025 13:58:50 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=7200\r\nt-cache: LHIT\r\ncf-cache-status: HIT\r\nage: 383216\r\ncf-ray: 935b3d413a1956bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27512,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 505x259, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"43b5edeb5c50490a25e7f1ebce59317a","sha1":"9566a8bde96f6ae0cde771299b7c88a362ff3f80","sha256":"b81ff396343837d13027c015d77be2995a1a84e10337cf505c542526ecc1bc2f","sha512":"c35e99b5722f1d812e2b378b0e2a2bfcedd726a7a853e0c150602cd95bf8171b4b581cf5fbbadeec42c9ac8b0e5509e6703d37bda15f9bf09dd19d94847bc3b1","ssdeep":"768:sCDjnvPtQyVIdOe3WVbmme655LMozkb4FdPQCEu6f:53+yVIdIbLb5Z3/hL2","tlshash":"7bc2f14e8b9c3934455aa06d254faeb30d3dc06ff7b2ac2d0a8265d495bdaccc6cb614","first_seen":"2025-04-04T18:34:46.169753Z","last_seen":"2025-05-29T21:12:51.294615Z","times_seen":53,"resource_available":false,"data":null}},"time_used":1411,"timings":{"blocked":674,"dns":679,"connect":4,"send":0,"wait":12,"receive":3,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg215.top/videos/fed8daa9581e14afd1199c74a9569ce5082c9c167d7403638094fd646552c963/cover/5_505_259.webp?ih=1","fqdn":"timg215.top","domain":"timg215.top","tld":"top"},"ip":{"addr":"172.67.25.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:52.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg215.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Apr 2025 03:41:21 GMT","end":"Thu, 03 Jul 2025 04:39:58 GMT"},"fingerprint":{"sha1":"E9:20:9E:9C:82:A7:A6:41:22:41:BD:A9:54:E8:EB:0E:E9:CE:E3:AB","sha256":"51:D3:A2:FB:02:0C:6C:CA:4C:06:F0:05:DD:C5:57:36:7D:D8:7A:6A:F3:FC:C7:78:48:0C:59:38:A6:D6:3B:5D"}}},"request":{"raw":"GET /videos/fed8daa9581e14afd1199c74a9569ce5082c9c167d7403638094fd646552c963/cover/5_505_259.webp?ih=1 HTTP/1.1\r\nHost: timg215.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91xav.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 25 Apr 2025 04:53:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 75548\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nlast-modified: Sat, 29 Mar 2025 07:44:58 GMT\r\netag: \"67e7a4fa-1271c\"\r\nexpires: Tue, 20 May 2025 13:58:50 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=7200\r\nt-cache: LHIT\r\ncf-cache-status: HIT\r\nage: 383216\r\ncf-ray: 935b3d412a0e56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":75548,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 505x259, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d3a46c201a3d145f01c1cacaba811183","sha1":"cca1798dcfd11e907d887a9dfbd2284c6a638ffe","sha256":"3979ec3ee9c07675f5cb25c52621dee11932407eb6820d5760d2cc2da1f4c55f","sha512":"245a8f5db1b0e19b89235b43a017db25c49c44cfe2b2d29beafbc59ecab08fcd6af840a52ce33f598c07678eebd3941f1c985a2c5800332b81e8dd4b2e27f5af","ssdeep":"1536:W2rTeeb2LRrBwqLmwm+T3zvGH4lhbA58MiaVzMmYR7GP8bfePRLn:drglwd9+T3jGQWNumE/Mn","tlshash":"4b730296a6cd3c23e0c1199fde2b6441d4d38505ab2c1f96b7290d734e7e82726bbc05","first_seen":"2025-04-07T05:07:17.995859Z","last_seen":"2025-06-16T23:53:38.571704Z","times_seen":114,"resource_available":false,"data":null}},"time_used":1403,"timings":{"blocked":663,"dns":683,"connect":1,"send":0,"wait":19,"receive":3,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91x553.cc/","fqdn":"91x553.cc","domain":"91x553.cc","tld":"cc"},"ip":{"addr":"104.21.76.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-04-25T04:53:50.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"91x553.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Mar 2025 12:50:02 GMT","end":"Mon, 09 Jun 2025 13:48:03 GMT"},"fingerprint":{"sha1":"E2:C8:29:F6:BB:E6:74:56:5D:AF:DC:C1:50:9D:42:0D:03:96:EC:6E","sha256":"CC:1D:9B:CE:AF:21:7F:54:CB:F8:52:21:63:A8:15:3E:96:81:BA:E2:48:F8:1A:23:B6:89:F9:54:CB:19:78:66"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 91x553.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Fri, 25 Apr 2025 04:53:50 GMT\r\nlocation: https://91xav.cc/\r\nserver: cloudflare\r\ncf-ray: 935b3d2d4da6b51b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":81315,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":32,"dns":0,"connect":1,"send":0,"wait":16,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2025pg.img9490563646.com:8585/8888/pg507/80.gif","fqdn":"2025pg.img9490563646.com","domain":"img9490563646.com","tld":"com"},"ip":{"addr":"154.83.95.216","port":8585,"asn":984,"as":"OWS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:52.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025pg.img9490563646.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Apr 2025 12:45:14 GMT","end":"Tue, 08 Jul 2025 12:45:13 GMT"},"fingerprint":{"sha1":"07:0D:CB:CB:FE:0E:32:D4:93:88:B4:09:E9:9E:1D:D0:2F:E5:F1:B8","sha256":"1D:FC:70:C7:E1:6F:0F:5E:61:18:51:3C:55:46:ED:69:62:8A:3E:A4:26:1B:49:DC:F7:26:05:EB:A9:C9:3A:E8"}}},"request":{"raw":"GET /8888/pg507/80.gif HTTP/1.1\r\nHost: 2025pg.img9490563646.com:8585\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91xav.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncontent-type: image/gif\r\ndate: Fri, 25 Apr 2025 03:00:10 GMT\r\netag: \"68035ccc-b9fc7\"\r\nexpires: Sun, 25 May 2025 03:00:10 GMT\r\nlast-modified: Fri, 25 Apr 2025 03:00:13 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 761799\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":761799,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"882998dc044a88fc9c665d8d417fb5b7","sha1":"d1541ed879daa6b35442f3767e8167d29decdd32","sha256":"7cd5b59a4ababd5029397754e912d0b0e9f3f6b0b2b18136d2ce7ce05406a8ea","sha512":"24e8c06894b4dd0368e1d774cd82975ad99ec1c3ed22371794c9161c0b20061ea18fcabd72c7fd134ff2397595db76123cd4b0e6b96441688e975edcb4f68c2e","ssdeep":"12288:w+zzzz8LaxmTArEaxmTArEaxmTArEaxmTArEaxmTvd7o7o7o7oOD25////D:w+zzzz8L5ArE5ArE5ArE5ArE54I////D","tlshash":"c6f423f7faf8e246b111d41e738379990632f5a48ab3b8caf04d251ce67e0db901d958","first_seen":"2025-04-23T19:37:43.602292Z","last_seen":"2026-04-05T14:28:54.565601Z","times_seen":1602,"resource_available":false,"data":null}},"time_used":3468,"timings":{"blocked":-1,"dns":983,"connect":264,"send":0,"wait":265,"receive":1555,"ssl":400},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2025xm.img9580903245.com:8686/8888/xm/508/80.gif","fqdn":"2025xm.img9580903245.com","domain":"img9580903245.com","tld":"com"},"ip":{"addr":"154.83.95.216","port":8686,"asn":984,"as":"OWS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:52.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025xm.img9580903245.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Apr 2025 12:45:55 GMT","end":"Tue, 08 Jul 2025 12:45:54 GMT"},"fingerprint":{"sha1":"75:B5:63:39:11:9D:20:48:67:ED:F6:5C:17:3D:8D:3E:7C:F2:E4:EF","sha256":"98:1D:10:03:18:66:C0:31:32:8F:22:16:41:19:A8:39:FA:96:D0:F3:C4:07:DB:8D:38:E2:BF:2B:68:FF:D7:24"}}},"request":{"raw":"GET /8888/xm/508/80.gif HTTP/1.1\r\nHost: 2025xm.img9580903245.com:8686\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91xav.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncontent-type: image/gif\r\ndate: Fri, 25 Apr 2025 03:00:04 GMT\r\netag: \"66b3688a-4e9c7\"\r\nexpires: Sun, 25 May 2025 03:00:04 GMT\r\nlast-modified: Fri, 25 Apr 2025 03:00:06 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 321991\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":321991,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"8eb97ba562904f64f2af2389f0d3eda9","sha1":"d484a2e519bf260b9eb53cfa5605220cd47879f2","sha256":"e1d1188c5ea2f2e00d0bb7212087e87ab63c898e2795c95bd1ca8ee0d09725fc","sha512":"3dc76ebf8c5b24a977ccdfae07d5e12b91d2ca2e4a08d4db2f5f9278e83417e27b3c738bf15b18597b3eca766d2766df81c4e99c3435004c6aa2d888efff49b0","ssdeep":"6144:GYfxY0XuOEXuOEXuOEXuYA24yAiwYpsv92JDiq85S92JDiq85S92JDiq85S92JDH:PzNaNaNaDAOAfYvmfDmfDmfDhMDeMDep","tlshash":"e86402bb13074bc9dafa4dc519289bd6af0524642cb39c37408d746e132673faba1f94","first_seen":"2024-08-13T16:44:54Z","last_seen":"2026-04-05T08:45:06.750968Z","times_seen":2920,"resource_available":false,"data":null}},"time_used":2548,"timings":{"blocked":-1,"dns":505,"connect":242,"send":0,"wait":245,"receive":1121,"ssl":434},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg215.top/videos/f6b221305003b40ac2ae4166daadb77532e61999/cover/5_505_259.webp?ih=1","fqdn":"timg215.top","domain":"timg215.top","tld":"top"},"ip":{"addr":"172.67.25.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:52.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg215.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Apr 2025 03:41:21 GMT","end":"Thu, 03 Jul 2025 04:39:58 GMT"},"fingerprint":{"sha1":"E9:20:9E:9C:82:A7:A6:41:22:41:BD:A9:54:E8:EB:0E:E9:CE:E3:AB","sha256":"51:D3:A2:FB:02:0C:6C:CA:4C:06:F0:05:DD:C5:57:36:7D:D8:7A:6A:F3:FC:C7:78:48:0C:59:38:A6:D6:3B:5D"}}},"request":{"raw":"GET /videos/f6b221305003b40ac2ae4166daadb77532e61999/cover/5_505_259.webp?ih=1 HTTP/1.1\r\nHost: timg215.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91xav.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 25 Apr 2025 04:53:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34662\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nlast-modified: Tue, 04 Mar 2025 10:07:02 GMT\r\netag: \"67c6d0c6-8766\"\r\nexpires: Tue, 20 May 2025 13:58:50 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=7200\r\nt-cache: LHIT\r\ncf-cache-status: HIT\r\nage: 383216\r\ncf-ray: 935b3d412a1456bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34662,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 505x259, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"525d609cd394f5fc00b3f9d4776620db","sha1":"e357c887373242bb6d7f3aa60b9dec62edbd1ffa","sha256":"1a06c1b3558854258872660c9460e2d2abe0fda5630e53e4c50e04e73059f7a1","sha512":"37a988448b6e066e1391e393e33eb64423e2a8a1212f65b5ddd643155efdf3418d440ea530ac8c8de9e9f2c836a835cfc708ebf1c7ea3e372ff8fd2f8b8e8d67","ssdeep":"768:BStP8NNVk9Wiou5dCg7Zlf0+mJXE/keAytplSrv9Gnfn3VU:EENNVwOueg7b1mtEk/Y8rvIu","tlshash":"07f2e01b6331084f42edbcc93d6ed902d11d8d25d65a13043d723cfaaeb6c6b6819bb6","first_seen":"2025-03-29T19:58:10.367022Z","last_seen":"2025-06-09T21:45:50.336715Z","times_seen":79,"resource_available":false,"data":null}},"time_used":1395,"timings":{"blocked":693,"dns":648,"connect":4,"send":0,"wait":13,"receive":2,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpj46-xz.oss-accelerate.aliyuncs.com/xpj.gif","fqdn":"xpj46-xz.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.186.254","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:52.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 02 Jan 2025 06:31:08 GMT","end":"Tue, 03 Feb 2026 06:31:07 GMT"},"fingerprint":{"sha1":"B3:BB:12:E7:D4:6D:F1:5A:23:12:6C:19:FB:2A:F7:79:1A:67:C7:FA","sha256":"C0:FA:50:1F:8B:F3:F4:9A:0E:3E:11:FA:3A:C5:C8:A4:94:DF:E2:DE:F2:7C:6B:61:36:E4:2A:40:08:09:BD:1A"}}},"request":{"raw":"GET /xpj.gif HTTP/1.1\r\nHost: xpj46-xz.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91xav.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 25 Apr 2025 04:53:53 GMT\r\nContent-Type: image/gif\r\nContent-Length: 385649\r\nConnection: keep-alive\r\nx-oss-request-id: 680B156134269A6C63169305\r\nAccept-Ranges: bytes\r\nETag: \"99420771AB574E6197A995C28A8E22FB\"\r\nLast-Modified: Fri, 18 Apr 2025 00:30:50 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4968715815927960007\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000103\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: mUIHcatXTmGXqZXCio4i+w==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":385649,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"99420771ab574e6197a995c28a8e22fb","sha1":"eb51cd497134b44e1c957b10caf4d2c9569668a5","sha256":"e0f9613ae55c18751ed65c2b466290eec01e4d71bc4881c52d71578456582d8a","sha512":"f2bed60584e1307fdff179ecb6be097cf285fb3a59d8cec05d20b695c58ad1e0ca2836abfa38e9da00ff4d56affe5b108259811b1150ec35648aa73afcc260e6","ssdeep":"6144:PnRDG1hP90xJ2rBHVOgsGOnWeDLBWo5mrONv5ARJU5yx4j7E+BhniaILOXpQRd2I:PdG1h1KJyBHVOIOnFFWomONvYUcxOX8b","tlshash":"c284230c8a584826169788fc19f67f2e615e0c12912aa13dc9cff7427ecb1f6745aed3","first_seen":"2025-01-26T00:52:56.462418Z","last_seen":"2025-12-29T03:34:17.287286Z","times_seen":1695,"resource_available":false,"data":null}},"time_used":2293,"timings":{"blocked":630,"dns":342,"connect":20,"send":0,"wait":263,"receive":748,"ssl":287},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seyoutupian.dqntwl.com/960x80.gif","fqdn":"seyoutupian.dqntwl.com","domain":"dqntwl.com","tld":"com"},"ip":{"addr":"117.68.89.108","port":443,"asn":140527,"as":"China Telecom","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:52.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seyoutupian.dqntwl.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 24 Feb 2025 00:00:00 GMT","end":"Sat, 24 May 2025 23:59:59 GMT"},"fingerprint":{"sha1":"7A:F2:37:B4:6E:3A:C4:DC:54:0F:0E:73:13:92:E8:DF:8D:9B:97:44","sha256":"4E:08:07:44:A4:96:20:66:86:44:8C:B3:7E:19:60:4C:66:ED:F2:83:77:B5:E7:69:AF:DF:E5:A8:B4:8D:C0:16"}}},"request":{"raw":"GET /960x80.gif HTTP/1.1\r\nHost: seyoutupian.dqntwl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91xav.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 339723\r\nstrict-transport-security: max-age=5184000\r\ndate: Wed, 09 Apr 2025 09:03:05 GMT\r\nexpires: Fri, 09 May 2025 09:03:05 GMT\r\ncache-control: max-age=2592000\r\nlast-modified: Wed, 12 Feb 2025 08:43:53 GMT\r\nvary: Accept-Encoding\r\netag: \"67ac5f49-52f0b\"\r\naccept-ranges: bytes\r\nvia: cache49.l2cn3132[0,0,200-0,H], cache46.l2cn3132[0,0], kunlun10.cn8358[0,0,200-0,H], kunlun4.cn8358[1,0]\r\nage: 1367449\r\nali-swift-global-savetime: 1744189385\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Tue, 22 Apr 2025 03:04:52 GMT\r\nx-swift-cachetime: 1490293\r\ntiming-allow-origin: *\r\neagleid: 7544591817455568346341365e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":339723,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"b58b6b1221c88b281476b143f8065afd","sha1":"8ab029042de18f365e0d885beb43f16f34231a38","sha256":"e98878d5096bfda3db02eadb4a30edbaf518b62f2ff997b417429cf5291e2fb2","sha512":"4631fb71bd89984de71d806c34f287892c62f48c56cbe5ee5c3bc69dbad8b920e6b69681da2219775b559ab2452668f8df8216c566e9a64b00e1f39f7b68770b","ssdeep":"6144:LEFGOn8sf+vjEWkb+FLLbSN+FLLRKcXQ2V1e/cLVTZX23isuCOiguubDO6:A58LvjhhlhuGTIXGDt","tlshash":"a474230d2d6b2bb48431297c40c5ada16717bdc89d325c8e7b96acf2815f5a0f24f987","first_seen":"2025-02-13T11:16:43.28729Z","last_seen":"2026-03-29T19:55:31.573393Z","times_seen":1913,"resource_available":false,"data":null}},"time_used":2736,"timings":{"blocked":-1,"dns":1087,"connect":259,"send":0,"wait":257,"receive":858,"ssl":275},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc999img.dqsldz.com/i/2025/01/31/1.gif","fqdn":"cc999img.dqsldz.com","domain":"dqsldz.com","tld":"com"},"ip":{"addr":"117.68.89.108","port":443,"asn":140527,"as":"China Telecom","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"","requested_by":"https://91xav.cc/","date":"2025-04-25T04:53:52.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cc999img.dqsldz.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Thu, 20 Mar 2025 00:00:00 GMT","end":"Tue, 17 Jun 2025 23:59:59 GMT"},"fingerprint":{"sha1":"CA:F5:F3:1D:0E:B1:9E:33:B4:C2:D7:29:44:79:45:BC:C5:30:B3:04","sha256":"3B:CC:CB:28:35:E7:93:6C:7A:80:DA:DE:95:56:FE:FF:A8:84:D7:1C:6F:0A:A3:42:65:EA:22:52:CA:42:0C:BB"}}},"request":{"raw":"GET /i/2025/01/31/1.gif HTTP/1.1\r\nHost: cc999img.dqsldz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91xav.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 85422\r\nstrict-transport-security: max-age=5184000\r\ndate: Sat, 19 Apr 2025 13:25:46 GMT\r\nexpires: Mon, 19 May 2025 13:25:46 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nvia: cache31.l2cn8047[583,469,304-0,C], cache6.l2cn8047[471,0], kunlun8.cn8358[0,0,200-0,H], kunlun9.cn8358[0,0]\r\nlast-modified: Fri, 31 Jan 2025 13:36:18 GMT\r\nvary: Accept-Encoding\r\netag: \"679cd1d2-14dae\"\r\nage: 487688\r\nali-swift-global-savetime: 1745069146\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Sat, 19 Apr 2025 13:25:46 GMT\r\nx-swift-cachetime: 2592000\r\ntiming-allow-origin: *\r\neagleid: 7544591d17455568346156695e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85422,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"84977cadbbada49680bb24809cafcb7f","sha1":"3ddd868ca673268bf99af222f2e4ecb50ea7df29","sha256":"fe76de03cea3be7ba52fa285409396e88458114b8c57629b9258accbf130400b","sha512":"c3ff6f52611a830b33bf2a463893fb7f0701ef3dc9d2850e001c63d96d1c043ac83083b287919290ac69f8cf301e59bd899193519e2ceb367a85c1487af7e15a","ssdeep":"1536:S6hOIxxj7e53jGpZ5tUp/VAjNPzIdmWe5E6dhV8q8Npqy6P:FjCiuayoWe17V8FpD6P","tlshash":"9b83128807306211ba75744ed9ebb86665fd73ffae0b0af15b07654290431af3b006f6","first_seen":"2024-12-23T17:56:16.408766Z","last_seen":"2025-04-28T04:52:45.229907Z","times_seen":231,"resource_available":false,"data":null}},"time_used":2321,"timings":{"blocked":-1,"dns":1106,"connect":231,"send":0,"wait":248,"receive":451,"ssl":285},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}