{"report_id":"d07638c8-9da1-40c3-aef2-9bc3f8f8d9ea","version":6,"status":"done","tags":[],"date":"2025-12-24T16:46:13Z","url":{"schema":"http","addr":"www.av4us.work/kw/Ok.ru%20preteen","fqdn":"www.av4us.work","domain":"av4us.work","tld":"work"},"ip":{"addr":"172.67.171.171","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.av4us.work/kw/Ok.ru%20preteen","fqdn":"www.av4us.work","domain":"av4us.work","tld":"work"},"title":"Ok.ru preteen動画@AV4.us","dom":{"size":54725,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (29503)","md5":"932230a9b5d5cf462cb9126f574ef646","sha1":"87688e633894b093830abf9f62dc5f4348097007","sha256":"324960ef64e0018aaf7e2aaf995efcd97d442a4f66ed47b7593e355ad8fa467c","sha512":"715e484cd08abc5211c710719ce41b18328e8cfbbee04d42f0bedc36b83fa358d226703714d2018c60ffcd90a74a04be9e32e4a3be4f3340e9b778fc6a0d43ad","ssdeep":"384:M6qK8biNpuUpUr3jddKIZxvcTExSLsdImBWntNJKFNrPI6UtMygJt6LktbNoqxsg:trN2tZ6NLsLlwfVvtW4y","tlshash":"8833129a9388ab3919c59f407dfff269c9f2f49eacc34107dc71825c10046adf8d6a99","dom_hash":"domhash96667222351996f0b339838cc5cfeea4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.av4us.work/kw/Ok.ru%20preteen","fqdn":"www.av4us.work","domain":"av4us.work","tld":"work"},"ip":{"addr":"172.67.171.171","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-28T16:46:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"fixedjs.4vid.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"pdocac.4vid.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"page.phic4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.mymediaing.my","ip":{"addr":"104.21.71.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-07T20:07:31.091044Z","last_seen":"2025-12-18T05:22:17.801836Z","alert_count":0,"request_count":1,"received_data":53479,"sent_data":420,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"twitter.yandex.com.tr","ip":{"addr":"87.250.255.11","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2010-03-15","domain_rank":1612077,"first_seen":"2023-09-22T13:36:46Z","last_seen":"2025-12-18T05:22:23.697905Z","alert_count":0,"request_count":1,"received_data":3068,"sent_data":441,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fixedjs.4vid.top","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-03-09","domain_rank":0,"first_seen":"2025-11-19T01:17:38.764851Z","last_seen":"2025-12-16T06:18:58.410736Z","alert_count":2,"request_count":2,"received_data":6673,"sent_data":844,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"img.youtube.com","ip":{"addr":"142.250.74.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-02-15","domain_rank":6546,"first_seen":"2012-05-30T07:03:49Z","last_seen":"2025-12-22T07:57:57.762732Z","alert_count":0,"request_count":3,"received_data":24648,"sent_data":1236,"comment":"","tags":null,"fingerprints":null},{"fqdn":"st-ok.cdn-vk.ru","ip":{"addr":"95.163.58.213","port":443,"asn":47764,"as":"LLC VK","country":"Russia","country_code":"RU"},"domain_registered":"2023-12-29","domain_rank":355220,"first_seen":"2025-04-17T22:43:55.49634Z","last_seen":"2025-12-16T08:27:28.365702Z","alert_count":0,"request_count":1,"received_data":3237,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}]},{"fqdn":"i.okcdn.ru","ip":{"addr":"5.101.40.2","port":443,"asn":47764,"as":"LLC VK","country":"The Netherlands","country_code":"NL"},"domain_registered":"2013-01-31","domain_rank":178641,"first_seen":"2023-12-08T23:16:56Z","last_seen":"2025-12-16T08:27:28.45682Z","alert_count":0,"request_count":5,"received_data":64057,"sent_data":2542,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"jsjs.jpg4.icu","ip":{"addr":"172.67.183.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-06-01","domain_rank":0,"first_seen":"2025-11-19T01:17:39.197833Z","last_seen":"2025-12-18T05:22:21.568848Z","alert_count":0,"request_count":2,"received_data":1534,"sent_data":833,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"page.phic4.top","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-03-07","domain_rank":4536559,"first_seen":"2024-03-28T08:56:57Z","last_seen":"2025-12-18T05:22:19.472222Z","alert_count":4,"request_count":4,"received_data":0,"sent_data":1636,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.av4us.work","ip":{"addr":"104.21.55.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":23511,"sent_data":501,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-12-21T22:20:20.869237Z","alert_count":0,"request_count":2,"received_data":23433,"sent_data":892,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.w3schools.com","ip":{"addr":"23.36.77.67","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2000-03-21","domain_rank":2135,"first_seen":"2014-02-05T20:15:46Z","last_seen":"2025-12-22T11:10:31.109144Z","alert_count":0,"request_count":1,"received_data":24014,"sent_data":433,"comment":"","tags":null,"fingerprints":null},{"fqdn":"m.ok.ru","ip":{"addr":"95.163.61.73","port":443,"asn":47764,"as":"LLC VK","country":"Russia","country_code":"RU"},"domain_registered":"1998-11-03","domain_rank":2264,"first_seen":"2012-08-05T14:10:49Z","last_seen":"2025-12-03T17:56:46.510303Z","alert_count":0,"request_count":1,"received_data":5975,"sent_data":427,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ok.ru","ip":{"addr":"95.163.61.74","port":443,"asn":47764,"as":"LLC VK","country":"Russia","country_code":"RU"},"domain_registered":"1998-11-03","domain_rank":580,"first_seen":"2017-01-30T05:01:21Z","last_seen":"2025-12-17T04:34:47.51944Z","alert_count":0,"request_count":1,"received_data":5981,"sent_data":425,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pdocac.jpg4.icu","ip":{"addr":"172.67.183.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-06-01","domain_rank":0,"first_seen":"2025-11-19T01:17:48.933973Z","last_seen":"2025-12-18T05:22:23.354581Z","alert_count":0,"request_count":1,"received_data":3568,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.kwai.com","ip":{"addr":"23.215.2.149","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"domain_registered":"2002-01-16","domain_rank":13387,"first_seen":"2014-12-08T08:52:52Z","last_seen":"2025-12-18T05:22:16.53588Z","alert_count":0,"request_count":1,"received_data":3691,"sent_data":432,"comment":"","tags":null,"fingerprints":null},{"fqdn":"22554.2514june2024.com","ip":{"addr":"88.208.22.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-06-02","domain_rank":3907572,"first_seen":"2024-10-28T12:10:40.646107Z","last_seen":"2025-12-18T16:49:05.890135Z","alert_count":0,"request_count":1,"received_data":611,"sent_data":423,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pdocac.4vid.top","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-03-09","domain_rank":0,"first_seen":"2025-11-19T01:17:36.035067Z","last_seen":"2025-12-16T06:18:56.988168Z","alert_count":9,"request_count":9,"received_data":16050,"sent_data":4431,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"css.jpg4.icu","ip":{"addr":"172.67.183.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-06-01","domain_rank":0,"first_seen":"2025-11-19T01:17:37.695346Z","last_seen":"2025-12-18T05:22:22.576024Z","alert_count":0,"request_count":3,"received_data":40714,"sent_data":1460,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-12-21T22:26:30.244656Z","alert_count":0,"request_count":1,"received_data":215075,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.ytimg.com","ip":{"addr":"216.58.211.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-12-11","domain_rank":436,"first_seen":"2012-10-03T19:11:04Z","last_seen":"2025-12-21T23:33:18.609988Z","alert_count":0,"request_count":1,"received_data":14082,"sent_data":554,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mc.webvisor.org","ip":{"addr":"87.250.251.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2009-08-25","domain_rank":99131,"first_seen":"2017-08-16T02:40:17Z","last_seen":"2025-12-22T18:45:20.941788Z","alert_count":0,"request_count":2,"received_data":4850,"sent_data":3340,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2025-12-21T22:36:12.072016Z","alert_count":0,"request_count":4,"received_data":351592,"sent_data":1772,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-21T22:17:33.83847Z","alert_count":0,"request_count":1,"received_data":289734,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"css.jpg4.icu/tagjpa.php?noself=1\u0026url=av.diktok.top/tags/5","fqdn":"css.jpg4.icu","domain":"jpg4.icu","tld":"icu"},"ip":{"addr":"172.67.183.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"15f92ca46c20b71e4ac83e0951409c56","sha1":"6c5588ef4c50167ff6ac4cdb52ebec06d8445a92","sha256":"eec1398f03ab6786d9b23ee9d2209731c81e3cd57ea30a4fd5cafa873da424d4","sha512":"9345ee5e7ef82cbc36fb72eb4d5bda2050dcfec4633f28edf10ca2d8b6eff4f396392ffce08c695b8e439b215c7d2762df0d713e949b60f56a790c9f00718fc3","ssdeep":"","tlshash":"8de0c035f42d010202170270ac772a6a743dea75cfc070b0d23825787684cb6a1596fd","size":401,"data":"","first_seen":"2024-05-04T22:45:05Z","last_seen":"2026-04-03T22:52:06.987037Z","times_seen":1276,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js?1","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-19T12:35:45.501231Z","times_seen":122053,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av4us.work/kw/Ok.ru%20preteen","fqdn":"www.av4us.work","domain":"av4us.work","tld":"work"},"ip":{"addr":"104.21.55.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av4us.work/kw/Ok.ru%20preteen","fqdn":"www.av4us.work","domain":"av4us.work","tld":"work"},"ip":{"addr":"104.21.55.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4b936eab4235f662d4eb756534d69d7","sha1":"4ee18cb14eaf40e117a19a7f86dcefe6291bc0cf","sha256":"f7650ed40588ee2d1128869afc47866ee4eb09d4860ce1c3e07c9860b7242d33","sha512":"8ab68f0f71a5ed1bfef35dbdad985867b7695f46cd03e3d3bbf2ebe8de35b5a95638f5fdb41fdd52b85ecca95cbcb4a341f6fa560f1cb6a39a2026e22a9af10c","ssdeep":"","tlshash":"0260003c003f00030cc03c0000c0c000c000003c000303f00f030000000003030cc00c","size":12,"data":"","first_seen":"2023-03-07T12:07:12Z","last_seen":"2026-04-12T19:29:51.780505Z","times_seen":2307,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av4us.work/kw/Ok.ru%20preteen","fqdn":"www.av4us.work","domain":"av4us.work","tld":"work"},"ip":{"addr":"104.21.55.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0b92303a1cb08e00253e7879d304ee26","sha1":"68bdd0c37dddd5312507918516eaa994a1a1cb93","sha256":"7f10c6dc85b21ab592994c008eea9b75e836674d27bef1d026c511b4fb158432","sha512":"ea194370faf1c720d260f547d126b2beb99385dbbb29af6d954059e7bd3e622bf4040ad7731eaffea192c45551bf8816b8ba85ba40ef1a5ea1edae09e4c770e7","ssdeep":"","tlshash":"e7e0c035342d010202170260ac772a6a743dea750fc060b0d23825787684cb661596fd","size":353,"data":"","first_seen":"2024-05-18T10:55:44Z","last_seen":"2026-04-12T19:29:51.783452Z","times_seen":1353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av4us.work/kw/Ok.ru%20preteen","fqdn":"www.av4us.work","domain":"av4us.work","tld":"work"},"ip":{"addr":"104.21.55.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"573580707b4475987c22441f975b841b","sha1":"45931aa4c3158c5b6c5fd1582c3def3ea70b561b","sha256":"e0e2be92208b48c0f0af32576523cabf2ea960c0697b39cea962a5cb20ddaa74","sha512":"552af460669d80c44dbb15c4faf705783917502d166856bcf1192075122acc42897eec0443e674d5118975948a8144d8734cc9218548b67abb171e9dad417222","ssdeep":"","tlshash":"eda0014065ae60596a869cb08d141699bf474e262c6ba10d3d5a08efd0a6def821073c","size":83,"data":"","first_seen":"2024-05-19T10:01:33Z","last_seen":"2026-03-15T05:55:43.328791Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/nosleep/0.11.0/NoSleep.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea77f824de2ef57acb12e7cb6596365e","sha1":"10bad0dbdf30a0471c2c786b349daeb1dd19180e","sha256":"2b19d92ce83bf3b498f73103ba1240f09c84798b1f92aedf1491ccf0aa6f5e4c","sha512":"cf69dd76334b7318c829868da8a7e9c2097ef261555388132fc69f95d42e91420e2988056c3d93c830b20059422ae5a82e1109e3dce9127ccb0e23cc5ca27591","ssdeep":"192:N0rZbTPe+fl9SKRGyFgkw+wi+FrZJqbzr+5rA7wbUCzebIkm:N09voK7gzi+FrZJqbzrarAyUX5m","tlshash":"7a22f8b33133fd9f8fba085ac61d61045c7dbc6f4aa94091bb0884e86af4558ead5d34","size":10687,"data":"","first_seen":"2023-03-07T12:02:01Z","last_seen":"2026-04-12T19:29:51.705432Z","times_seen":2340,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fixedjs.4vid.top/?vidjs=51qxezx","fqdn":"fixedjs.4vid.top","domain":"4vid.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c464314281019f9661a5bc038dd79a3c","sha1":"a75a34d9e07301746278e942bf7e72cf68c70bce","sha256":"1516426517d2dc367f5eb57426ab7400a555a4bfe433f2492c26eda55ce990ed","sha512":"715a6dd5ab7cd5c14e9cc6602ebddfd9e4491ef915852eab86a0c7c15e45c7998611c6def39c18c90249b69e02aee21fd70a79310c379df700cc078d40927706","ssdeep":"1536:UMJTUxbKOOmlUJKJzQ2ns+VKPv4n7IrNNYl2xGSKLG7EjzK1dQoKJUJ3PVZJnFpl:NUxbKLJlPs7rYGSKLG8ze6oXPZz8fS","tlshash":"137395bb725d502844e106a369714244fc2be637ad80d290f96c2c316f74e2a99f7fec","size":76996,"data":"","first_seen":"2025-11-25T01:08:54.715442Z","last_seen":"2026-03-15T05:55:43.327555Z","times_seen":257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jsjs.jpg4.icu/index.php?js=very","fqdn":"jsjs.jpg4.icu","domain":"jpg4.icu","tld":"icu"},"ip":{"addr":"172.67.183.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"787b64eef39e3f17b9cd4e0b1a748690","sha1":"a2ea52a66a50532f879ff503c4e11957ee04986e","sha256":"5a86f466237de3034931611f60cbc93c58784b88e6fe627949ce60d8f62d1400","sha512":"5c0fe35c4b9acaaf6d3cdfd84e84a4a2b4eb3e01defec7c754ef30d2aec52cbfa02ae25ee465d48132344d77ac8a52740544f4eedfc51c5e44550fb4a46cb4d1","ssdeep":"","tlshash":"5aa01210f004c83c6488142c80e10a4503c9a1cc42c206024a401b0644767da5202070","size":85,"data":"","first_seen":"2025-10-19T05:57:44.709089Z","last_seen":"2026-04-12T19:29:51.781986Z","times_seen":458,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"css.jpg4.icu/tagjpa.php?noself=1\u0026url=av.diktok.top/tags/5","fqdn":"css.jpg4.icu","domain":"jpg4.icu","tld":"icu"},"ip":{"addr":"172.67.183.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4b182d46ed8deb89f173af96cc87d63","sha1":"f284888aa3aa2b4797067f887af101642af71549","sha256":"4c957fa6a4bdaddeee58bcbd3b6ef6b0482f94bfa6516f8167b77eb340d87e03","sha512":"ae3a780ca1f236d37a330cce9dde7ff58a7b50442873f36bcb67b739840eee6422ec83dc2b2fdc1119a1cb9699ea1fa4bd4c2ba87e31001ce8249042b9fb57ee","ssdeep":"","tlshash":"eba000aac02a00a20880283000838000c0000228ca2202a00a020000000002c308800c","size":59,"data":"","first_seen":"2024-05-04T22:45:05Z","last_seen":"2026-04-03T22:52:06.983385Z","times_seen":1275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fixedjs.4vid.top/?vidjs=51qxezx","fqdn":"fixedjs.4vid.top","domain":"4vid.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c464314281019f9661a5bc038dd79a3c","sha1":"a75a34d9e07301746278e942bf7e72cf68c70bce","sha256":"1516426517d2dc367f5eb57426ab7400a555a4bfe433f2492c26eda55ce990ed","sha512":"715a6dd5ab7cd5c14e9cc6602ebddfd9e4491ef915852eab86a0c7c15e45c7998611c6def39c18c90249b69e02aee21fd70a79310c379df700cc078d40927706","ssdeep":"1536:UMJTUxbKOOmlUJKJzQ2ns+VKPv4n7IrNNYl2xGSKLG7EjzK1dQoKJUJ3PVZJnFpl:NUxbKLJlPs7rYGSKLG8ze6oXPZz8fS","tlshash":"137395bb725d502844e106a369714244fc2be637ad80d290f96c2c316f74e2a99f7fec","size":76996,"data":"","first_seen":"2025-11-25T01:08:54.715442Z","last_seen":"2026-03-15T05:55:43.327555Z","times_seen":257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"css.jpg4.icu/tagjpa.php?noself=1\u0026url=av.diktok.top/tags/5","fqdn":"css.jpg4.icu","domain":"jpg4.icu","tld":"icu"},"ip":{"addr":"172.67.183.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7a29ea0dfdff174648e9beb3ecec7f3","sha1":"d0972bc8bd8fc4d4cad30e3142cc0140caa89cac","sha256":"469a4a22e000da2392229fea77db04fa8b63cac64cf65597e4798e61f7e16c80","sha512":"299ab3946f9675e3ba381a510e4a4124b564e7bcbcf6a25d9b80a380f1c1287be82a5ea9bf72b0fc08f0a7a654438bd8910c0b7b2f9eb04a618b38f85be4543b","ssdeep":"","tlshash":"b9a00000e222008020800c32c0020820ca088888c8002202280a0800202000af0a2383","size":72,"data":"","first_seen":"2024-05-04T22:45:05Z","last_seen":"2026-04-03T22:52:06.989388Z","times_seen":1266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av4us.work/kw/Ok.ru%20preteen","fqdn":"www.av4us.work","domain":"av4us.work","tld":"work"},"ip":{"addr":"104.21.55.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"fc0f0c892151b495af634faf41a8af7d","sha1":"f1dcadca7eb9a3ae799b9f0e48c7ffff9dc732b8","sha256":"00c7da82ac5e19146b267db1da74f1c4f5e42aa1c4303569ae2561362c702d4a","sha512":"31ffc20ccf95e5ff3af2ce3c89500942ac246ecb64772e9b9082e53ce6c2f16b6d3878da73340f30701dfcb0c8c5ecd36d97f4f14a16821e5db5f828a5ad2f99","ssdeep":"","tlshash":"fd110000c802022202030b3a2008280020000200c082028000a000000080820002280c","size":931,"data":"","first_seen":"2025-11-25T01:08:54.722116Z","last_seen":"2026-04-12T19:29:51.784922Z","times_seen":188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av4us.work/kw/Ok.ru%20preteen","fqdn":"www.av4us.work","domain":"av4us.work","tld":"work"},"ip":{"addr":"104.21.55.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jsjs.jpg4.icu/index.php?js=very","fqdn":"jsjs.jpg4.icu","domain":"jpg4.icu","tld":"icu"},"ip":{"addr":"172.67.183.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"787b64eef39e3f17b9cd4e0b1a748690","sha1":"a2ea52a66a50532f879ff503c4e11957ee04986e","sha256":"5a86f466237de3034931611f60cbc93c58784b88e6fe627949ce60d8f62d1400","sha512":"5c0fe35c4b9acaaf6d3cdfd84e84a4a2b4eb3e01defec7c754ef30d2aec52cbfa02ae25ee465d48132344d77ac8a52740544f4eedfc51c5e44550fb4a46cb4d1","ssdeep":"","tlshash":"5aa01210f004c83c6488142c80e10a4503c9a1cc42c206024a401b0644767da5202070","size":85,"data":"","first_seen":"2025-10-19T05:57:44.709089Z","last_seen":"2026-04-12T19:29:51.781986Z","times_seen":458,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av4us.work/kw/Ok.ru%20preteen","fqdn":"www.av4us.work","domain":"av4us.work","tld":"work"},"ip":{"addr":"104.21.55.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"256636d338411b0ce303e5c7e99feee4","sha1":"67a897efad79533bb1cc1bfba561577dc453373a","sha256":"f270a975993ab84a933aa5bef22f2e0a2780f35e3338705f222dcf8db493dfab","sha512":"706050624c1a57ac3e1325754716e0d7b5866ad83d5e3b5673da771143ed7c5183ccf021853de2a50f9ef8c459c0d331e8cf588fa7c127d20e0d58455bf63417","ssdeep":"","tlshash":"aa9002b04844dd3a4692a0545525d24b512c96a001c69285d478928c15455320b96a16","size":53,"data":"","first_seen":"2025-12-24T16:46:25.233145Z","last_seen":"2025-12-24T16:46:25.233145Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av4us.work/kw/Ok.ru%20preteen","fqdn":"www.av4us.work","domain":"av4us.work","tld":"work"},"ip":{"addr":"104.21.55.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"13b29d7aeaa1d827a9a3feeb39148a43","sha1":"da2040ef13a2d1ce62b0eef9c6ced0fe14f66b28","sha256":"d2d18329527d4d7d4acda028f92281274ac2a08bd840af1c0480620582f98338","sha512":"86dc2b9ccd6cda65753b62b83dda93aabd9272931c1cd9bae1a56ccb607d7de074a8b9873c3a91b69479abf9fb911a4e10b47e0ae7f9cd242d638ce732869c53","ssdeep":"","tlshash":"466000003333000030c00c03c0000c00cf0c00cc000030003c030c00303000030c33c3","size":14,"data":"","first_seen":"2023-03-07T12:07:12Z","last_seen":"2026-04-12T19:29:51.785587Z","times_seen":1774,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"css.jpg4.icu/tagjpa.php?noself=1\u0026url=av.diktok.top/tags/5","fqdn":"css.jpg4.icu","domain":"jpg4.icu","tld":"icu"},"ip":{"addr":"172.67.183.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9372bad49ab06487235a5db71d2ddbfa","sha1":"99b59b1c9a74dd8c490044abae8386b40fc1690c","sha256":"d675fcc09c707a5d6443322663af4df3ce40daf189c8d7d080e7811a791b66ff","sha512":"ae20e8eb97cb3d48483ef5f388beec62ecf126fcc0430fa4282dc65dab37fa7806002bc954ad11f08f63f737cc09b46e10e89d985e1bcc82ee5c79083d722d72","ssdeep":"","tlshash":"09d022e8c238a53826e522f9d10fe3d09ca5a38bf0c339f0dcbe082d0248a491836462","size":260,"data":"","first_seen":"2025-03-12T03:11:58.118079Z","last_seen":"2026-04-03T22:52:06.987837Z","times_seen":258,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av4us.work/kw/Ok.ru%20preteen","fqdn":"www.av4us.work","domain":"av4us.work","tld":"work"},"ip":{"addr":"104.21.55.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av4us.work/kw/Ok.ru%20preteen","fqdn":"www.av4us.work","domain":"av4us.work","tld":"work"},"ip":{"addr":"104.21.55.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jsjs.jpg4.icu/index.php?js=av4\u0026advertisement\u0026","fqdn":"jsjs.jpg4.icu","domain":"jpg4.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3350f481c28fc9dbcc2ffdc7db150ce","sha1":"1f3f51d75e04b6632b6bbf49d51343d81b3daab2","sha256":"8e9fee2110e86d7cdd212975cc347f6e5d2496d41f9726ceffefe9a518dcc1ec","sha512":"eb0b2460b3e8fbf0cc5ab56a941b66bc47c36a50957daa7b94a01e31e91228ac8c9dccfee610bed6362c33faf044e8f66d81bfb3c7b1478e48e0b2af15958a8a","ssdeep":"3072:yhV1y+HrCbn5U/4V/6JEvT14EOtsCtJNS63nkA2kDQNv:GPy+HKn5U/4SEvyXkA2kDQNv","tlshash":"b914e9f63608502951f302a79a758684f833a02b99416884fd2c6d751f78e7f297affc","size":192015,"data":"","first_seen":"2025-12-18T09:21:03.407541Z","last_seen":"2025-12-24T16:46:25.23561Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-19T12:35:45.501231Z","times_seen":122053,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av4us.work/kw/Ok.ru%20preteen","fqdn":"www.av4us.work","domain":"av4us.work","tld":"work"},"ip":{"addr":"104.21.55.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"e0498db14fe83331f17dc99853bcfcf5","sha1":"f5cb3a321493d833dc79b1de5a12670e66f1427e","sha256":"d3e961841188e795b42e54d35149f83b5e2fba96ff37f301068c85b442bdb914","sha512":"0223c38c221e2c859927bb8623b40ee6c4189f2888792019a65c4f464b0db60d3f707d75267a8efdb024272a99242e87bf974eed60b649a9660600a7ba7ca7db","ssdeep":"","tlshash":"a5110000e2208a28002028332800020800020000c08008008002002000208030ea000a","size":960,"data":"","first_seen":"2025-11-25T01:08:54.725598Z","last_seen":"2026-04-12T19:29:51.781254Z","times_seen":308,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"css.jpg4.icu/tagjpa.php?noself=1\u0026url=av.diktok.top/tags/5","fqdn":"css.jpg4.icu","domain":"jpg4.icu","tld":"icu"},"ip":{"addr":"172.67.183.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9f832047715f01438c3556824a9aa11","sha1":"174108d5d6cf22d1b907fb0958e29bba7d91576b","sha256":"eb83f6f5d35599bc9dd1268d123d878d528d8289754e9a80c8cdcf62158b57ab","sha512":"7e6972c9f5a59f9f96a5812d3ba1ab18cb32cf665dd82e2ed1dd60d477c4221c7ce9517d5ae25d066c4b0903e0a94a889d4ef6fb94bd67f618c8cfaa9fb4bd62","ssdeep":"","tlshash":"0ca000b0c008a02880a020382000820200308030c0020080aa08808c080083203c2000","size":69,"data":"","first_seen":"2024-05-04T22:45:05Z","last_seen":"2026-04-03T22:52:06.986179Z","times_seen":1271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/nosleep/0.11.0/NoSleep.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea77f824de2ef57acb12e7cb6596365e","sha1":"10bad0dbdf30a0471c2c786b349daeb1dd19180e","sha256":"2b19d92ce83bf3b498f73103ba1240f09c84798b1f92aedf1491ccf0aa6f5e4c","sha512":"cf69dd76334b7318c829868da8a7e9c2097ef261555388132fc69f95d42e91420e2988056c3d93c830b20059422ae5a82e1109e3dce9127ccb0e23cc5ca27591","ssdeep":"192:N0rZbTPe+fl9SKRGyFgkw+wi+FrZJqbzr+5rA7wbUCzebIkm:N09voK7gzi+FrZJqbzrarAyUX5m","tlshash":"7a22f8b33133fd9f8fba085ac61d61045c7dbc6f4aa94091bb0884e86af4558ead5d34","size":10687,"data":"","first_seen":"2023-03-07T12:02:01Z","last_seen":"2026-04-12T19:29:51.705432Z","times_seen":2340,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av4us.work/kw/Ok.ru%20preteen","fqdn":"www.av4us.work","domain":"av4us.work","tld":"work"},"ip":{"addr":"104.21.55.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av4us.work/kw/Ok.ru%20preteen","fqdn":"www.av4us.work","domain":"av4us.work","tld":"work"},"ip":{"addr":"104.21.55.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mymediaing.my/sdk/p/?zid=9801","fqdn":"cdn.mymediaing.my","domain":"mymediaing.my","tld":"my"},"ip":{"addr":"104.21.71.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8566397be15351053482d78416262ee1","sha1":"08599ac09f9c44be515df8baea52218c740e688c","sha256":"c3d6856842c1a218bfd7f4fae4f6578af528cf7592ff11589cb0e62a1c42961a","sha512":"2f17830c802aebe5cf1709915c1bb55f1481973912db9c063c60cf3ac26209e7172d25127ddd4f081971484d7598fbaeb52aecc0503cabff123e6585f9427441","ssdeep":"1536:nFiJtBRiqSJQUUBU1wpIbS0UboLxCSMzHUgNvFW:nDqSJQUUBU1wpIbS0UboLxCSMzHHe","tlshash":"a13392982fd0b94053dbab7b772fb4e5f4571c2f6a81484fe225bc20359071beaa5930","size":52894,"data":"","first_seen":"2025-12-24T16:46:25.225153Z","last_seen":"2025-12-24T16:46:25.225153Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/yandex-metrica-watch/watch.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"13874b43d7a0d16e9294fbd7769da715","sha1":"80021aaaf6d92a36a4c07b8a0aa92c828c0e88b4","sha256":"1997c1177df62b07fd1794d3a9f8ebdc72842e6cb20a1e1987e939065921f646","sha512":"403cf4d5c09cb01f3ffa12aab85665ed7f39d89ef43127cc982dc478cebc89f618228abadfdec1aeb9894324335fcd988df24cb715cbba168bdb398dd2dc7461","ssdeep":"6144:y49/+QUgRED0pera7677001NeCHO/SPon:/+gmS767Q01NeCuwon","tlshash":"2b24e7d976927062937334b4902f000fb2bea8a6f10c8955f1c9d9d97e78da89137f6c","size":214296,"data":"","first_seen":"2025-12-05T22:31:48.465207Z","last_seen":"2026-03-18T10:59:26.977539Z","times_seen":566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-620120-3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6282638b44fd19cf9137d8f1e1df092","sha1":"1134ea2a01a32ea5533127f54e3580e8e82b47d8","sha256":"71aa7beba6f574d5c28f1d067e6127368b2caa7e980e4ece768cc2c359260922","sha512":"d9224d82e6c582ac8fa630b0e99eea949c666db736d6c6f0437294b2ad3dae1c9ad50f3b2712f63440d7073536317b2cbf4f040638ab1910b40b15eec2d2a65c","ssdeep":"6144:1IeJt2bulKYv9VGDmHYmyBFzfns9TWO4Baa5g:GHbu7lEDns5WOmab","tlshash":"0d5409c8b3da742683a36478503f114bb23b79d1f84cd894e186d8d42e74aaa4277f7d","size":289084,"data":"","first_seen":"2025-12-24T16:46:25.214513Z","last_seen":"2025-12-24T16:46:25.214513Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"css.jpg4.icu/tagjpa.php?noself=1\u0026url=av.diktok.top/tags/5","fqdn":"css.jpg4.icu","domain":"jpg4.icu","tld":"icu"},"ip":{"addr":"172.67.183.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"878794aa2bda4b5caf61e48e81c80f99","sha1":"127680fbe1ebd4a356e0c6db8cb1088b0a92a963","sha256":"d7136ab3a5cd3408cbc8088a993f1035a616600c28574a803b0082e413322fa3","sha512":"d3f5ef53e4cf56a46942d6c76cae3326a831df25f7305708f2b8c85095f0f7c5533c477c8c7a9cc378fe02539c490dcb052f5293ff757c98f3ff27ab0d28e709","ssdeep":"192:Nq6FhutEEt+Wo7PdQWYiNpuUpUD4qQEXlea5M4VED4mF1nsLkYsksEZdKIFPQGGJ:g6qK8biNpuUpUr3jddKIZxvcTExq","tlshash":"7ed2909ba344eb3c1cc65b047ce7f3a9d9e2e54f6cd38117a871922d010069dfce6a66","size":29593,"data":"","first_seen":"2025-12-24T16:46:25.23718Z","last_seen":"2025-12-24T16:46:25.23718Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av4us.work/kw/Ok.ru%20preteen","fqdn":"www.av4us.work","domain":"av4us.work","tld":"work"},"ip":{"addr":"104.21.55.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av4us.work/kw/Ok.ru%20preteen","fqdn":"www.av4us.work","domain":"av4us.work","tld":"work"},"ip":{"addr":"104.21.55.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e8165bfbe0a84a065d8bba5ecdde8647","sha1":"7e5f9ca58e40f57650ab5078b295e3e6af7777cd","sha256":"916d5f069ecab1ea3e57a97502d36d60d04968f99a9413b0d620e850ffdc970e","sha512":"28858e8e914beb5bc12479df8f2920faeec9681bddad25493876e9eba301373af1e813819db91eb7fdcf9dab9d0aa552cd2735987f1d61d597ff60853df0b906","ssdeep":"","tlshash":"3ea0027f963554762a814781708f5e5d5466754b89b58728b85734f2708006db131b52","size":66,"data":"","first_seen":"2025-11-19T01:18:40.601427Z","last_seen":"2026-03-15T05:55:43.328248Z","times_seen":313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"css.jpg4.icu/tagjpa.php?noself=1\u0026url=av.diktok.top/tags/5","fqdn":"css.jpg4.icu","domain":"jpg4.icu","tld":"icu"},"ip":{"addr":"172.67.183.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"fc0f0c892151b495af634faf41a8af7d","sha1":"f1dcadca7eb9a3ae799b9f0e48c7ffff9dc732b8","sha256":"00c7da82ac5e19146b267db1da74f1c4f5e42aa1c4303569ae2561362c702d4a","sha512":"31ffc20ccf95e5ff3af2ce3c89500942ac246ecb64772e9b9082e53ce6c2f16b6d3878da73340f30701dfcb0c8c5ecd36d97f4f14a16821e5db5f828a5ad2f99","ssdeep":"","tlshash":"fd110000c802022202030b3a2008280020000200c082028000a000000080820002280c","size":931,"data":"","first_seen":"2025-11-25T01:08:54.722116Z","last_seen":"2026-04-12T19:29:51.784922Z","times_seen":188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jsjs.jpg4.icu/index.php?js=av4\u0026advertisement\u0026","fqdn":"jsjs.jpg4.icu","domain":"jpg4.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3350f481c28fc9dbcc2ffdc7db150ce","sha1":"1f3f51d75e04b6632b6bbf49d51343d81b3daab2","sha256":"8e9fee2110e86d7cdd212975cc347f6e5d2496d41f9726ceffefe9a518dcc1ec","sha512":"eb0b2460b3e8fbf0cc5ab56a941b66bc47c36a50957daa7b94a01e31e91228ac8c9dccfee610bed6362c33faf044e8f66d81bfb3c7b1478e48e0b2af15958a8a","ssdeep":"3072:yhV1y+HrCbn5U/4V/6JEvT14EOtsCtJNS63nkA2kDQNv:GPy+HKn5U/4SEvyXkA2kDQNv","tlshash":"b914e9f63608502951f302a79a758684f833a02b99416884fd2c6d751f78e7f297affc","size":192015,"data":"","first_seen":"2025-12-18T09:21:03.407541Z","last_seen":"2025-12-24T16:46:25.23561Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-19T12:35:45.501231Z","times_seen":122053,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js?1","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-19T12:35:45.501231Z","times_seen":122053,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.av4us.work/kw/Ok.ru%20preteen","fqdn":"www.av4us.work","domain":"av4us.work","tld":"work"},"ip":{"addr":"104.21.55.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"031272e79a9911f16d484b354be88c9d","sha1":"7d875792a099de314c9ddffbe10de67a443a96f5","sha256":"4562dba0f875615fa36535736a46725e70e63715a6ddcf54aa661fd653ca3db3","sha512":"abb30f2699a3c36dd5511949b2d74ffae557f269e6544cd36a28741a22561f1c6f2508bb0c16d53e9f9ec6c35fc7893d2b28bca2345d0102204045862a408249","ssdeep":"","tlshash":"54d022e88228a52826a522c9d10fe3d09ca5a38b708339f0dc7e082d02489491436462","size":202,"data":"","first_seen":"2025-03-12T03:12:27.527113Z","last_seen":"2026-04-12T19:29:51.786298Z","times_seen":366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"css.jpg4.icu/tagjpa.php?noself=1\u0026url=av.diktok.top/tags/5","fqdn":"css.jpg4.icu","domain":"jpg4.icu","tld":"icu"},"ip":{"addr":"172.67.183.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"e0498db14fe83331f17dc99853bcfcf5","sha1":"f5cb3a321493d833dc79b1de5a12670e66f1427e","sha256":"d3e961841188e795b42e54d35149f83b5e2fba96ff37f301068c85b442bdb914","sha512":"0223c38c221e2c859927bb8623b40ee6c4189f2888792019a65c4f464b0db60d3f707d75267a8efdb024272a99242e87bf974eed60b649a9660600a7ba7ca7db","ssdeep":"","tlshash":"a5110000e2208a28002028332800020800020000c08008008002002000208030ea000a","size":960,"data":"","first_seen":"2025-11-25T01:08:54.725598Z","last_seen":"2026-04-12T19:29:51.781254Z","times_seen":308,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"9e7608f100a0deacd5ea076a2c2a84a6","sha1":"5af8da6e7f3f1c6f078c6af42d33f7ea9cca82a7","sha256":"8b14b2f1524074eb5d024bd88cc01a5e38c0fb5e441b8af13ea0b5810283c01d","sha512":"219a9c1d41aebf5f26432e801e4da6444a6d2a1b1a2431f2eaa8acaf2e7ad88e174da808aabdd25fb851424a1db381920e34229ff91664770b49d619cc2d498b","ssdeep":"","tlshash":"e4a002531eaac4471924d9c845b5f01c4052564e9cb0cb9595f7230011622db0f11421","size":68,"data":"","first_seen":"2025-04-08T05:19:22.627705Z","last_seen":"2026-04-03T22:52:07.000747Z","times_seen":227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"ba2d069a5ce8ce7375ebf3de4090d6ab","sha1":"047efdb45f9ab165220bad539963beafff342c21","sha256":"f9d065cd35e491e424a72fd109f41436dc68807c941b0dac69ef18756b5be44b","sha512":"8f42f09500b77f9a4a064300140e70273f97f89f18fa9916343576c0a585f22f072c75bff915ba21cfcec94719465b509a8d417aba75860b4192627abdcac837","ssdeep":"","tlshash":"10d0a76b0c21b4528a2042e5e067500cc05e980a93d4da6280c794327580bed247d51a","size":232,"data":"","first_seen":"2025-11-19T01:18:40.612848Z","last_seen":"2026-03-15T05:55:43.351877Z","times_seen":337,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2f4a8f349f168e220786a0dbab8a0c2a","sha1":"c309ae69ac0c916b5dc834bfe725548962e0a5fa","sha256":"ae4f14e7d2b8b01e0e0ad877dec02240a6c254406b0e76f727e736b34ff0ebc7","sha512":"3d3d6db522b67f1df694a533bc1170a715aa734f81a88666f3b4a62b337233fe4f7c0f837c8c29df8c5db11be322c66b5134e653693e52ad76a16c7a170e2107","ssdeep":"","tlshash":"e38004d45415757440c0d57130515045cc5500d300f555c3c4d15c013444d513045515","size":36,"data":"","first_seen":"2025-11-30T14:45:44.262171Z","last_seen":"2026-03-06T23:47:23.105704Z","times_seen":134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2badd01f80cd03eb7ffce90487ab3f71","sha1":"1d0af7cc184466c7d86216085ea60242daeb1eb4","sha256":"e8f6c4dca8b7093bad96494bef55525265ce366c13dc6f76d9358cca8ee182d4","sha512":"ec9d7c3fe33550482bf70ec70ab0f2bb4c989ce096f4744d2e29646fae993113711dcf2c447e743ce4d422299d5b5155561522571a5b3c617d138ea55299078c","ssdeep":"","tlshash":"0b900410c47007103004550cc47573570531430d5f45171c0f10d4d3f5cf110553014c","size":43,"data":"","first_seen":"2023-03-07T12:07:12Z","last_seen":"2026-04-12T19:29:51.790342Z","times_seen":2354,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"edc24b7d2fc7536422daee6621435edf","sha1":"71fd4875b509449d820e6a3dd7d83e5f6c31fac8","sha256":"ec599569faa2feb73e0954dcb1f0f7ac5ba6d49ad50d17d3932506608b86a2fc","sha512":"04c6206b3bc1bac7456e96da9d1c58b9a9173e86ff91e8c94fbcd1088b011b5660519419f7971fae6370e8f281951c046c3539ea74a00f7b29830311e0174b34","ssdeep":"","tlshash":"c79002532d0494c2214558c564a0a80f9411644a58a4869688a5051161082ec0842500","size":55,"data":"","first_seen":"2024-04-16T15:37:12Z","last_seen":"2026-04-12T19:29:51.790983Z","times_seen":2325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f20082213ea16092c74eb4f66989ffa5","sha1":"a78933916b598978a23989de5eb87637c7ff5f95","sha256":"4af0a8ad5459916b3f80fee22a034cfe8ec5cabe9359fe2a128ea1198183d404","sha512":"d4f71cc2e66a148010cef0d83ef38f565148a03818d17016cbb1567a4d6e73078aeb23e345b0ee14ebde7650ef6ca033b19dcb55f746d6b804857043fcd5c935","ssdeep":"","tlshash":"29412c5f92c8b0bf6291e749687bf70bc0a574c6659b0903f872056f74409ccbd47b9a","size":2223,"data":"","first_seen":"2025-12-18T16:49:10.092312Z","last_seen":"2026-01-09T21:07:03.841119Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"8da66cae5fc09ad0ad54710cd4960dbd","sha1":"01ef404d9c252491d6f0cd6900cce145d4b76db1","sha256":"90b1ab53462f9b18c6a0d06704f07055e834c86239bdc87a3708514e9a6b6762","sha512":"5d4f175963755b790e21d7765434cab11676f9d02d4d9fa2885c05dbb2dd665ec871d93e3b7d9f50f79de7ed991f8815f7e6dc1bf82f9b1c70c8d4becf28e953","ssdeep":"","tlshash":"c1b0124b1d0c882f25319c40a552647f0072f0263510caee84b40120dc302cc4420400","size":88,"data":"","first_seen":"2023-03-07T12:02:01Z","last_seen":"2026-04-12T19:29:51.788908Z","times_seen":2424,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/nosleep/0.11.0/NoSleep.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://css.jpg4.icu/tagjpa.php?noself=1\u0026url=av.diktok.top/tags/5","date":"2025-12-24T16:45:52.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/nosleep/0.11.0/NoSleep.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://css.jpg4.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 16:45:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3953\r\ncf-ray: 9b319255adeab515-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5ed16b69-29bf\"\r\nlast-modified: Fri, 29 May 2020 20:07:05 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 410999\r\nexpires: Mon, 14 Dec 2026 16:45:52 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=H3S6jtc0oP%2Bc2HEScr60QStOlCM%2BTcd9XdAvPAQoJ9XGeTgP94bZq20WEtl8zZuZDbliPLhRuDNT77gKNcaktVqWW%2Fl1C2%2F%2FfpMpuZG8qTbDXiHi64%2BNXUBkhptNtczy5Zy0WorD\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10687,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10613)","md5":"ea77f824de2ef57acb12e7cb6596365e","sha1":"10bad0dbdf30a0471c2c786b349daeb1dd19180e","sha256":"2b19d92ce83bf3b498f73103ba1240f09c84798b1f92aedf1491ccf0aa6f5e4c","sha512":"cf69dd76334b7318c829868da8a7e9c2097ef261555388132fc69f95d42e91420e2988056c3d93c830b20059422ae5a82e1109e3dce9127ccb0e23cc5ca27591","ssdeep":"192:N0rZbTPe+fl9SKRGyFgkw+wi+FrZJqbzr+5rA7wbUCzebIkm:N09voK7gzi+FrZJqbzrarAyUX5m","tlshash":"7a22f8b33133fd9f8fba085ac61d61045c7dbc6f4aa94091bb0884e86af4558ead5d34","first_seen":"2023-03-07T12:02:01Z","last_seen":"2026-04-12T19:29:51.705432Z","times_seen":2340,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"twitter.yandex.com.tr/favicon.ico","fqdn":"twitter.yandex.com.tr","domain":"yandex.com.tr","tld":"com.tr"},"ip":{"addr":"87.250.255.11","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:54.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 26 Aug 2025 08:03:35 GMT","end":"Mon, 23 Feb 2026 20:59:59 GMT"},"fingerprint":{"sha1":"7B:FF:02:81:48:EF:11:E9:F6:FD:BE:76:15:A5:57:2F:B5:AB:4D:B8","sha256":"CB:F2:F4:82:42:0E:5A:DA:F9:FA:58:F7:47:D8:16:57:DF:1D:5D:62:E0:76:47:38:38:20:65:93:68:B1:24:F8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: twitter.yandex.com.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 12214\r\nx-content-type-options: nosniff\r\ncontent-type: text/html; charset=utf-8\r\nx-xss-protection: 1; mode=block\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\nset-cookie: is_gdpr_b=CObTWxCz6gIYASgB; Path=/; Domain=.yandex.com.tr; Expires=Fri, 24 Dec 2027 16:45:54 GMT; SameSite=None; Secure\n_yasc=IbufDIiW3U0BaXFnGwd6iCnKNgkJko25YJ9ddZM4QM/T92bek5X87TVdoJohapk9jw==; Path=/; Domain=.yandex.com.tr; Expires=Fri, 24 Dec 2027 16:45:54 GMT; Secure\nis_gdpr=1; Path=/; Domain=.yandex.com.tr; Expires=Fri, 24 Dec 2027 16:45:54 GMT; SameSite=None; Secure\nis_gdpr_b=CObTWxCz6gIYAQ==; Path=/; Domain=.yandex.com.tr; Expires=Fri, 24 Dec 2027 16:45:54 GMT; SameSite=None; Secure\n_yasc=B4pAoGwkmLi0VRbc62fMx8DChQoFZYBveJ4zCpaFkOUSlBdoFMYHIpkhKVDMUIdsyw==; domain=.yandex.com.tr; path=/; expires=Sat, 22 Dec 2035 16:45:54 GMT; secure\ni=49GxLvnVh5siDDKJRqxY4eqBfJzAFNoE3JTcYhJFLX+1rqnlHQqg/6MmUnFx/m7YikuMSF5X7qK6x1rDhKODaV43QPQ=; Expires=Fri, 24-Dec-2027 16:45:54 GMT; Domain=.yandex.com.tr; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=6712051371766594754; Expires=Fri, 24-Dec-2027 16:45:54 GMT; Domain=.yandex.com.tr; Path=/; Secure; SameSite=None\nyashr=6680339401766594754; Path=/; Domain=.yandex.com.tr; Expires=Thu, 24 Dec 2026 16:45:54 GMT; SameSite=None; Secure; HttpOnly; Partitioned\nbh=YMKxsMoGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com.tr; Expires=Thu, 28 Jan 2027 16:45:54 GMT; SameSite=None; Secure\r\nx-frame-options: SAMEORIGIN\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\ncontent-security-policy: img-src 'self' yastatic.net data: yandex.com.tr favicon.yandex.net avatars.mds.yandex.net yabs.yandex.ru mc.admetrica.ru mc.yandex.com *.mc.yandex.ru adstat.yandex.ru mc.yandex.com.tr mc.yandex.ru;default-src 'none';script-src yastatic.net yandex.com.tr mc.yandex.ru *.mc.yandex.ru adstat.yandex.ru mc.yandex.com.tr 'nonce-O/fqLY4+Ruifulbe7VOjjA==';style-src yastatic.net 'unsafe-inline';connect-src yandex.com.tr yabs.yandex.ru mc.yandex.ru *.mc.yandex.ru adstat.yandex.ru mc.admetrica.ru mc.yandex.md mc.yandex.com.tr;child-src mc.yandex.ru mc.yandex.md mc.yandex.com.tr;report-uri https://csp.yandex.net/csp?project=morda\u0026from=morda.error404.com.tr\u0026showid=1766594754469232-13316169359371205137-balancer-l7leveler-kubr-yp-klg-233-BAL\u0026h=home-any-stable-backend-53.sas.yp-c.yandex.net\u0026yandexuid=6712051371766594754\u0026version=2025-12-22-183\r\ndate: Wed, 24 Dec 2025 16:45:54 GMT\r\nx-yandex-req-id: 1766594754469232-13316169359371205137-balancer-l7leveler-kubr-yp-klg-233-BAL\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.01, \"failure_fraction\": 1.0}\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":103,"dns":46,"connect":33,"send":0,"wait":65,"receive":2,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fixedjs.4vid.top/av4usimage.png","fqdn":"fixedjs.4vid.top","domain":"4vid.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:52.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4vid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 04:08:57 GMT","end":"Fri, 13 Feb 2026 05:05:33 GMT"},"fingerprint":{"sha1":"99:1F:D8:6E:39:72:6F:D5:11:7F:B0:79:4D:F6:40:0E:A5:37:9F:9A","sha256":"F4:87:3F:1A:B8:E5:52:39:3C:56:29:BB:B7:CD:E0:20:DE:45:F2:30:28:80:C4:8D:AB:CA:AE:DC:24:7C:14:56"}}},"request":{"raw":"GET /av4usimage.png HTTP/1.1\r\nHost: fixedjs.4vid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 16:45:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 2619\r\nserver: cloudflare\r\netag: \"a3b-6437702003080\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\ncache-control: public, max-age=360000\r\nage: 28667\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VOun63rqM1PYXMTW5d6klAf8cPKFqsYQyjg7av4OBW7AMYFsylPzSrPAtFZyELbbEYKWrtqzvt9TfXR98vBEBmBTuOv6s3fIO0upnCXB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b31925069e4569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2619,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 339 x 89, 8-bit/color RGB, non-interlaced","md5":"8267aaadeeeb8c9fa7482f2f9db2d4e3","sha1":"a2ef23d3b5f9d9bb3102c855a8ace072884ba60c","sha256":"998cf9d427c2e322904e89a056ba823b56078fb199b7395883f3eafabaadbea8","sha512":"719215d8ec70b8b36b24277a80e7876be2fa1afe3698c05bbff013b6a2936701f266e694c221756e7306d1a945013986a53e41af0bc90bdd4bbf0dcbe33f7637","ssdeep":"","tlshash":"f5513ccb05b2fdbc657d79976105a79ef3a896c72982b872565c38c14243a0096c1fe1","first_seen":"2025-11-13T21:07:01.541567Z","last_seen":"2026-04-12T19:29:51.682384Z","times_seen":362,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"fixedjs.4vid.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mc.webvisor.org/watch/48140495/1?wmode=7\u0026page-url=https%3A%2F%2Fwww.av4us.work%2Fkw%2FOk.ru%2520preteen\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A1nmhispdoya1ro1ej5uutvpoh5pcv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2292%3Acn%3A1%3Adp%3A0%3Als%3A1615573683459%3Ahid%3A514639379%3Az%3A0%3Ai%3A20251224164551%3Aet%3A1766594752%3Ac%3A1%3Arn%3A389267535%3Arqn%3A1%3Au%3A1766594752987590720%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A16%2C28%2C11%2C1%2C21%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1766594750722%3Anp%3AV2luMzI%3D%3Afip%3A62236e752d3f7c5fd4f9360431331564-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1766594752%3At%3AOk.ru%20preteen%E5%8B%95%E7%94%BB%40AV4.us\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2842534404%29fip%281%29ti%281%29\u0026redirnss=1","fqdn":"mc.webvisor.org","domain":"webvisor.org","tld":"org"},"ip":{"addr":"87.250.251.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:52.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.webvisor.com","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 18 Aug 2025 21:05:34 GMT","end":"Mon, 09 Feb 2026 20:59:59 GMT"},"fingerprint":{"sha1":"52:51:83:17:11:3C:6A:D0:47:28:FB:42:75:CF:6A:DA:48:B5:5A:C8","sha256":"69:B8:8D:9D:77:CB:F9:C7:48:04:E2:8C:99:28:7C:EF:5E:C7:2B:43:D6:52:7B:21:D2:99:F6:86:18:A6:0F:80"}}},"request":{"raw":"GET /watch/48140495/1?wmode=7\u0026page-url=https%3A%2F%2Fwww.av4us.work%2Fkw%2FOk.ru%2520preteen\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A1nmhispdoya1ro1ej5uutvpoh5pcv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2292%3Acn%3A1%3Adp%3A0%3Als%3A1615573683459%3Ahid%3A514639379%3Az%3A0%3Ai%3A20251224164551%3Aet%3A1766594752%3Ac%3A1%3Arn%3A389267535%3Arqn%3A1%3Au%3A1766594752987590720%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A16%2C28%2C11%2C1%2C21%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1766594750722%3Anp%3AV2luMzI%3D%3Afip%3A62236e752d3f7c5fd4f9360431331564-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1766594752%3At%3AOk.ru%20preteen%E5%8B%95%E7%94%BB%40AV4.us\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2842534404%29fip%281%29ti%281%29\u0026redirnss=1 HTTP/1.1\r\nHost: mc.webvisor.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.av4us.work\r\nReferer: https://www.av4us.work/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yabs-sid=2482246031766594752; i=h2Ul+15SjEptQTy0qHQgRYta8trctCagxHZp0iWaPaK5gwc2vpNrH2+uofdcPZddXyOsk2vHh+Ip0JWfNfGuJjnsERw=; yandexuid=8051361221766594752; yuidss=8051361221766594752; ymex=1798130752.yrts.1766594752#1798130752.yrtsi.1766594752; bh=YMCxsMoGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 665\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nexpires: Wed, 24-Dec-2025 16:45:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\nlast-modified: Wed, 24-Dec-2025 16:45:52 GMT\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.av4us.work\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":665,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e48bdfae46429399a3ee10b510ad3612","sha1":"7e996b045f1f5165995889809016ed24418a7749","sha256":"aa9a54363e0d2a99c93122615f35425cabf04f10246e90d6a18599e7b6e1dc5e","sha512":"4f20c9e846aa4013b2eced3a34ce619eaeafe9eec321f47f53338a3aea08fb8b1b4bc223f72627084a2df8cf9ba4c923e83c4c39124ff966d16b0f0d51d68ea9","ssdeep":"","tlshash":"5f01fe5544888fbcafdb074081199276d50a3845bdc62aa4e189d0845cabda137027b4","first_seen":"2025-12-24T16:46:25.19369Z","last_seen":"2025-12-24T16:46:25.19369Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.youtube.com/vi/3beLZhXgRnY/hq2.jpg","fqdn":"img.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:54.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"47:99:FB:97:02:C2:03:A6:B6:60:07:03:D3:B7:37:4B:99:D1:7F:1F","sha256":"01:72:D6:C3:FA:E5:7E:F5:EF:15:83:1F:EE:A5:BF:37:4C:78:02:B4:CD:BF:8D:EF:62:9F:53:B1:B3:1A:B6:EB"}}},"request":{"raw":"GET /vi/3beLZhXgRnY/hq2.jpg HTTP/1.1\r\nHost: img.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7801\r\ndate: Wed, 24 Dec 2025 16:45:54 GMT\r\nexpires: Wed, 24 Dec 2025 18:45:54 GMT\r\ncache-control: public, max-age=7200\r\netag: \"1674426770\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7801,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3","md5":"82bef6008e2d22536ff5489060513745","sha1":"ee12cc5eb655109fa0d866358f0e03e9834c0c66","sha256":"66241690a9f62c3872e38fddce5c3c795cd989f29db47a99b11425090074727c","sha512":"6421acc92fdaf19d3fe6b778a273d08bd39a8b08895cffca43b7eebbed5bb20ca4a676a43e4d8d02563a060b635074158b2a99cce5867dea1d01883c9f5705fc","ssdeep":"192:E2WbPsJO9pD1mb7EcFpttf/gg1IjTnKnCkKhJv+Ae:uPswD09pXfF+jTnKnC1Hvre","tlshash":"a9f1af51cab7f5a0ef0541304f72f2a9379b556c7ca208c7b2810292e8b7398c56bfc5","first_seen":"2025-12-24T16:46:25.194678Z","last_seen":"2025-12-24T16:46:25.194678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":78,"dns":1,"connect":10,"send":0,"wait":19,"receive":1,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st-ok.cdn-vk.ru/res/i/ok_logo-r.png","fqdn":"st-ok.cdn-vk.ru","domain":"cdn-vk.ru","tld":"ru"},"ip":{"addr":"95.163.58.213","port":443,"asn":47764,"as":"LLC VK","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:54.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.mrgcdn.ru","organization":"V Kontakte LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 17 Feb 2025 12:54:02 GMT","end":"Wed, 11 Mar 2026 16:46:05 GMT"},"fingerprint":{"sha1":"3F:8B:BD:0D:B2:00:39:C7:10:58:D2:7B:AD:E9:AD:AC:A8:1C:25:71","sha256":"13:BA:36:6F:8B:4F:30:6D:C8:3F:67:5C:B6:4C:D2:36:37:46:4B:D3:10:F2:1F:DC:18:76:E9:F1:1D:36:F1:07"}}},"request":{"raw":"GET /res/i/ok_logo-r.png HTTP/1.1\r\nHost: st-ok.cdn-vk.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Wed, 24 Dec 2025 16:45:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 2745\r\nlast-modified: Mon, 27 Mar 2023 16:15:26 GMT\r\nvary: Accept-Encoding\r\nexpires: Thu, 10 Dec 2026 09:18:01 GMT\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-cdn-node: matrix25.i.smailru.net\r\nx-cdn-ucs: HIT\r\nx-req-id: ddda7754708a82c5639d0fa62568607f\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":2745,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"cc7d9c222355af0857c55d5da4777bd5","sha1":"5f6d7883fc15a8b39438e33266364bda76346e35","sha256":"67cfb1602ecb54838a6d92bcf24deedc034e806aa350d87f3d84eb17ba8800a5","sha512":"4f52f8711bf7e547ce09bdefcee5256507815e7c74972bf3ebad1638620b9c9f0250ac8e916fddd722566bf8ff1ca1533046ca442d064175e1bb730206426e9b","ssdeep":"","tlshash":"18513efe014407658111c6e0d325f321342f0c9a6a641a17047ff1ecadf91f566d9677","first_seen":"2024-04-27T20:07:32Z","last_seen":"2025-12-24T16:46:25.19562Z","times_seen":4,"resource_available":false,"data":null}},"time_used":912,"timings":{"blocked":435,"dns":37,"connect":43,"send":0,"wait":43,"receive":0,"ssl":350},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.okcdn.ru/videoPreview?id=679231621726\u0026type=32\u0026idx=2\u0026tkn=6QnU2gQ_1usBeuBQ7bBhP5DQHMQ\u0026fn=external_8","fqdn":"i.okcdn.ru","domain":"okcdn.ru","tld":"ru"},"ip":{"addr":"5.101.40.2","port":443,"asn":47764,"as":"LLC VK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:54.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.okcdn.ru","organization":"VK LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 16 Oct 2025 12:07:01 GMT","end":"Tue, 17 Nov 2026 11:21:34 GMT"},"fingerprint":{"sha1":"AD:03:8C:F8:F6:C3:35:71:E4:8F:7E:00:68:C1:BE:EC:AA:99:99:6B","sha256":"DB:94:F0:E6:64:F9:B5:19:AE:31:DC:68:FA:65:62:B5:32:FB:06:99:CC:27:04:4B:19:5C:8F:DB:6C:B1:A7:E7"}}},"request":{"raw":"GET /videoPreview?id=679231621726\u0026type=32\u0026idx=2\u0026tkn=6QnU2gQ_1usBeuBQ7bBhP5DQHMQ\u0026fn=external_8 HTTP/1.1\r\nHost: i.okcdn.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: apache\r\ndate: Wed, 24 Dec 2025 16:45:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21806\r\naccept-ranges: bytes\r\nlast-modified: Sat, 25 Oct 2025 16:45:54 GMT\r\ncache-control: private, max-age=100000000\r\nexpires: Sun, 20 Sep 2026 16:45:54 GMT\r\netag: \"686897696a7c876b7e\"\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nx-ok-image: ?1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":21806,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 720x405, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"288ed40c0d53caa3f12ff62e142ec8bd","sha1":"f6d09924b11f29ff4c81c115a55f26193846c4f9","sha256":"5e304b0a0d1422606d138979af8f338808510a4c781704babd216d9202638da2","sha512":"fdfc8bbd4e4bbb0b39e5f90e143e451f4e66dd55c53e7935f7602ebb929ccb225e440d32e7d32c9fa39c3c4852d683ebcedb86a1778529a1c9497ada289f7cbe","ssdeep":"384:nJgHq9vgmifzGO5Y8ySdkvdCuGoXdnB/kUcLmCgO1+GKP3jBYK4cGc:nJgGomoC+YVF/X7IMP3jyK4cl","tlshash":"c8a2c1fc949a627468eaa3b723e103a6919433769dc1c24dd5ad07da7ca037f2da901c","first_seen":"2025-12-24T16:46:25.196603Z","last_seen":"2025-12-24T16:46:25.196603Z","times_seen":1,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":46,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.okcdn.ru/videoPreview?id=346254149109\u0026type=47\u0026idx=30\u0026tkn=SKhVYOQsaracwGAt1MsvCLCKjJM\u0026i=1\u0026fn=external_8","fqdn":"i.okcdn.ru","domain":"okcdn.ru","tld":"ru"},"ip":{"addr":"5.101.40.2","port":443,"asn":47764,"as":"LLC VK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:54.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.okcdn.ru","organization":"VK LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 16 Oct 2025 12:07:01 GMT","end":"Tue, 17 Nov 2026 11:21:34 GMT"},"fingerprint":{"sha1":"AD:03:8C:F8:F6:C3:35:71:E4:8F:7E:00:68:C1:BE:EC:AA:99:99:6B","sha256":"DB:94:F0:E6:64:F9:B5:19:AE:31:DC:68:FA:65:62:B5:32:FB:06:99:CC:27:04:4B:19:5C:8F:DB:6C:B1:A7:E7"}}},"request":{"raw":"GET /videoPreview?id=346254149109\u0026type=47\u0026idx=30\u0026tkn=SKhVYOQsaracwGAt1MsvCLCKjJM\u0026i=1\u0026fn=external_8 HTTP/1.1\r\nHost: i.okcdn.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: apache\r\ndate: Wed, 24 Dec 2025 16:45:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14232\r\naccept-ranges: bytes\r\nlast-modified: Sat, 25 Oct 2025 16:45:54 GMT\r\ncache-control: private, max-age=100000000\r\nexpires: Sun, 20 Sep 2026 16:45:54 GMT\r\netag: \"686897696a7c876b7e\"\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nx-ok-image: ?1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14232,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 720x405, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"473f3dde1da8ecd73ef812ec9b19acca","sha1":"da9a332e112660a230b6c88bcbbd6a27b942af6d","sha256":"f36aa0142eac82ceb88ef9d0e6a94c176870c5423b33b504d1864587f9bc2b01","sha512":"6a6c64904705d420d1744ac34f8758d8bf9be8b36ce1b02f699b0e1e7c76c8170233a8621477c46dc8c07c8768b51004342b48935995121bcd008dd4ba413ffc","ssdeep":"384:uFb0orK/Od2fv1p1IkhK8St69gyUZhWalu+PV1bcyLx:uFHK/OUayK8G69gZHu+PjLt","tlshash":"ed52d0c7b12c6a81447bd23075b807ce75837b94cb9cb97e1a2b8a510f66e7bc719482","first_seen":"2025-12-24T16:46:25.197517Z","last_seen":"2025-12-24T16:46:25.197517Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":89,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"22554.2514june2024.com/slb/js/250565","fqdn":"22554.2514june2024.com","domain":"2514june2024.com","tld":"com"},"ip":{"addr":"88.208.22.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:51.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2514june2024.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Nov 2025 23:32:28 GMT","end":"Wed, 25 Feb 2026 23:32:27 GMT"},"fingerprint":{"sha1":"6C:3A:68:F7:D9:A6:50:0C:C6:20:77:32:D5:FB:F0:55:9C:B1:05:95","sha256":"16:38:8C:8F:B2:9D:78:D8:89:EC:33:42:93:CB:96:99:F4:62:70:9A:C0:47:39:6B:91:04:C3:5C:BB:CE:E6:CF"}}},"request":{"raw":"GET /slb/js/250565 HTTP/1.1\r\nHost: 22554.2514june2024.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Wed, 24 Dec 2025 16:45:51 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nreferrer-policy: unsafe-url\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory\r\naccept-ch-lifetime: 31536000\r\nset-cookie: _ccid=1784279906385928878; expires=Sun, 24 Dec 2028 16:45:51 GMT; domain=2514june2024.com; path=/; HttpOnly; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":72,"dns":22,"connect":17,"send":0,"wait":20,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdocac.4vid.top/av4usimage.png","fqdn":"pdocac.4vid.top","domain":"4vid.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:52.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4vid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 04:08:57 GMT","end":"Fri, 13 Feb 2026 05:05:33 GMT"},"fingerprint":{"sha1":"99:1F:D8:6E:39:72:6F:D5:11:7F:B0:79:4D:F6:40:0E:A5:37:9F:9A","sha256":"F4:87:3F:1A:B8:E5:52:39:3C:56:29:BB:B7:CD:E0:20:DE:45:F2:30:28:80:C4:8D:AB:CA:AE:DC:24:7C:14:56"}}},"request":{"raw":"GET /av4usimage.png HTTP/1.1\r\nHost: pdocac.4vid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 16:45:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 2619\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\netag: \"a3b-6437702003080\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\ncache-control: public, max-age=360000\r\nx-proxy-cache-192g-la: HIT\r\nxkey-192la: pdocac.4vid.top/av4usimage.png--pdocac.4vid.top--myzone---yes\r\naccept-ranges: bytes\r\nage: 28636\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PyXhi6BPsH44AQMhgBb6O093jKRx92mzdfUAYQoBLTPbXJYMS1EzMXRmPsM8Ret6tKABHrbyYi%2FEM1AjyDzAEYnZ8oQNU%2F%2BYWIxr2Js%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b3192560d28569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2619,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 339 x 89, 8-bit/color RGB, non-interlaced","md5":"8267aaadeeeb8c9fa7482f2f9db2d4e3","sha1":"a2ef23d3b5f9d9bb3102c855a8ace072884ba60c","sha256":"998cf9d427c2e322904e89a056ba823b56078fb199b7395883f3eafabaadbea8","sha512":"719215d8ec70b8b36b24277a80e7876be2fa1afe3698c05bbff013b6a2936701f266e694c221756e7306d1a945013986a53e41af0bc90bdd4bbf0dcbe33f7637","ssdeep":"","tlshash":"f5513ccb05b2fdbc657d79976105a79ef3a896c72982b872565c38c14243a0096c1fe1","first_seen":"2025-11-13T21:07:01.541567Z","last_seen":"2026-04-12T19:29:51.682384Z","times_seen":362,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":24,"connect":2,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"pdocac.4vid.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdocac.4vid.top/v/s://ok.ru/video/1459153215326/title/myhash/3","fqdn":"pdocac.4vid.top","domain":"4vid.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:54.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4vid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 04:08:57 GMT","end":"Fri, 13 Feb 2026 05:05:33 GMT"},"fingerprint":{"sha1":"99:1F:D8:6E:39:72:6F:D5:11:7F:B0:79:4D:F6:40:0E:A5:37:9F:9A","sha256":"F4:87:3F:1A:B8:E5:52:39:3C:56:29:BB:B7:CD:E0:20:DE:45:F2:30:28:80:C4:8D:AB:CA:AE:DC:24:7C:14:56"}}},"request":{"raw":"GET /v/s://ok.ru/video/1459153215326/title/myhash/3 HTTP/1.1\r\nHost: pdocac.4vid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.av4us.work\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 16:45:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\npdojs-line8: host-pdocac.4vid.top4.194.8.20-myhost-38.220.248/v/s://ok.ru/video/1459153215326/title/myhash/3\r\nphost: pdocac.4vid.top\r\npdojs-line359: notjp-nojp-myhost--filteron-\r\npdojs-line967: notjp-nojp-myhost--filteron-/v/s://ok.ru/video/1459153215326/title/myhash/3\r\npdo120: feedvid-, cachefileb-cacpdo3/7a/f8/481329, lfm-1-5917, lmd-5917, lud-2438917, xfvlen-909813, fsize-143997, played-7866\r\naccess-control-allow-headers: Cake\r\ncache-control: public, max-age=3600000\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-proxy-cache-192g-la: HIT\r\nxkey-192la: pdocac.4vid.top/v/s://ok.ru/video/1459153215326/title/myhash/3--pdocac.4vid.top--myzone---yes\r\nage: 5942\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 24 Dec 2025 15:06:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=009arJVtfiT7x5B%2BHU%2F6rOtvpL5gNyha69lGtrQv%2FTKV8gxT9QTVCAXcHrD3ScQC5g10Cy7eCQVr7HbAsD68A355%2FAyHrwRpWVl4FwU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b31925eba5f569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":293,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"04db756f0896c501e4f59e82e153e5a5","sha1":"10232c0bbead7757b05cf686aae1c7e796e10568","sha256":"7dad07b70283ae3416ab791c17d6a7bc4648a3ac5df1541a30e964f36e34283b","sha512":"33a891f91344f076e826e43afa8ce27207dd487f00d48327c9d19cd4e96eac26992e13818548d57bad2b5e901b4d8789290324e3d6d2193ec20e6ec9962efd7f","ssdeep":"","tlshash":"1ee0ecfb655954181182a15b2d00e6c8f50a1666bcdb0dd2f58607b963db82790718fb","first_seen":"2025-12-24T16:46:25.199947Z","last_seen":"2025-12-24T16:46:25.199947Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"pdocac.4vid.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdocac.4vid.top/v/s://ok.ru/video/346254149109/title/myhash/3","fqdn":"pdocac.4vid.top","domain":"4vid.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:54.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4vid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 04:08:57 GMT","end":"Fri, 13 Feb 2026 05:05:33 GMT"},"fingerprint":{"sha1":"99:1F:D8:6E:39:72:6F:D5:11:7F:B0:79:4D:F6:40:0E:A5:37:9F:9A","sha256":"F4:87:3F:1A:B8:E5:52:39:3C:56:29:BB:B7:CD:E0:20:DE:45:F2:30:28:80:C4:8D:AB:CA:AE:DC:24:7C:14:56"}}},"request":{"raw":"GET /v/s://ok.ru/video/346254149109/title/myhash/3 HTTP/1.1\r\nHost: pdocac.4vid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.av4us.work\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 16:45:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\npdojs-line8: host-pdocac.4vid.top4.194.8.20-myhost-38.220.248/v/s://ok.ru/video/346254149109/title/myhash/3\r\nphost: pdocac.4vid.top\r\npdojs-line359: notjp-nojp-myhost--filteron-\r\npdojs-line967: notjp-nojp-myhost--filteron-/v/s://ok.ru/video/346254149109/title/myhash/3\r\npdo120: feedvid-, cachefileb-cacpdo6/0a/b4/f55c28, lfm-1-2026, lmd-2027, lud-4273281, xfvlen-636485, fsize-208820, played-16890\r\naccess-control-allow-headers: Cake\r\ncache-control: public, max-age=3600000\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-proxy-cache-192g-la: HIT\r\nxkey-192la: pdocac.4vid.top/v/s://ok.ru/video/346254149109/title/myhash/3--pdocac.4vid.top--myzone---yes\r\nage: 5942\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 24 Dec 2025 15:06:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ACwmE3oOufHMua2flYP0xm0mhjo4WNTCEFNL4XvJQ07fgAD3JJDtjwv1oMfOmp%2BItROAzdDrxrw%2FhXxgUss4KmNe%2FJUsvpm4%2FRxS8cw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b31925eca64569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":310,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (310), with no line terminators","md5":"c0195c7255e1be6b6a07e998e508890d","sha1":"61cb1f4fd49c03e4b385b3271f80f610a6925f4f","sha256":"c55d4fd93971056891b46dd77135249bdafa4346baef82a9e43e59b568b60791","sha512":"6fe0a0abdb793e95b6d08d9c282593531bf46de1138e88bb7a56cfb937fa82ad8396de4b9a5bef27e5c143947a235445235029c7cabf227948ceb04b8c7fced7","ssdeep":"","tlshash":"f8e0c2e3128a816456c2142b2c20f1cca20c724b34ef0ce2fa98077a62dec3390810fc","first_seen":"2025-12-24T16:46:25.201582Z","last_seen":"2025-12-24T16:46:25.201582Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"pdocac.4vid.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"css.jpg4.icu/mycss/av4.css?33","fqdn":"css.jpg4.icu","domain":"jpg4.icu","tld":"icu"},"ip":{"addr":"172.67.183.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://css.jpg4.icu/tagjpa.php?noself=1\u0026url=av.diktok.top/tags/5","date":"2025-12-24T16:45:52.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jpg4.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 15:32:54 GMT","end":"Thu, 26 Feb 2026 16:30:32 GMT"},"fingerprint":{"sha1":"DD:1F:06:D1:AD:C8:98:82:F6:76:1B:72:E5:E3:ED:49:53:4D:2E:C2","sha256":"5D:0D:E6:96:38:E2:AC:E2:A7:81:11:6D:6A:D8:8A:47:43:3D:50:7D:FE:2E:30:F8:62:AA:CC:2B:30:C7:DF:7F"}}},"request":{"raw":"GET /mycss/av4.css?33 HTTP/1.1\r\nHost: css.jpg4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://css.jpg4.icu/tagjpa.php?noself=1\u0026url=av.diktok.top/tags/5\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 16:45:52 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\ncache-control: public, max-age=360000\r\nx-proxy-cache-192g-la: MISS\r\nxkey-192la: css.jpg4.icu/mycss/av4.css?33--css.jpg4.icu-css.jpg4.icu-myzone---no\r\nx-proxy-cache-tot-vt: HIT\r\nxkey-tot-vt: css.jpg4.icu/mycss/av4.css?33--css.jpg4.icu--my_zone\r\ncontent-encoding: br\r\nage: 37006\r\ncf-cache-status: HIT\r\netag: W/\"103e-62edbddabc000\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7EEERXiEkXrJT5hy%2B2GeNQv81qEHDNvHUpfbRUyi97qklA1DNP%2FQHVAc3wJpWh8TJ7xZ0tewcLk%2BQtqnxsd3Qwd861kFnsVCb5c%3D\"}]}\r\ncf-ray: 9b3192559fbd56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4158,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"e05d356eb3c9cb0366e5491f098c5b66","sha1":"9c82f99795bf55512147a0bd629e9775446291bf","sha256":"7c7a5f32e5c6a2e6e1f3e71112f35691714019685cc4c7d567e158cb32d1579c","sha512":"94dd9b84614bae349bcaa9dafea12a08589b4b899cf59c1228cf9bf70d657a715b49cfc18748b2d174dac63a6df076828bfa8da9b25c686d74bc742ddbe9283c","ssdeep":"96:Uq6qw2a3Alqiqq7rShmo3NxlIAFrQH+42+F2fFB:+eYXih/SMoHlIAFkHL2+F2fFB","tlshash":"ca813f729b550141b51b92946f62b79123369013d907cf79bafa217ccf891ec21e2f4e","first_seen":"2025-04-08T05:19:22.565686Z","last_seen":"2026-02-10T20:33:51.228745Z","times_seen":840,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdocac.4vid.top/v/s://ok.ru/video/2786210619153/title/myhash/3","fqdn":"pdocac.4vid.top","domain":"4vid.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:54.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4vid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 04:08:57 GMT","end":"Fri, 13 Feb 2026 05:05:33 GMT"},"fingerprint":{"sha1":"99:1F:D8:6E:39:72:6F:D5:11:7F:B0:79:4D:F6:40:0E:A5:37:9F:9A","sha256":"F4:87:3F:1A:B8:E5:52:39:3C:56:29:BB:B7:CD:E0:20:DE:45:F2:30:28:80:C4:8D:AB:CA:AE:DC:24:7C:14:56"}}},"request":{"raw":"GET /v/s://ok.ru/video/2786210619153/title/myhash/3 HTTP/1.1\r\nHost: pdocac.4vid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.av4us.work\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 16:45:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\npdojs-line8: host-pdocac.4vid.top4.194.8.20-myhost-38.220.248/v/s://ok.ru/video/2786210619153/title/myhash/3\r\nphost: pdocac.4vid.top\r\npdojs-line359: notjp-nojp-myhost--filteron-\r\npdojs-line967: notjp-nojp-myhost--filteron-/v/s://ok.ru/video/2786210619153/title/myhash/3\r\npdo120: feedvid-, cachefileb-cacpdo3/7b/41/4a1d29, lfm-1-2676, lmd-2676, lud-4096623, xfvlen-682119, fsize-116882, played-4792\r\naccess-control-allow-headers: Cake\r\ncache-control: public, max-age=3600000\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-proxy-cache-192g-la: HIT\r\nxkey-192la: pdocac.4vid.top/v/s://ok.ru/video/2786210619153/title/myhash/3--pdocac.4vid.top--myzone---yes\r\nage: 5942\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 24 Dec 2025 15:06:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JAZdkpfMV8q7VRvgV%2FveIblEy%2FnUlDzltLug1L%2FLtZaQZW3w%2FoBIEftS7Tm%2F9ubUiHLlhTlgCjvDvyTGKERJWQZyU%2FyrdwDRnoEYJ9E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b31925eba58569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"a2416a27ca225d66b2fef79eab6bc986","sha1":"b5659cbee588cc54d76e69bf5dcf14bd4b3c0397","sha256":"1d0065b98a6ad1bfdcd4e5870d3ec2b5902535d687f4f20bab55b64bde397c2e","sha512":"8d35e2d0e6f252d721dc7b67a1321a80d19917553715608105fb9c79c0af8d1224329da2ffeafa1c06ac792c04696a31aabcddb09ad6888a844094fb0ff4593f","ssdeep":"","tlshash":"74c09b6fd55c017865d4d8d40c57700950167c1efedc0656f0001573a2c3111dd42a26","first_seen":"2025-12-24T16:46:25.206726Z","last_seen":"2025-12-24T16:46:25.206726Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"pdocac.4vid.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.okcdn.ru/videoPreview?id=810163964556\u0026type=38\u0026idx=9\u0026tkn=4mxhSomJwTiqGYk20JOGzgd_XgQ\u0026fn=external_8","fqdn":"i.okcdn.ru","domain":"okcdn.ru","tld":"ru"},"ip":{"addr":"5.101.40.2","port":443,"asn":47764,"as":"LLC VK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:54.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.okcdn.ru","organization":"VK LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 16 Oct 2025 12:07:01 GMT","end":"Tue, 17 Nov 2026 11:21:34 GMT"},"fingerprint":{"sha1":"AD:03:8C:F8:F6:C3:35:71:E4:8F:7E:00:68:C1:BE:EC:AA:99:99:6B","sha256":"DB:94:F0:E6:64:F9:B5:19:AE:31:DC:68:FA:65:62:B5:32:FB:06:99:CC:27:04:4B:19:5C:8F:DB:6C:B1:A7:E7"}}},"request":{"raw":"GET /videoPreview?id=810163964556\u0026type=38\u0026idx=9\u0026tkn=4mxhSomJwTiqGYk20JOGzgd_XgQ\u0026fn=external_8 HTTP/1.1\r\nHost: i.okcdn.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: apache\r\ndate: Wed, 24 Dec 2025 16:45:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9594\r\naccept-ranges: bytes\r\nlast-modified: Sat, 25 Oct 2025 16:45:54 GMT\r\ncache-control: private, max-age=100000000\r\nexpires: Sun, 20 Sep 2026 16:45:54 GMT\r\netag: \"686897696a7c876b7e\"\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nx-ok-image: ?1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":9594,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 720x405, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f0433aa4fe2a25261a0f382bfbdc71b0","sha1":"e306e07f23a61de5c903591fceb70e7c70e05580","sha256":"ddf09c663f0363b4778d1bffee7d694dc3b03d79439b715bebf245a8576f48c2","sha512":"4064efbb55530f86d37152598189730cff28f9c1c72ccaf82bc51d76669d142884dbff6fe2dda0550378d6aba9a5321c5236596b962b18493bdca28c7413828e","ssdeep":"192:J4gH1RcR9Mjnpc8AQoxcVyDWpeUKG4+TOvcZk0K9Q2OuSU3Lb:JHAMTi8loGVyKIUP/OvCk0ckE","tlshash":"7e12c072146882e69e7283b11c6082e741f194e2cd6cb7786dd0e6375ffc467c93c906","first_seen":"2025-12-24T16:46:25.207677Z","last_seen":"2025-12-24T16:46:25.207677Z","times_seen":1,"resource_available":false,"data":null}},"time_used":868,"timings":{"blocked":409,"dns":41,"connect":44,"send":0,"wait":45,"receive":1,"ssl":324},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fixedjs.4vid.top/av4usimage.png","fqdn":"fixedjs.4vid.top","domain":"4vid.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:51.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4vid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 04:08:57 GMT","end":"Fri, 13 Feb 2026 05:05:33 GMT"},"fingerprint":{"sha1":"99:1F:D8:6E:39:72:6F:D5:11:7F:B0:79:4D:F6:40:0E:A5:37:9F:9A","sha256":"F4:87:3F:1A:B8:E5:52:39:3C:56:29:BB:B7:CD:E0:20:DE:45:F2:30:28:80:C4:8D:AB:CA:AE:DC:24:7C:14:56"}}},"request":{"raw":"GET /av4usimage.png HTTP/1.1\r\nHost: fixedjs.4vid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 16:45:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 2619\r\nserver: cloudflare\r\netag: \"a3b-6437702003080\"\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\ncache-control: public, max-age=360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ClEwid5RPPCeKLVMmRre53am5GOHIHn9ExqR5sqaFW%2B4caufJHEYc4apqipd6Jq4IIouxoM5UJOLOQcMYzXAHvy0L1Ypc3zShvw7igHerII%3D\"}]}\r\nage: 28666\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9b31924a8e7b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2619,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 339 x 89, 8-bit/color RGB, non-interlaced","md5":"8267aaadeeeb8c9fa7482f2f9db2d4e3","sha1":"a2ef23d3b5f9d9bb3102c855a8ace072884ba60c","sha256":"998cf9d427c2e322904e89a056ba823b56078fb199b7395883f3eafabaadbea8","sha512":"719215d8ec70b8b36b24277a80e7876be2fa1afe3698c05bbff013b6a2936701f266e694c221756e7306d1a945013986a53e41af0bc90bdd4bbf0dcbe33f7637","ssdeep":"","tlshash":"f5513ccb05b2fdbc657d79976105a79ef3a896c72982b872565c38c14243a0096c1fe1","first_seen":"2025-11-13T21:07:01.541567Z","last_seen":"2026-04-12T19:29:51.682384Z","times_seen":362,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":43,"dns":21,"connect":7,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"fixedjs.4vid.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.w3schools.com/w3css/4/w3.css","fqdn":"www.w3schools.com","domain":"w3schools.com","tld":"com"},"ip":{"addr":"23.36.77.67","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:53.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"certification.w3schools.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Oct 2025 05:09:45 GMT","end":"Sun, 18 Jan 2026 05:09:44 GMT"},"fingerprint":{"sha1":"1B:0A:07:AA:E5:29:0E:01:21:18:F3:4C:23:42:E9:6A:3F:85:C5:39","sha256":"57:8C:78:FA:CB:E0:9B:8C:76:B8:05:E6:78:67:4F:0D:0C:B6:F1:8A:3B:26:BD:E1:51:03:95:09:8B:93:A0:12"}}},"request":{"raw":"GET /w3css/4/w3.css HTTP/1.1\r\nHost: www.w3schools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nlast-modified: Thu, 18 Dec 2025 11:43:10 GMT\r\naccept-ranges: bytes\r\netag: \"09beb7b1370dc1:0\"\r\ncontent-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com;\r\nx-content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com;\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 5256\r\ncache-control: public, max-age=31003761\r\nexpires: Fri, 18 Dec 2026 12:55:15 GMT\r\ndate: Wed, 24 Dec 2025 16:45:54 GMT\r\nx-loc: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23427,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"75b37d4abbdde1322116d2744181081d","sha1":"6d6b5ff442af4682c30e970c382002a7c694ac5b","sha256":"c4f2aba13970ecf8303fb9329f97c8824861569273b0aa27acce48abc61d04f5","sha512":"8ba303e078af3f71176b6e7fa5c32b0f3984014393133a960da7103bc78204a144a3d034a3d1ad7126f1547f45408e00e036175f54766ffccc8cf84cd4c129a5","ssdeep":"384:aHHLO7eS0F4bBY/fn6jZcy9/cGK1q8CarY64Cb+dOy:aHHCLYXfl1q8CarY64Cb+dl","tlshash":"fbb2f022ff8a1138261a873660d5fbfc573a8681df9f1b7a7030373943894c26796e49","first_seen":"2023-06-26T21:08:35Z","last_seen":"2026-04-19T06:34:22.303414Z","times_seen":16782,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":61,"dns":38,"connect":1,"send":0,"wait":15,"receive":1,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.youtube.com/vi/3beLZhXgRnY/hq1.jpg","fqdn":"img.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:54.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"47:99:FB:97:02:C2:03:A6:B6:60:07:03:D3:B7:37:4B:99:D1:7F:1F","sha256":"01:72:D6:C3:FA:E5:7E:F5:EF:15:83:1F:EE:A5:BF:37:4C:78:02:B4:CD:BF:8D:EF:62:9F:53:B1:B3:1A:B6:EB"}}},"request":{"raw":"GET /vi/3beLZhXgRnY/hq1.jpg HTTP/1.1\r\nHost: img.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8237\r\ndate: Wed, 24 Dec 2025 16:45:54 GMT\r\nexpires: Wed, 24 Dec 2025 18:45:54 GMT\r\ncache-control: public, max-age=7200\r\netag: \"1674426770\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8237,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3","md5":"40095b79987a67a725a2213cc5c9044d","sha1":"621e01a204f2bf4a95758bc3faf893c335b65189","sha256":"354b30cc4d6d778ac50e9e06c31748bb2149f750180f96fbed22d2c47c8b70a0","sha512":"1c8915f4b399962f108d696a8c69e36e3aa3a00ff884dda079a6fbb46e4776af47ada05359aec66543bedcae6c2f14b18b03bb3569c9fe672746b615cc72d979","ssdeep":"192:vNKvLRphdinzJw5uvI2iRQa4RVbgIMn/VVIzVv+tQOcUpotz:1GlinycI2iu9RVbgIktqVcQDW6","tlshash":"92028d7a97bdd32de018e136c2ca53414edb6b4d8a056edf8151e63e9b392837c90543","first_seen":"2025-12-24T16:46:25.212062Z","last_seen":"2025-12-24T16:46:25.212062Z","times_seen":1,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":77,"dns":1,"connect":8,"send":0,"wait":23,"receive":1,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js?1","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:52.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /ajax/libs/jquery/3.3.1/jquery.min.js?1 HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30399\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 21 Dec 2025 18:06:23 GMT\r\nexpires: Mon, 21 Dec 2026 18:06:23 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 254369\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86927,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-19T12:35:45.501231Z","times_seen":122053,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.ok.ru/favicon.ico","fqdn":"m.ok.ru","domain":"ok.ru","tld":"ru"},"ip":{"addr":"95.163.61.73","port":443,"asn":47764,"as":"LLC VK","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:54.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ok.ru","organization":"VK LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 10 Oct 2025 16:48:01 GMT","end":"Mon, 09 Nov 2026 06:16:08 GMT"},"fingerprint":{"sha1":"08:67:8E:99:F4:B0:AC:36:C8:2B:E7:A7:FE:F3:CA:A6:C4:2D:C7:43","sha256":"41:F7:4F:66:29:C5:EE:76:1D:15:1F:E7:AC:81:F1:29:CF:F8:1B:DD:DC:76:C1:9F:D6:BA:2C:2A:B8:29:4B:A3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: m.ok.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: kittenx\r\ndate: Wed, 24 Dec 2025 16:45:54 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 5430\r\naccept-ranges: bytes\r\netag: W/\"5430-1765799296000\"\r\nlast-modified: Mon, 15 Dec 2025 11:48:16 GMT\r\nx-trace-id: UopzDr6pHq_z6eoNdZx6F1znzb1tYw\r\nserver-timing: tid;desc=\"UopzDr6pHq_z6eoNdZx6F1znzb1tYw\",front;dur=18.789\r\nset-cookie: ss_mo=fCVLRRoKshu7g4yA44Mm3w8qCHaHFwpzggbmRVEglglzvZSg_TbiHYBMXaA4IoRAOf-4qM96Wt3dnn66tiYzMyF_CXQYWj1ipxRD8O0; Secure; Max-Age=86400; HttpOnly; SameSite=None; Domain=m.ok.ru\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"fe4399b5a784050303dce07f4362998f","sha1":"171723eed7d7b60739e679194ba07df03abf94f5","sha256":"1167db0ee08ba5dfb2a2b01416263fcaf86c10e09bef78890c2bc29a88404387","sha512":"43b4911e4079adbe5914483e187f75050a3e21b0abc703ee0fa9325ca7171a699bc54400a57c0e2069c025f1617a29bd736bbc68c3f568856f4f5a8d7bd8c41d","ssdeep":"48:EFPcMps25FVtZHVa3VUHbeT+AwQUIJlfYFDA7:EyoVtZH83E8+AjXgBA7","tlshash":"3ab148e4d6481c64f0fb76f1da3b492c2b6f4d2548a5f0d8805bb9a21f333d60232d90","first_seen":"2023-05-03T20:08:10Z","last_seen":"2026-03-28T21:26:52.014841Z","times_seen":39,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":119,"dns":12,"connect":43,"send":0,"wait":62,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-620120-3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:51.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=UA-620120-3 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Dec 2025 16:45:51 GMT\r\nexpires: Wed, 24 Dec 2025 16:45:51 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 24 Dec 2025 15:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 102766\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":289084,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3331)","md5":"d6282638b44fd19cf9137d8f1e1df092","sha1":"1134ea2a01a32ea5533127f54e3580e8e82b47d8","sha256":"71aa7beba6f574d5c28f1d067e6127368b2caa7e980e4ece768cc2c359260922","sha512":"d9224d82e6c582ac8fa630b0e99eea949c666db736d6c6f0437294b2ad3dae1c9ad50f3b2712f63440d7073536317b2cbf4f040638ab1910b40b15eec2d2a65c","ssdeep":"6144:1IeJt2bulKYv9VGDmHYmyBFzfns9TWO4Baa5g:GHbu7lEDns5WOmab","tlshash":"0d5409c8b3da742683a36478503f114bb23b79d1f84cd894e186d8d42e74aaa4277f7d","first_seen":"2025-12-24T16:46:25.214513Z","last_seen":"2025-12-24T16:46:25.214513Z","times_seen":1,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":129,"dns":1,"connect":10,"send":0,"wait":24,"receive":19,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://css.jpg4.icu/tagjpa.php?noself=1\u0026url=av.diktok.top/tags/5","date":"2025-12-24T16:45:52.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://css.jpg4.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30399\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 11:02:00 GMT\r\nexpires: Sun, 20 Dec 2026 11:02:00 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 366232\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86927,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-19T12:35:45.501231Z","times_seen":122053,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdocac.4vid.top/v/s://www.youtube.com/playlist?list=PL6iR6MhLJLPAdOA3we4rTI3qxs5ZWYXMk/title/myhash/3","fqdn":"pdocac.4vid.top","domain":"4vid.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:54.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4vid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 04:08:57 GMT","end":"Fri, 13 Feb 2026 05:05:33 GMT"},"fingerprint":{"sha1":"99:1F:D8:6E:39:72:6F:D5:11:7F:B0:79:4D:F6:40:0E:A5:37:9F:9A","sha256":"F4:87:3F:1A:B8:E5:52:39:3C:56:29:BB:B7:CD:E0:20:DE:45:F2:30:28:80:C4:8D:AB:CA:AE:DC:24:7C:14:56"}}},"request":{"raw":"GET /v/s://www.youtube.com/playlist?list=PL6iR6MhLJLPAdOA3we4rTI3qxs5ZWYXMk/title/myhash/3 HTTP/1.1\r\nHost: pdocac.4vid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.av4us.work\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 16:45:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\npdojs-line8: host-pdocac.4vid.top.96.142.48-myhost-38.220.248/v/s://www.youtube.com/playlist?list=PL6iR6MhLJLPAdOA3we4rTI3qxs5ZWYXMk/title/myhash/3\r\nphost: pdocac.4vid.top\r\npdojs-line359: notjp-nojp-myhost--filteron-\r\npdojs-line967: notjp-nojp-myhost--filteron-/v/s://www.youtube.com/playlist?list=PL6iR6MhLJLPAdOA3we4rTI3qxs5ZWYXMk/title/myhash/3\r\npdo120: feedvid-, cachefileb-cacpdo4/5b/4f/5c, lfm-2-1144091, lmd-1144091, lud-1709451, xfvlen-9, fsize-2362, played-\r\naccess-control-allow-headers: Cake\r\ncache-control: public, max-age=3600000\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-proxy-cache-192g-la: HIT\r\nxkey-192la: pdocac.4vid.top/v/s://www.youtube.com/playlist?list=PL6iR6MhLJLPAdOA3we4rTI3qxs5ZWYXMk/title/myhash/3--pdocac.4vid.top--cacpdo2---yes\r\nage: 5942\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 24 Dec 2025 15:06:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oOM2uTYVrg0D7Ih5uTNYtOGcblZz4Au%2Fh97nv%2B8Xp4PjQPXTT4Oj8%2FzH64PGaMaO%2FIAkCHYHwh2ugYhsDc%2BjlIDIomz67JQM8IzxBRM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b31925eca6a569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":209,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"29d8efb38e41d4a956bbb56d298439e0","sha1":"38df7c019e97db22a5f86366db6deb927dc17160","sha256":"e05e77d846d0d125592fb87d26af959af2b89e3955d84f16a3d6cf4553a15316","sha512":"46f5176952dd6aa9f73c68a730ffc139563952abb7ba70fa82abf708e4d1aee4f7d8d1726ede8629f1d8ae244c6f3bd9d4699288f2617d02e72d6f2353a8ec03","ssdeep":"","tlshash":"add0a75a6018568ba931a454ac4124caa98508a4c994fa60a45555ea4b605d3630b5f0","first_seen":"2025-12-24T16:46:25.215623Z","last_seen":"2025-12-24T16:46:25.215623Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"pdocac.4vid.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.okcdn.ru/i?r=BDFSTM1h2o92P_v-s8DgGlgYDfaBxTy02PhUeH3YjO7tMJSzrONVR-m2uR65L6JSzdI\u0026fn=external_8","fqdn":"i.okcdn.ru","domain":"okcdn.ru","tld":"ru"},"ip":{"addr":"5.101.40.2","port":443,"asn":47764,"as":"LLC VK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:54.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.okcdn.ru","organization":"VK LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 16 Oct 2025 12:07:01 GMT","end":"Tue, 17 Nov 2026 11:21:34 GMT"},"fingerprint":{"sha1":"AD:03:8C:F8:F6:C3:35:71:E4:8F:7E:00:68:C1:BE:EC:AA:99:99:6B","sha256":"DB:94:F0:E6:64:F9:B5:19:AE:31:DC:68:FA:65:62:B5:32:FB:06:99:CC:27:04:4B:19:5C:8F:DB:6C:B1:A7:E7"}}},"request":{"raw":"GET /i?r=BDFSTM1h2o92P_v-s8DgGlgYDfaBxTy02PhUeH3YjO7tMJSzrONVR-m2uR65L6JSzdI\u0026fn=external_8 HTTP/1.1\r\nHost: i.okcdn.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 410 Gone\r\nserver: apache\r\ndate: Wed, 24 Dec 2025 16:45:54 GMT\r\ncontent-length: 11\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"410","status_text":"Gone","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":89,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jsjs.jpg4.icu/index.php?js=very","fqdn":"jsjs.jpg4.icu","domain":"jpg4.icu","tld":"icu"},"ip":{"addr":"172.67.183.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:51.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jpg4.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 15:32:54 GMT","end":"Thu, 26 Feb 2026 16:30:32 GMT"},"fingerprint":{"sha1":"DD:1F:06:D1:AD:C8:98:82:F6:76:1B:72:E5:E3:ED:49:53:4D:2E:C2","sha256":"5D:0D:E6:96:38:E2:AC:E2:A7:81:11:6D:6A:D8:8A:47:43:3D:50:7D:FE:2E:30:F8:62:AA:CC:2B:30:C7:DF:7F"}}},"request":{"raw":"GET /index.php?js=very HTTP/1.1\r\nHost: jsjs.jpg4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 16:45:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nimghost: 1729614248-h-jsjsjpg4icumh--NO-rm1726420930/index.php?js=very\r\n56nloadrate: 1.0675\r\ncache-control: max-age=360000, private\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hCyRBkD2g97ma2rCMu8uA2lXXyGf7AxtaKdSi%2BZo2h74ktmw%2BBTnHj1a1Wh%2FnWqbYcQpH9j2aAh0NkKBVnFRPTJbeDmu9rJbH37c\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\ncf-ray: 9b31924a7b1fb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":41,"dns":22,"connect":1,"send":0,"wait":207,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"page.phic4.top/myda.php","fqdn":"page.phic4.top","domain":"phic4.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://css.jpg4.icu/tagjpa.php?noself=1\u0026url=av.diktok.top/tags/5","date":"2025-12-24T16:45:52.960Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /myda.php HTTP/1.1\r\nHost: page.phic4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://css.jpg4.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":456,"timings":{"blocked":456,"dns":0,"connect":225,"send":0,"wait":0,"receive":0,"ssl":235},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"page.phic4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdocac.4vid.top/v/s://ok.ru/video/403910165977/title/myhash/3","fqdn":"pdocac.4vid.top","domain":"4vid.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:54.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4vid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 04:08:57 GMT","end":"Fri, 13 Feb 2026 05:05:33 GMT"},"fingerprint":{"sha1":"99:1F:D8:6E:39:72:6F:D5:11:7F:B0:79:4D:F6:40:0E:A5:37:9F:9A","sha256":"F4:87:3F:1A:B8:E5:52:39:3C:56:29:BB:B7:CD:E0:20:DE:45:F2:30:28:80:C4:8D:AB:CA:AE:DC:24:7C:14:56"}}},"request":{"raw":"GET /v/s://ok.ru/video/403910165977/title/myhash/3 HTTP/1.1\r\nHost: pdocac.4vid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.av4us.work\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 16:45:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\npdojs-line8: host-pdocac.4vid.top4.194.8.20-myhost-38.220.248/v/s://ok.ru/video/403910165977/title/myhash/3\r\nphost: pdocac.4vid.top\r\npdojs-line359: notjp-es-pt-myhost--filteron-\r\npdojs-line967: notjp-es-pt-myhost--filteron-/v/s://ok.ru/video/403910165977/title/myhash/3\r\npdo120: feedvid-, cachefileb-cacpdo6/f5/ac/4df628, lfm-1-8290, lmd-8290, lud-4232092, xfvlen-625592, fsize-244020, played-10361\r\naccess-control-allow-headers: Cake\r\ncache-control: public, max-age=3600000\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-proxy-cache-192g-la: HIT\r\nxkey-192la: pdocac.4vid.top/v/s://ok.ru/video/403910165977/title/myhash/3--pdocac.4vid.top--myzone---yes\r\nage: 5942\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 24 Dec 2025 15:06:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8taXYXjv1w14hm04d8blt8Mtp%2BgF76%2BV75rG7BleaXy5%2FrNpV%2BlhArOaPlTVnZkv%2Bryl5RODjVq4S3nNA4BHCeBTSE%2FT8dyhMXo4gog%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b31925eca6c569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":310,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (310), with no line terminators","md5":"67c1985356719391bed13e3988c742f3","sha1":"8b946e915c33c9c031a481f81d115a1612b3cda2","sha256":"a932940c8a3d28137b5dde17c9ddc77fc96722759d13aa2abe9852b3b20c720e","sha512":"901229106739af97aaff8a4d8e9deb875454e86f716e5434488d9e50444610b0f56ed89cf74c0da2de7014613f8b69c8f74dab047e2899c437bdbeb1beedd104","ssdeep":"","tlshash":"4be0c2a34548001403c240073d04d1e9e24c59023ceb0ee0f58467ba31dddb791818f8","first_seen":"2025-12-24T16:46:25.216477Z","last_seen":"2025-12-24T16:46:25.216477Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"pdocac.4vid.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.av4us.work/kw/Ok.ru%20preteen","fqdn":"www.av4us.work","domain":"av4us.work","tld":"work"},"ip":{"addr":"104.21.55.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-24T16:45:50.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"av4us.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Dec 2025 15:43:55 GMT","end":"Wed, 04 Mar 2026 16:42:15 GMT"},"fingerprint":{"sha1":"BF:0E:78:37:75:3C:60:E6:DA:C0:DC:A7:B2:83:F6:7C:D8:B4:A6:36","sha256":"85:5D:BD:34:23:5C:70:12:D9:83:56:37:83:4B:0B:CB:4C:41:3D:64:AE:25:60:B5:53:33:FA:31:BD:DE:8E:CD"}}},"request":{"raw":"GET /kw/Ok.ru%20preteen HTTP/1.1\r\nHost: www.av4us.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 16:45:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npdojs-line8: host-www.av4us.site.96.142.48-myhost-www.av4us.site38.220.248/kw/Ok.ru%20preteen\r\nphost: www.av4us.site\r\npdojs-line383: notjp--myhost-www.av4us.site-filteron-\r\npdojs-line991: notjp--myhost-www.av4us.site-filteron-/kw/Ok.ru%20preteen\r\nline1317: URI-/kw/Ok.ru%20preteen-myhost-www.av4us.site-filteron-\r\ncache-control: public, max-age=524283\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hjfutV0ASyCGWartitlDvyb40hm%2B2hgdAK4wWT877TXao0z4UcQ6IQo6v6UuVTnOhDoVxQfrHIcjJLN3jDpyyoQLux2HoJpxMfW1PhJv\"}]}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\nx-proxy-cache-192g-la: HIT\r\nxkey-192la: www./kw/Ok.ru%20preteen-A-www.av4us.work-www.av4us.work-myzone---yes\r\nx-proxy-cache-la2: HIT\r\nxkey-la2: www./kw/Ok.ru%20preteen-A-www.av4us.work--my_zone\r\nage: 7094\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 24 Dec 2025 14:47:36 GMT\r\ncontent-encoding: br\r\ncf-ray: 9b3192486ca1b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22288,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14746), with CRLF, LF line terminators","md5":"1c7fe0e7b4d9353512a464719cca8296","sha1":"b3fb7798569a4a825f5786831055e4efbce0d8fc","sha256":"a80ec54275a2f9987bae745d5655977d0c9db7046bf0dd048190106a33c32ab9","sha512":"bbd1fc40052c3b71e8f1cb00a06a095a5a3fd07714b5778d0086a262411dae3f0e238bf2988bef0e92e33c08b4d9f9ec42d330f023749146fa96d76ba070808c","ssdeep":"384:p5UnDgvK49Mb6ilYImoPz4GYf4i4NpuwpQtL5stbivTGRksjBBnv3n/Prvw2BXzd:p/qEGYatmtm2T/8h","tlshash":"0da243610190353f12fb9286bc76727f8122fa0fa1fdcc0ab0af89765a57f55902e4c9","first_seen":"2025-12-24T16:46:25.217412Z","last_seen":"2025-12-24T16:46:25.217412Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":44,"dns":16,"connect":3,"send":0,"wait":11,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ok.ru/favicon.ico","fqdn":"ok.ru","domain":"ok.ru","tld":"ru"},"ip":{"addr":"95.163.61.74","port":443,"asn":47764,"as":"LLC VK","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:53.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ok.ru","organization":"VK LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 10 Oct 2025 16:48:01 GMT","end":"Mon, 09 Nov 2026 06:16:08 GMT"},"fingerprint":{"sha1":"08:67:8E:99:F4:B0:AC:36:C8:2B:E7:A7:FE:F3:CA:A6:C4:2D:C7:43","sha256":"41:F7:4F:66:29:C5:EE:76:1D:15:1F:E7:AC:81:F1:29:CF:F8:1B:DD:DC:76:C1:9F:D6:BA:2C:2A:B8:29:4B:A3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ok.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: kittenx\r\ndate: Wed, 24 Dec 2025 16:45:54 GMT\r\ncontent-type: image/x-icon;charset=UTF-8\r\ncontent-length: 5430\r\naccept-ranges: bytes\r\netag: W/\"5430-1766399621000\"\r\nlast-modified: Mon, 22 Dec 2025 10:33:41 GMT\r\nx-trace-id: OjAZ2eTwSsc4Fk5SY7Np15pHXk6nxQ\r\nserver-timing: tid;desc=\"OjAZ2eTwSsc4Fk5SY7Np15pHXk6nxQ\",front;dur=3.732\r\nset-cookie: ss_wb=faeMiKNe04tfUoXQJnXmDhMGDqxbdyNj3OdJcHw-kED8a4A4YnHlWQ898lU-x-DUgvt2pImDfLF6F5JHh21Y_GuslmhOsrUqYg; Secure; Max-Age=86400; HttpOnly; SameSite=None; Domain=ok.ru\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon; charset=UTF-8","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"d2b74bb45cef301826428952102156f8","sha1":"a8f7a4f78724fcc925facb23d94318608e54a251","sha256":"358755c713a2a34e644321c212163d99fbc389aeba6248f8e258286def8c0dc3","sha512":"0be4e7a94a01bd1ead61a945a6e8e8e9feb6c255484fe4fa8cf957cf2e3aba562f5e569cab100861a35594c9fc9c9493223f6ce0f73023232baea272c25acb80","ssdeep":"24:EZwWsSaneaaxZn6Cln1x2iKHjH4FR3T1t8dUkK72RyRTzwRQMnnRkDByaaSRB9aD:2qo6G1x2LDHu3BtpFHQG+cGGo","tlshash":"25b1daf369531208fa6a9032d07207a36281ad16c0d905af43be3c7d7bbd3d10a0ef56","first_seen":"2024-06-16T03:37:53Z","last_seen":"2026-03-15T05:55:43.180809Z","times_seen":47,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":146,"dns":38,"connect":44,"send":0,"wait":48,"receive":1,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdocac.4vid.top/v/s://ok.ru/video/4089001609791?st._aid=VideoState_open_album/title/myhash/3","fqdn":"pdocac.4vid.top","domain":"4vid.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:54.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4vid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 04:08:57 GMT","end":"Fri, 13 Feb 2026 05:05:33 GMT"},"fingerprint":{"sha1":"99:1F:D8:6E:39:72:6F:D5:11:7F:B0:79:4D:F6:40:0E:A5:37:9F:9A","sha256":"F4:87:3F:1A:B8:E5:52:39:3C:56:29:BB:B7:CD:E0:20:DE:45:F2:30:28:80:C4:8D:AB:CA:AE:DC:24:7C:14:56"}}},"request":{"raw":"GET /v/s://ok.ru/video/4089001609791?st._aid=VideoState_open_album/title/myhash/3 HTTP/1.1\r\nHost: pdocac.4vid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.av4us.work\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 16:45:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\npdojs-line8: host-pdocac.4vid.top4.194.8.20-myhost-38.220.248/v/s://ok.ru/video/4089001609791?st._aid=VideoState_open_album/title/myhash/3\r\nphost: pdocac.4vid.top\r\npdojs-line359: notjp-nojp-myhost--filteron-\r\npdojs-line967: notjp-nojp-myhost--filteron-/v/s://ok.ru/video/4089001609791?st._aid=VideoState_open_album/title/myhash/3\r\npdo120: feedvid-, cachefileb-cacpdo6/aa/a8/298b59, lfm-1-208210, lmd-208210, lud-17987847, xfvlen-471440, fsize-88735, played-17\r\naccess-control-allow-headers: Cake\r\ncache-control: public, max-age=3600000\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-proxy-cache-192g-la: HIT\r\nxkey-192la: pdocac.4vid.top/v/s://ok.ru/video/4089001609791?st._aid=VideoState_open_album/title/myhash/3--pdocac.4vid.top--myzone---yes\r\nage: 5941\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 24 Dec 2025 15:06:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qLvUOxHwBeJ0NJDmhMgxsIyRvsYt12WkH8vmwl81mZgCm3h9v%2B380tlXivkulYKmJs2UbslHV3UOFtDRWrxJYigPorN5E0lyk6dUw40%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b31925eca62569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":263,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"011da2227d74406a2d2a0eb73a1c566d","sha1":"fcbf22a656e933cbfb360b2d1f3c7b3fc4784456","sha256":"344a07c01b866fff03d65d6eb655fc2d522e0fcef45330b6770033b51f91d56e","sha512":"ee82a6e4dba3df073edf8b7d83a4a4295f8f175bbbf063949109de67c95f8ea6df5922aa10db2546e8182623a762a5b2d6f8b1b36b2b8bb4bcf19de77ad14127","ssdeep":"","tlshash":"3bd05ba375d4215106d2717c0995104f9f05259ffee5cfa1bdb01bb3115707275871f8","first_seen":"2025-12-24T16:46:25.218932Z","last_seen":"2025-12-24T16:46:25.218932Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"pdocac.4vid.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.okcdn.ru/videoPreview?id=403910165977\u0026type=47\u0026idx=30\u0026tkn=sDkn3X7Tg11HY4j2FYPYWfcZp5c\u0026i=1\u0026fn=external_8","fqdn":"i.okcdn.ru","domain":"okcdn.ru","tld":"ru"},"ip":{"addr":"5.101.40.2","port":443,"asn":47764,"as":"LLC VK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:54.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.okcdn.ru","organization":"VK LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 16 Oct 2025 12:07:01 GMT","end":"Tue, 17 Nov 2026 11:21:34 GMT"},"fingerprint":{"sha1":"AD:03:8C:F8:F6:C3:35:71:E4:8F:7E:00:68:C1:BE:EC:AA:99:99:6B","sha256":"DB:94:F0:E6:64:F9:B5:19:AE:31:DC:68:FA:65:62:B5:32:FB:06:99:CC:27:04:4B:19:5C:8F:DB:6C:B1:A7:E7"}}},"request":{"raw":"GET /videoPreview?id=403910165977\u0026type=47\u0026idx=30\u0026tkn=sDkn3X7Tg11HY4j2FYPYWfcZp5c\u0026i=1\u0026fn=external_8 HTTP/1.1\r\nHost: i.okcdn.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: apache\r\ndate: Wed, 24 Dec 2025 16:45:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16754\r\naccept-ranges: bytes\r\nlast-modified: Sat, 25 Oct 2025 16:45:54 GMT\r\ncache-control: private, max-age=100000000\r\nexpires: Sun, 20 Sep 2026 16:45:54 GMT\r\netag: \"686897696a7c876b7e\"\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nx-ok-image: ?1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16754,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 720x405, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"567aee761d959d169ab6fe69420a1c5c","sha1":"a4f60cf65367c0997eec8377fd1b236a1c3c3792","sha256":"fc3ff27984275a43b00d7aa63d9b526789575aa9b0c1b5920ca77631b6423a37","sha512":"6ae6f353a8da086d661e6e223edae4526c01817d507fdcd211ccfab5ed79087357dd98ec993e82f69c6042a9b96b7d3118e1e27411a9f6c9e857057aa4509cd7","ssdeep":"384:bbI64kX2yz56Cae3Os3vBqzcoEQTeHRBPYFaA9uSUUWz:Hj4v656C7lCaQTexZ4aATWz","tlshash":"b172c00a2c4487a83d59f01bf908697a65f42edc7aa16511a67e040ff1fe0bf87e4277","first_seen":"2025-12-24T16:46:25.219853Z","last_seen":"2025-12-24T16:46:25.219853Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/yandex-metrica-watch/watch.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:51.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/yandex-metrica-watch/watch.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.423.0\r\nx-jsd-version-type: version\r\netag: W/\"3451b-8YT7/aBJ5ZJSl0gbbvYqRHErHmA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 24 Dec 2025 16:45:51 GMT\r\nage: 13027\r\nx-served-by: cache-fra-etou8220112-FRA, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 84645\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":214299,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (675)","md5":"13874b43d7a0d16e9294fbd7769da715","sha1":"80021aaaf6d92a36a4c07b8a0aa92c828c0e88b4","sha256":"1997c1177df62b07fd1794d3a9f8ebdc72842e6cb20a1e1987e939065921f646","sha512":"403cf4d5c09cb01f3ffa12aab85665ed7f39d89ef43127cc982dc478cebc89f618228abadfdec1aeb9894324335fcd988df24cb715cbba168bdb398dd2dc7461","ssdeep":"6144:y49/+QUgRED0pera7677001NeCHO/SPon:/+gmS767Q01NeCuwon","tlshash":"2b24e7d976927062937334b4902f000fb2bea8a6f10c8955f1c9d9d97e78da89137f6c","first_seen":"2025-12-05T22:31:48.465207Z","last_seen":"2026-03-18T10:59:26.977539Z","times_seen":566,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":82,"dns":19,"connect":30,"send":0,"wait":27,"receive":38,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"page.phic4.top/myda.php","fqdn":"page.phic4.top","domain":"phic4.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:51.963Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /myda.php HTTP/1.1\r\nHost: page.phic4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":748,"timings":{"blocked":0,"dns":46,"connect":476,"send":0,"wait":0,"receive":0,"ssl":224},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"page.phic4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"css.jpg4.icu/tagjpa.php?noself=1\u0026url=av.diktok.top/tags/5","fqdn":"css.jpg4.icu","domain":"jpg4.icu","tld":"icu"},"ip":{"addr":"172.67.183.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:52.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jpg4.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 15:32:54 GMT","end":"Thu, 26 Feb 2026 16:30:32 GMT"},"fingerprint":{"sha1":"DD:1F:06:D1:AD:C8:98:82:F6:76:1B:72:E5:E3:ED:49:53:4D:2E:C2","sha256":"5D:0D:E6:96:38:E2:AC:E2:A7:81:11:6D:6A:D8:8A:47:43:3D:50:7D:FE:2E:30:F8:62:AA:CC:2B:30:C7:DF:7F"}}},"request":{"raw":"GET /tagjpa.php?noself=1\u0026url=av.diktok.top/tags/5 HTTP/1.1\r\nHost: css.jpg4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 16:45:52 GMT\r\nserver: cloudflare\r\n8tagproxuri: /tagjpa.php?noself=1\u0026url=av.diktok.top/tags/5\r\nx-frame-options: ALLOWALL\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=72000\r\n598tagproxuri: /tagjpa.php?noself=1\u0026url=av.diktok.top/tags/5\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: text/html; charset=UTF-8\r\nage: 36626\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 24 Dec 2025 06:35:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TvbDDdQ0cRzrJlspf9SZhWKpyBthZQCYOMEWubVC76Qzv93422zTOiVl2TIcxqjMxE3bGfueGIp680IEmzoaVNeMLvvztt9SYkc%3D\"}]}\r\ncf-ray: 9b3192528f7756c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29638,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (29491), with CRLF line terminators","md5":"2e9f4d692e7773f014e5efd8fddab57f","sha1":"8889ccf217ce104e7411a2c4c5115b723bb1824c","sha256":"b1f73978e116e19803df0c3b2b5dea603550f6d4782697a4dc38c97f4057c606","sha512":"59cbf4fce250d9c66a2d4b7eaf426dc62f3c15f6f5a5aec4b08e4f0b1ff915d63542394e00532ce5e9f06183172d5eba53acdb32536a0482ea0d856f3aa707d3","ssdeep":"192:qq6FhutEEt+Wo7PdQWYiNpuUpUD4qQEXlea5M4VED4mF1nsLkYsksEZdKIFPQGGT:T6qK8biNpuUpUr3jddKIZxvcTExm","tlshash":"8fd2909ba344eb3c1cc25b047ce7f3a9d9e2e54f6cd38117a871922d010069dfce6a66","first_seen":"2025-12-24T16:46:25.221422Z","last_seen":"2025-12-24T16:46:25.221422Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jsjs.jpg4.icu/index.php?js=very","fqdn":"jsjs.jpg4.icu","domain":"jpg4.icu","tld":"icu"},"ip":{"addr":"172.67.183.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://css.jpg4.icu/tagjpa.php?noself=1\u0026url=av.diktok.top/tags/5","date":"2025-12-24T16:45:52.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jpg4.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 15:32:54 GMT","end":"Thu, 26 Feb 2026 16:30:32 GMT"},"fingerprint":{"sha1":"DD:1F:06:D1:AD:C8:98:82:F6:76:1B:72:E5:E3:ED:49:53:4D:2E:C2","sha256":"5D:0D:E6:96:38:E2:AC:E2:A7:81:11:6D:6A:D8:8A:47:43:3D:50:7D:FE:2E:30:F8:62:AA:CC:2B:30:C7:DF:7F"}}},"request":{"raw":"GET /index.php?js=very HTTP/1.1\r\nHost: jsjs.jpg4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://css.jpg4.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 16:45:52 GMT\r\nserver: cloudflare\r\nimghost: 1729614248-h-jsjsjpg4icumh--NO-rm1726420931/index.php?js=very\r\n56nloadrate: 1.625\r\ncache-control: max-age=360000, private\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BYvuTkIJaKmqOLmNwooR5dquaGQWppPMlrFXia0AdjTgvvxT8mo8lG1j4brkDWRcO%2BZ%2BmqlRuJ%2FevqfxD%2Bv5qt8riJjzgdj3ILoM\"}]}\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: BYPASS\r\ncf-ray: 9b3192533f7c56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":358,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js?1","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://css.jpg4.icu/tagjpa.php?noself=1\u0026url=av.diktok.top/tags/5","date":"2025-12-24T16:45:53.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /ajax/libs/jquery/3.3.1/jquery.min.js?1 HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://css.jpg4.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30399\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 21 Dec 2025 18:06:23 GMT\r\nexpires: Mon, 21 Dec 2026 18:06:23 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 254370\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86927,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-19T12:35:45.501231Z","times_seen":122053,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdocac.jpg4.icu/av4usimage.png","fqdn":"pdocac.jpg4.icu","domain":"jpg4.icu","tld":"icu"},"ip":{"addr":"172.67.183.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:54.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jpg4.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 15:32:54 GMT","end":"Thu, 26 Feb 2026 16:30:32 GMT"},"fingerprint":{"sha1":"DD:1F:06:D1:AD:C8:98:82:F6:76:1B:72:E5:E3:ED:49:53:4D:2E:C2","sha256":"5D:0D:E6:96:38:E2:AC:E2:A7:81:11:6D:6A:D8:8A:47:43:3D:50:7D:FE:2E:30:F8:62:AA:CC:2B:30:C7:DF:7F"}}},"request":{"raw":"GET /av4usimage.png HTTP/1.1\r\nHost: pdocac.jpg4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 16:45:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 2619\r\npriority: u=4,i=?0\r\netag: \"a3b-6437702003080\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\ncache-control: public, max-age=360000\r\nx-proxy-cache-192g-la: MISS\r\nxkey-192la: pdocac.jpg4.icu/av4usimage.png--pdocac.jpg4.icu-pdocac.jpg4.icu-myzone---no\r\nx-proxy-cache-tot-vt: HIT\r\nxkey-tot-vt: pdocac.jpg4.icu/av4usimage.png--pdocac.jpg4.icu--my_zone\r\naccept-ranges: bytes\r\nage: 201826\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ewxDm63B1VW9%2FyX1OotoPDU9yiHVozFCDWhhR95Xdp7ryjIwpAWz%2FUTyvMCNoRuJfz5TOmF3GxoOgB8jJEHQllxCZPtfwFFTKJiMyEA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b31925d7fd656c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2619,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 339 x 89, 8-bit/color RGB, non-interlaced","md5":"8267aaadeeeb8c9fa7482f2f9db2d4e3","sha1":"a2ef23d3b5f9d9bb3102c855a8ace072884ba60c","sha256":"998cf9d427c2e322904e89a056ba823b56078fb199b7395883f3eafabaadbea8","sha512":"719215d8ec70b8b36b24277a80e7876be2fa1afe3698c05bbff013b6a2936701f266e694c221756e7306d1a945013986a53e41af0bc90bdd4bbf0dcbe33f7637","ssdeep":"","tlshash":"f5513ccb05b2fdbc657d79976105a79ef3a896c72982b872565c38c14243a0096c1fe1","first_seen":"2025-11-13T21:07:01.541567Z","last_seen":"2026-04-12T19:29:51.682384Z","times_seen":362,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdocac.4vid.top/v/s://ok.ru/video/1622691946380/title/myhash/3","fqdn":"pdocac.4vid.top","domain":"4vid.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:54.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4vid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 04:08:57 GMT","end":"Fri, 13 Feb 2026 05:05:33 GMT"},"fingerprint":{"sha1":"99:1F:D8:6E:39:72:6F:D5:11:7F:B0:79:4D:F6:40:0E:A5:37:9F:9A","sha256":"F4:87:3F:1A:B8:E5:52:39:3C:56:29:BB:B7:CD:E0:20:DE:45:F2:30:28:80:C4:8D:AB:CA:AE:DC:24:7C:14:56"}}},"request":{"raw":"GET /v/s://ok.ru/video/1622691946380/title/myhash/3 HTTP/1.1\r\nHost: pdocac.4vid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.av4us.work\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 16:45:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\npdojs-line8: host-pdocac.4vid.top4.194.8.20-myhost-38.220.248/v/s://ok.ru/video/1622691946380/title/myhash/3\r\nphost: pdocac.4vid.top\r\npdojs-line359: notjp-nojp-myhost--filteron-\r\npdojs-line967: notjp-nojp-myhost--filteron-/v/s://ok.ru/video/1622691946380/title/myhash/3\r\npdo120: feedvid-, cachefileb-cacpdo3/70/af/fe5129, lfm-1-8784, lmd-8784, lud-6149500, xfvlen-847015, fsize-211785, played-8022\r\naccess-control-allow-headers: Cake\r\ncache-control: public, max-age=3600000\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-proxy-cache-192g-la: HIT\r\nxkey-192la: pdocac.4vid.top/v/s://ok.ru/video/1622691946380/title/myhash/3--pdocac.4vid.top--myzone---yes\r\nage: 5942\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 24 Dec 2025 15:06:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2rm37RhtMNFd%2BeZkPnhCmbjW3HJFON7G1GivM3wJgIvPTW7fFBlvPiOd7j0x%2BDca1XzdMM1HvbC7tq5vEUiO8gJcVIeNlPncghT4HC4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b31925eba53569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":293,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"77c210e82edf20151af6caca1cec1379","sha1":"e13f313d4d73fbc75de849881405728882a37121","sha256":"f5905f010eabe67470637f2e3543d4c0ddf0782d5875008a20bbbec1ea7dd50d","sha512":"d121219ab6f4ec0968f4678ef32c1fa8818d1319a0d537244be80773a8a2e79bccf3669c50b3caa01635e493bc7677b291ebfde326cca2a1647845b6d1d6d9b7","ssdeep":"","tlshash":"aee0c267c081d6041582534b2d10e9c6fa4a4213fcdb0ce5f101077061fad226096cba","first_seen":"2025-12-24T16:46:25.222568Z","last_seen":"2025-12-24T16:46:25.222568Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"pdocac.4vid.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdocac.4vid.top/v/s://www.facebook.com/glengarryfnc/videos/r-u-ok-day-a-message-from-one-of-our-young-netball-girls-layla-kosterman-on-r-u-/3620316114653340//title/myhash/3","fqdn":"pdocac.4vid.top","domain":"4vid.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:54.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4vid.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 04:08:57 GMT","end":"Fri, 13 Feb 2026 05:05:33 GMT"},"fingerprint":{"sha1":"99:1F:D8:6E:39:72:6F:D5:11:7F:B0:79:4D:F6:40:0E:A5:37:9F:9A","sha256":"F4:87:3F:1A:B8:E5:52:39:3C:56:29:BB:B7:CD:E0:20:DE:45:F2:30:28:80:C4:8D:AB:CA:AE:DC:24:7C:14:56"}}},"request":{"raw":"GET /v/s://www.facebook.com/glengarryfnc/videos/r-u-ok-day-a-message-from-one-of-our-young-netball-girls-layla-kosterman-on-r-u-/3620316114653340//title/myhash/3 HTTP/1.1\r\nHost: pdocac.4vid.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.av4us.work\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 16:45:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\npdojs-line8: host-pdocac.4vid.top4.194.8.20-myhost-38.220.248/v/s://www.facebook.com/glengarryfnc/videos/r-u-ok-day-a-message-from-one-of-our-young-netball-girls-layla-kosterman-on-r-u-/3620316114653340//title/myhash/3\r\nphost: pdocac.4vid.top\r\npdojs-line383: notjp-de-myhost--filteron-\r\npdojs-line991: notjp-de-myhost--filteron-/v/s://www.facebook.com/glengarryfnc/videos/r-u-ok-day-a-message-from-one-of-our-young-netball-girls-layla-kosterman-on-r-u-/3620316114653340//title/myhash/3\r\npdo120: feedvid-, cachefileb-cacpdo3/88/f9/84a7139, lfm-1-140239, lmd-140239, lud-35487903, xfvlen-1079611, fsize-307278, played-1\r\ncache-control: public, max-age=720000\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\nx-proxy-cache-192g-la: HIT\r\nxkey-192la: pdocac.4vid.top/v/s://www.facebook.com/glengarryfnc/videos/r-u-ok-day-a-message-from-one-of-our-young-netball-girls-layla-kosterman-on-r-u-/3620316114653340//title/myhash/3--pdocac.4vid.top--cacpdo2---yes\r\nage: 5942\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 24 Dec 2025 15:06:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YUaEFy9lyt9hgm8tiAn%2Fy6miUmEx5iAZg9TOAjnuCmBCBr9gnAPgU7je1vdrulM24wGBWMza3%2BFh%2BMr28ol44blbkVwN4G5DjP4mzYc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b31925eca63569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"pdocac.4vid.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi/hic-dnps6MU/hqdefault.jpg?sqp=-oaymwEXCOADEI4CSFryq4qpAwkIARUAAIhCGAE=\u0026rs=AOn4CLC7AuTlH34FZWta_sw9kiRuxg0UyA\u0026days_since_epoch=20394","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"216.58.211.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:54.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:24 GMT","end":"Wed, 25 Feb 2026 15:49:23 GMT"},"fingerprint":{"sha1":"F2:85:4A:9E:D7:A0:F3:81:B4:5E:A0:15:2F:CA:82:BC:99:C6:FD:3E","sha256":"29:0F:22:40:3F:9C:0D:DB:8B:2A:1F:57:89:30:09:80:17:D2:AD:57:1B:43:86:20:0B:39:B2:6D:50:81:8C:73"}}},"request":{"raw":"GET /vi/hic-dnps6MU/hqdefault.jpg?sqp=-oaymwEXCOADEI4CSFryq4qpAwkIARUAAIhCGAE=\u0026rs=AOn4CLC7AuTlH34FZWta_sw9kiRuxg0UyA\u0026days_since_epoch=20394 HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13418\r\ndate: Wed, 24 Dec 2025 16:45:54 GMT\r\nexpires: Wed, 24 Dec 2025 18:45:54 GMT\r\ncache-control: public, max-age=7200\r\netag: \"1347989632\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13418,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x270, components 3","md5":"20a439f5aeb10d356d7181cf150f1e72","sha1":"b723ad41b541796cd1b5bed83e46fa3daedd50ec","sha256":"595577a217354c3c6b1c2323f22cd08c79ab3074758c794665358d66f64d40c8","sha512":"41f4c663fbe903c98c252f6421d7f6d2622453d4951135b592a2ec8502eca9cf073522783a0c6a570e2c08198f167550f9dfc2420aab06f4b647fed8760f2ec2","ssdeep":"384:1Bg+hOoQIWcVThenL1anwdcuLca7OQ12ExF38Z:1BgUORITVThwLMqL5SQ1/F38Z","tlshash":"3152bf19ba92a30ac5a104b85494a119bf31fef58b437cf598bb3df704e31d040ba163","first_seen":"2025-12-24T16:46:25.223518Z","last_seen":"2025-12-24T16:46:25.223518Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":100,"dns":0,"connect":20,"send":0,"wait":35,"receive":3,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/nosleep/0.11.0/NoSleep.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:51.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/nosleep/0.11.0/NoSleep.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 16:45:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3953\r\ncf-ray: 9b31924c4a2a49c5-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5ed16b69-29bf\"\r\nlast-modified: Fri, 29 May 2020 20:07:05 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 410998\r\nexpires: Mon, 14 Dec 2026 16:45:51 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ETdiVi02sBW2Ddl7So5cuu4dj4jrY5KoaFSCA7gWN5An%2Fq5Ia5rCpCW7kQmyxFT6ee9UuhYzpLljWogNBi2cFU1HgCM7W8KYSLK8uHBUxeOTlz8UIAm3Brnr5OsPPUtfZ0UzbRQD\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10687,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10613)","md5":"ea77f824de2ef57acb12e7cb6596365e","sha1":"10bad0dbdf30a0471c2c786b349daeb1dd19180e","sha256":"2b19d92ce83bf3b498f73103ba1240f09c84798b1f92aedf1491ccf0aa6f5e4c","sha512":"cf69dd76334b7318c829868da8a7e9c2097ef261555388132fc69f95d42e91420e2988056c3d93c830b20059422ae5a82e1109e3dce9127ccb0e23cc5ca27591","ssdeep":"192:N0rZbTPe+fl9SKRGyFgkw+wi+FrZJqbzr+5rA7wbUCzebIkm:N09voK7gzi+FrZJqbzrarAyUX5m","tlshash":"7a22f8b33133fd9f8fba085ac61d61045c7dbc6f4aa94091bb0884e86af4558ead5d34","first_seen":"2023-03-07T12:02:01Z","last_seen":"2026-04-12T19:29:51.705432Z","times_seen":2340,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":10,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kwai.com/favicon.ico","fqdn":"www.kwai.com","domain":"kwai.com","tld":"com"},"ip":{"addr":"23.215.2.149","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:54.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kwai.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 29 Jul 2025 08:23:35 GMT","end":"Sun, 30 Aug 2026 08:23:34 GMT"},"fingerprint":{"sha1":"4A:A1:45:2B:02:C8:86:65:84:02:D2:2B:EF:71:1F:70:E4:44:DF:B5","sha256":"CF:B9:73:AE:76:85:CD:63:FB:EE:A2:9A:2D:E7:B0:B4:2C:2B:CB:EB:4D:79:36:A4:4D:6C:98:85:76:5E:F4:DC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.kwai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/x-icon\r\ncontent-length: 2006\r\nlast-modified: Wed, 24 Dec 2025 09:28:51 GMT\r\netag: \"694bb253-7d6\"\r\ncontent-security-policy-report-only: default-src 'self' 'unsafe-inline' 'unsafe-eval' *.mythad.com https://*.kwai-pro.com http://*.kwai-pro.com http://*.kwai.net https://*.kwai.net *.kwai.com *.snackvideo.in *.kwai.me *.kwai.app *.kwimgs.com *.yximgs.com *.cloudfront.net *.kuaishou.com https://*.gifshow.com http://*.gifshow.com https://log-sdk.ksapisrv.com https://www.googletagmanager.com https://gifshow-static.download.ks-cdn.com https://static3.avast.com https://translate.google.com https://www.gstatic.com https://fonts.gstatic.com https://connect.facebook.net www.google-analytics.com hm.baidu.com m.snackvideo.com http://*.ap4r.com https://*.ap4r.com https://*.typekit.net http://*.typekit.net ak-sgp-pic.snackvideo.in tx-sgp-pic.snackvideo.in ws-sgp-pic.snackvideo.in g-us-kampic.golden49.net g-us-kamcdn.golden49.net m.kwai.com sentry.kuaishou.com https://cdn.jsdelivr.net https://at.alicdn.com https://www.facebook.com https://snap.licdn.com https://px.ads.linkedin.com https://cdn.linkedin.oribi.io https://www.linkedin.com https://*.google.com https://*.google-analytics.com https://*.doubleclick.net asset: data: blob: android-webview-video-poster: ikwai: chrome-extension:;img-src http: https: asset: data: blob: android-webview-video-poster: ikwai: chrome-extension:;connect-src http: https: asset: data: blob: android-webview-video-poster: ikwai: chrome-extension:;report-uri https://csplog.kwai-pro.com/log/kwai/wwwkwai\r\naccept-ranges: bytes\r\ndate: Wed, 24 Dec 2025 16:45:54 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2006,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"8598787bb964772e7c58335630cd2184","sha1":"43bba31482ccfacc5e94cb05f7174ccfb22e1917","sha256":"45526cf4f38253c14eec86886eabcff170c500d7bbe04cda7e24db1a003fe4f3","sha512":"9755e5fbb5248ee9d09f0c32ac0f620829f61bdaf7d74fc6a31a45c60292e07e1241d7c64996474aac54ac2b326963b8ee6adfa61ab942b78264741e5862168d","ssdeep":"","tlshash":"d641e8ae8e969c4fa5c060169238c384b9b51c87e1447de350026d8ee06be98771b1eb","first_seen":"2025-07-25T08:09:31.5089Z","last_seen":"2026-04-12T19:29:51.679246Z","times_seen":456,"resource_available":false,"data":null}},"time_used":576,"timings":{"blocked":182,"dns":128,"connect":22,"send":0,"wait":212,"receive":1,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.webvisor.org/watch/48140495?wmode=7\u0026page-url=https%3A%2F%2Fwww.av4us.work%2Fkw%2FOk.ru%2520preteen\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A1nmhispdoya1ro1ej5uutvpoh5pcv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2292%3Acn%3A1%3Adp%3A0%3Als%3A1615573683459%3Ahid%3A514639379%3Az%3A0%3Ai%3A20251224164551%3Aet%3A1766594752%3Ac%3A1%3Arn%3A389267535%3Arqn%3A1%3Au%3A1766594752987590720%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A16%2C28%2C11%2C1%2C21%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1766594750722%3Anp%3AV2luMzI%3D%3Afip%3A62236e752d3f7c5fd4f9360431331564-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1766594752%3At%3AOk.ru%20preteen%E5%8B%95%E7%94%BB%40AV4.us\u0026t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(42534404)fip(1)ti(1)","fqdn":"mc.webvisor.org","domain":"webvisor.org","tld":"org"},"ip":{"addr":"87.250.251.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:52.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.webvisor.com","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 18 Aug 2025 21:05:34 GMT","end":"Mon, 09 Feb 2026 20:59:59 GMT"},"fingerprint":{"sha1":"52:51:83:17:11:3C:6A:D0:47:28:FB:42:75:CF:6A:DA:48:B5:5A:C8","sha256":"69:B8:8D:9D:77:CB:F9:C7:48:04:E2:8C:99:28:7C:EF:5E:C7:2B:43:D6:52:7B:21:D2:99:F6:86:18:A6:0F:80"}}},"request":{"raw":"GET /watch/48140495?wmode=7\u0026page-url=https%3A%2F%2Fwww.av4us.work%2Fkw%2FOk.ru%2520preteen\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A1nmhispdoya1ro1ej5uutvpoh5pcv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2292%3Acn%3A1%3Adp%3A0%3Als%3A1615573683459%3Ahid%3A514639379%3Az%3A0%3Ai%3A20251224164551%3Aet%3A1766594752%3Ac%3A1%3Arn%3A389267535%3Arqn%3A1%3Au%3A1766594752987590720%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A16%2C28%2C11%2C1%2C21%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1766594750722%3Anp%3AV2luMzI%3D%3Afip%3A62236e752d3f7c5fd4f9360431331564-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1766594752%3At%3AOk.ru%20preteen%E5%8B%95%E7%94%BB%40AV4.us\u0026t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(42534404)fip(1)ti(1) HTTP/1.1\r\nHost: mc.webvisor.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.av4us.work/\r\nOrigin: https://www.av4us.work\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\naccess-control-allow-origin: https://www.av4us.work\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nset-cookie: yabs-sid=2482246031766594752; Path=/; SameSite=None; Secure\ni=h2Ul+15SjEptQTy0qHQgRYta8trctCagxHZp0iWaPaK5gwc2vpNrH2+uofdcPZddXyOsk2vHh+Ip0JWfNfGuJjnsERw=; Expires=Sat, 22-Dec-2035 16:45:52 GMT; Domain=.webvisor.org; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=8051361221766594752; Expires=Sat, 22-Dec-2035 16:45:52 GMT; Domain=.webvisor.org; Path=/; Secure; SameSite=None\nyuidss=8051361221766594752; Expires=Thu, 24-Dec-2026 16:45:52 GMT; Domain=.webvisor.org; Path=/; SameSite=None; Secure\nymex=1798130752.yrts.1766594752#1798130752.yrtsi.1766594752; Expires=Thu, 24-Dec-2026 16:45:52 GMT; Domain=.webvisor.org; Path=/; SameSite=None; Secure\nbh=YMCxsMoGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.webvisor.org; Expires=Thu, 28 Jan 2027 16:45:52 GMT; SameSite=None; Secure\nbh=YMCxsMoGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.webvisor.org; Expires=Thu, 28 Jan 2027 16:45:52 GMT; SameSite=None; Secure\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nlocation: /watch/48140495/1?wmode=7\u0026page-url=https%3A%2F%2Fwww.av4us.work%2Fkw%2FOk.ru%2520preteen\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A1nmhispdoya1ro1ej5uutvpoh5pcv%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2292%3Acn%3A1%3Adp%3A0%3Als%3A1615573683459%3Ahid%3A514639379%3Az%3A0%3Ai%3A20251224164551%3Aet%3A1766594752%3Ac%3A1%3Arn%3A389267535%3Arqn%3A1%3Au%3A1766594752987590720%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A16%2C28%2C11%2C1%2C21%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1766594750722%3Anp%3AV2luMzI%3D%3Afip%3A62236e752d3f7c5fd4f9360431331564-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1766594752%3At%3AOk.ru%20preteen%E5%8B%95%E7%94%BB%40AV4.us\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2842534404%29fip%281%29ti%281%29\u0026redirnss=1\r\nlast-modified: Wed, 24-Dec-2025 16:45:52 GMT\r\nexpires: Wed, 24-Dec-2025 16:45:52 GMT\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":665,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":328,"timings":{"blocked":141,"dns":1,"connect":45,"send":0,"wait":46,"receive":0,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"page.phic4.top/myda.php","fqdn":"page.phic4.top","domain":"phic4.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://css.jpg4.icu/tagjpa.php?noself=1\u0026url=av.diktok.top/tags/5","date":"2025-12-24T16:45:52.959Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /myda.php HTTP/1.1\r\nHost: page.phic4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://css.jpg4.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":515,"timings":{"blocked":514,"dns":1,"connect":224,"send":0,"wait":0,"receive":0,"ssl":226},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"page.phic4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mymediaing.my/sdk/p/?zid=9801","fqdn":"cdn.mymediaing.my","domain":"mymediaing.my","tld":"my"},"ip":{"addr":"104.21.71.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:51.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mymediaing.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 13:10:30 GMT","end":"Mon, 23 Mar 2026 14:09:10 GMT"},"fingerprint":{"sha1":"F5:AF:59:F3:C7:A7:98:58:AF:01:DA:E8:14:01:49:7E:03:72:7D:E4","sha256":"55:43:8E:96:BC:AE:9C:D0:01:4C:2F:6C:1C:B7:7E:54:4A:21:21:A7:FF:47:5A:1D:8E:87:C6:4A:60:D9:BA:AD"}}},"request":{"raw":"GET /sdk/p/?zid=9801 HTTP/1.1\r\nHost: cdn.mymediaing.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 16:45:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hweZf1MZHlMwkVLxm0OKSHZnRwwiJJaDWZVnUdrjaOKt4%2BdhPsND4QudnAww5goC5RDyFJKtgNT8uLq00oPhFkyLOHk7TbZxZsVEUaezJYsl\"}]}\r\nx-time: 1766594751\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b31924c4a3349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52894,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (52408)","md5":"8566397be15351053482d78416262ee1","sha1":"08599ac09f9c44be515df8baea52218c740e688c","sha256":"c3d6856842c1a218bfd7f4fae4f6578af528cf7592ff11589cb0e62a1c42961a","sha512":"2f17830c802aebe5cf1709915c1bb55f1481973912db9c063c60cf3ac26209e7172d25127ddd4f081971484d7598fbaeb52aecc0503cabff123e6585f9427441","ssdeep":"1536:nFiJtBRiqSJQUUBU1wpIbS0UboLxCSMzHUgNvFW:nDqSJQUUBU1wpIbS0UboLxCSMzHHe","tlshash":"a13392982fd0b94053dbab7b772fb4e5f4571c2f6a81484fe225bc20359071beaa5930","first_seen":"2025-12-24T16:46:25.225153Z","last_seen":"2025-12-24T16:46:25.225153Z","times_seen":1,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":40,"dns":21,"connect":1,"send":0,"wait":57,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"css.jpg4.icu/mycss/av4.css?33","fqdn":"css.jpg4.icu","domain":"jpg4.icu","tld":"icu"},"ip":{"addr":"172.67.183.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:51.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jpg4.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Nov 2025 15:32:54 GMT","end":"Thu, 26 Feb 2026 16:30:32 GMT"},"fingerprint":{"sha1":"DD:1F:06:D1:AD:C8:98:82:F6:76:1B:72:E5:E3:ED:49:53:4D:2E:C2","sha256":"5D:0D:E6:96:38:E2:AC:E2:A7:81:11:6D:6A:D8:8A:47:43:3D:50:7D:FE:2E:30:F8:62:AA:CC:2B:30:C7:DF:7F"}}},"request":{"raw":"GET /mycss/av4.css?33 HTTP/1.1\r\nHost: css.jpg4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 16:45:51 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\ncache-control: public, max-age=360000\r\nx-proxy-cache-192g-la: MISS\r\nxkey-192la: css.jpg4.icu/mycss/av4.css?33--css.jpg4.icu-css.jpg4.icu-myzone---no\r\nx-proxy-cache-tot-vt: HIT\r\nxkey-tot-vt: css.jpg4.icu/mycss/av4.css?33--css.jpg4.icu--my_zone\r\ncontent-encoding: br\r\nage: 37004\r\ncf-cache-status: HIT\r\netag: W/\"103e-62edbddabc000\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5d7B2P9Xf8c8m%2BZ%2BAiKHIzlkLKd3pSidLKF5ZZB61nHarCnMT06Wz0LKeKHQ%2BoSbvwE4QNFNaL%2Fcu1FD6BStxwZ4yvyxEI02GQw%3D\"}]}\r\ncf-ray: 9b31924c5f5b56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4158,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"e05d356eb3c9cb0366e5491f098c5b66","sha1":"9c82f99795bf55512147a0bd629e9775446291bf","sha256":"7c7a5f32e5c6a2e6e1f3e71112f35691714019685cc4c7d567e158cb32d1579c","sha512":"94dd9b84614bae349bcaa9dafea12a08589b4b899cf59c1228cf9bf70d657a715b49cfc18748b2d174dac63a6df076828bfa8da9b25c686d74bc742ddbe9283c","ssdeep":"96:Uq6qw2a3Alqiqq7rShmo3NxlIAFrQH+42+F2fFB:+eYXih/SMoHlIAFkHL2+F2fFB","tlshash":"ca813f729b550141b51b92946f62b79123369013d907cf79bafa217ccf891ec21e2f4e","first_seen":"2025-04-08T05:19:22.565686Z","last_seen":"2026-02-10T20:33:51.228745Z","times_seen":840,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.youtube.com/vi/3beLZhXgRnY/hq3.jpg","fqdn":"img.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.74.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:54.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"47:99:FB:97:02:C2:03:A6:B6:60:07:03:D3:B7:37:4B:99:D1:7F:1F","sha256":"01:72:D6:C3:FA:E5:7E:F5:EF:15:83:1F:EE:A5:BF:37:4C:78:02:B4:CD:BF:8D:EF:62:9F:53:B1:B3:1A:B6:EB"}}},"request":{"raw":"GET /vi/3beLZhXgRnY/hq3.jpg HTTP/1.1\r\nHost: img.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 6621\r\ndate: Wed, 24 Dec 2025 16:45:54 GMT\r\nexpires: Wed, 24 Dec 2025 18:45:54 GMT\r\ncache-control: public, max-age=7200\r\netag: \"1674426770\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6621,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3","md5":"7d77882ffac524ee2f03518f817b87c3","sha1":"3ab6fd6ae8c1be1cdc8288e4dd6b8cd531fc4298","sha256":"c1c101fca2dcbba5ecd8be7a3236cc863bdb2ba34ccf8ac28e105818c9c11ebb","sha512":"83a91581d8065112f3f264fe04307e45252e9669c8cc476d947962fc337683e1c405ce7d3ee7937863e1a247120089f2560769915e22e4868cb2943cc43f037c","ssdeep":"96:WPgMnjYhLgOSfkH/Aa1DHWrfisdInCYLH1pfLHeVA3ZwgWBS72WR6MWJLN9G7DyA:W4+cHVF62hpfR3ZxGBLfG7elul","tlshash":"e1d18daaaa734888c72417fb256b109623a7ac148bd5c3cb3351df2c66912f0db08812","first_seen":"2025-12-24T16:46:25.226529Z","last_seen":"2025-12-24T16:46:25.226529Z","times_seen":1,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":96,"dns":1,"connect":10,"send":0,"wait":19,"receive":1,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:51.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30399\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 11:02:00 GMT\r\nexpires: Sun, 20 Dec 2026 11:02:00 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 366231\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86927,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-19T12:35:45.501231Z","times_seen":122053,"resource_available":true,"data":null}},"time_used":370,"timings":{"blocked":162,"dns":0,"connect":21,"send":0,"wait":23,"receive":21,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"page.phic4.top/myda.php","fqdn":"page.phic4.top","domain":"phic4.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.av4us.work/kw/Ok.ru%20preteen","date":"2025-12-24T16:45:51.964Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /myda.php HTTP/1.1\r\nHost: page.phic4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.av4us.work/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":498,"timings":{"blocked":498,"dns":0,"connect":235,"send":0,"wait":0,"receive":0,"ssl":241},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"page.phic4.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}