{"report_id":"fa6febdd-f148-48d7-b009-3481e495adda","version":6,"status":"done","tags":[],"date":"2025-08-20T02:42:39Z","url":{"schema":"http","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.33","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"title":"女优 - TheAV"},"submit":{"url":{"schema":"http","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"172.67.203.33","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-24T02:42:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":9,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-20T02:42:27Z","timestamp":1755657747,"ip_dst":{"addr":"47.254.187.140","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.15","port":60070,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-08-20T02:42:27.516569+0000\",\"flow_id\":1850451059487893,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":60070,\"dest_ip\":\"47.254.187.140\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"5454ylylgh.oss-accelerate.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":904,\"bytes_toclient\":1634,\"start\":\"2025-08-20T02:42:27.472213+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-20T02:42:27Z","timestamp":1755657747,"ip_dst":{"addr":"47.79.65.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.15","port":38634,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-08-20T02:42:27.534012+0000\",\"flow_id\":559257188696419,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":38634,\"dest_ip\":\"47.79.65.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"768tup.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":937,\"bytes_toclient\":5986,\"start\":\"2025-08-20T02:42:26.917859+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-20T02:42:27Z","timestamp":1755657747,"ip_dst":{"addr":"47.254.186.184","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.15","port":36934,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-08-20T02:42:27.552122+0000\",\"flow_id\":1369910791094207,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":36934,\"dest_ip\":\"47.254.186.184\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"5845-xxpp.oss-accelerate.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2025-08-20T02:42:27.507839+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-20T02:42:27Z","timestamp":1755657747,"ip_dst":{"addr":"39.103.20.63","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"ip_src":{"addr":"172.18.0.15","port":56762,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-08-20T02:42:27.598161+0000\",\"flow_id\":168020027866440,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":56762,\"dest_ip\":\"39.103.20.63\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"txdytuchuang1.oss-cn-beijing.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2025-08-20T02:42:27.097608+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-20T02:42:27Z","timestamp":1755657747,"ip_dst":{"addr":"47.113.74.45","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"ip_src":{"addr":"172.18.0.15","port":59286,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-08-20T02:42:27.643736+0000\",\"flow_id\":1503591648177619,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":59286,\"dest_ip\":\"47.113.74.45\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"6464sgdgxb.oss-cn-shenzhen.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":789,\"bytes_toclient\":6999,\"start\":\"2025-08-20T02:42:27.110035+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-20T02:42:27Z","timestamp":1755657747,"ip_dst":{"addr":"47.79.64.191","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.15","port":51930,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-08-20T02:42:27.724016+0000\",\"flow_id\":1871945223331261,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":51930,\"dest_ip\":\"47.79.64.191\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"365t.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":899,\"bytes_toclient\":3148,\"start\":\"2025-08-20T02:42:27.155069+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-20T02:42:27Z","timestamp":1755657747,"ip_dst":{"addr":"47.254.186.178","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.15","port":59568,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-08-20T02:42:27.832071+0000\",\"flow_id\":2020705710636170,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":59568,\"dest_ip\":\"47.254.186.178\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"xpj46-xz.oss-accelerate.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6176,\"start\":\"2025-08-20T02:42:27.785546+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-20T02:42:27Z","timestamp":1755657747,"ip_dst":{"addr":"47.113.74.45","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"ip_src":{"addr":"172.18.0.15","port":52408,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-08-20T02:42:27.892208+0000\",\"flow_id\":2176250098713639,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":52408,\"dest_ip\":\"47.113.74.45\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"6464sgdgxb.oss-cn-shenzhen.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2025-08-20T02:42:27.361511+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-20T02:42:27Z","timestamp":1755657747,"ip_dst":{"addr":"47.79.64.191","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.15","port":52268,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-08-20T02:42:27.945848+0000\",\"flow_id\":1888008401007497,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":52268,\"dest_ip\":\"47.79.64.191\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"365t.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2025-08-20T02:42:27.406409+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"xpj46-xz.oss-accelerate.aliyuncs.com","ip":{"addr":"47.254.186.178","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"domain_registered":"2012-04-01","domain_rank":6319127,"first_seen":"2023-10-26T16:53:01Z","last_seen":"2025-08-13T08:02:54.972788Z","alert_count":0,"request_count":1,"received_data":386199,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"sp0.baidu.com","ip":{"addr":"103.235.46.102","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"1999-10-11","domain_rank":220073,"first_seen":"2014-12-05T23:12:12Z","last_seen":"2025-08-14T04:59:52.836192Z","alert_count":0,"request_count":1,"received_data":116,"sent_data":486,"comment":"","tags":null,"fingerprints":null},{"fqdn":"zz.bdstatic.com","ip":{"addr":"157.255.63.48","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"domain_registered":"2011-12-26","domain_rank":365334,"first_seen":"2017-01-30T07:45:48Z","last_seen":"2025-08-17T16:21:05.260753Z","alert_count":0,"request_count":1,"received_data":769,"sent_data":416,"comment":"","tags":null,"fingerprints":null},{"fqdn":"zgnzw.xyz","ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-24","domain_rank":417621,"first_seen":"2025-03-06T03:09:27.561462Z","last_seen":"2025-08-17T08:11:17.085666Z","alert_count":0,"request_count":6,"received_data":2170025,"sent_data":2765,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"theav.xyz","ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-07-20","domain_rank":192954,"first_seen":"2018-08-26T12:26:24Z","last_seen":"2025-08-19T17:54:56.928137Z","alert_count":0,"request_count":5,"received_data":1333984,"sent_data":2556,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"txdytuchuang1.oss-cn-beijing.aliyuncs.com","ip":{"addr":"39.103.20.63","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"domain_registered":"2012-04-01","domain_rank":6140591,"first_seen":"2024-12-01T01:06:49.447195Z","last_seen":"2025-08-13T08:02:54.669729Z","alert_count":0,"request_count":1,"received_data":340274,"sent_data":453,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"yj777111.img5811783201.com","ip":{"addr":"156.231.115.2","port":8686,"asn":984,"as":"OWS","country":"Japan","country_code":"JP"},"domain_registered":"2025-05-17","domain_rank":0,"first_seen":"2025-07-07T02:29:58.458671Z","last_seen":"2025-08-13T08:02:54.183781Z","alert_count":0,"request_count":1,"received_data":348309,"sent_data":450,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"5845-xxpp.oss-accelerate.aliyuncs.com","ip":{"addr":"47.254.186.184","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"domain_registered":"2012-04-01","domain_rank":6283351,"first_seen":"2023-11-14T16:55:03Z","last_seen":"2025-08-13T08:02:54.166451Z","alert_count":0,"request_count":1,"received_data":324850,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"6464sgdgxb.oss-cn-shenzhen.aliyuncs.com","ip":{"addr":"47.113.74.45","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2024-12-06T14:43:53.810306Z","last_seen":"2025-08-13T08:02:54.882915Z","alert_count":0,"request_count":1,"received_data":332182,"sent_data":450,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"www.helloimg.com","ip":{"addr":"43.159.98.20","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2020-04-15","domain_rank":6072025,"first_seen":"2020-05-04T16:35:09Z","last_seen":"2025-08-15T10:00:24.174565Z","alert_count":0,"request_count":2,"received_data":210849,"sent_data":900,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"5454ylylgh.oss-accelerate.aliyuncs.com","ip":{"addr":"47.254.187.140","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"domain_registered":"2012-04-01","domain_rank":6988996,"first_seen":"2024-07-25T07:33:23Z","last_seen":"2025-08-13T08:02:55.141805Z","alert_count":0,"request_count":1,"received_data":524315,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"365t.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.191","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":5041190,"first_seen":"2025-07-17T06:33:04.342854Z","last_seen":"2025-08-15T10:00:23.670894Z","alert_count":0,"request_count":1,"received_data":266922,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"xm777111.img8822437445.com","ip":{"addr":"156.231.115.2","port":8686,"asn":984,"as":"OWS","country":"Japan","country_code":"JP"},"domain_registered":"2025-05-17","domain_rank":2219460,"first_seen":"2025-07-07T02:29:58.468493Z","last_seen":"2025-08-13T08:02:54.677046Z","alert_count":0,"request_count":1,"received_data":322321,"sent_data":453,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"768tup.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.65.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":4111567,"first_seen":"2025-06-22T10:55:18.203925Z","last_seen":"2025-08-13T08:02:55.133412Z","alert_count":0,"request_count":1,"received_data":202276,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-20T02:42:27Z","timestamp":1755657747,"ip_dst":{"addr":"47.254.187.140","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.15","port":60070,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-08-20T02:42:27.516569+0000\",\"flow_id\":1850451059487893,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":60070,\"dest_ip\":\"47.254.187.140\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"5454ylylgh.oss-accelerate.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":904,\"bytes_toclient\":1634,\"start\":\"2025-08-20T02:42:27.472213+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-20T02:42:27Z","timestamp":1755657747,"ip_dst":{"addr":"47.79.65.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.15","port":38634,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-08-20T02:42:27.534012+0000\",\"flow_id\":559257188696419,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":38634,\"dest_ip\":\"47.79.65.168\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"768tup.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":937,\"bytes_toclient\":5986,\"start\":\"2025-08-20T02:42:26.917859+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-20T02:42:27Z","timestamp":1755657747,"ip_dst":{"addr":"47.254.186.184","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.15","port":36934,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-08-20T02:42:27.552122+0000\",\"flow_id\":1369910791094207,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":36934,\"dest_ip\":\"47.254.186.184\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"5845-xxpp.oss-accelerate.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2025-08-20T02:42:27.507839+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-20T02:42:27Z","timestamp":1755657747,"ip_dst":{"addr":"39.103.20.63","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"ip_src":{"addr":"172.18.0.15","port":56762,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-08-20T02:42:27.598161+0000\",\"flow_id\":168020027866440,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":56762,\"dest_ip\":\"39.103.20.63\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"txdytuchuang1.oss-cn-beijing.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2025-08-20T02:42:27.097608+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-20T02:42:27Z","timestamp":1755657747,"ip_dst":{"addr":"47.113.74.45","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"ip_src":{"addr":"172.18.0.15","port":59286,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-08-20T02:42:27.643736+0000\",\"flow_id\":1503591648177619,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":59286,\"dest_ip\":\"47.113.74.45\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"6464sgdgxb.oss-cn-shenzhen.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":789,\"bytes_toclient\":6999,\"start\":\"2025-08-20T02:42:27.110035+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-20T02:42:27Z","timestamp":1755657747,"ip_dst":{"addr":"47.79.64.191","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.15","port":51930,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-08-20T02:42:27.724016+0000\",\"flow_id\":1871945223331261,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":51930,\"dest_ip\":\"47.79.64.191\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"365t.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":899,\"bytes_toclient\":3148,\"start\":\"2025-08-20T02:42:27.155069+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-20T02:42:27Z","timestamp":1755657747,"ip_dst":{"addr":"47.254.186.178","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.15","port":59568,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-08-20T02:42:27.832071+0000\",\"flow_id\":2020705710636170,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":59568,\"dest_ip\":\"47.254.186.178\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"xpj46-xz.oss-accelerate.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6176,\"start\":\"2025-08-20T02:42:27.785546+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-20T02:42:27Z","timestamp":1755657747,"ip_dst":{"addr":"47.113.74.45","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"ip_src":{"addr":"172.18.0.15","port":52408,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-08-20T02:42:27.892208+0000\",\"flow_id\":2176250098713639,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":52408,\"dest_ip\":\"47.113.74.45\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"6464sgdgxb.oss-cn-shenzhen.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2025-08-20T02:42:27.361511+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-20T02:42:27Z","timestamp":1755657747,"ip_dst":{"addr":"47.79.64.191","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.15","port":52268,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-08-20T02:42:27.945848+0000\",\"flow_id\":1888008401007497,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":52268,\"dest_ip\":\"47.79.64.191\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"365t.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2025-08-20T02:42:27.406409+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb5f61b19d4048cce45e54e21ce8a97c","sha1":"1b720d543943d087697f21238c962bd12f9dcfd8","sha256":"ce5abaf424e2f1915a1727ae3f0284becd42932efae4ea19f680a88b3baa3bfd","sha512":"d058179ab53a7132a272639308ebdc7318074d5ef91158481c466d5f94d4208f86b8646494f09fd6d6b1ed87a043791aaf9d388548463d2bf7c54d259f047280","ssdeep":"","tlshash":"c090022c81c1959c74416430b149171271040c11c791b38082659054c662a9819aa121","size":55,"data":"","first_seen":"2024-07-16T19:44:36Z","last_seen":"2026-02-11T02:12:47.374956Z","times_seen":558,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1be0b5728611174efb3a0c1df2b53efb","sha1":"cfafd603e73c899f486a4186badf3af1866e36f9","sha256":"27a1f93ba9eec143707b8e7fc5fd31cbfb2712f6b805080bfb177ba040563a98","sha512":"1bed335ae0815d4489cb2fb42d7ae02dedc4b2e1a87aa8b2e3ce25fa5945c04323471e0187f9ac7a8d410109113ec0af53181488c45cd99a80926f5ca83b8d4d","ssdeep":"","tlshash":"35011013b4cc8836a38339425e6fde07320e48e6b9204f05d3e8884e1945336eea509e","size":739,"data":"","first_seen":"2025-08-20T02:42:47.95058Z","last_seen":"2025-08-21T05:08:47.580822Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c1eacff3c6f81a27da40593eaf0cfaae","sha1":"cea3bbe6434555942b777cc5342e9cfcbec6f14e","sha256":"c334828fdcbfeb2a3ef40b7d6acb132f9fc269136928dc8885865c944ba921c5","sha512":"54106a50b2668b34b35590c202b9145d4ebe738298517820d261f51d0d5a8df723ce4e82ce33ada79d438b6b3db9ff043b1d9994e05cc658c0e5979ce07c1ffd","ssdeep":"","tlshash":"9cd0239188ccb1720de230b4642bfb2790451d7dc101c988c33c882571172740b194bc","size":205,"data":"","first_seen":"2023-05-22T23:47:04Z","last_seen":"2026-02-11T02:12:47.404008Z","times_seen":561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"225578dd008fdb4f91e48134d9295a15","sha1":"b335a8c3e5567f45a7e129c95331d6aa07a7d189","sha256":"23f4f8697ebd03f522696fc7530d04be1f664d956f8c108470e3d4f6852de660","sha512":"e9d0d99af8e63816edad0b9ccd550262070d47117a85211fbb11e0404d388c815f11b1e676d632f2cac14e05442d5d77ca35704d70aadad3129bfe2ab2e0bbbb","ssdeep":"","tlshash":"a911c02220ed6d774d0bb473292d7ea2e06e4ed9e0418799a5f9cc024aea6705f844de","size":1093,"data":"","first_seen":"2025-04-13T06:37:08.572266Z","last_seen":"2026-02-11T02:12:47.412547Z","times_seen":1620,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6e9c78e676f606d9d60c776055b92d72","sha1":"0c3d7427d52a1a19019d8085199a2069a8ac778f","sha256":"22fe6aa46a83662966de268bb2a3bd842b83ba101daa71fa62339e8538fa5f4c","sha512":"8703a55932b2e3de46730d539dc3d0cb929b30808a5203d05ac982fa95352716bb90857272954e9c8a445e3809e4051cf2ac078ab8ca39fc700ba3cd2c3e4c23","ssdeep":"","tlshash":"c6c02ba318ce90758e83385000243e62700e38f48098c889f1bcc821e5223305f19c5c","size":150,"data":"","first_seen":"2023-04-18T01:32:18Z","last_seen":"2026-02-11T02:12:47.373032Z","times_seen":724,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"582f710e116c714d83e9c110b67b1e0f","sha1":"9784d59acc4432b403da759bc37868f8ed132f4f","sha256":"41561dfca19489f665602808e8b7c83fa0fd0cc59e59fe6dd5a4f2ba177b029e","sha512":"623f053211dc9cae97a43e0faae9bf5d76de924dfa14f5413feb6739cf2082251822efca9adaff52ad1ed21e5de6c80b4b96d18ca669d49181ffb1912a132b3a","ssdeep":"","tlshash":"6ac02bb314cdd4b54d83385540253e52700e38e4a450c889e1fcd82495323302b1985e","size":146,"data":"","first_seen":"2023-04-18T01:32:18Z","last_seen":"2026-02-11T02:12:47.443548Z","times_seen":794,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8afc83d72e4cd440cba35f77b915b9db","sha1":"062c91891a4f34cfcd6ded4279f46bd8f357c477","sha256":"f89213c596b7a6a089ab7c8c06a5a6263a6ad0c15c7bbc7c1789a9aef46aef23","sha512":"2f0d6008e346fe2637f88faaf7e8877b028872da02f8202f864a6e67f087aa8e77bdb80b2e84c0be3ae018e92d18a7dce5eaabca589fded1795da6f58cd58000","ssdeep":"","tlshash":"e911ad05a848cc3c66f5133e4e4fb357a3215e66613bae56e8b0d08eb9a090796a14e3","size":1083,"data":"","first_seen":"2024-07-03T01:45:41Z","last_seen":"2026-02-11T02:12:47.376059Z","times_seen":2439,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cee34dc5e3d45e3e9407089a01a2ea80","sha1":"d0116f70de905e00a00e6df190acae7587d01137","sha256":"863fc5d90067faf11c1e0e1ddb7fd3de653d9a9bae2c28ba65a9de1f3296f6b9","sha512":"ed11c0d23c66b9f8577f585f6993795e7a80a5187eddb983f99faa4ff54b412a5cb025e1e6269331f59652aecae0824dacac6715d38cc2feca2d05fec4a70369","ssdeep":"","tlshash":"e3f0556200aae1f28cbaa16300af7bb2e1550cb3c0a09585f938cc684485d7043184ae","size":455,"data":"","first_seen":"2023-05-05T00:33:53Z","last_seen":"2025-12-05T09:37:09.334536Z","times_seen":416,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3791e8dc1524c21d2cb1bed4ccae14ee","sha1":"c17fdaf389450c389eb2009ae8663b04bb2aa25b","sha256":"d127b272f2b912de67581e2fdf14d1c679a084c5829fee536f577c3d4e49517f","sha512":"299e9a51dba66b7fb084fd4404031a6ab4c029f01ead527e774037a450269b812ef58025b10232e88b1ec7f889d19676f3a262e76e64b1d06e59ef636deba9c2","ssdeep":"","tlshash":"f4f0dc18f2c4254800165bb6e4ffa214b1af282abe181531a03d0082dd0960da223dda","size":444,"data":"","first_seen":"2024-06-28T19:40:51Z","last_seen":"2026-02-11T02:12:47.380949Z","times_seen":772,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d66b2a07ae7d0fcb76b2fcda29f72589","sha1":"c31d6299c5a8a13ac46c1f5e0fd8df5c525a67cb","sha256":"b4baa72bb6d3bbf9fbe70cfbc2135d74aea0065a750430937ef698e2b128b355","sha512":"83a080bb23700ad4257191a06cf67506921ee33d107d9768b3813fca91efd06e9790c79b9ed6008f4a4cb32dabbb5857c3dcd929c84744a4e567aace2320cae8","ssdeep":"","tlshash":"5421512160ddae361e4360230d1bfe73e02e0cedf3689f95a6b8cc4569c02b18b480ce","size":1241,"data":"","first_seen":"2023-07-06T13:04:16Z","last_seen":"2026-02-11T02:12:47.429576Z","times_seen":2548,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e65303bd86a83bd01e29cb88fe503576","sha1":"7c23b4f7eae1eef9743e63862ffe594162980c22","sha256":"0c335437a25436ccf24fa7f71072848b8e70b983d9c365ef6b4a4415a3c8de00","sha512":"065f5473907a2abbb49aab89892c22b53e5c52179578c2ffa799aae21d50ac30c8cd71e3351b90dffbb8350509ba0f85270c807852cc0b582c7525cadb637de5","ssdeep":"192:rfsuGYklWclcd6TJA1wT0WCuoReoWzwcl9uTf7WU8EKSlSISmb:rRxcw2+wIEwcOTKSlSISo","tlshash":"40d10f6758def2b9cd07a80780083a75e44e29fbc024b5e9f578cd14d6a87b04f0e86e","size":6512,"data":"","first_seen":"2025-08-20T01:24:37.898225Z","last_seen":"2025-08-23T06:48:45.970596Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1655aeb19b92b9f9fcd54bb0fa8e80a0","sha1":"8ef8aef76328d58b2ece4a2bfe59552f8549971d","sha256":"95aad6011f5cbbaecc123cb45dcb3854491e8f70f070bc87a90bea8549b2fd49","sha512":"968907705b75deca16b4c6fa23eb678fb635b0538a79c1409b06c3e9e23c5b2490a5338b0461453a68fe199e68ce55c1a19ba38a852ed76e8ed888998158e69e","ssdeep":"","tlshash":"63d023b0ffcd1a3e0308c0349d4fe3261a8c242648713442ac184ccc4ccb9444331837","size":223,"data":"","first_seen":"2024-06-28T19:40:51Z","last_seen":"2026-02-11T02:12:47.398191Z","times_seen":569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/theav/js/b.theav.js?5149e619e4e68a955e454d","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"46f659c4cf211e1d13ca4f780c810fba","sha1":"4536ed8bdef4592a859910c5feb951aa16b4108d","sha256":"64d38ee07c76003ed0c4ee5174d234baa04096fb7d18b7178761d240ec9732cf","sha512":"8ba070ff15cffa074e688c9b5863d9b011c18145773807e2c0794201461b0afa5df33f22184f38b16c6bbd6ac80a59653f2ea23a8467309c5af3ce64c3d6327c","ssdeep":"6144:Me49ZDSnQkcxQkc2yDsWORpvjUpqU68VVBBAMMMOka/sBUEXaCgxYvqhku:L4a8EkaukvBUEX0","tlshash":"c494078df691716207ab607580af300eb33b1d65a90e8060f939c5e47eb9a8c5277f7d","size":421443,"data":"","first_seen":"2025-08-20T01:24:37.794918Z","last_seen":"2025-08-23T06:48:45.939112Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"51ce64bb31e05d86114737d0778d62f4","sha1":"32bbc651f3af405cb2462f7cdfc74dd4b53239b4","sha256":"c32d5d0ec3be03e64277b52631f0a008f22d923dceacbf4a1ef563ccc959dfae","sha512":"801af9a2a17b5705f886c6c80b58a4257c992ac625dcef6c94aca3739a75a04ced62f56eef4c0a48b7ea41af9c3967a432fbcb8948e71e47f9ba884266ae92eb","ssdeep":"","tlshash":"5f01202ef3c46315161aa254a06b9024f7b67e222e21917bf1f850d78e67507c91bd3e","size":779,"data":"","first_seen":"2025-08-20T01:24:37.861169Z","last_seen":"2025-09-06T22:01:21.278632Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d2bfe5c49c609ded820fc4472491fcc7","sha1":"df65acf58893062c3e1257f183a34965d450e15b","sha256":"6193f2d6486058305c4683809716bc73eb932464ad60d0450ec9b7cf8fe38447","sha512":"de131df1221fdaac950d788fe1ad887a880fd97a5b371d0ebb2dec3f9e508d13ac10688100f7a2a871b9240f204ef28c2eff2ab4b905487bf2f42617cca1889b","ssdeep":"","tlshash":"4ef0e19ab4cdec373bd32172eceff20b35112e53785061146518c0e3dd48c03a674aa8","size":577,"data":"","first_seen":"2025-08-20T02:42:47.970071Z","last_seen":"2025-08-21T05:08:47.593608Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"41b53ab07d72769de050b3e8e08410c8","sha1":"71bf82bee1c2c1e18e40f51ef75636182f34c8db","sha256":"cae4ca52e73ea44e80f93a62209943115cf7125426e337617e9fbc12908273c8","sha512":"2acbc6db00e05c5184672a32e885fc9cb7e16dff93bf916cca737757591c79aae702d48047522b668f469e749e958581c75c15b48c1200ab4bbdea5affa82be7","ssdeep":"","tlshash":"34f0974d2e40ce39e5ed228dafe3c528f01531b47f19887616eacc669824ec6682860e","size":507,"data":"","first_seen":"2025-08-20T02:42:47.972847Z","last_seen":"2025-08-20T02:42:47.972847Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/theav/js/t.theav.js?002b4763782622cc4fd","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3375399f22ddb2391c16b6a4a0dcc99e","sha1":"e15829466ca2bfecf841a6ab81669d1f052f328e","sha256":"c6012c88809c6700dfacd68d0156c0e9860fcea2185927ff3809abc83370e708","sha512":"0fabb9118798bc768f1b0ed562ec67839ba504d14ece245571e3f9c4891baa16ba7c424b56dd5470d46602958fd67765f81a2800ec4b701d1510c0ef555398ac","ssdeep":"12288:BVN4M4X2TuVgtETnSkc174FaFOFyEJz47RfY/Uxz:BMMf4gtsVFyEJz47RfY/Ut","tlshash":"73052d8ab181b0710ad760b5503f1502f13b78b9784e849cfab6e8da5c7ca89507bf7d","size":807335,"data":"","first_seen":"2025-08-20T02:42:47.93249Z","last_seen":"2025-08-20T02:42:47.93249Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"de09ee119aedfd9c485857c1948c58bb","sha1":"92463a9997b214b686a50160c24e9b257306e706","sha256":"5dd91b9fef518b01e839414a244941fa42b032b589d34553dae33f9e50aa8c68","sha512":"3f08731b086e5ca3e0bef6f0334a41f3eebaaba125150b4ea97a03d877f03f7ca91355a4b72681c40c6bab0d9cc2cb67a31aea9ce721ba9d500138b492c214c6","ssdeep":"","tlshash":"ecc01257a0dde1ba8d823826617a2a71e10558e9c450d498d23c6c65a51b631871957c","size":188,"data":"","first_seen":"2023-05-05T00:33:53Z","last_seen":"2026-02-11T02:12:47.391421Z","times_seen":582,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e4a0b5b1d9ce4bb83998690ee14a11b","sha1":"92dec0a508bdcba4c60a2e3d9d1e7a5066dc28d3","sha256":"9865a71683e8593a99fb5f529f06091d1c2d5a71e8b289c99e02d96e624fc2ae","sha512":"d96ef191354ee14c9ecedc3386e37e49a4e333eae5eb41dabd86e771ae89e539bf9ed061d51a8319c5f0deee810b2604168a0d71fc234df22d53f099f419aeee","ssdeep":"","tlshash":"49e061741625a3788458705f813ab7d42c575166f1d1c2d8957dcc2de424dd985254dc","size":383,"data":"","first_seen":"2025-08-20T02:42:47.975251Z","last_seen":"2025-08-20T02:42:47.975251Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2be12121bd96809a7cee889006e1e8ba","sha1":"ffc5061614ce93093c4a3dc60a646a2c690ede41","sha256":"e2fddb6a4f21ad9fe345d605456a26e6237e0886cadae833fc105886d257ba65","sha512":"c49bd71e142a7d3bd9fc877899509df9a82fde8e82751213a2cd16b1e62f7adf402e9266f98aabf21152cc4dd39eacec7b66c997d529ab32f5337242aa3f4d73","ssdeep":"","tlshash":"a4d0a7db04ffe0a18ed3b07e04535555f04a08ac85d4e89090289cb990d2520478a19d","size":227,"data":"","first_seen":"2023-05-22T23:47:04Z","last_seen":"2025-09-02T05:08:58.79241Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f67c27347d821e4f626848d678458d16","sha1":"0cc4e3d0b0a4bc031160c4869f344f1e0e21a1e7","sha256":"92e8aa0fa734ee4dd5814c7e4125743f9d2d664cc211b49f97639f563273322b","sha512":"030bedd44b91bdc1300e3ee9ae0708fea7f3e944ae01184e3429d8401d0ac8a0bee0d4e7933ece51d3e643036c887051147b13aa3116d7cc8510624ea7a03d4a","ssdeep":"","tlshash":"1c01dcc0b6ac5866730a00bc5e0bf007c4a06fe87c7ca519f6f06cc3a89b14693d98b2","size":747,"data":"","first_seen":"2025-04-13T06:37:08.571365Z","last_seen":"2025-12-05T09:37:09.366874Z","times_seen":1060,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ac05c246fbc5eeef9dd2f2da07aee09b","sha1":"c0876d6d3f93f73bfff8e2820946d93ae3529756","sha256":"8b9542a1f96f768c54e3a237b95338c3efd1605fd512fe9f63aab3bb0d3e9e62","sha512":"1d74a262abfdcde74f7195d35d78d91a055edb642398d70669659e289ddbfbc3398bd095f03c809db9ff87f01be58dac6154f1e982378cf818221514c0c656f7","ssdeep":"","tlshash":"54c02b4a003743405108b2f9c4cc320dc82196a3ecd4e4e3c86c040952050f8a174138","size":139,"data":"","first_seen":"2025-08-03T09:54:15.942324Z","last_seen":"2025-08-20T02:42:47.978043Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"61cab5c25bba03a63c48195919de1aed","sha1":"d2f9e6f0c8f012c6813e0713ecb494e05216a376","sha256":"aafe905e9ac9c817806293e91172f1b7de59121a5f21f8b5fbc02e08b6926bbb","sha512":"23261d38c0c7c0317462c5547e9f3c06eed32bbb689cdeedfef5f8d5971724eeeb9d5d2b738f11df0e19aa551640b4473091bcfbd4cb4da8625a88b77108276e","ssdeep":"","tlshash":"e6d02bd218c9caaa8f41a503b22b4738f04908f0a0a0b044d33e8c944ed2262070d7be","size":276,"data":"","first_seen":"2024-05-26T04:26:30Z","last_seen":"2025-12-05T09:37:09.381401Z","times_seen":411,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"21ad6a5e027895d7fef5bee4de0a6c02","sha1":"1997f8ca0f217c1001a42318dc5976a0d5a56469","sha256":"6e97ed48cf9a0f9bf4e5199bc5546e24c1067a10e7a582b886143be40f479bb5","sha512":"07595b4d84994a7775a6c79f573984ee4a2eac2ce44e387bf8d0d6a56b17d82782b21c486cbe50760fbb39d9d59ee7b08e0ac221cc51a1d123a048ba7444a8e7","ssdeep":"","tlshash":"c890028520e9656146e32164613b5a46615904f11484884095589c56286b03097694bc","size":54,"data":"","first_seen":"2023-04-11T22:34:44Z","last_seen":"2026-04-11T12:26:50.889003Z","times_seen":3884,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7e7bd658f5c4142600653679ac87b1ae","sha1":"6202d78829983b7abd2be0cf345b1bd0d994e650","sha256":"4f1f462cbc31e48db1cc0c93cb742d60adf82dc8cfd5bede1fffa577a39d72a9","sha512":"5bfffd99ad9c28c659b939a4b4256dc062c35e6e2eff643297cb9d4da6f274e7ef70ec4074aabde97c7c53ce1bedd14b58e2d2e4be7ca24b38d8f93d542570d6","ssdeep":"","tlshash":"2fb09b17645d5144425464f5a11d5348c512d35b4fe1e451895058b155211d5645184c","size":125,"data":"","first_seen":"2025-08-20T02:42:47.982012Z","last_seen":"2025-08-20T02:42:47.982012Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz.bdstatic.com/linksubmit/push.js","fqdn":"zz.bdstatic.com","domain":"bdstatic.com","tld":"com"},"ip":{"addr":"157.255.63.48","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9fc52ab67f035b8baf5d558714cc94d","sha1":"37062a6fb1ef410d496137d44275738ae743c747","sha256":"c31f2003f1c93ac1e34b09f376d97a65da6e110bf451cf1e0e50a7946c5e7212","sha512":"ebb0415852fbb5b964094e2e55a28b90f701dff1977c8b98c6f24d65d09067dc0c417d01492ca28a4be6747816d7c0bfac87b73a33725aee047a5d2f7ab83182","ssdeep":"","tlshash":"11e0cde86054c01c0dcb107135bb324ce7771d675a645545c04d9445396cb1f8247fe9","size":308,"data":"","first_seen":"2023-03-07T01:18:58Z","last_seen":"2026-04-11T13:22:26.653729Z","times_seen":19223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bb28dcbc28cd9d4c3d91dfc0ac66e0c5","sha1":"2587efd4151f7bc3962c1dd5f9fc695f4fb72311","sha256":"fe6943415ed74159de2ae82509ae5ba036de4a16a4b7b4f4f9c78c836eea1fb8","sha512":"d693ddce3de61fdf22e0682ac8616afe45dc0868bd38829b39adbfb5dbecc856d8ccf4207805c10aae356657582a528dbc72d59743046124c91f1f98f73b4147","ssdeep":"","tlshash":"2b3138ae94eef97ace47a50204047270f00b38aed890bdf1703d8c7ad475e619b1e0ad","size":1492,"data":"","first_seen":"2023-05-09T12:43:45Z","last_seen":"2025-12-05T09:37:09.319134Z","times_seen":665,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"401e33d3771f11b334da3e53b4dd3d9c","sha1":"9385fe957bebff1d8d4fcb1c75d9cbb603e9b303","sha256":"d9c36a7bb6af4a2f626b7681470f77e59d325f9c488f8e6e392f192c391852e0","sha512":"15847c541704e4fe5a16739f341e3881bf49311c9bc7dec2cdb018b120c6cd05fb7c651661211efb2f28e54e6b18cf7e3ed7516aedf7f7681990b0fe7d742d31","ssdeep":"","tlshash":"7fc02b7210eca4718d42381100153deaf00f34f844414888c0a8cc724073db0075c0fc","size":147,"data":"","first_seen":"2023-05-05T00:33:54Z","last_seen":"2026-02-11T02:12:47.378795Z","times_seen":581,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d1c42917ae979fd1903bd037c5135f1e","sha1":"eb0e67d016e3f4ebf3c9d87c322fb663b338013d","sha256":"11a79fb29f782824ca0e6f9b81e7eeb8c9ed589c6682ce0d14d1cf5b769b9b7a","sha512":"cbeaa494665808579c5d51799d677152de7d8bcdac41e9eb6347795f2cb0d87ca9497aa585a9a709f3165582a5b137e5707ba9ff75ce6b42edb69418d57abef8","ssdeep":"","tlshash":"dee0611e298b863c4cd47d4160bdc57d30f434945973d056b21dc86cc42efc50c115ed","size":403,"data":"","first_seen":"2024-06-28T19:40:52Z","last_seen":"2026-01-04T03:12:21.248793Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a0fd9f651b93379675accebb98857473","sha1":"78e37337c2f490303733ad3152fa8735dfbdf36c","sha256":"47959577a9bf45217bfabb7ba5625ff0795e19f563a13c308f7bb555909ab449","sha512":"1937832ba48ea4eb413aa3483f31e6b786c99c5d465305bbe20d92e115df1cd6831d395d5cd812f076b2bd84ac37633cf5a392edfeac71ec206042019b054747","ssdeep":"","tlshash":"03c08ca324ce90b5898238a400253d7a600e38b4844488c9d1ad886090627301ba995c","size":154,"data":"","first_seen":"2023-04-18T01:32:18Z","last_seen":"2026-02-11T02:12:47.450332Z","times_seen":794,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"404330f73151061225aef502942c890e","sha1":"794194127984d3e00f4fe64ac3f896f9b1657c15","sha256":"641944f06929c0d9f7539986fa96a073f15ec46ce65033d81fe3223ad0bb5e51","sha512":"3923858d218c472f3cc8ce89d5ed0663797b489c6d35ac4136fd3c74d915eea325a36cb6a5088d53f12e88e506ca18942120b8e6292018eec49ea9ec4b555a1d","ssdeep":"","tlshash":"0fc0807714cd5875594275d401543e5bf00a28d480009cdd91fddd25c5652301b1edbc","size":174,"data":"","first_seen":"2023-05-05T00:33:53Z","last_seen":"2026-02-11T02:12:47.424245Z","times_seen":583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e38d8dbe162ec560927b553bb78f139c","sha1":"0b79d9b36c15d02931b9cb73978bd9ba6c4e050a","sha256":"773796e797fcf022639c5f3c876d344c4d518a3fc8ea164975929c232c7ab10b","sha512":"1e65843f532abd18b0442133cf7a922ded73ccfc53f60f6318a1f81f638a48a099dcb41088787d4e5acb60cca389fe92ecdfa60b49f3707d9af0a46dcfb30a79","ssdeep":"","tlshash":"73a02203f28838b20ccf0f832020c3cef030a3002c28ab3303380aa08320aa200e3000","size":78,"data":"","first_seen":"2024-06-28T15:30:14Z","last_seen":"2026-01-30T03:15:49.492204Z","times_seen":1896,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"sp0.baidu.com/9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://theav.xyz/jav/actress/list","fqdn":"sp0.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"103.235.46.102","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theav.xyz/jav/actress/list","date":"2025-08-20T02:42:29.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://theav.xyz/jav/actress/list HTTP/1.1\r\nHost: sp0.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theav.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 0\r\nContent-Type: text/plain; charset=utf-8\r\nDate: Wed, 20 Aug 2025 02:42:30 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-11T12:55:49.320816Z","times_seen":13621212,"resource_available":true,"data":null}},"time_used":2405,"timings":{"blocked":1061,"dns":417,"connect":209,"send":0,"wait":283,"receive":0,"ssl":431},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/app/user/info?reactive=true","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://theav.xyz/jav/actress/list","date":"2025-08-20T02:42:25.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theav.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Jul 2025 05:13:01 GMT","end":"Thu, 09 Oct 2025 06:11:35 GMT"},"fingerprint":{"sha1":"8C:BD:89:55:EB:14:49:0F:BA:D3:0B:CA:14:EE:0B:3E:42:91:9D:1E","sha256":"B4:DC:37:DE:B3:0C:3A:37:33:14:B3:F6:79:6B:CD:01:53:ED:F1:C3:38:72:A7:9F:D9:F5:C4:D3:D7:69:21:64"}}},"request":{"raw":"GET /app/user/info?reactive=true HTTP/1.1\r\nHost: theav.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://theav.xyz/jav/actress/list\r\nwebhash: _c1ec981cdb3\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 20 Aug 2025 02:42:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I5KIfuYZumlPUV6dq7AvhTGB%2Bi1EGUiAzk3vRJS9t7aYjujOtHV4GvLGyRMR5kJuG438sGM%2FfLCajMdNR3THYCw%2FOy97aHc%3D\"}]}\r\nset-cookie: tguest=guest54b3cd7dde48b40cedddfde6cbd5c7268a4f1892; Path=/\r\nghash: _c1ec981cdb3\r\nt-ray: ws14\r\nserver: cloudflare\r\naccess-control-allow-credentials: True\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization,token,app-lang,uuid,version\r\naccess-control-allow-methods: POST, GET, OPTIONS, GET,HEAD,OPTIONS\r\nx-ray: unkown-unkown\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: public, max-age=31536000, stale-if-error=1209600\r\ncf-cache-status: DYNAMIC\r\netag: W/\"a1a1f38d4195cb56d61ac537a02e2121f61793dd\"\r\ncf-ray: 971e898e4e261e42-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":208,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"cf3fe3671f7450bfcbff17cd971d1ef0","sha1":"a1a1f38d4195cb56d61ac537a02e2121f61793dd","sha256":"addb0782d9dd5ccd0ab1b0c68a3946bc60e39c568e37eb282f7d619972efe392","sha512":"efbe796f91fb0955cea05b2391ec7e41390191317020535e7f079370f19fb4563f8a2d3fbfdd0fbb0a5e58e8e8adaa31ae909a178c58d05dcd407dd133d05827","ssdeep":"","tlshash":"73d022121d168237a8c982786dea839163bc7b4ae948c20c8fc8290c020caf10982b32","first_seen":"2025-08-20T02:42:47.924168Z","last_seen":"2025-08-20T02:42:47.924168Z","times_seen":1,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"768tup.oss-cn-hongkong.aliyuncs.com/ggt/768-1960x80.gif","fqdn":"768tup.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.168","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theav.xyz/jav/actress/list","date":"2025-08-20T02:42:26.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:02:09 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"B2:57:E9:B4:DF:20:94:4D:E2:85:59:20:BE:D8:5D:70:63:65:02:7A","sha256":"05:17:EA:27:D0:4C:D8:5D:6B:2C:A8:32:D5:A2:DD:E4:47:EC:4D:DC:E7:7B:33:67:F5:F7:4F:C1:73:01:01:19"}}},"request":{"raw":"GET /ggt/768-1960x80.gif HTTP/1.1\r\nHost: 768tup.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theav.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 20 Aug 2025 02:42:27 GMT\r\nContent-Type: image/gif\r\nContent-Length: 201726\r\nConnection: keep-alive\r\nx-oss-request-id: 68A53613FC567C3334D1CA15\r\nAccept-Ranges: bytes\r\nETag: \"C6C54A7EE15C07BE38E3613F3CE8783D\"\r\nLast-Modified: Sat, 21 Jun 2025 03:22:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7084945504932346765\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: xsVKfuFcB74442E/POh4PQ==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":201726,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"c6c54a7ee15c07be38e3613f3ce8783d","sha1":"61c4b74dc3caa6a585ce8bcc4ad753609f124a94","sha256":"c8c41978318135faaf588755a3899a3400f071d817b2d4f59c2f9eb6b4fe16cd","sha512":"da9245df50275aec0fa2fa87d895733caff96051e3095f8bbbb2ab69e3d59696ca342fbfb18d4e63cfe52b88025c58a8281e2281c8eed03c0db09328802db8d0","ssdeep":"6144:SLsefhvklJBBYmGgMHNaDrAXjj6999IMO:SL/kbBNGgE0w2rIMO","tlshash":"4114138ef1376670893578b4fafac75da37a0377c95239a0e83e13e5746470570a8da0","first_seen":"2024-05-06T13:48:10Z","last_seen":"2026-04-06T18:04:40.988429Z","times_seen":2676,"resource_available":false,"data":null}},"time_used":2952,"timings":{"blocked":975,"dns":49,"connect":306,"send":0,"wait":308,"receive":693,"ssl":617},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz.bdstatic.com/linksubmit/push.js","fqdn":"zz.bdstatic.com","domain":"bdstatic.com","tld":"com"},"ip":{"addr":"157.255.63.48","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://theav.xyz/jav/actress/list","date":"2025-08-20T02:42:28.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /linksubmit/push.js HTTP/1.1\r\nHost: zz.bdstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theav.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: JSP3/2.0.14\r\ndate: Wed, 20 Aug 2025 02:42:29 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Tue, 01 Apr 2025 18:11:31 GMT\r\netag: \"67ec2c53-134\"\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\nage: 80890\r\naccept-ranges: bytes\r\ntracecode: 12700306750190027786081911\r\nohc-global-saved-time: Tue, 19 Aug 2025 03:21:10 GMT\r\nohc-cache-hit: gz5un53 [2], zhuzuncache61 [2]\r\nohc-response-time: 1 0 0 0 0 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":308,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (308), with no line terminators","md5":"f9fc52ab67f035b8baf5d558714cc94d","sha1":"37062a6fb1ef410d496137d44275738ae743c747","sha256":"c31f2003f1c93ac1e34b09f376d97a65da6e110bf451cf1e0e50a7946c5e7212","sha512":"ebb0415852fbb5b964094e2e55a28b90f701dff1977c8b98c6f24d65d09067dc0c417d01492ca28a4be6747816d7c0bfac87b73a33725aee047a5d2f7ab83182","ssdeep":"","tlshash":"11e0cde86054c01c0dcb107135bb324ce7771d675a645545c04d9445396cb1f8247fe9","first_seen":"2023-03-07T01:18:58Z","last_seen":"2026-04-11T13:22:26.653729Z","times_seen":19223,"resource_available":true,"data":null}},"time_used":2000,"timings":{"blocked":858,"dns":271,"connect":275,"send":0,"wait":276,"receive":0,"ssl":316},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/static/css/themes/default/assets/fonts/icons.woff2?afw11","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://theav.xyz/jav/actress/list","date":"2025-08-20T02:42:25.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zgnzw.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 12:49:51 GMT","end":"Sun, 28 Sep 2025 13:49:44 GMT"},"fingerprint":{"sha1":"FC:1C:37:7E:A1:78:89:8B:86:9B:95:F1:4A:B6:CD:01:63:AE:49:C2","sha256":"75:D2:B3:A9:7E:6F:0C:D0:61:11:3B:CE:AB:1D:62:88:7D:50:26:1F:B0:3E:A7:70:62:0B:67:ED:E9:21:3E:DC"}}},"request":{"raw":"GET /static/css/themes/default/assets/fonts/icons.woff2?afw11 HTTP/1.1\r\nHost: zgnzw.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://theav.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zgnzw.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 20 Aug 2025 02:42:25 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40148\r\nlast-modified: Sun, 29 Jun 2025 15:30:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68615c0e-9cd4\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\ncache-control: public, max-age=2073600, stale-if-error=7200\r\naccept-ranges: bytes\r\nage: 119836\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BBLPNXCbddqNN4oqq%2BxPD3MxzvIZxzLGo83t3c9d%2Fxh8FxQ5c9vRoY9rgl9vipSyOGGzJbd8%2BiHqa310aUqDterQ%2Bjk5peI%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 971e898f69709303-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40148,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40148, version 1.0","md5":"0ab54153eeeca0ce03978cc463b257f7","sha1":"6ec6d36cb2464b4e821cfabb532f310bd342601c","sha256":"434466b59545a8a1cac6ddb38197cdc6b35995a98c3f3812fb88d61b1c300dd3","sha512":"f4b03963386fc05a28adc3905cdd361905bdbad1386ec8d1e8a4440af778e311bb46b41da4b46288291ac3c174d727addd62ab7c27513bca34079c6a2c3cadc2","ssdeep":"768:Ne7m/za8SSvlojVj1lmEpnBxR+ug6bwKoAEjg7guFL/UFd9nwXk8M8Mgs6L:ymzRojVjmOBxRHtsg58PhB83","tlshash":"0503f1ae90ece50b926c4afd7adb0ffc7211914ed87ac2f1c8f4b5970f2aa028451255","first_seen":"2023-04-13T18:56:12Z","last_seen":"2026-04-11T09:10:49.194588Z","times_seen":5035,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":38,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/anyalytics?v=_c1ec981cdb3","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://theav.xyz/jav/actress/list","date":"2025-08-20T02:42:26.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theav.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Jul 2025 05:13:01 GMT","end":"Thu, 09 Oct 2025 06:11:35 GMT"},"fingerprint":{"sha1":"8C:BD:89:55:EB:14:49:0F:BA:D3:0B:CA:14:EE:0B:3E:42:91:9D:1E","sha256":"B4:DC:37:DE:B3:0C:3A:37:33:14:B3:F6:79:6B:CD:01:53:ED:F1:C3:38:72:A7:9F:D9:F5:C4:D3:D7:69:21:64"}}},"request":{"raw":"GET /anyalytics?v=_c1ec981cdb3 HTTP/1.1\r\nHost: theav.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://theav.xyz/jav/actress/list\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: tguest=guest54b3cd7dde48b40cedddfde6cbd5c7268a4f1892\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 20 Aug 2025 02:42:26 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jbbITGiXTpsF2BbkVqjB3bBsionPEkcb%2B1GsWGKvIgJfq%2B6L%2BjMEk2ocgpdTMjv5se9qfwka0EooGe7Czp17DuhQwyReRqI%3D\"}]}\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nf: opr\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 26710\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 19 Aug 2025 19:17:15 GMT\r\ncf-ray: 971e89942e461e42-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":799,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (799), with no line terminators","md5":"2713a2096f61d8e497aaa77917121061","sha1":"78c499d1efc4d004512d40bf3338c5b5d92c0712","sha256":"cd4529cda9955a4ef33aa20e16f1e26f673b0ec63d957bc62eff80f7708877e4","sha512":"e9ab41819131c8c923bbc70e4898bac47e5b4b36f0a496ce2ebe0aca63ba22b62fb980bbb627857885a99648ee0e8e5a0225c67a71f850462458cd33dcdc2a27","ssdeep":"","tlshash":"4e01fd2a0c0ac62c0ca0b98060fae77e24d932a46ea3c606b698d829c51dfc40c123ed","first_seen":"2025-01-08T00:57:30.602177Z","last_seen":"2026-01-30T03:15:49.328663Z","times_seen":966,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/theav/js/t.theav.js?002b4763782622cc4fd","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://theav.xyz/jav/actress/list","date":"2025-08-20T02:42:24.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zgnzw.xyz","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 12:49:38 GMT","end":"Sun, 28 Sep 2025 13:47:08 GMT"},"fingerprint":{"sha1":"BA:21:78:F2:C7:9E:D8:A6:DE:B0:D8:84:A6:80:3A:15:8E:EC:53:4E","sha256":"EA:17:D3:36:AF:91:94:B0:35:12:40:84:A0:91:1B:24:6A:BB:37:59:77:2D:6D:87:81:D9:DB:4B:72:B6:E5:B4"}}},"request":{"raw":"GET /theav/js/t.theav.js?002b4763782622cc4fd HTTP/1.1\r\nHost: zgnzw.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theav.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 Aug 2025 02:42:25 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Aug 2025 16:31:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"68a4a6de-c522b\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncache-control: max-age=2073600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=warIJTUSH3rWFDGnOtJQ3NrXMhrUTf4rIuGh6%2Br2FRDT9HTO4jjElN6oBZc%2F3Z%2BXQLYm%2F3AoRRKO6l241gNXIutxY3dSw5A%3D\"}]}\r\ncf-ray: 971e898a38ba1d02-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":807467,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65054), with no line terminators","md5":"3375399f22ddb2391c16b6a4a0dcc99e","sha1":"e15829466ca2bfecf841a6ab81669d1f052f328e","sha256":"c6012c88809c6700dfacd68d0156c0e9860fcea2185927ff3809abc83370e708","sha512":"0fabb9118798bc768f1b0ed562ec67839ba504d14ece245571e3f9c4891baa16ba7c424b56dd5470d46602958fd67765f81a2800ec4b701d1510c0ef555398ac","ssdeep":"12288:BVN4M4X2TuVgtETnSkc174FaFOFyEJz47RfY/Uxz:BMMf4gtsVFyEJz47RfY/Ut","tlshash":"73052d8ab181b0710ad760b5503f1502f13b78b9784e849cfab6e8da5c7ca89507bf7d","first_seen":"2025-08-20T02:42:47.93249Z","last_seen":"2025-08-20T02:42:47.93249Z","times_seen":1,"resource_available":true,"data":null}},"time_used":817,"timings":{"blocked":225,"dns":161,"connect":26,"send":0,"wait":363,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.helloimg.com/i/2025/07/23/687fcabd79317.gif","fqdn":"www.helloimg.com","domain":"helloimg.com","tld":"com"},"ip":{"addr":"43.159.98.20","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theav.xyz/jav/actress/list","date":"2025-08-20T02:42:26.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.helloimg.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 02 Jun 2025 02:46:42 GMT","end":"Tue, 02 Jun 2026 02:46:41 GMT"},"fingerprint":{"sha1":"B6:81:DB:4A:DF:77:5A:62:7B:51:93:18:DB:A4:C8:07:35:F5:C2:8A","sha256":"F3:D4:F3:60:57:8F:4F:11:43:49:92:DA:3D:C6:44:26:43:D2:44:D3:9B:42:F8:0E:F8:D2:22:42:B3:E1:A2:95"}}},"request":{"raw":"GET /i/2025/07/23/687fcabd79317.gif HTTP/1.1\r\nHost: www.helloimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theav.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 22 Jul 2025 17:30:38 GMT\r\netag: \"687fcabe-193f3\"\r\nserver: nginx\r\ncontent-type: image/gif\r\nexpires: Thu, 21 Aug 2025 17:30:47 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 103411\r\naccept-ranges: bytes\r\ndate: Wed, 20 Aug 2025 02:42:27 GMT\r\neo-log-uuid: 7668556825388341204\r\neo-cache-status: HIT\r\ncache-control: max-age=21600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":103411,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"48f69cb02e11a024b66c031a0cac0e3d","sha1":"893fef48c5e96a3d7cbf057753ae7dd11ac89f4a","sha256":"b55a2d93919dab9a3cbdd89fe1aef89f446bebe0e99becaaad15e1559356af1e","sha512":"de2c98e5e9c93cb52a91bda1ea4afe89b8ae4bfd4d2e8598b367405c5906e26cc3e66e7a353f8877619c9602ecb090780c653158c96a134a9e06b3113227d3b2","ssdeep":"3072:M8EVmiUzEic3P5L7QobxKQRRDV2zoKL+/3Va:M8EVmjfc3Rgy2LmFa","tlshash":"0ca3123a546cd40fe30e46eae5d4ce13364c695d686f8fab3ef1092656411223b7e8d8","first_seen":"2025-02-05T21:44:46.096074Z","last_seen":"2026-02-04T16:01:22.296174Z","times_seen":205,"resource_available":false,"data":null}},"time_used":896,"timings":{"blocked":-1,"dns":605,"connect":22,"send":0,"wait":23,"receive":22,"ssl":223},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.helloimg.com/i/2025/07/23/687fcadef04f5.gif","fqdn":"www.helloimg.com","domain":"helloimg.com","tld":"com"},"ip":{"addr":"43.159.98.20","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theav.xyz/jav/actress/list","date":"2025-08-20T02:42:26.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.helloimg.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 02 Jun 2025 02:46:42 GMT","end":"Tue, 02 Jun 2026 02:46:41 GMT"},"fingerprint":{"sha1":"B6:81:DB:4A:DF:77:5A:62:7B:51:93:18:DB:A4:C8:07:35:F5:C2:8A","sha256":"F3:D4:F3:60:57:8F:4F:11:43:49:92:DA:3D:C6:44:26:43:D2:44:D3:9B:42:F8:0E:F8:D2:22:42:B3:E1:A2:95"}}},"request":{"raw":"GET /i/2025/07/23/687fcadef04f5.gif HTTP/1.1\r\nHost: www.helloimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theav.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 22 Jul 2025 17:31:12 GMT\r\netag: \"687fcae0-1a08c\"\r\nserver: nginx\r\ncontent-type: image/gif\r\nexpires: Thu, 21 Aug 2025 17:31:19 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 106636\r\naccept-ranges: bytes\r\ndate: Wed, 20 Aug 2025 02:42:27 GMT\r\neo-log-uuid: 1708485413323323095\r\neo-cache-status: HIT\r\ncache-control: max-age=21600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106636,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"f2c62cf1e17119216797b8f03047cba7","sha1":"f3bb5c1e66488753301e78cd9989d6e931c4801f","sha256":"14610c2d7324e60d359a3982e6b06292e91e09603ab7c5691d0e3575ba9ab533","sha512":"c42d451aaeec3205dfbd71ba8767cd6cbd0a5f958a4bd84d1ac33493c745dd0848a4e89e22da9cca9c07aee6c769e4a09d9fe49d040679912899bf8be9efc64c","ssdeep":"3072:/pryvA0S3TZK/greo8xodQWIspnVB/nyEw0zNHHa:p39DMceokPFanLjTNHHa","tlshash":"c0a31221fe366676ecb580e4533ccbc7e0abb4569660caf248435909dda28781ce33dc","first_seen":"2025-02-06T08:44:40.489214Z","last_seen":"2025-11-30T13:38:16.251207Z","times_seen":307,"resource_available":false,"data":null}},"time_used":916,"timings":{"blocked":-1,"dns":607,"connect":19,"send":0,"wait":43,"receive":18,"ssl":228},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5454ylylgh.oss-accelerate.aliyuncs.com/1.gif","fqdn":"5454ylylgh.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.140","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theav.xyz/jav/actress/list","date":"2025-08-20T02:42:26.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:01:19 GMT","end":"Tue, 03 Feb 2026 06:31:07 GMT"},"fingerprint":{"sha1":"6C:EE:57:9F:65:29:D7:D3:C1:99:78:B2:75:63:E0:EE:44:D4:84:F4","sha256":"B7:0E:2A:7E:2D:89:E5:97:44:5D:54:7F:D1:95:50:EF:72:09:42:B9:A8:8C:B3:A7:B6:8B:3D:24:9B:AF:45:C6"}}},"request":{"raw":"GET /1.gif HTTP/1.1\r\nHost: 5454ylylgh.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theav.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 20 Aug 2025 02:42:27 GMT\r\nContent-Type: image/gif\r\nContent-Length: 523764\r\nConnection: keep-alive\r\nx-oss-request-id: 68A536136747A99B26BA655A\r\nAccept-Ranges: bytes\r\nETag: \"8102B307619A90C2245DA75BC7445FD9\"\r\nLast-Modified: Thu, 31 Jul 2025 15:24:36 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11887648198025140144\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000104\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: gQKzB2GakMIkXadbx0Rf2Q==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":523764,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"8102b307619a90c2245da75bc7445fd9","sha1":"21ed3095f76e34fe8134cf4575c75b785616c4a7","sha256":"c2e316430822c76ff6bb32ba2b68876d2d930398f8e3f88cb70578c0b8fe03d7","sha512":"626b85d75d51b59fe4bf33528dfcf5290034db68b4746a9e7f5492f61ab43899d5f63c8efa6933ecaf2afdedf086127cb33cef2ff2d70aa405c2b3b0c0d7d3e4","ssdeep":"12288:uRM7hlTdJE/o5galslzMF7ZnxwWgwirPr:uRgx6/oizM1Jxw9wWPr","tlshash":"46b423ef842de8291f06b8b154610ee5658b9d87f8d5d329f7a4ccb6cac4ce8508473b","first_seen":"2024-12-26T06:54:57.165453Z","last_seen":"2026-02-23T04:20:58.439721Z","times_seen":2571,"resource_available":false,"data":null}},"time_used":1806,"timings":{"blocked":745,"dns":598,"connect":20,"send":0,"wait":196,"receive":120,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpj46-xz.oss-accelerate.aliyuncs.com/xpj.gif","fqdn":"xpj46-xz.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.186.178","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theav.xyz/jav/actress/list","date":"2025-08-20T02:42:26.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:01:19 GMT","end":"Tue, 03 Feb 2026 06:31:07 GMT"},"fingerprint":{"sha1":"6C:EE:57:9F:65:29:D7:D3:C1:99:78:B2:75:63:E0:EE:44:D4:84:F4","sha256":"B7:0E:2A:7E:2D:89:E5:97:44:5D:54:7F:D1:95:50:EF:72:09:42:B9:A8:8C:B3:A7:B6:8B:3D:24:9B:AF:45:C6"}}},"request":{"raw":"GET /xpj.gif HTTP/1.1\r\nHost: xpj46-xz.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theav.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 20 Aug 2025 02:42:28 GMT\r\nContent-Type: image/gif\r\nContent-Length: 385649\r\nConnection: keep-alive\r\nx-oss-request-id: 68A536130A498FF9A5823169\r\nAccept-Ranges: bytes\r\nETag: \"99420771AB574E6197A995C28A8E22FB\"\r\nLast-Modified: Thu, 31 Jul 2025 15:21:28 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4968715815927960007\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000103\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: mUIHcatXTmGXqZXCio4i+w==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":385649,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"99420771ab574e6197a995c28a8e22fb","sha1":"eb51cd497134b44e1c957b10caf4d2c9569668a5","sha256":"e0f9613ae55c18751ed65c2b466290eec01e4d71bc4881c52d71578456582d8a","sha512":"f2bed60584e1307fdff179ecb6be097cf285fb3a59d8cec05d20b695c58ad1e0ca2836abfa38e9da00ff4d56affe5b108259811b1150ec35648aa73afcc260e6","ssdeep":"6144:PnRDG1hP90xJ2rBHVOgsGOnWeDLBWo5mrONv5ARJU5yx4j7E+BhniaILOXpQRd2I:PdG1h1KJyBHVOIOnFFWomONvYUcxOX8b","tlshash":"c284230c8a584826169788fc19f67f2e615e0c12912aa13dc9cff7427ecb1f6745aed3","first_seen":"2025-01-26T00:52:56.462418Z","last_seen":"2025-12-29T03:34:17.287286Z","times_seen":1695,"resource_available":false,"data":null}},"time_used":2225,"timings":{"blocked":971,"dns":897,"connect":21,"send":0,"wait":186,"receive":97,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"txdytuchuang1.oss-cn-beijing.aliyuncs.com/1329.gif","fqdn":"txdytuchuang1.oss-cn-beijing.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"39.103.20.63","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theav.xyz/jav/actress/list","date":"2025-08-20T02:42:26.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cn-beijing.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:42 GMT","end":"Sun, 23 Aug 2026 08:21:41 GMT"},"fingerprint":{"sha1":"0E:17:E2:1C:49:2B:58:46:EF:6F:B8:CA:60:00:F7:D5:B3:39:DB:5F","sha256":"65:62:9F:A3:53:EA:8B:6D:C8:83:93:81:B2:E6:43:7D:E3:97:5C:77:5E:01:C1:A5:29:3A:CE:5C:62:0A:D3:77"}}},"request":{"raw":"GET /1329.gif HTTP/1.1\r\nHost: txdytuchuang1.oss-cn-beijing.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theav.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 20 Aug 2025 02:42:27 GMT\r\nContent-Type: image/gif\r\nContent-Length: 339723\r\nConnection: keep-alive\r\nx-oss-request-id: 68A53613B980BA373044B5FB\r\nAccept-Ranges: bytes\r\nETag: \"B58B6B1221C88B281476B143F8065AFD\"\r\nLast-Modified: Sat, 28 Jun 2025 12:52:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8593911327511815938\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000104\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: tYtrEiHIiygUdrFD+AZa/Q==\r\nx-oss-server-time: 14\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":339723,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"b58b6b1221c88b281476b143f8065afd","sha1":"8ab029042de18f365e0d885beb43f16f34231a38","sha256":"e98878d5096bfda3db02eadb4a30edbaf518b62f2ff997b417429cf5291e2fb2","sha512":"4631fb71bd89984de71d806c34f287892c62f48c56cbe5ee5c3bc69dbad8b920e6b69681da2219775b559ab2452668f8df8216c566e9a64b00e1f39f7b68770b","ssdeep":"6144:LEFGOn8sf+vjEWkb+FLLbSN+FLLRKcXQ2V1e/cLVTZX23isuCOiguubDO6:A58LvjhhlhuGTIXGDt","tlshash":"a474230d2d6b2bb48431297c40c5ada16717bdc89d325c8e7b96acf2815f5a0f24f987","first_seen":"2025-02-13T11:16:43.28729Z","last_seen":"2026-03-29T19:55:31.573393Z","times_seen":1913,"resource_available":false,"data":null}},"time_used":2941,"timings":{"blocked":957,"dns":201,"connect":250,"send":0,"wait":261,"receive":764,"ssl":505},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yj777111.img5811783201.com:8686/8888/bmw/80.gif","fqdn":"yj777111.img5811783201.com","domain":"img5811783201.com","tld":"com"},"ip":{"addr":"156.231.115.2","port":8686,"asn":984,"as":"OWS","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theav.xyz/jav/actress/list","date":"2025-08-20T02:42:26.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yj777111.img5811783201.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Jul 2025 07:30:57 GMT","end":"Sat, 04 Oct 2025 07:30:56 GMT"},"fingerprint":{"sha1":"B0:DA:AA:A7:53:58:42:39:E2:BA:40:12:BA:90:8D:41:F6:E5:D5:4D","sha256":"3B:B6:3A:34:5D:66:B1:84:81:14:5E:CA:EC:2B:BC:8C:F8:38:59:EB:9E:2B:5F:E1:32:5B:F2:CA:59:6D:53:6B"}}},"request":{"raw":"GET /8888/bmw/80.gif HTTP/1.1\r\nHost: yj777111.img5811783201.com:8686\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theav.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncontent-type: image/gif\r\ndate: Wed, 20 Aug 2025 00:43:13 GMT\r\netag: \"68726b85-54f4b\"\r\nexpires: Fri, 19 Sep 2025 00:43:13 GMT\r\nlast-modified: Wed, 20 Aug 2025 00:43:13 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 347979\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":347979,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"90bdc09a6a9709d8c50c9d56e0655ac4","sha1":"fa7c36cb4fb947091e342864d5f48d9d414be187","sha256":"b62e4139f82c390023993578b8936726e370aefb6ceee25fa7d9440850d7a698","sha512":"aa499b587ea61f846187b64aae2e576f595ddce17d6c082651f5e27077675db72723c7c9386be26e7b8d17935a88a518905739168a701a3ab5cdec72493e2245","ssdeep":"6144:SQDmjQDmjQDmjQDmjeV8aODtqyaODtqyaODtqyaODtqBdAxUuECBdAxUuECBdAxQ:hzzzHV8555nMMMl","tlshash":"57740263c3724c6c82deb3d19f2750143b892571adea0532dacba59b044333fa6afe15","first_seen":"2025-07-31T06:22:34.522761Z","last_seen":"2026-03-29T05:53:34.602068Z","times_seen":197,"resource_available":false,"data":null}},"time_used":2298,"timings":{"blocked":-1,"dns":348,"connect":251,"send":0,"wait":253,"receive":1177,"ssl":268},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/static/logo-theav.png?1","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theav.xyz/jav/actress/list","date":"2025-08-20T02:42:24.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theav.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Jul 2025 05:13:01 GMT","end":"Thu, 09 Oct 2025 06:11:35 GMT"},"fingerprint":{"sha1":"8C:BD:89:55:EB:14:49:0F:BA:D3:0B:CA:14:EE:0B:3E:42:91:9D:1E","sha256":"B4:DC:37:DE:B3:0C:3A:37:33:14:B3:F6:79:6B:CD:01:53:ED:F1:C3:38:72:A7:9F:D9:F5:C4:D3:D7:69:21:64"}}},"request":{"raw":"GET /static/logo-theav.png?1 HTTP/1.1\r\nHost: theav.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://theav.xyz/jav/actress/list\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 20 Aug 2025 02:42:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 19 Jun 2025 07:48:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PdLLlZzS%2Bcf7G8I%2BBx9RrixvPfVc71PPu5mQWaHvPvCE2TlLkghMpaloU%2FK2Yc7dDaCal%2B%2BHuiQA6jBviLQqQ9PHxDOFC0k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"6853c0dc-b6f5\"\r\ncontent-encoding: gzip\r\nage: 26711\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\ncf-ray: 971e8988cdf31e42-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46837,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 402, 8-bit/color RGBA, non-interlaced","md5":"643a7583ee92f71c64f8581799eb3274","sha1":"40377069fe473e0c25f67652781767778d2862e2","sha256":"b6e0dc8f2d1e431f70d5e9cb1b148abeb53215f679c385ea88d22405f68735b7","sha512":"3a6ee4405e5c7d4b4444d7c73c238f0b363ae5f15842913055985ed22a98160f431c53952a2f7e783e4bf2a354c3b34135c8ccca71f8d1f5f05fd0f7dd883a4b","ssdeep":"768:ECYIMDUnblSxBByngso+ZSAtvDNptYAZiKFr5ZOZQGy1PJCNtK6KynEgL4KRBn:PAInYnBygsRsAxD/xiWnrGyVk3KIzLtR","tlshash":"cc23e09b16650cd6c13d045bb4cb800352a7c4751373e47fad07a2e1faede7aba09aa1","first_seen":"2025-08-03T09:54:15.904056Z","last_seen":"2025-11-06T03:32:17.009125Z","times_seen":9,"resource_available":false,"data":null}},"time_used":3429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":3391,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/theav/css/b.css?21d19d0fdd29a0a2e34d548e671bd","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://theav.xyz/jav/actress/list","date":"2025-08-20T02:42:24.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zgnzw.xyz","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 12:49:38 GMT","end":"Sun, 28 Sep 2025 13:47:08 GMT"},"fingerprint":{"sha1":"BA:21:78:F2:C7:9E:D8:A6:DE:B0:D8:84:A6:80:3A:15:8E:EC:53:4E","sha256":"EA:17:D3:36:AF:91:94:B0:35:12:40:84:A0:91:1B:24:6A:BB:37:59:77:2D:6D:87:81:D9:DB:4B:72:B6:E5:B4"}}},"request":{"raw":"GET /theav/css/b.css?21d19d0fdd29a0a2e34d548e671bd HTTP/1.1\r\nHost: zgnzw.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theav.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 Aug 2025 02:42:25 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Aug 2025 16:31:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"68a4a6de-232ea\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncache-control: max-age=2073600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=esFq78vFE8LeYbbyz6S1XpcA8Q63UGvo0StMLWLWSjubK%2BTqb1DUIqq8t3VWfNsY%2FjndU2JJlCr%2BxS7AqlhVyqjUociX0gU%3D\"}]}\r\ncf-ray: 971e898a38b91d02-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144106,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"721d19d0fdd29a0a2e34d548e671bdec","sha1":"c84fc1404dc36683b564dc0549178b508d7cfb53","sha256":"24d0821b052b25ba6e60eb4c3f58b25576e3f3298589dfd5af21f05fcb4cf3fe","sha512":"f093e157e78ed5f26d69072ac45a56a662e709d2c3203609beeeb9555468753b9064f1bb4c59efa948da6f60693d6da28bf07c69538622e5ffce467aafeced42","ssdeep":"1536:5nH2ABS4J8C3+iCpdrGHd2r/kuf2NYzfgwE3sozKPBUkHtKt696WM:5nH2pcOGZwE3srM","tlshash":"06e3d83fd982215d40278a55c6c85fe42f3dd563a4924edff312380a878ab9e27d670b","first_seen":"2025-08-03T09:54:15.884464Z","last_seen":"2025-08-20T02:42:47.940958Z","times_seen":3,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":130,"dns":64,"connect":26,"send":0,"wait":345,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/static/img/cd-top-arrow.svg","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theav.xyz/jav/actress/list","date":"2025-08-20T02:42:26.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zgnzw.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 12:49:51 GMT","end":"Sun, 28 Sep 2025 13:49:44 GMT"},"fingerprint":{"sha1":"FC:1C:37:7E:A1:78:89:8B:86:9B:95:F1:4A:B6:CD:01:63:AE:49:C2","sha256":"75:D2:B3:A9:7E:6F:0C:D0:61:11:3B:CE:AB:1D:62:88:7D:50:26:1F:B0:3E:A7:70:62:0B:67:ED:E9:21:3E:DC"}}},"request":{"raw":"GET /static/img/cd-top-arrow.svg HTTP/1.1\r\nHost: zgnzw.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zgnzw.xyz/theav/css/web.theav.css?21084cd60a9decb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 20 Aug 2025 02:42:26 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Sun, 29 Jun 2025 15:30:22 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5sexrgiz%2BoO3mrXO2lvbcG%2FI3SftQNU34DkOzDSzbAzofgJCCQ%2FPq1ErpmaLOoOd0btzsOh9EFfE7MIAR5VJJ2bwN81LKm8%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: *\r\ncache-control: public, max-age=2073600, stale-if-error=7200\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 131005\r\ncf-cache-status: HIT\r\netag: W/\"68615c0e-22b\"\r\ncf-ray: 971e89926e751d0a-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":555,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c2bab96d57583d68d57a99dc04f16482","sha1":"17f5b39cdf2f8cd02d5f3ff422372dcefd1bea53","sha256":"d94bbee4b8120bf8e4937e3e9c54de44bdb866291db81088601bde90085092da","sha512":"f051254752272650363d33cf555bf2263280ac87b5c1cd080cd794b8d3e97c468df276c454d93f8b949102ab8059744a9c91f4fe04336469de2a6c914757d353","ssdeep":"","tlshash":"43f0e19ca3499478f055471122b896c353a1b081909204ecd4c13cf9d156da55bd52bc","first_seen":"2023-05-08T12:47:37Z","last_seen":"2026-04-11T04:16:24.004565Z","times_seen":1319,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"365t.oss-cn-hongkong.aliyuncs.com/bet-960x100.gif","fqdn":"365t.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.191","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theav.xyz/jav/actress/list","date":"2025-08-20T02:42:26.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:02:09 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"B2:57:E9:B4:DF:20:94:4D:E2:85:59:20:BE:D8:5D:70:63:65:02:7A","sha256":"05:17:EA:27:D0:4C:D8:5D:6B:2C:A8:32:D5:A2:DD:E4:47:EC:4D:DC:E7:7B:33:67:F5:F7:4F:C1:73:01:01:19"}}},"request":{"raw":"GET /bet-960x100.gif HTTP/1.1\r\nHost: 365t.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theav.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 20 Aug 2025 02:42:28 GMT\r\nContent-Type: image/gif\r\nContent-Length: 266371\r\nConnection: keep-alive\r\nx-oss-request-id: 68A53614C390C33532CD102B\r\nAccept-Ranges: bytes\r\nETag: \"08305BEBED9D70A4CF2D8F62FBD70C65\"\r\nLast-Modified: Wed, 16 Jul 2025 07:04:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11145254002049399420\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: CDBb6+2dcKTPLY9i+9cMZQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":266371,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 100","md5":"08305bebed9d70a4cf2d8f62fbd70c65","sha1":"afbe4be0f9f1dd38e93a5c2454ee9c14a4e63933","sha256":"651740b257a46d256039488a4c52bd4e6a8a5457c2fb01b340b563b745aabadc","sha512":"f0911ef157df1d325c2bd4c4d464f7e7206228aea0a3ba448a246221841f3fb5929677842030090a1c8d428ab50c5a08baf5940d34311585d96e08a676b8b616","ssdeep":"6144:wXprDLEdfmqROge5sU3y8J6mgoQZmu5ZVfrvJk9NdjEYd2/S7:8ZAdHa5s8y8oP/mu5ZV7oNaYdyS7","tlshash":"c6442339b3732e00658eb7608ba095f4120c947056fdb946b622d27b30e61e9f878f7d","first_seen":"2025-05-21T09:36:36.608152Z","last_seen":"2025-09-06T05:09:06.921387Z","times_seen":807,"resource_available":false,"data":null}},"time_used":2233,"timings":{"blocked":-1,"dns":239,"connect":283,"send":0,"wait":288,"receive":852,"ssl":571},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xm777111.img8822437445.com:8686/8888/xm/508/80.gif","fqdn":"xm777111.img8822437445.com","domain":"img8822437445.com","tld":"com"},"ip":{"addr":"156.231.115.2","port":8686,"asn":984,"as":"OWS","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theav.xyz/jav/actress/list","date":"2025-08-20T02:42:26.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xm777111.img8822437445.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Jul 2025 07:30:58 GMT","end":"Sat, 04 Oct 2025 07:30:57 GMT"},"fingerprint":{"sha1":"0B:FE:F2:B5:1B:06:AC:A7:3D:F4:8E:04:52:6C:6C:EB:1D:26:38:33","sha256":"89:21:DB:2B:7A:27:0C:25:6C:BB:C0:44:B2:DD:05:BF:FA:5A:04:6A:50:81:0B:9D:17:57:10:75:CE:F3:FB:25"}}},"request":{"raw":"GET /8888/xm/508/80.gif HTTP/1.1\r\nHost: xm777111.img8822437445.com:8686\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theav.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncontent-type: image/gif\r\ndate: Wed, 20 Aug 2025 01:20:47 GMT\r\netag: \"66b3688a-4e9c7\"\r\nexpires: Fri, 19 Sep 2025 01:20:47 GMT\r\nlast-modified: Wed, 20 Aug 2025 01:20:48 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 321991\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":321991,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"8eb97ba562904f64f2af2389f0d3eda9","sha1":"d484a2e519bf260b9eb53cfa5605220cd47879f2","sha256":"e1d1188c5ea2f2e00d0bb7212087e87ab63c898e2795c95bd1ca8ee0d09725fc","sha512":"3dc76ebf8c5b24a977ccdfae07d5e12b91d2ca2e4a08d4db2f5f9278e83417e27b3c738bf15b18597b3eca766d2766df81c4e99c3435004c6aa2d888efff49b0","ssdeep":"6144:GYfxY0XuOEXuOEXuOEXuYA24yAiwYpsv92JDiq85S92JDiq85S92JDiq85S92JDH:PzNaNaNaDAOAfYvmfDmfDmfDhMDeMDep","tlshash":"e86402bb13074bc9dafa4dc519289bd6af0524642cb39c37408d746e132673faba1f94","first_seen":"2024-08-13T16:44:54Z","last_seen":"2026-04-11T11:18:17.547683Z","times_seen":2929,"resource_available":false,"data":null}},"time_used":2279,"timings":{"blocked":-1,"dns":342,"connect":255,"send":0,"wait":252,"receive":1159,"ssl":271},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/static/favicon.ico?aaff","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theav.xyz/jav/actress/list","date":"2025-08-20T02:42:30.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theav.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Jul 2025 05:13:01 GMT","end":"Thu, 09 Oct 2025 06:11:35 GMT"},"fingerprint":{"sha1":"8C:BD:89:55:EB:14:49:0F:BA:D3:0B:CA:14:EE:0B:3E:42:91:9D:1E","sha256":"B4:DC:37:DE:B3:0C:3A:37:33:14:B3:F6:79:6B:CD:01:53:ED:F1:C3:38:72:A7:9F:D9:F5:C4:D3:D7:69:21:64"}}},"request":{"raw":"GET /static/favicon.ico?aaff HTTP/1.1\r\nHost: theav.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://theav.xyz/jav/actress/list\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: tguest=guest54b3cd7dde48b40cedddfde6cbd5c7268a4f1892\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 20 Aug 2025 02:42:30 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Thu, 19 Jun 2025 07:48:59 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iKcwVRbwHwWAgoCnJDiD30tV90ZUpF%2FouSxT%2FBFyASu74QzSvko6FKj5unesu05TR02lKD04AF9rwmHWRHVIt7DlO5KMA3s%3D\"}]}\r\nx-served-from: fallback\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 26707\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\netag: W/\"6853c0eb-10be\"\r\ncf-ray: 971e89aa6f881e42-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"da00228045bbdc9fc485eee15ae466f7","sha1":"51acd57ef4439a7e622281388e2aa83d53b3fe33","sha256":"18a2fc0c936b1782fb1f1dec65e9ea9dfff00e1a081594c8c3049a5b435c1d2d","sha512":"b7ba13392ab3c6d8c1077989d482399892c1c094599e798b69dc3c6720b5d26dd6186d414f46cacf8ed48061e091d23978248b63cace28ebc601e41348ce608a","ssdeep":"48:uTOtJTTH7TTS/LY64wSKd2sci/6aq3EDP+3yk:uOH73wSKdEv/3v3yk","tlshash":"e2912fa8edf928bfd22403785f0697f8c8338e1f6ce4593308227c9b272ed51848611d","first_seen":"2023-05-17T22:14:46Z","last_seen":"2026-04-03T22:52:06.89925Z","times_seen":551,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/theav/js/b.theav.js?5149e619e4e68a955e454d","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://theav.xyz/jav/actress/list","date":"2025-08-20T02:42:26.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zgnzw.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 12:49:51 GMT","end":"Sun, 28 Sep 2025 13:49:44 GMT"},"fingerprint":{"sha1":"FC:1C:37:7E:A1:78:89:8B:86:9B:95:F1:4A:B6:CD:01:63:AE:49:C2","sha256":"75:D2:B3:A9:7E:6F:0C:D0:61:11:3B:CE:AB:1D:62:88:7D:50:26:1F:B0:3E:A7:70:62:0B:67:ED:E9:21:3E:DC"}}},"request":{"raw":"GET /theav/js/b.theav.js?5149e619e4e68a955e454d HTTP/1.1\r\nHost: zgnzw.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theav.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 20 Aug 2025 02:42:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 19 Aug 2025 16:31:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EtGHeC8gkHGI1JmHUBJ5mUcl%2FJZ9B%2F3oRZjsc8uiSXVBxBOC%2FBVDY6o8V8mBLs3MuPFf90c8sFdydbKw1FFdKaBzyd2W2Gw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"68a4a6de-66e83\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncache-control: max-age=2073600\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 971e89942ea61d0a-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":421507,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65472), with no line terminators","md5":"46f659c4cf211e1d13ca4f780c810fba","sha1":"4536ed8bdef4592a859910c5feb951aa16b4108d","sha256":"64d38ee07c76003ed0c4ee5174d234baa04096fb7d18b7178761d240ec9732cf","sha512":"8ba070ff15cffa074e688c9b5863d9b011c18145773807e2c0794201461b0afa5df33f22184f38b16c6bbd6ac80a59653f2ea23a8467309c5af3ce64c3d6327c","ssdeep":"6144:Me49ZDSnQkcxQkc2yDsWORpvjUpqU68VVBBAMMMOka/sBUEXaCgxYvqhku:L4a8EkaukvBUEX0","tlshash":"c494078df691716207ab607580af300eb33b1d65a90e8060f939c5e47eb9a8c5277f7d","first_seen":"2025-08-20T01:24:37.794918Z","last_seen":"2025-08-23T06:48:45.939112Z","times_seen":7,"resource_available":true,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5845-xxpp.oss-accelerate.aliyuncs.com/5845.gif","fqdn":"5845-xxpp.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.186.184","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theav.xyz/jav/actress/list","date":"2025-08-20T02:42:26.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:01:19 GMT","end":"Tue, 03 Feb 2026 06:31:07 GMT"},"fingerprint":{"sha1":"6C:EE:57:9F:65:29:D7:D3:C1:99:78:B2:75:63:E0:EE:44:D4:84:F4","sha256":"B7:0E:2A:7E:2D:89:E5:97:44:5D:54:7F:D1:95:50:EF:72:09:42:B9:A8:8C:B3:A7:B6:8B:3D:24:9B:AF:45:C6"}}},"request":{"raw":"GET /5845.gif HTTP/1.1\r\nHost: 5845-xxpp.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theav.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 20 Aug 2025 02:42:27 GMT\r\nContent-Type: image/gif\r\nContent-Length: 324299\r\nConnection: keep-alive\r\nx-oss-request-id: 68A53613C78E72645F3AA6DA\r\nAccept-Ranges: bytes\r\nETag: \"4B824F5452A8379A4BB6FA2FB82E8F45\"\r\nLast-Modified: Sat, 16 Aug 2025 12:43:43 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12781593188817417989\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000104\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: S4JPVFKoN5pLtvovuC6PRQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":324299,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"4b824f5452a8379a4bb6fa2fb82e8f45","sha1":"0f97bfec583629d21f1737c3c806ba51ab7c9293","sha256":"92ba0c5c9930dc38fbd04c327b93437aba42e38f4fcc846b87a16b4df7ebfd45","sha512":"63850000d20788adb9bc6e6717361f4fb5595fb088a8f03117330ae1ffa548c35520b8a55ff5c5f3233f4872c8865fb5053b10ef7048b20ac89be1926fbbe180","ssdeep":"6144:SaYYr01IgV9vpSy5a0OEJNRflIGIxltJczWpokkkf30akgUJyJm5q8nrx6OJ3:Lr01I6vvNOEJrGGcmzW2kP0akgUJL5qY","tlshash":"146423d208acd8c13702b3de1ead15970ebe84526f712b285e9b9094a75c2bb707df74","first_seen":"2023-08-25T22:48:22Z","last_seen":"2025-12-06T17:55:32.14518Z","times_seen":1903,"resource_available":false,"data":null}},"time_used":1860,"timings":{"blocked":751,"dns":630,"connect":20,"send":0,"wait":283,"receive":75,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6464sgdgxb.oss-cn-shenzhen.aliyuncs.com/xpj.gif","fqdn":"6464sgdgxb.oss-cn-shenzhen.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.113.74.45","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theav.xyz/jav/actress/list","date":"2025-08-20T02:42:26.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-cn-shenzhen.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:01:40 GMT","end":"Wed, 04 Feb 2026 03:21:01 GMT"},"fingerprint":{"sha1":"3B:A0:EC:9B:0B:4A:E5:D0:B1:BC:19:1A:9C:14:2C:D8:40:11:9D:AA","sha256":"F3:80:D3:C8:AF:53:07:42:0E:D1:3B:29:1E:56:9F:87:E5:63:3F:40:FF:E3:D7:3A:C2:60:73:13:AC:2A:DF:5B"}}},"request":{"raw":"GET /xpj.gif HTTP/1.1\r\nHost: 6464sgdgxb.oss-cn-shenzhen.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theav.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 20 Aug 2025 02:42:28 GMT\r\nContent-Type: image/gif\r\nContent-Length: 331631\r\nConnection: keep-alive\r\nx-oss-request-id: 68A536144BDC3E3539921E51\r\nAccept-Ranges: bytes\r\nETag: \"FB2F6F26F919A55DEFDE7192B64400A4\"\r\nLast-Modified: Mon, 28 Oct 2024 10:46:41 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11253496721269740821\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000103\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: +y9vJvkZpV3v3nGStkQApA==\r\nx-oss-server-time: 8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":331631,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"fb2f6f26f919a55defde7192b64400a4","sha1":"3d85fafd69137b9538e2561b63eb13990d26815c","sha256":"9b1b7922ad169978b544306d16430f4b11a60ba9d00081d32c33533b9b008c7f","sha512":"426075ddbb3db642d7a8dd5d197b652578e5730ee2f6ceaa9622885eb166e41736e3777970b26944815cc291562cc0f4903eeb58052deba1d1063689797de235","ssdeep":"6144:k3UiYMuqVLKzL/yxsQ14kMW1H03NTZHAQ8d9hDxzxrTPgxW37wo:ZMuqwzL/yH14nW1WgQ8dxtTYo3B","tlshash":"f664228dae0f21c49a011bbc7cb2415e500549b6383f1de7c92ada532639fb99df8c47","first_seen":"2024-05-10T21:48:21Z","last_seen":"2026-03-29T19:55:31.574702Z","times_seen":740,"resource_available":false,"data":null}},"time_used":3145,"timings":{"blocked":1021,"dns":218,"connect":263,"send":0,"wait":289,"receive":813,"ssl":538},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theav.xyz/jav/actress/list","fqdn":"theav.xyz","domain":"theav.xyz","tld":"xyz"},"ip":{"addr":"104.21.77.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-20T02:42:10.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theav.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Jul 2025 05:13:01 GMT","end":"Thu, 09 Oct 2025 06:11:35 GMT"},"fingerprint":{"sha1":"8C:BD:89:55:EB:14:49:0F:BA:D3:0B:CA:14:EE:0B:3E:42:91:9D:1E","sha256":"B4:DC:37:DE:B3:0C:3A:37:33:14:B3:F6:79:6B:CD:01:53:ED:F1:C3:38:72:A7:9F:D9:F5:C4:D3:D7:69:21:64"}}},"request":{"raw":"GET /jav/actress/list HTTP/1.1\r\nHost: theav.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 Aug 2025 02:42:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nghash: _c1ec981cdb3\r\nt-ray: ws14\r\nipcountry: NO\r\ncache-key: theav:_c1ec981cdb3:/jav/actress/list\r\nserver: cloudflare\r\nexpires: Sun, 19 Oct 2025 02:42:10 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=1209600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\nw-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B%2Box8QEUZTRkzD%2BexQpuc7b%2BbRBWN5zWZmMLj%2Fear0TPZnVXKhStfwt1Ty8a4Y%2F5Bm38mfgNPYFq6uhCq3ONyRzqzAXd%2Bok%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 971e8930988e10f3-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1278081,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37529)","md5":"734dc262e34a9ce01b33729639911fc0","sha1":"278702cf443e5b1f6f89295973fd8031c5234c8a","sha256":"671b6097aaf88360b674a6839eccb1b61e2e85e36459ef9398b8e09cf542d3fd","sha512":"7261f01828d9b831f22a5b4519f3ef3a51726517c2938b6f5560f735747002f4c13dd8a126e97011a6fd79b1a787c448e47ab5470d2c4393e3eabb43d436a8c2","ssdeep":"12288:KdOT1f4qPseZtAnN12FCI3WXsLieTgN+mD+Z2TqHrkb4uxQTHir20C9CrpLitiX7:HGxQTwNOVsvt","tlshash":"ee557bbfa88d8b73115a71443bd1661de056f3b593472df02aacec62d980e7becb8045","first_seen":"2025-08-20T02:42:47.946895Z","last_seen":"2025-08-20T02:42:47.946895Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1182,"timings":{"blocked":79,"dns":6,"connect":26,"send":0,"wait":1024,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zgnzw.xyz/theav/css/web.theav.css?21084cd60a9decb","fqdn":"zgnzw.xyz","domain":"zgnzw.xyz","tld":"xyz"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://theav.xyz/jav/actress/list","date":"2025-08-20T02:42:24.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zgnzw.xyz","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 12:49:38 GMT","end":"Sun, 28 Sep 2025 13:47:08 GMT"},"fingerprint":{"sha1":"BA:21:78:F2:C7:9E:D8:A6:DE:B0:D8:84:A6:80:3A:15:8E:EC:53:4E","sha256":"EA:17:D3:36:AF:91:94:B0:35:12:40:84:A0:91:1B:24:6A:BB:37:59:77:2D:6D:87:81:D9:DB:4B:72:B6:E5:B4"}}},"request":{"raw":"GET /theav/css/web.theav.css?21084cd60a9decb HTTP/1.1\r\nHost: zgnzw.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://theav.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 Aug 2025 02:42:25 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 19 Aug 2025 16:31:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"68a4a6de-b7869\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncache-control: max-age=2073600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZRKrF%2BX9SqU%2Bru9jmZTau9KetWYtUeUP2geHBJ%2B657dJhHhsCuAkENBSszEY%2B9v9UWQ9Lm3oU2lYtTBdKwIL8dmehffxm4s%3D\"}]}\r\ncf-ray: 971e898a38b81d02-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":751721,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e21084cd60a9decb60027273aa590e12","sha1":"a62af3ffa476f2b4e0e3c7fd8556bf3566ab8a05","sha256":"4252815e0f499c1339ccc214c8a835d30869b5d6ee7049d312c2ad737d5fd052","sha512":"03879cca19492067e82d861439af10fb6f0c02485e2b534636a7e94e8d89ec95b8fc739ce1951211be0b4da7a0deed9028be5b73ad99543f3bbd1439fac96bfc","ssdeep":"6144:MhueaMEws0LxzyPk0DgKyuKt8/QEi45oyBN:MQeaMZJLxzyPhByuKtWos","tlshash":"24f4f8b6e584244d6723c186a7c076e87b7d9050fa228fa7f027bab44bc25d71cb3716","first_seen":"2025-08-03T09:54:15.876438Z","last_seen":"2025-08-20T02:42:47.94826Z","times_seen":3,"resource_available":false,"data":null}},"time_used":865,"timings":{"blocked":221,"dns":160,"connect":26,"send":0,"wait":419,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}