{"report_id":"264a9be1-7c38-4bc9-9e9a-5ba4b31a3e6d","version":6,"status":"done","tags":[],"date":"2026-04-26T14:03:56Z","url":{"schema":"http","addr":"chang-enow.org","fqdn":"chang-enow.org","domain":"chang-enow.org","tld":"org"},"ip":{"addr":"176.125.242.151","port":0,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"chang-enow.org/","fqdn":"chang-enow.org","domain":"chang-enow.org","tld":"org"},"title":"ChangeNOW | No KYC Crypto Exchange","dom":{"size":29956,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (630)","md5":"e88cd9938e1610234cef521bebe5cfea","sha1":"25986c3c2f1fbbf724e39c93111e7b1a73495ca2","sha256":"ed2dd09ec33054dac78eedc491192ad247845497479a1462e59182b678eb0585","sha512":"3ac9e3764a3e0eaa8bd7c25722dbbf2f4077f7cce2665a48b038c21ffefd4e2a4db0b015ec13385dda18f087bd3fb04c41c07007b3a1c3847140413f3bc25623","ssdeep":"384:8HQquecttFSjWP9s3AduKGnHUw+qhIix41lT:e18tFYWPW3AduKGHUw+Fix4DT","tlshash":"c9d2a5b1f1f6a43770a381d22796239b36a4f413c80a821577fc97a88fc6de58d53a4d","dom_hash":"domhash82cd45d78847955f1d56c691b4108065","first_seen":"2026-04-26T14:04:00.713921Z","last_seen":"2026-04-26T14:33:50.179835Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"chang-enow.org","fqdn":"chang-enow.org","domain":"chang-enow.org","tld":"org"},"ip":{"addr":"176.125.242.151","port":0,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-31T14:03:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"chang-enow.org","ip":{"addr":"176.125.242.151","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2026-04-13","domain_rank":0,"first_seen":"2026-04-26T14:03:56.281959Z","last_seen":"2026-04-26T14:03:56.281959Z","alert_count":0,"request_count":3,"received_data":32932,"sent_data":1379,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-19T22:20:23.925162Z","alert_count":0,"request_count":1,"received_data":4203,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-19T22:16:46.237507Z","alert_count":0,"request_count":3,"received_data":90135,"sent_data":1656,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"chang-enow.org/","fqdn":"chang-enow.org","domain":"chang-enow.org","tld":"org"},"ip":{"addr":"176.125.242.151","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b8442443dfd048fddf0e8675c61beebc","sha1":"b5507eeecae58d3dc38aaa38efa60913a90f3593","sha256":"9514443e0ce5c5621f5d0f1704150bcebddef26214d0379e7b833e31a3efcec9","sha512":"87ba6fe78fa2cbcd275cf148b2a0c879eaf377dd28ac37da51918b6461cce6933c9c016ea8cbe6b7a99d2b1bf5a019de3b23913e0e29167623c07866fbe1ab7c","ssdeep":"","tlshash":"5bf02848b8a9247f0cbb06a753c303e5b6241446e089422f3774ebce0b865556e529c9","size":578,"data":"","first_seen":"2026-04-26T14:04:00.728075Z","last_seen":"2026-04-26T14:33:50.191009Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"chang-enow.org/apple-touch-icon-180x180-1.webp","fqdn":"chang-enow.org","domain":"chang-enow.org","tld":"org"},"ip":{"addr":"176.125.242.151","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chang-enow.org/","date":"2026-04-26T14:03:35.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chang-enow.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Apr 2026 12:50:00 GMT","end":"Sun, 12 Jul 2026 12:49:59 GMT"},"fingerprint":{"sha1":"D7:CA:DD:C8:EB:F5:A8:CC:70:9B:90:EB:5D:13:34:78:0A:38:1D:1A","sha256":"AC:1F:F5:E9:9F:5A:88:4F:7F:17:8C:A0:CF:67:AB:DA:2C:26:F2:3E:BB:E4:A8:E5:61:4F:4D:F2:12:D3:D2:1B"}}},"request":{"raw":"GET /apple-touch-icon-180x180-1.webp HTTP/1.1\r\nHost: chang-enow.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chang-enow.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 26 Apr 2026 14:03:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1942\r\nLast-Modified: Fri, 07 Nov 2025 11:51:16 GMT\r\nConnection: keep-alive\r\nETag: \"690ddd34-796\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1942,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8ac03768d1cf65ba50c9d6f4503620a8","sha1":"cfb2faa92a735430b30101f03c75eda1d516081f","sha256":"ec1c78db5cc9914174a6d4aeec190e14ecf0f7c442865166bbf70f500802dfdf","sha512":"4ba0d5b28353cedf94e7231c9170061e870046a1ea581c5b919ebe62d15acf3f5b39cfde12b5979930e77756a835349454fd14080c942cbfd6ced703d4f5ea7f","ssdeep":"","tlshash":"9541087e20b71d4dd3a85e284bb19f1e8995460909cb8140a95b9b1ca77ef33a057cca","first_seen":"2025-11-13T06:14:08.540129Z","last_seen":"2026-08-09T22:07:07.879986Z","times_seen":47,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chang-enow.org/","fqdn":"chang-enow.org","domain":"chang-enow.org","tld":"org"},"ip":{"addr":"176.125.242.151","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-26T14:03:34.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chang-enow.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Apr 2026 12:50:00 GMT","end":"Sun, 12 Jul 2026 12:49:59 GMT"},"fingerprint":{"sha1":"D7:CA:DD:C8:EB:F5:A8:CC:70:9B:90:EB:5D:13:34:78:0A:38:1D:1A","sha256":"AC:1F:F5:E9:9F:5A:88:4F:7F:17:8C:A0:CF:67:AB:DA:2C:26:F2:3E:BB:E4:A8:E5:61:4F:4D:F2:12:D3:D2:1B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: chang-enow.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 26 Apr 2026 14:03:34 GMT\r\nContent-Type: text/html; charset=utf-8\r\nLast-Modified: Mon, 13 Apr 2026 13:40:14 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69dcf23e-7476\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29814,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (630)","md5":"7df3bbeddbfd710e644bbb0f5761b4ee","sha1":"f39ce133e124bc694876b1b9266207012a86cad3","sha256":"f61fd80b3990b5bcec98117d50b67f998f7a389b35947268f73dd6b9ade969aa","sha512":"64515a7e83bee2f6f6df4c8b3cebaec09786e9d1c1bf5b2abf11b4f72cb0e00353c1734fece12697f051ffb76aa901f109849e2ab2d9d39e04996f43d9e54604","ssdeep":"384:FQquecttFSjWP9slAduUGvfUw+q4IiH41W3:F18tFYWPWlAduUGnUw+yiH4c3","tlshash":"aad2a5b1b1f6a03770a3c1e22796139b36a4f413c80a821577fc97a88fc6de58953a4d","first_seen":"2026-04-26T14:04:00.719139Z","last_seen":"2026-04-26T14:33:50.188654Z","times_seen":2,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":145,"dns":15,"connect":60,"send":0,"wait":61,"receive":1,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Bebas+Neue\u0026family=DM+Sans:wght@300;400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chang-enow.org/","date":"2026-04-26T14:03:35.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=Bebas+Neue\u0026family=DM+Sans:wght@300;400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chang-enow.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 26 Apr 2026 14:03:35 GMT\r\ndate: Sun, 26 Apr 2026 14:03:35 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3517,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e7ea56ca03dd8f5ac6c96ccb77b1abba","sha1":"7393cd387ff85876885b3280efa0a1abe505d3f2","sha256":"f00d96a2ea389c9737ded0d8faf4946fd7831163198ff21ecfe2d3ad3bf82480","sha512":"17628a3132e342f634384bd16332d46d32917a487cd99ab08c336ddf12d963a62922391c062cb96af0f23b10ae11fb4f5fdb00b24584d918e5561d12e6f8b034","ssdeep":"","tlshash":"d871cc81046ba510eb935cc522cdbe32ef1f615064549974affe189cbcabc3e5362b4d","first_seen":"2026-03-07T06:03:06.675663Z","last_seen":"2026-07-20T20:01:48.902806Z","times_seen":16,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":108,"dns":1,"connect":21,"send":0,"wait":32,"receive":0,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/bebasneue/v16/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chang-enow.org/","date":"2026-04-26T14:03:35.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/bebasneue/v16/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://chang-enow.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13768\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Apr 2026 17:34:12 GMT\r\nexpires: Mon, 19 Apr 2027 17:34:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 592163\r\nlast-modified: Tue, 16 Sep 2025 13:27:24 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13768,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13768, version 1.0","md5":"5853435d21b13022c663f99f2bd76107","sha1":"1f063bd9a3dfa8dfd04e071c0a18369a971f8351","sha256":"a7c90c89240c134f7fdd33d40c000ec90b79d675ea53e8cc5a6d423c073de412","sha512":"7b7ea49e16c5255394872c346ea109b6687101c03e6c69ff634f3e835d8f5fc87a6e9846e1dd95e9b4e54592a2a26ed139db16c35958c6abd6e877fd5bb2f9ad","ssdeep":"384:CEEvtXmScTc9b7/kB++WPXP7kRU7+YTSagBj+q11Q:bEpn7skjkA+YTSagBS81Q","tlshash":"d052c0b8d5df2408c784e2b5ab7c2559c8ca1691d078bfb91a3235069f62d2180bccfd","first_seen":"2025-09-17T05:43:28.937898Z","last_seen":"2026-08-14T07:21:59.945323Z","times_seen":12433,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":70,"dns":1,"connect":7,"send":0,"wait":9,"receive":1,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chang-enow.org/","date":"2026-04-26T14:03:35.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://chang-enow.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 25 Apr 2026 23:53:35 GMT\r\nexpires: Sun, 25 Apr 2027 23:53:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 51000\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-08-14T06:15:24.863215Z","times_seen":33599,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":139,"dns":1,"connect":20,"send":0,"wait":8,"receive":5,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chang-enow.org/","date":"2026-04-26T14:03:35.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://chang-enow.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 25 Apr 2026 23:53:35 GMT\r\nexpires: Sun, 25 Apr 2027 23:53:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 51000\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-08-14T06:15:24.863215Z","times_seen":33599,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":171,"dns":0,"connect":24,"send":0,"wait":8,"receive":6,"ssl":144},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chang-enow.org/favicon-16x16.png","fqdn":"chang-enow.org","domain":"chang-enow.org","tld":"org"},"ip":{"addr":"176.125.242.151","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chang-enow.org/","date":"2026-04-26T14:03:35.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chang-enow.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Apr 2026 12:50:00 GMT","end":"Sun, 12 Jul 2026 12:49:59 GMT"},"fingerprint":{"sha1":"D7:CA:DD:C8:EB:F5:A8:CC:70:9B:90:EB:5D:13:34:78:0A:38:1D:1A","sha256":"AC:1F:F5:E9:9F:5A:88:4F:7F:17:8C:A0:CF:67:AB:DA:2C:26:F2:3E:BB:E4:A8:E5:61:4F:4D:F2:12:D3:D2:1B"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: chang-enow.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chang-enow.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 26 Apr 2026 14:03:35 GMT\r\nContent-Type: image/png\r\nContent-Length: 433\r\nLast-Modified: Fri, 07 Nov 2025 11:51:16 GMT\r\nConnection: keep-alive\r\nETag: \"690ddd34-1b1\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":433,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"5ac8e3aa2431153d5d10439aad9cf8d5","sha1":"9d39102b3f776cdb485f0e886111d3a1f3341f39","sha256":"d5bd4c28ab0b340efcde1a5f8091af51de93bf3a6daa677e250f104ba2edb791","sha512":"994b6abccfb8a067366362fe5361607094f879a4bc0ffc16247ffe78952fcc12626850f555bddcd1659fb938f9ef1b5ed3582f7fe0466ce2c15571c3523fad2a","ssdeep":"","tlshash":"47e023a166c7ab9c768d003f428e8524941c622e848c412c2c0315415296615a0b6fde","first_seen":"2025-12-19T16:36:33.420211Z","last_seen":"2026-08-09T22:07:07.880679Z","times_seen":65,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":1,"connect":57,"send":0,"wait":57,"receive":0,"ssl":199},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}