{"report_id":"31c93d61-d705-4979-82fc-c815c2140551","version":6,"status":"done","tags":[],"date":"2025-08-29T06:47:50Z","url":{"schema":"https","addr":"takura-app-telegram-panel.ru","fqdn":"takura-app-telegram-panel.ru","domain":"takura-app-telegram-panel.ru","tld":"ru"},"ip":{"addr":"77.222.40.47","port":0,"asn":44112,"as":"SpaceWeb Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"title":"Участие в акции"},"submit":{"url":{"schema":"https","addr":"takura-app-telegram-panel.ru","fqdn":"takura-app-telegram-panel.ru","domain":"takura-app-telegram-panel.ru","tld":"ru"},"ip":{"addr":"77.222.40.47","port":0,"asn":44112,"as":"SpaceWeb Ltd","country":"Russia","country_code":"RU"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-03T06:47:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-29T06:47:29Z","timestamp":1756450049,"ip_dst":{"addr":"104.21.38.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.15","port":35554,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2025-08-29T06:47:29.275227+0000\",\"flow_id\":373609759578213,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":35554,\"dest_ip\":\"104.21.38.117\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"obhodfix.icu\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"8dfdcea729c724b66a8eaf89700621de\",\"string\":\"771,49195,0-23-65281-11-16-5\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3405,\"start\":\"2025-08-29T06:47:29.268389+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"pabhayx.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"obhodfix.icu","ip":{"addr":"104.21.38.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-18","domain_rank":0,"first_seen":"2025-08-14T11:11:38.0099Z","last_seen":"2025-08-25T10:25:37.184678Z","alert_count":0,"request_count":1,"received_data":963,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"PHP:7.2.24","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pabhayx.top","ip":{"addr":"66.63.187.178","port":443,"asn":214943,"as":"Railnet LLC","country":"United States","country_code":"US"},"domain_registered":"2025-06-08","domain_rank":0,"first_seen":"2025-08-27T14:22:26.397553Z","last_seen":"2025-08-27T14:22:26.397553Z","alert_count":1,"request_count":1,"received_data":5049,"sent_data":550,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-08-27T15:14:26.687687Z","alert_count":0,"request_count":3,"received_data":231911,"sent_data":1957,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"rf-marketplace.universityofgod.net","ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":59,"received_data":5705447,"sent_data":33890,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-08-27T15:11:05.791298Z","alert_count":0,"request_count":10,"received_data":382558,"sent_data":5675,"comment":"","tags":null,"fingerprints":null},{"fqdn":"takura-app-telegram-panel.ru","ip":{"addr":"77.222.40.47","port":80,"asn":44112,"as":"SpaceWeb Ltd","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":2056,"sent_data":1407,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.27.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-29T06:47:29Z","timestamp":1756450049,"ip_dst":{"addr":"104.21.38.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.15","port":35554,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2025-08-29T06:47:29.275227+0000\",\"flow_id\":373609759578213,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":35554,\"dest_ip\":\"104.21.38.117\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"obhodfix.icu\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"8dfdcea729c724b66a8eaf89700621de\",\"string\":\"771,49195,0-23-65281-11-16-5\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3405,\"start\":\"2025-08-29T06:47:29.268389+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-16T21:05:31.940658Z","times_seen":744665,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/vutttooo.js?21223322=3322221233","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"33e377e9b55b5f5d67292f2d60db5a10","sha1":"41b6bc0f8cf966286e46dcb9f5fc91e0a276e46d","sha256":"ba561d78ccd9c91b3c404242e4b5fb9437775f33948d847f15356991019b46a6","sha512":"0d5323bde606393fc0c8011d1228f38e91a1f293660e5134843780016c97156c88575ab86a21572e6830547afdcc2d2bcf26d4d852f897d6fbc81ef05a3b2995","ssdeep":"24576:f8yvw5csE5K1Ba9VolENnrNKzhS2G35K3i5DH5FdJARDBFHDQ9Tt+08hql3ICwKz:6c95KcrNoS2G35IIuP8We","tlshash":"f9f55384b3c0b89417479b7a761bf0d6f45e0cde3a84484fe219fc90f5e522ae9e5a31","size":3589152,"data":"","first_seen":"2025-07-19T19:04:11.949298Z","last_seen":"2025-10-01T13:25:20.25933Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"takura-app-telegram-panel.ru/","fqdn":"takura-app-telegram-panel.ru","domain":"takura-app-telegram-panel.ru","tld":"ru"},"ip":{"addr":"77.222.40.47","port":80,"asn":44112,"as":"SpaceWeb Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"62783fe365ce8471428209720176fb2c","sha1":"3a3f9adfa1e191bc5ea3ea3cb831182d97455d9c","sha256":"5674b40b0877027e96dff0c363a00936f087a06cf7c2c3afb290af888f75de3e","sha512":"0672462cb5b4a72bdce1523f7dbf412f93ba59a30bee1d3fdf809ecb53a1cc14496f229f722ab079b45eabcc43a9deaef94077a564828abeab2138e0647db035","ssdeep":"","tlshash":"9d115049587304df385225ccaf85f2a4616d6369108b427910b9b863acac0f37edf1d7","size":1038,"data":"","first_seen":"2025-08-26T01:24:56.99369Z","last_seen":"2025-08-29T06:47:59.642312Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"aa5690c3fca0cc8bdcf77b2d5d3e4da7","sha1":"758406790e8b7edc8ec4a563a5173f4a069705c7","sha256":"4c7677ac880d906610b487c2d1e8b03ed0cb6af949ae17db1bbd60514672f464","sha512":"dd845d0feacc5cb86ac0d15f6989e3ac8cb622da803c2fcce9984ec1ff105bbf2c1e1b096a0aa3fdd0d2f3d321ced6af7547a734b03c4e18285452cff7b3d418","ssdeep":"","tlshash":"ad610004b2f07a70235b9dab763734d5fc2548b73cd88cc6f5149c9429b2a27c6d6a78","size":3247,"data":"","first_seen":"2025-08-29T06:47:59.643294Z","last_seen":"2025-08-29T06:47:59.643294Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-16T21:05:31.872141Z","times_seen":237882,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/favicon.ico","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:33.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Tue, 10 Jun 2025 11:29:26 GMT\r\netag: W/\"68481716-3c2e\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"4ae7188c230452e48a87a9c5767d5c35","sha1":"903529516e6c4b4963e6281015dde8640025901c","sha256":"4b2d50c26301f78e621062b3674550e72878325b9b72ee8755e9f8a5b2c4375e","sha512":"9c2ca66aa5613f9c0f54a3c0ba2b79f1b32ba531e45ced871f6bea4d9310bcfa4b5524bd81b765f24171c13b80819047c386f2bbb9a0f60de34b7e77930019ea","ssdeep":"48:tUPBgloYXSgxRzrr7oqqqqqqqqJH/4W2p2hbRN9xAZz7Gy2ZLz0x:twYXSscqqqqqqqqJfep2hbRnuZPGDQx","tlshash":"d862ef2556290019c147da335a964fbaffab3ad9dd031b35a3e1a70c9d22add37203f1","first_seen":"2025-08-19T01:44:40.53987Z","last_seen":"2026-08-05T10:33:26.364838Z","times_seen":64,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rf-marketplace.universityofgod.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18664\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 27 Aug 2025 22:33:00 GMT\r\nexpires: Thu, 27 Aug 2026 22:33:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 116074\r\nlast-modified: Wed, 28 May 2025 18:54:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18664,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18664, version 1.0","md5":"be9f418664929cb873436f8f4b5b5beb","sha1":"1a47d6de5c3f88415b0522609694be08fb954a66","sha256":"3f8137d61fbd7fb1e0f5b2dc67c6995a95cdd74fa132d1879c7db0a3bd270399","sha512":"926d942e5d24c399d0af1ebc1fc3a69a2c3de45d875e4fcf036780a6ba3db49a282f3482b400a5313af0ed02df47f45e60557a21e6ed97af8ea5ef00edd62da0","ssdeep":"384:teSiWRmlH5p4G/AhlCVQIy79ydeYYkfGwJJ9Irz3mHrEG1o:tXpmlZ7AfCW9yoYVfGWirzWHrxo","tlshash":"8482e007f5fe033cfbcc55791af68eaa76a7b70694381b9c3a5455a351db0008c26c98","first_seen":"2025-01-27T07:37:51.835019Z","last_seen":"2026-07-06T23:36:27.160386Z","times_seen":1219,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/assets/okay.mp3","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 45505\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-b1c1\"\r\ncontent-range: bytes 0-45504/45505\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":737,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":348,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/assets/okay.mp3","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 45505\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-b1c1\"\r\ncontent-range: bytes 0-45504/45505\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":814,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":419,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"takura-app-telegram-panel.ru/","fqdn":"takura-app-telegram-panel.ru","domain":"takura-app-telegram-panel.ru","tld":"ru"},"ip":{"addr":"77.222.40.47","port":80,"asn":44112,"as":"SpaceWeb Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-29T06:47:28.938Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: takura-app-telegram-panel.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.27.4\r\nDate: Fri, 29 Aug 2025 06:47:29 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=10\r\nVary: Accept-Encoding\r\nLast-Modified: Sat, 23 Aug 2025 22:16:00 GMT\r\nETag: W/\"7140411-309-63d0faad2a800\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":777,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"c3854b30e6a6dc2b87e5a5b47f692f48","sha1":"bb14618c18b775509230b889f07a4cd7091919c8","sha256":"816e54d62a45b7d2fd86c5c019f3fd0a5fc313d65342be5223ae0ac335c5f9ba","sha512":"e5b71b813619060981ddd22ae3a78b309842b5b25232aad070c0e0355512653820bf7a6cbeab3be98acce6178ff47e062b4c0e8b4f42458ca420350beea2d673","ssdeep":"","tlshash":"1b01fd510e9508e57831a0e3df08ba1caa8345be360283b934697c0a30d1024da6d5e7","first_seen":"2025-08-26T01:24:56.957846Z","last_seen":"2025-08-29T06:47:59.588707Z","times_seen":2,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":58,"dns":1,"connect":57,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obhodfix.icu/apiRequest/domainsGet/","fqdn":"obhodfix.icu","domain":"obhodfix.icu","tld":"icu"},"ip":{"addr":"104.21.38.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://takura-app-telegram-panel.ru/","date":"2025-08-29T06:47:29.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"obhodfix.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 07:42:04 GMT","end":"Thu, 16 Oct 2025 08:29:55 GMT"},"fingerprint":{"sha1":"34:BF:0D:EE:E9:3F:7C:3B:08:88:6E:11:00:6B:33:3D:9D:53:A7:BD","sha256":"DE:5D:01:1C:D4:8C:D9:C8:9A:FF:67:4D:AA:74:49:03:28:8B:8B:E7:6F:77:F5:FE:70:A8:61:2B:F7:01:C3:1E"}}},"request":{"raw":"GET /apiRequest/domainsGet/ HTTP/1.1\r\nHost: obhodfix.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://takura-app-telegram-panel.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://takura-app-telegram-panel.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Aug 2025 06:47:29 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.2.24\r\nvary: accept-encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: http://takura-app-telegram-panel.ru\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iwp3cDEW3pjU9hqU5g5gMyzglO52J1kdQw8E7MITAc4JgHvvA6qa20Gg8Y0rJf38SQFFdctEoVvE2zHxxDrmoKuHyBthVeWZbHrQmQ%3D%3D\"}]}\r\nset-cookie: PHPSESSID=8gk306kop88m0lke8lvoqlulnf; Path=/\r\ncf-ray: 976a18e80ac30883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.2.24","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4c0a23a800a2b77ee52a28cab0783f37","sha1":"077c95e03376287961dce1846b8090a655c75b74","sha256":"37c4dff60b58d0e1c626b5981eb30b357b787e2724b2e4bf99d1fcf530d78925","sha512":"78711c148bebf9d2aa8c8fcce8c2d2d1de391d8dfb2b8d29a0b286ef9ee9edcfd06c55dec79b3e618c331be3bfd98dea0248019c501c69472582a11fc6b2e7a9","ssdeep":"","tlshash":"65a0027b3364327013d14bc875d4b0374477b1133d54554d00075c6005300f4c47436e","first_seen":"2025-08-27T14:22:32.875827Z","last_seen":"2025-08-29T06:47:59.592733Z","times_seen":2,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":97,"dns":78,"connect":1,"send":0,"wait":79,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/cards/3.jpg","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:35.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /cards/3.jpg HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11230\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-2bde\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":11230,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 345x221, components 3","md5":"ad531a8df57280921e78b9fcc856c9d6","sha1":"00adf9da04f5926ff447881ed577a97e14f44a09","sha256":"373a837fca7955a3a947b7076823e45cc313908382d7904b11ae0fd268aae329","sha512":"a369115a65d2b3f5d25bd0e4363de01f485d599be67575b6a8f2a94b42848e7924ca880cae0f306d9efa5ff2ac0771282d4b6151ab75abb49681fec214a3996a","ssdeep":"192:j8bHh4buNVeZGcGJm+q3/B4CXALlIfvCDwFgLMXwl78yAE7Ahj+HCCa0L0aLHlaL:4zP4V54CXTfvCDwFgLMglwHS3L0mlaL","tlshash":"5a329f46fff5c101df6100fd298d5e516d548842ac938b9342c39fc6baa4af0e9659ec","first_seen":"2024-08-26T17:33:27Z","last_seen":"2026-07-26T09:32:07.344283Z","times_seen":78,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/img/people/m1.jpg","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:41.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /img/people/m1.jpg HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8093\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-1f9d\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8093,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 225x225, components 3","md5":"0494a27d95a44e39ecc75c26bae88d80","sha1":"24e08e6d8e2fb7aa59b03e79a2e7be88c9e0d9aa","sha256":"b3e969bf2f65119e1e98aeb49bdbd4b7cdb46ec3e7b4b1bbbd2497ff8c614d9d","sha512":"c76a1bf4f31b5e67edcfdc7605023d3e5f00611d7fca7c88a208e38f70ec7947c142af981589aa3c57d7b93307a1244e62c83139d0f93f11c7d960b2d03ee200","ssdeep":"192:Y/kVqp4tKtUvzDyW+h6TCh86dRs/QuIcshO0dXcm:Y/kEUvz9+hz86Mou+","tlshash":"4bf19f55d192386bd539aeb9cac87b8fd3da38522542d51378c342c5bc99bac08bbc31","first_seen":"2024-08-26T17:33:28Z","last_seen":"2026-08-05T10:33:26.379219Z","times_seen":76,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":109,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-29T06:47:30.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://takura-app-telegram-panel.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\nset-cookie: mem=1; expires=Sun, 28-Sep-2025 06:47:31 GMT; Max-Age=2592000; path=/; secure; HttpOnly\nsl-session=nO8wUIOesmiXs/XnVgZ1QQ==; SameSite=None; Secure; Path=/; Max-Age=86400; HttpOnly\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4338,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3245), with CRLF line terminators","md5":"f257f7d1029004d906994df9be69713c","sha1":"799e1937d00fb7ae2b11a99a88a516afaf060dd1","sha256":"ba4351259800a1b5e420a085e61f316936fb232b25141d359fc2a159f5880279","sha512":"8464a1aa9d6173e30c5acc9cac1ae75279a3506c6e2e9f9e67e159c7330e84909eed5787a99cdbd0d4caf845a416a084b04d328872d60de030f7f40906e83158","ssdeep":"96:wHDoHD5Q/f8SHWKdlidJdxSlso6H7LhCfkHVp8PmQi/UTuj:owu/fZHNdIdJdxSlso6H7LhCfCSeQi//","tlshash":"b3916512b4b07e34336b99ba7a2736e4ec2548773cc85cc6f558688a19f1e22c5c767c","first_seen":"2025-08-29T06:47:59.598646Z","last_seen":"2025-08-29T06:47:59.598646Z","times_seen":1,"resource_available":false,"data":null}},"time_used":916,"timings":{"blocked":303,"dns":42,"connect":130,"send":0,"wait":309,"receive":0,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/static/media/gift1.72a9338ddf46c87cef90.png","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /static/media/gift1.72a9338ddf46c87cef90.png HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T21:08:34.401832Z","times_seen":17924563,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/static/media/box2.7c398908d2b8ff5c9bff.png","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /static/media/box2.7c398908d2b8ff5c9bff.png HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 384839\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-5df47\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":384839,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1920, 8-bit colormap, non-interlaced","md5":"6bf5e02c1ef52ec23f8f23f45c462249","sha1":"779ba8d90830db7dc8febeefddd903e0f8ad9e59","sha256":"2e5137fb42a9834f9f32e05de810bb93e4bf452ac45c3d062bef4b02779bb014","sha512":"9d5ac2388e05b09ff2390bef143fc40af9e166d578f63cc883359ad44662cc806683a690d37546eacfb93baf3465443eaca13a6c4eb509de91b53b2b66a77d9f","ssdeep":"6144:/MmXU2AOBp5GVy6cJjrTwC0L3hEfY2gxUVjuGM8dQ8wIkHsr:/MwUROBpYUJPTwCmy8UcGMIsIkH4","tlshash":"61842336e3d5c32ae3d2da747c646068a18cacccc1eb76ff56dc198b84f0a5926f0525","first_seen":"2024-07-07T20:33:11Z","last_seen":"2026-07-26T09:32:07.338667Z","times_seen":81,"resource_available":false,"data":null}},"time_used":955,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":615,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rf-marketplace.universityofgod.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18664\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 27 Aug 2025 22:33:00 GMT\r\nexpires: Thu, 27 Aug 2026 22:33:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 116074\r\nlast-modified: Wed, 28 May 2025 18:54:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18664,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18664, version 1.0","md5":"be9f418664929cb873436f8f4b5b5beb","sha1":"1a47d6de5c3f88415b0522609694be08fb954a66","sha256":"3f8137d61fbd7fb1e0f5b2dc67c6995a95cdd74fa132d1879c7db0a3bd270399","sha512":"926d942e5d24c399d0af1ebc1fc3a69a2c3de45d875e4fcf036780a6ba3db49a282f3482b400a5313af0ed02df47f45e60557a21e6ed97af8ea5ef00edd62da0","ssdeep":"384:teSiWRmlH5p4G/AhlCVQIy79ydeYYkfGwJJ9Irz3mHrEG1o:tXpmlZ7AfCW9yoYVfGWirzWHrxo","tlshash":"8482e007f5fe033cfbcc55791af68eaa76a7b70694381b9c3a5455a351db0008c26c98","first_seen":"2025-01-27T07:37:51.835019Z","last_seen":"2026-07-06T23:36:27.160386Z","times_seen":1219,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":78,"dns":9,"connect":11,"send":0,"wait":22,"receive":1,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/cards/9.jpg","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:35.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /cards/9.jpg HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11299\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-2c23\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":11299,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 345x221, components 3","md5":"7aca7b2ff1d74f54aa8f232c5fe24552","sha1":"c764aed681c45d6dba263eb5d34dec2ea607269a","sha256":"d2c7d0055c7c9e14b62a4fa979c0413a8b3da22f92635eb6df9368648bdfd941","sha512":"799432027fdcb53311bfeb8d878fbe34cad757d680732800aca4276db1eccda4bec2cc387c5859ef8340f49d18111b777bad61849d5c91adaade412dfcfb662a","ssdeep":"192:m9uq+EuvrlJnXzwFyKEUVEl6K3KedirKM0gib3SH8pIl51LzweIhJhi+D:mEVTllU8dIU6KZi+Zga3SnceIh6+","tlshash":"e832b028afa56a12d1171e3983da43e037445d703b445f94b5fa682cb2ff16a2c4bce6","first_seen":"2024-08-26T17:33:28Z","last_seen":"2026-07-26T09:32:07.32442Z","times_seen":78,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/assets/okay.mp3","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 45505\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-b1c1\"\r\ncontent-range: bytes 0-45504/45505\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v34/P5sMzZCDf9_T_10XxCF8jA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/arimo/v34/P5sMzZCDf9_T_10XxCF8jA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rf-marketplace.universityofgod.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 98564\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 Aug 2025 10:01:36 GMT\r\nexpires: Fri, 28 Aug 2026 10:01:36 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 20:08:45 GMT\r\ncontent-type: font/woff2\r\nage: 74758\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":98564,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 98564, version 1.0","md5":"e2e5476b5eb7e8241038afb0234a425c","sha1":"c62ea34a30925ef7d481eecdbeb792d115829a68","sha256":"86c4a19d6742fcd22c42db5891d1ab26292790607e15afe0d52674d10f9ce93d","sha512":"b0d1d66aeb76a1cf150236565d3a624a82e2b68ced9350eccc0d87bad624e2d1e56399ea2066d0e962cb62656072763de711905ac221bcbce5731383aa71403a","ssdeep":"3072:92jFehI8xblsy6wedn3cwvloW1qZnKDB52Q8Ca/2Gx:92S5sybedn3ciYJQNq2q","tlshash":"d6a31382f90bef7aaf59003f61a7559e508bbf8814f622c4dbb9560c2f1120677650bf","first_seen":"2025-06-06T23:51:17.089524Z","last_seen":"2026-08-01T02:32:19.790422Z","times_seen":235,"resource_available":false,"data":null}},"time_used":649,"timings":{"blocked":310,"dns":1,"connect":10,"send":0,"wait":9,"receive":6,"ssl":307},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/assets/okay.mp3","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 45505\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-b1c1\"\r\ncontent-range: bytes 0-45504/45505\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"takura-app-telegram-panel.ru/","fqdn":"takura-app-telegram-panel.ru","domain":"takura-app-telegram-panel.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-29T06:47:27.376Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: takura-app-telegram-panel.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T21:08:34.401832Z","times_seen":17924563,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":68,"connect":58,"send":0,"wait":0,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pabhayx.top/public/8246103893238421","fqdn":"pabhayx.top","domain":"pabhayx.top","tld":"top"},"ip":{"addr":"66.63.187.178","port":443,"asn":214943,"as":"Railnet LLC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-29T06:47:29.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pabhayx.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 10:53:41 GMT","end":"Mon, 24 Nov 2025 10:53:40 GMT"},"fingerprint":{"sha1":"2D:7E:50:0E:3F:69:3F:72:CD:FD:EB:F7:8F:A7:CD:C0:D7:DC:CD:74","sha256":"93:80:CE:B2:FF:9F:23:14:38:DA:1C:3E:2F:15:2D:7E:BE:0E:E7:2E:CC:3A:67:EE:52:39:F2:B0:61:19:24:79"}}},"request":{"raw":"GET /public/8246103893238421 HTTP/1.1\r\nHost: pabhayx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://takura-app-telegram-panel.ru/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:30 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=43f512isma0trncnsbbnhbihj9; path=/\nbuyer=88c542015784ee6e73c96ff84925537d; expires=Sun, 28 Sep 2025 06:47:30 GMT; Max-Age=2592000; path=/\nsl-session=SU5pM4KesminK8/NK7f69w==; SameSite=None; Secure; Path=/; Max-Age=86400; HttpOnly\r\nlocation: https://rf-marketplace.universityofgod.net?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":4338,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T21:08:34.401832Z","times_seen":17924563,"resource_available":true,"data":null}},"time_used":1880,"timings":{"blocked":491,"dns":336,"connect":77,"send":0,"wait":893,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-29","alert":"Sinkholed","trigger":"pabhayx.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/assets/okay.mp3","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 45505\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-b1c1\"\r\ncontent-range: bytes 0-45504/45505\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/assets/okay.mp3","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 45505\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-b1c1\"\r\ncontent-range: bytes 0-45504/45505\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/assets/okay.mp3","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 45505\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-b1c1\"\r\ncontent-range: bytes 0-45504/45505\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":226,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/assets/okay.mp3","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 45505\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-b1c1\"\r\ncontent-range: bytes 0-45504/45505\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/cards/1.jpg","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:35.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /cards/1.jpg HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12914\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-3272\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":12914,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 345x221, components 3","md5":"5cc46a667e35e5cdfd1718f74766c414","sha1":"efe5df228cd5232d689bcfadaddb303bdead5a49","sha256":"0e4bed1c6ac1dab94b9eebcb013641b463fec05aee854cc52338b55a96d8cd3d","sha512":"53c422c5845ceb87df825187a8355acd0047949a77d00910b5ba11262f8079d405c6e87ea199d0c12250742fd1aec60016eca6bf63d7fb582659f1951503dd11","ssdeep":"192:FPr2muKmzJD6Y9h1xOBPms5IqvGcN7MJb2oa7rGSv3h5UX3hU0hGpyCLUFIyt4Kr:tyma5Hx6PVZPJmna7rGMR2X3hUKGpyVL","tlshash":"7942b066308dbc34dd7938c938e10883a25d4ce326add54de34315a76a6bcefec6406d","first_seen":"2024-08-26T17:33:27Z","last_seen":"2026-08-05T10:33:26.367055Z","times_seen":79,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/static/media/cc5.59e820be6af2d2e73240.png","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /static/media/cc5.59e820be6af2d2e73240.png HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 61915\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-f1db\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":61915,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 900 x 900, 8-bit colormap, non-interlaced","md5":"b8165bcc4fd13b422b693a53f318255d","sha1":"a0d748657d467afbbdabf09c3c933ccef937061d","sha256":"6dbfdeda550f6a91cc6370d5685c3d3fac797770596544666419c74662a43c6d","sha512":"2fc3e2986943377d2f60b9e8680da3c98eba153b0bd9dc3cc39d287561434175a20bbfc6578a2b8ee61119af7de4bf5df62b6a4d6d40b8cc8b9de7b727d28948","ssdeep":"768:hePtfTPnjCoA9O5qugTVSlj+VPrQquNRv+m1+lWGdfliaUxpJ8DpMXYmjjl5n/3f:ytfTfj935qNTuegr1+MGne2NmjjDein","tlshash":"515302bda62ea85cdcab35f0c97079d15cc3cae1d037bb727a61d80d0d951a35324692","first_seen":"2024-07-07T20:33:11Z","last_seen":"2026-08-05T10:33:26.372223Z","times_seen":82,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":249,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/assets/okay.mp3","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 45505\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-b1c1\"\r\ncontent-range: bytes 0-45504/45505\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/assets/okay.mp3","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 45505\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-b1c1\"\r\ncontent-range: bytes 0-45504/45505\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/assets/okay.mp3","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 45505\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-b1c1\"\r\ncontent-range: bytes 0-45504/45505\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":745,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":351,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/assets/okay.mp3","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 45505\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-b1c1\"\r\ncontent-range: bytes 0-45504/45505\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":725,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":353,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/cards/16.jpg","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:35.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /cards/16.jpg HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10106\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-277a\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10106,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 345x221, components 3","md5":"5bd83109a799306863207f91b7d2c125","sha1":"3d483f7972498b107788ddae2da8368b01d7ef32","sha256":"8e91630d19ac32121ccae71adbefb60bbc1466a263908352ebed1a3ce35774d4","sha512":"8e4f40983b62e855c8e3b90c656873b6c109fd3b34515331a83a69b9ab446cc8a692297109c021943b86b2e31d8be333172fbbd9a39538645576bbe55ff68d73","ssdeep":"192:WhgwCmGxmUxTgi4xF6L/yb2dyy2btr3jRTp98i3eS6Bz+cNiv8RY/v9K:6/CFxmUOxF0KidyPb1VTp98iuSa+iRYw","tlshash":"b922bf5ef3e5daa7cac165bdc89524a9dfa29e5056702a532c68ce42d80827902b10db","first_seen":"2024-08-26T17:33:27Z","last_seen":"2026-08-05T10:33:26.3616Z","times_seen":79,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/cards/7.jpg","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:35.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /cards/7.jpg HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11202\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-2bc2\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11202,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 345x221, components 3","md5":"2905ac10fb3980b14b8184a4c709cfd5","sha1":"cbbfd50581dd0463caf2021518d1dca50dd7029d","sha256":"595d791f776f64f6dd3c925edd435ffe21baa46ee1af9a60510eb94fd6291f5c","sha512":"81906176af8adc77c2b05b2a278df89176fc3a2b582530f54be45170e7cb4e24cad85a6948be0f85e908a87bdf3d953cfea39c2fb6e88fe34da792276f334422","ssdeep":"192:yT8lHF1gvjH3/GG6V5HcTIrtZ2u5hqYw5DPc+KFXxpKWI/C+Rgu3LFnMckRlaRTu:ywL1qHPGDbcTMLzE5DP4jK9/C+RFnMcW","tlshash":"f332be1230ee0b09f837057b209c961b0dc8b8839646fd99265111d95bbf0efc9689ff","first_seen":"2024-08-26T17:33:27Z","last_seen":"2026-07-26T09:32:07.347711Z","times_seen":78,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"takura-app-telegram-panel.ru/","fqdn":"takura-app-telegram-panel.ru","domain":"takura-app-telegram-panel.ru","tld":"ru"},"ip":{"addr":"77.222.40.47","port":443,"asn":44112,"as":"SpaceWeb Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-29T06:47:28.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"test-self-signed.spaceweb.ru","organization":"Test Self SSL Company"},"issuer":{"commonName":"test-self-signed.spaceweb.ru","organization":"Test Self SSL Company"},"validity":{"start":"Wed, 25 May 2016 10:09:43 GMT","end":"Tue, 24 May 2016 10:09:43 GMT"},"fingerprint":{"sha1":"D0:DB:EC:25:8E:FF:B1:F2:A0:62:3C:8B:7B:96:D5:FF:82:4C:18:11","sha256":"40:19:05:3C:05:47:86:01:27:66:19:A7:8F:78:31:52:91:2B:AA:E9:61:A3:2E:14:4F:D5:AB:41:6F:1A:33:1B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: takura-app-telegram-panel.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.27.4\r\ndate: Fri, 29 Aug 2025 06:47:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 145\r\nlocation: http://takura-app-telegram-panel.ru/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.27.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":777,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T21:08:34.401832Z","times_seen":17924563,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":134,"dns":2,"connect":61,"send":0,"wait":61,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/static/media/logo3.3213fab10944ca343dfd.png","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /static/media/logo3.3213fab10944ca343dfd.png HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 13155\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-3363\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13155,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 4-bit colormap, non-interlaced","md5":"eb440b0f396c21ad4bc8dc71d802cf96","sha1":"3a401d549281b5b5ddd50c9e5711a50e329cb89c","sha256":"48278dd9e707b56656f6c6fa7d6474520396ef2e33dd06a7eccd47333f3e9930","sha512":"326d7348465d192f2e4cbc96ea392c1b44a276a2f4e45b5f6bd5d7b03648951e1b294fc3fe58d01853bdf9fce069a3c5b3521b64caa58b489f4f8ed6b8c114c5","ssdeep":"384:dptLsMYVB61orAUOSEw0hWgFh3i6CnMYJ9rLxwTK4p:dp1sMY361orAUfLA3mR95wxp","tlshash":"9642bf297a5fd1e0bd9c8e861e28945740c5bc9b7112bf73994315acc02c22d9dc9f1a","first_seen":"2024-07-07T20:33:11Z","last_seen":"2026-07-26T09:32:07.333816Z","times_seen":81,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/assets/okay.mp3","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 45505\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-b1c1\"\r\ncontent-range: bytes 0-45504/45505\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/cards/4.jpg","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:35.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /cards/4.jpg HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12741\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-31c5\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12741,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 345x221, components 3","md5":"305a66f652b6d42333bed692dfae2fe2","sha1":"a13c7b566837b007bdabec05b0ca8f36a7b7d67a","sha256":"688788cc84c1e47a85ad8c5268dbda119af2b234ace7a49e33c2f8d88ff810f1","sha512":"23bd66261e9ed589b5660aeccfe9c332af0b141968673816143ec5fa5b154587a2fa70ff5b86c2ddc882732e9726a7c69c7ed7eb1bc2353f361620c95b79fa18","ssdeep":"384:gsjyJ6da5j7NDOxIKn0xrKwh+ZhKJCrgx:rsAa17NDOjnWcKIrW","tlshash":"8f42cfc9d6b4a008e1b1b23519624b759ede2e64d69843cb4c6807f480f31ce9ea9fd3","first_seen":"2024-08-26T17:33:27Z","last_seen":"2026-07-26T09:32:07.323457Z","times_seen":78,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/vutttooo.js?21223322=3322221233","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:31.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /vutttooo.js?21223322=3322221233 HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 13 Jul 2025 05:39:03 GMT\r\netag: W/\"68734677-36c420\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3589152,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8ebe88592d83d044f8254471a4888f04","sha1":"cf011443ec051409dcf3de7132e0f3373c3b2e49","sha256":"f5fdfe339af0155a4d5ac93025ca9b1741aa5d1e71b82bfb84fda4459b5c77d2","sha512":"d369c0265ff9b7b26c3d0e89322787eb9d4ad349f5e0d1faf126c2abab530536b351d0c430b3917fcf32073d9a349efffee7e39ac6968174909b2a669a5fd474","ssdeep":"12288:OULAjhRz6vhIFq0DjbNx7cZGEITKWhd9kgrNtE5daIYnCP6ZQIBa9gu:f8yvw5csE5K1Ba9F","tlshash":"94251284b2c1b89423876f757a2ff0daf56f0ce93588440bd229f8d0f9b5609e9e5934","first_seen":"2025-08-26T01:24:56.9788Z","last_seen":"2025-10-01T13:25:20.145558Z","times_seen":7,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v34/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/arimo/v34/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rf-marketplace.universityofgod.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 Aug 2025 04:53:59 GMT\r\nexpires: Sat, 29 Aug 2026 04:53:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 20:13:45 GMT\r\ncontent-type: font/woff2\r\nage: 6815\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-08-16T17:30:50.055738Z","times_seen":7904,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":241,"dns":0,"connect":7,"send":0,"wait":8,"receive":2,"ssl":251},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v34/P5sMzZCDf9_T_10dxCF8jA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/arimo/v34/P5sMzZCDf9_T_10dxCF8jA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rf-marketplace.universityofgod.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13464\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 Aug 2025 10:17:34 GMT\r\nexpires: Fri, 28 Aug 2026 10:17:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 73800\r\nlast-modified: Thu, 29 May 2025 20:08:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13464,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13464, version 1.0","md5":"c3c999d86c40e0ae5cb9b11fe6f8f6b6","sha1":"9cab579edc5bd3be99685babd077cc186edc366c","sha256":"8b73730dac2513b137a7682f9abef928e2040491a2402babc255d05879c26b8f","sha512":"eb4d63a605d978b84b2fe3446f5ebf70b77e948841a2984e0701fe0299dfa8e1516a43369034d025db2dd27e026acb1063b5599a8612e3f83d43ad78819e7338","ssdeep":"192:roshLkCV+706GMnEj2WT6rYTEzPhdK2Mty1p0vcCn9JXu3qEZBEhOswlwzE/A10X:0sHunxW4QEzJd4qqf9JUqOEoP/BS98","tlshash":"6852cf3ff4219878ee37f279dd60904de166b58d0a206223e8a456f017edcd809e5a3d","first_seen":"2025-06-05T18:14:23.467212Z","last_seen":"2026-06-06T02:33:41.899684Z","times_seen":234,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":145,"dns":1,"connect":8,"send":0,"wait":8,"receive":1,"ssl":154},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rf-marketplace.universityofgod.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 Aug 2025 09:48:24 GMT\r\nexpires: Fri, 28 Aug 2026 09:48:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 28 May 2025 18:51:44 GMT\r\ncontent-type: font/woff2\r\nage: 75550\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-16T21:05:02.351463Z","times_seen":260178,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/assets/okay.mp3","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 45505\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-b1c1\"\r\ncontent-range: bytes 0-45504/45505\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/assets/okay.mp3","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 45505\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-b1c1\"\r\ncontent-range: bytes 0-45504/45505\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":676,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":286,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/static/media/box.3af34c06dfa92629e9c3.webp","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:33.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /static/media/box.3af34c06dfa92629e9c3.webp HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T21:08:34.401832Z","times_seen":17924563,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rf-marketplace.universityofgod.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18664\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 27 Aug 2025 22:33:00 GMT\r\nexpires: Thu, 27 Aug 2026 22:33:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 116074\r\nlast-modified: Wed, 28 May 2025 18:54:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18664,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18664, version 1.0","md5":"be9f418664929cb873436f8f4b5b5beb","sha1":"1a47d6de5c3f88415b0522609694be08fb954a66","sha256":"3f8137d61fbd7fb1e0f5b2dc67c6995a95cdd74fa132d1879c7db0a3bd270399","sha512":"926d942e5d24c399d0af1ebc1fc3a69a2c3de45d875e4fcf036780a6ba3db49a282f3482b400a5313af0ed02df47f45e60557a21e6ed97af8ea5ef00edd62da0","ssdeep":"384:teSiWRmlH5p4G/AhlCVQIy79ydeYYkfGwJJ9Irz3mHrEG1o:tXpmlZ7AfCW9yoYVfGWirzWHrxo","tlshash":"8482e007f5fe033cfbcc55791af68eaa76a7b70694381b9c3a5455a351db0008c26c98","first_seen":"2025-01-27T07:37:51.835019Z","last_seen":"2026-07-06T23:36:27.160386Z","times_seen":1219,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/assets/okay.mp3","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 45505\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-b1c1\"\r\ncontent-range: bytes 0-45504/45505\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/assets/okay.mp3","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 45505\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-b1c1\"\r\ncontent-range: bytes 0-45504/45505\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":787,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":393,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/cards/5.jpg","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:35.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /cards/5.jpg HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7790\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-1e6e\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7790,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 345x221, components 3","md5":"d2e6dafc17e3666ff0dd47b8919b9006","sha1":"b786124461a48dfc4aec94555b58014bc6aebcdb","sha256":"3c06457ba86564321a4596e8d24a5c3d7f05a08e5329522778c4b07788b63ff5","sha512":"bd7e5dd27402556ced622b38ed4035b6e49461bc5b129561be1961c45c2bd5c8461acb21b31c29035136c612db44a14b516782448b878e23d5ec00150fea91a2","ssdeep":"96:B38e2CjlULAldyWBNTF1NCMKG60GQqv+FEM4CXrbOvTjBgshl3YtLNmu3+DTdPxV:6e2CjLldywjJ60GQJEnkrX7tQI+f/V","tlshash":"32f18d13b2e86cb1f3952fb717882bda37a978b7c6d00a9531c60f49a32964d4c3631c","first_seen":"2024-08-26T17:33:27Z","last_seen":"2026-07-26T09:32:07.339601Z","times_seen":78,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/static/media/box2.7c398908d2b8ff5c9bff.png","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:33.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /static/media/box2.7c398908d2b8ff5c9bff.png HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T21:08:34.401832Z","times_seen":17924563,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/static/media/logo2.4a9d8accd3bb5b1b6b7d.png","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /static/media/logo2.4a9d8accd3bb5b1b6b7d.png HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 8426\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-20ea\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8426,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"755f72d2b88c32890a3809aa266d3469","sha1":"6ed5fd518c518acd99866ebcfd6c5b707db75c3a","sha256":"09f445724965e400c7fbfa55a1c5bdd336826e17834d60e0b3fdfac2c611f5b9","sha512":"87e68fc44bc09e345399f92dec588fdcde269fdae6820b2bfbc3f6fd1ae391dfa2e1625e3776c7c6005af5efd4fc57a0899be89eb6ac75854b3c67494a5c70a8","ssdeep":"96:AffKVX8pvkjvbwCevBo+EXAFqT8j/M1/mBcoFlqR0ESE9tMhVSjIXdcLsmh/UYlD:p8psj0Ce2+nqggAcwqZTMTd0smh/ZiA","tlshash":"ba02160bc71550bfc17e123618da0b45af9de2a268af17531db272627ca77ca7017f28","first_seen":"2024-08-26T17:33:27Z","last_seen":"2026-08-05T10:33:26.373059Z","times_seen":79,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/static/media/logo10.09da436bbc6e9556681c.png","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /static/media/logo10.09da436bbc6e9556681c.png HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 27835\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-6cbb\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27835,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"c79fc8db5fbcc29b6e2d6563623a112b","sha1":"36adf7c20ad6762feca653b982f37c472af3ce3d","sha256":"a0d9f60ba58da9b498aa2a59c1509a1c3f595a86cbceea6aca9c57d0b9677e01","sha512":"60e35dbb6e8ed09e4cf3ddc60b124712e738df331e9b7517be5fa7029d7b3de6ef8ab750611d4a45326893970627ab8e7c39d02e2bc3b41b341e63261e1b8331","ssdeep":"768:SYksj/Opl0vaha/bfd2T3ufzK0KlnFSAeS:jkszOoahAbfQ+umS","tlshash":"0bc2e1f962205ef9ae0aa5b3e9fc1870be7dc4e53371331c155a172fb094d0ae247994","first_seen":"2024-07-07T20:33:12Z","last_seen":"2026-07-26T09:32:07.342175Z","times_seen":80,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":218,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/img/people/w1.jpg","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /img/people/w1.jpg HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6227\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-1853\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6227,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 225x225, components 3","md5":"48e5f8c96a03a8910ef9e8d900111a3b","sha1":"6eacbdeca42ecc33ca52a3c5d3630f06e1a715cc","sha256":"65ca7534b7ed3fb59b96d265fc510f5bdc9a1dbba51cc957d58694209f9dc21c","sha512":"6626c2b63a44e4e4ede4666397e69f2091c73ee3907bd1314748aaf2ff6191ee1b2e947a100d37d7e6f2f8a9c2810eaddbf188780028ed53eeeb504620be085e","ssdeep":"96:d1vlaLItkVQDBqgpUBS2U2JAR76sgx85fJMR/erSHVxJMFtAkf4SyHHuHIO:3dDtp9qBS2U2SR7jFfJMRmkxS4SynuHL","tlshash":"5cd18ee1b242690d717735ba14dc25e777406f49b0e78a2806ca9e3a1af70ca34b61e0","first_seen":"2024-08-26T17:33:27Z","last_seen":"2026-08-05T10:33:26.357393Z","times_seen":79,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/assets/okay.mp3","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 45505\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-b1c1\"\r\ncontent-range: bytes 0-45504/45505\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/assets/okay.mp3","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 45505\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-b1c1\"\r\ncontent-range: bytes 0-45504/45505\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":655,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":265,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/assets/okay.mp3","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 45505\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-b1c1\"\r\ncontent-range: bytes 0-45504/45505\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":813,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":418,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/cards/10.jpg","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:35.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /cards/10.jpg HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11486\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-2cde\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11486,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 345x221, components 3","md5":"fd5d2139a56cd2ed55ef1ca5f8f6632e","sha1":"fab3a3c1ce6d807cb2f51827ac8fa97ac255eca7","sha256":"ae9099ee32976ae6ebebe3187f7c6dbad47df423309c3af44abd82b91a2f78a1","sha512":"e965591843dcd8b5d24b81279fbadc162653f66b6bc61a7eb6cd269e6087e375cd1b9c24b2f20a62b6d704686ebbf6b7c2e2c9c048e1efca848be741a24e6061","ssdeep":"192:CVDqWXLGHVYNjoCfAMvRYOgQFisURQ9Iru0V96D3FZrZszmnygqpeCgRbnFa:CQOL5cOAMvRrkmKrVX6DNszmygTzRbn0","tlshash":"cb32b0d962ece888dc94e471e9485732eb65978366c5fb03d50a9f983b0107e8e08da9","first_seen":"2024-08-26T17:33:28Z","last_seen":"2026-07-26T09:32:07.335549Z","times_seen":78,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/cards/11.jpg","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:35.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /cards/11.jpg HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8237\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-202d\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8237,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 345x221, components 3","md5":"cece6b1cc06caa1910ea7d758e2a1e46","sha1":"81f75b727f517e4af73a1d670bcc074e224713d3","sha256":"49328b6d39dcfd384019019759fbfd65f4cfe25259e383ddc7861c0720722f56","sha512":"2d4cb229483ecd9a1247a3ea8e66dfe0b98482832d8179cc65f4f229cd89a91605eba1ad7b08c256892a852a8c3708bc438762fcf66b56988efe56d006f2d9a7","ssdeep":"192:A70AtH36S4+rSqEowo24aw3gcgSIOwzIlVLfCbsHuJq:A70O6SPrSqEof24VZ1IOwklVLfEsyq","tlshash":"28029ee073a88e22e8978cb0fe0a5b32fe45985106075f5dfc5683cdab9d4d94c88b4d","first_seen":"2024-08-26T17:33:28Z","last_seen":"2026-07-26T09:32:07.316586Z","times_seen":78,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/static/media/star.8eed6b0af5bd7189c444.webp","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /static/media/star.8eed6b0af5bd7189c444.webp HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9867\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-268b\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":9867,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7ec7ecbb01b7ab1c22f5b43d55e83d9a","sha1":"c20fee641b074bcecbc6da8689b570ba6819c1be","sha256":"f6ac1524dc590fde394e6972bd9728848dc0462ae5c483f21b48e0c066a8e6b8","sha512":"a1dbaa656790003b543af4c2ee07d60d4dd3e2b8025ff879668ff0b2808ae3d7cf891cd8f393959dd767e1dac792d3743116636c097357c51c3478cca9788210","ssdeep":"192:ZhH4vgNL0bGPf+aQIm3M1WDwdc++fRciv8VJ9R6ueXyP:ZNfJ0aOapm3AWMc5fvv8FSyP","tlshash":"4712cf4a23749bdfe2301a7a8d0eab92c5f541d9d5b20ce1f50696752bb2e10fda0f70","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-07-26T09:32:07.330324Z","times_seen":77,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/static/media/logo9.f496b8edcca5bd41d6c6.png","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /static/media/logo9.f496b8edcca5bd41d6c6.png HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 12526\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-30ee\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12526,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 4-bit colormap, non-interlaced","md5":"5fdb25b90d2ffcd7536dcf44af21f596","sha1":"11b3814153922a6f5ecd64eb419c46bf6b6f9181","sha256":"94ed0a873902f8ee7c88a45203e0c3dc7448f3f50299626c1e5f530989796dc7","sha512":"87db1f682085ad9c6cbc950c27a74c7960f51f1bd8cf591921336e8dabead77c05b2105f3669af5fee84cd051190ddf4b22a96169f451cab1f03f643eeaab261","ssdeep":"384:WeAyoCjOCx+Kz7hwJDpxs/drR9h02EulS:WXyozCxvhONxs/d1g6S","tlshash":"7542c0ef5b29d1ac7027447a0b8e1d4886fe32bf5340282e5f6d5c292dce40619d486f","first_seen":"2024-07-07T20:33:11Z","last_seen":"2026-07-26T09:32:07.32264Z","times_seen":81,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/assets/okay.mp3","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 45505\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-b1c1\"\r\ncontent-range: bytes 0-45504/45505\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Fira+Sans:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Inter:wght@100;200;300;400;500;600;700;800;900\u0026family=Noto+Sans+Display:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Rubik:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:32.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css2?family=Fira+Sans:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Inter:wght@100;200;300;400;500;600;700;800;900\u0026family=Noto+Sans+Display:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Rubik:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 29 Aug 2025 06:47:32 GMT\r\ndate: Fri, 29 Aug 2025 06:47:32 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":157298,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"12e2197f87924713d07fd9ebddbea6db","sha1":"8235089b9126899e4ab16787519008bbb15a0ef5","sha256":"19280dd59e71450264c0abde70fcb1a93d8a75f172954fadf07a653a44740c9e","sha512":"aef9bbeafbb3fb53ced21f03d14d671c61a697455b39dc81f245522b24d950d88a482f1a2349904d568fde6aad413f9636fb245cee6528684c3652a09ed68190","ssdeep":"768:a95eTg4PB3vm8IpjSXokZIinvn1nYn0nkn1nW2QfjzQpJ7U4I74Yutp5ujDh6WmB:/Y","tlshash":"cae3fad1002ba444ba875cc233cf7e369e5ea2556081c5bd6ffd28d8acead26237474d","first_seen":"2025-06-16T15:31:18.942801Z","last_seen":"2025-09-05T06:55:11.455304Z","times_seen":14,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":62,"dns":0,"connect":7,"send":0,"wait":28,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/static/media/logo10.09da436bbc6e9556681c.png","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /static/media/logo10.09da436bbc6e9556681c.png HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T21:08:34.401832Z","times_seen":17924563,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/static/media/gift1.72a9338ddf46c87cef90.png","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /static/media/gift1.72a9338ddf46c87cef90.png HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 30127\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-75af\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30127,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 450 x 450, 8-bit colormap, non-interlaced","md5":"143a24a8851402f0a078612c41070db5","sha1":"e6022319932911c30355bbd7a7c11ebdf581ada7","sha256":"ea77b1b8ca55ef370a248c24b7282dc0225e108e7be0447298bf1ce059da93d5","sha512":"64332b818bed6ece10c629887a32f84bf0017c6f3ce5bf882d99614be34e8088e33b158018443a12675b57060e2359d8a5e571601c5492e9c6e7f4abec8caa6c","ssdeep":"768:I4RTtXp3YZcxWeryL/8MvHtUz1MgfzL3jsJqfXt:I4v1Epayj8MtUz1ffnTsJqvt","tlshash":"7bd2f1c11ea2f6a57221d1ce6907928708262c9d7bc6379ec5b73b32543726f99d8f01","first_seen":"2024-07-07T20:33:11Z","last_seen":"2026-08-05T10:33:26.37561Z","times_seen":82,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rf-marketplace.universityofgod.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 Aug 2025 09:48:24 GMT\r\nexpires: Fri, 28 Aug 2026 09:48:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 28 May 2025 18:51:44 GMT\r\ncontent-type: font/woff2\r\nage: 75550\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-16T21:05:02.351463Z","times_seen":260178,"resource_available":false,"data":null}},"time_used":1234,"timings":{"blocked":593,"dns":44,"connect":11,"send":0,"wait":8,"receive":3,"ssl":569},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rf-marketplace.universityofgod.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 Aug 2025 09:48:24 GMT\r\nexpires: Fri, 28 Aug 2026 09:48:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 28 May 2025 18:51:44 GMT\r\ncontent-type: font/woff2\r\nage: 75550\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-16T21:05:02.351463Z","times_seen":260178,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":10,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/assets/okay.mp3","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 45505\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-b1c1\"\r\ncontent-range: bytes 0-45504/45505\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":203,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/assets/okay.mp3","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 45505\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-b1c1\"\r\ncontent-range: bytes 0-45504/45505\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/assets/okay.mp3","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 45505\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-b1c1\"\r\ncontent-range: bytes 0-45504/45505\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":786,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":399,"receive":387,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/cards/2.jpg","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:35.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /cards/2.jpg HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20753\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-5111\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20753,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 345x221, components 3","md5":"24fb66816f11c492c98a2dbc1ef5dcbd","sha1":"c539eaa8578402ee38485f3abaf1d790c315f0da","sha256":"ec6ecf781b20ee965063761ec320a95a7ec1cd8698d06776a7f9c999d5bf0ab8","sha512":"0c1658df82553378e71ef08c893f04ca9ffc17140de839f665f9a200a9de4194bea10d8c4f0a82160bbca0bd47c4cb8538ef89560a815af32d2536ef47ffe6ae","ssdeep":"384:DskbTDIPyKaLKmqG950AIAE0vGiJi7n5ZKJIUKFSIB7ut6xK68gfEcVBbdO:wuTD+ynmmqcmAp/vGDj5xzZ8gsc/bdO","tlshash":"ed92e07162f20e67f721aefc5564149a1b73c7b21e3d72fa6b7160102ed83804b2267a","first_seen":"2024-08-26T17:33:28Z","last_seen":"2026-07-26T09:32:07.343236Z","times_seen":78,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/cards/6.jpg","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:35.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /cards/6.jpg HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12174\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-2f8e\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12174,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 345x221, components 3","md5":"f17866694bdc9d6841bb0e378a49eeeb","sha1":"7ca28496a945ff917d84d12a0bb0329a8925b7bf","sha256":"95928987169ecc4370531be8d1161758c56af418272caa864da34bc75827d93c","sha512":"75bcdeea9f4f89cc4e28706c1fa0ba62bdb21f92b358ba8dceb535df9c896c49291b67d20b1b604955a94320dd82e12cf80a013826e8c8e26b3843564a8255db","ssdeep":"192:dS0Lx2RUtDRkC2KuuUwX4OrFacAuRSZJ+WCm/wMzelB3uGSfD6fF9YkaCuYLwX+:dSIDRkC2ZtoFapJBCizelW76fckadCwO","tlshash":"4d42cf82128001b6b0a545cfd9c232074f46c48ffa61a44c4a686bebfb55cf34fe6a27","first_seen":"2024-08-26T17:33:28Z","last_seen":"2026-07-26T09:32:07.334636Z","times_seen":78,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Arimo:ital,wght@0,400..700;1,400..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:32.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css2?family=Arimo:ital,wght@0,400..700;1,400..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 29 Aug 2025 06:47:32 GMT\r\ndate: Fri, 29 Aug 2025 06:47:32 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5379,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"747973adfa31d87f40692214dd7788dd","sha1":"631b3a56337a49fc5cd5abfebebba25552bf940e","sha256":"b674e117906ed4a13b2a03294bbda09295a09a2fa05577f4912480ad186d5f82","sha512":"ef47e2b5008d15690ac6ec7b2bfa138b0a4f76b6800867cfc80551a06e1cc326a230eb07b04466d9dbe6ba422d9d5cd0cbb0391626bc67dc53e91ac9b76db1fb","ssdeep":"96:CYgFaTyYgFaSFZfYgFawYgFakLYgFar3YgFaKYgFaCJc+uDYgFaKNTOFa3yOFajB:XHTnH7HRHk0HrIH/HKVHe3Ij67ZB1dcT","tlshash":"45b178a1041bd4809a870cc237cfbd2aae4e61997445d1baaffe48dcacd6c639354b1d","first_seen":"2025-06-08T13:05:40.586172Z","last_seen":"2025-09-08T22:46:49.870011Z","times_seen":403,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":132,"dns":0,"connect":20,"send":0,"wait":19,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:32.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 29 Aug 2025 06:47:32 GMT\r\ndate: Fri, 29 Aug 2025 06:47:32 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67176,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"dc67849286b3520a97b7d498d96f2a04","sha1":"6627f6671d7084ddc372fbe42a35e63f44db3ec2","sha256":"ad998f65bf9df599f0c8afe08e662d8aa24df80cbdfa7d8a6775def773ef6e58","sha512":"c3d4682a419d600233f04a38d7ef92393685845d04833c46af70c62a3aa563cc39c691755e10f7616abb9118626ef67253eeac5ab51e7a4cd41da79e3eceb7f2","ssdeep":"768:yDDDjDKDjDaBDeKDpDNDIpJaJaLeazXd8cLcaaeLi+WzTUTaheUplMNt+taXe+//:YsBcg6DT4H3p7","tlshash":"4163fe91041b5040ab835ce223cebf35fe0f92507251d0b9abfc9b6baddbd66526835c","first_seen":"2025-06-02T19:16:07.528605Z","last_seen":"2026-03-21T04:51:43.189571Z","times_seen":3532,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":84,"dns":0,"connect":8,"send":0,"wait":19,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/static/media/logo8.e503125f73ac5172ba10.png","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /static/media/logo8.e503125f73ac5172ba10.png HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 50691\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-c603\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":50691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"ce366daca2b667dfeaf5a879494babaf","sha1":"9479e2b6f3fbde7527d7914c36f29b779465c123","sha256":"e2ab6c6bb58945f811fad74946abefe14ea45c3ad229e8ef32a37a6dc69dcd47","sha512":"b3630ff463f547f2f9b934183334d033f340e0f009c4c2e1eb1a87be3d596f2eb9ffb6d0d0946e0cb6f93e8d3e382d046eddf36c0b9e6f58e8887207da3a05ed","ssdeep":"1536:p2AFFc4vwSAbuBuEY/Vuukj1cZNRrpIhl1+lVGbH1M8:p22iowFbLjDkJczRqhl1+lVGbHq8","tlshash":"1e3302f117c60fff986a60a557d294e74a0d6942d9f193fbabc2a498d8ec3f03785018","first_seen":"2024-07-07T20:33:11Z","last_seen":"2026-07-26T09:32:07.307854Z","times_seen":81,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":273,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/assets/okay.mp3","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /assets/okay.mp3 HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 45505\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-b1c1\"\r\ncontent-range: bytes 0-45504/45505\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45505,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"c8efa451162438ed4a783c3cc466be07","sha1":"fe9bef8a68999909225ae8a481f9ca4a272b7147","sha256":"33d6613e66402a28c16d4ce9c4e29ce2430ebdcdd264599898716dd68836a47d","sha512":"6c2c3e76cf33478d1e27600eae7352f0dd91879cd418e1c50c090e3643541a0873f76518b45cbe2cb31e024dcca590eecceed667474cbc854d5a13fda177498b","ssdeep":"768:kmagJhoetvIbCdD/YuGiS5Zq4B3/xUXaCYr8mwz8ws4NSk2ZptxZqIGCzZFOB:kmacieBndsuPI3+qr8mwQwsC2ZpLTGaX","tlshash":"ef13e215a69b8a70f605b7372e5cd81dc1f3810c5d20a3fcc2aa7b1a5527f07b352b98","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.360266Z","times_seen":78,"resource_available":false,"data":null}},"time_used":698,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":308,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/cards/8.jpg","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:35.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /cards/8.jpg HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9377\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-24a1\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":9377,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 345x221, components 3","md5":"eb75febba2f5141cb87bf522d30ce33d","sha1":"b98cca84a787710076f4013e38c56415a4972d2f","sha256":"caafc14dd6f9f12891ac62ffe1248fce12b1d71f64ef3db277a71c1f3d0840c2","sha512":"a529bcddb9ee22fc15d0629c3c1606caf56d2ce0334017f15c535a88c1771074496bcf054a85e9bef5e0e51c6a7cf8ab6a715c27b6e14255e3cabd5dd30e50f3","ssdeep":"192:4Ld8fBkQ8hc74FGHwwgp9v26uFu7F103+wKvb4YSrBcnEKGL45OkVvi1dSiAH:4J0QhcEFpw+JyuROzYSrBgZGc5jVvi1Y","tlshash":"0012b09e6f11493db18f63ba6051d1804afd587a01e0c16dcc2c06967b290e2ed63bea","first_seen":"2024-08-26T17:33:28Z","last_seen":"2026-07-26T09:32:07.327392Z","times_seen":78,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/rioooo.css?1=1222","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:31.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /rioooo.css?1=1222 HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: W/\"67817c48-e502\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":58626,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (39858), with CRLF line terminators","md5":"69824ac25639f241b19adca6bbc9e1a7","sha1":"b5a3cb08c8d9a8ed25181fd28f4cba11f5a329ff","sha256":"29a2a47cebc34dd43f71db9786e249b69b8252252df547d639c69d4310ef615a","sha512":"eb9ae90b825e7680ee0fa890d15e9426b5be73d6f04b2f986fecb69d5631f4841e0a474f6317c253d94c82ba4f1d71c3f4bc4a9f7f5ec7fb3786da0bea86f58d","ssdeep":"768:RvsL5/Qo9oLVxa7iKdBh8W7iKdBhAHWsUwt5elfR+LMo:h06KWQvnWQvA3bedto","tlshash":"60436ca66708100cf90bfaf4fdb15feaa1215443b20351faa5e17499d9cf2e50377b8a","first_seen":"2025-05-11T08:01:52.347675Z","last_seen":"2026-02-16T06:38:41.080455Z","times_seen":18,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/static/media/box.3af34c06dfa92629e9c3.webp","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /static/media/box.3af34c06dfa92629e9c3.webp HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26434\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-6742\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26434,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"39f14943f8d0ac42a97cf449224a7c6d","sha1":"01ef14b4f41ee5d9e3ed2c52b1d9af6c722e836b","sha256":"ef44e6ceeb8b6068afedd2a6868967e33bfad0adbee76e7e188c0568e6e219b0","sha512":"f0a8d6f2c211059526ffed7355b68d20be012ee3dd97f1e0e1ac4663e8f260db74850f0b68f1404ca5c538cd23bfe4bcf553964f6c4d00ef3a00591832997f74","ssdeep":"768:tEfHE+M1yQzOSMOQQNM2PetBfDwChzbafI:ydM4XOPpGXDNzbaf","tlshash":"85c2e1210aa63045e212483f4d4214c2469eb4ced5d566dcab75908ed929fcf223fbfe","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.362724Z","times_seen":78,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/fon.jpg","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /fon.jpg HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/rioooo.css?1=1222\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 49931\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-c30b\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":49931,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1400x1400, components 3","md5":"704bcfafde370d3b84516d80ebacf0eb","sha1":"d83541778ddf6029b3ee64168221cff52046fe04","sha256":"70318ddbd4149af9726c0fdc037b433687acb186335c3c5fb46459e58f2468ca","sha512":"a8a1455fe838c76835cf3125160c7251cbcb0a855b13b86f1dcaffe3645f633729b278ac4c1d8df530287b751ab3638bd3a94e14178542a6fc735064dacff0d3","ssdeep":"768:0YAzjIX9/+nJ7RgitZVvnWT8a8xCZWB+5jAJuWyQ1mLQO3JpSQMggMXxiG9GL:03stG7Rg+Ny8ajko5jgYLQO3JpqsxB98","tlshash":"ff23f193b2705699cfc1b3370e59a615e5aa3db6880d890fca46ddd3716c8bc9c290cf","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.382286Z","times_seen":78,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":253,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rf-marketplace.universityofgod.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 Aug 2025 10:09:08 GMT\r\nexpires: Fri, 28 Aug 2026 10:09:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 74306\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-16T21:04:56.007972Z","times_seen":967096,"resource_available":false,"data":null}},"time_used":960,"timings":{"blocked":460,"dns":4,"connect":7,"send":0,"wait":27,"receive":2,"ssl":455},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rf-marketplace.universityofgod.net/assets/big.mp3","fqdn":"rf-marketplace.universityofgod.net","domain":"universityofgod.net","tld":"net"},"ip":{"addr":"178.16.53.44","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rf-marketplace.universityofgod.net/?partner_id=103893\u0026partner=true\u0026hash=9190134efc9be4778902905cf9957f5fa04ab21060eabb03a9dc08fc69a5647e","date":"2025-08-29T06:47:34.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"universityofgod.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 Aug 2025 15:30:53 GMT","end":"Sun, 23 Nov 2025 15:30:52 GMT"},"fingerprint":{"sha1":"AC:79:A5:A5:D9:D7:10:51:CD:CD:52:71:69:9E:A0:0A:48:1A:13:B1","sha256":"D4:A1:2D:A3:6B:D4:4A:C9:92:9A:C7:00:25:A7:8E:E1:39:C8:C2:50:EB:14:37:64:7F:78:45:32:BA:E7:C9:3A"}}},"request":{"raw":"GET /assets/big.mp3 HTTP/1.1\r\nHost: rf-marketplace.universityofgod.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rf-marketplace.universityofgod.net/\r\nCookie: mem=1; sl-session=nO8wUIOesmiXs/XnVgZ1QQ==\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: Tengine\r\ndate: Fri, 29 Aug 2025 06:47:34 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 54912\r\nlast-modified: Fri, 10 Jan 2025 20:00:08 GMT\r\netag: \"67817c48-d680\"\r\ncontent-range: bytes 0-54911/54912\r\nstrict-transport-security: max-age=15768000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54912,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 96 kbps, 44.1 kHz, Stereo","md5":"b91086d5e3529c1fc3aba54450abe6cd","sha1":"248b2e6abbf3696f0f3a9786297df84524097672","sha256":"ac2cf95129f00a090f87e3e522fc7907405f9a290e505d59dee324ffc001631f","sha512":"d5cff8a0205df7b160af6680e714515067589079b8a1a9f71c2d7913bb9d5fe9cc458a8bb679eb227eed2310da169fd654ba28c271d286167fa1f0dfb17f2530","ssdeep":"1536:N25Va9cZTVd2HM4TAocwyaXAv0aysgZe2h:M36cZZd2mP3xv0K2h","tlshash":"dc33f06245636cfbd46ae73f946a17502dc31fa93c64d9c10861332192bfe2cfe25a86","first_seen":"2024-09-30T01:55:58Z","last_seen":"2026-08-05T10:33:26.368959Z","times_seen":78,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
