{"report_id":"43f5644d-fc66-41d4-a567-25ba5202f1cb","version":0,"status":"done","tags":[],"date":"2026-09-02T20:25:57Z","url":{"schema":"http","addr":"nvmp.live/","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"172.67.213.151","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"nvmp.live/session/login?redirect=%2Fmarketplace","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"title":"Nova · Нова — маркетплейс с escrow и рейтингами продавцов","dom":{"size":59969,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20260)","md5":"5e395ea5e24f607a4a22919a86471d18","sha1":"41c8fffe1913ac5f33f5b645ad97f5dbb9b5b1cc","sha256":"4a7b6bbf5b4444d160f30146ac55edacba6144ba77dda9deaef98b681c57e676","sha512":"7f391fd527f02b8aa75d5ce84f2a4449c87ad7ab2d093f88736d52b2cf9edb28e5344016d340fb9c9a617339884dccc5a4754a7d5c31548cd974b974036b58db","ssdeep":"1536:hQrW9w9mWzVzGxp++vPizE7qzg5eruhEyC1wTbF6p3:hQFMWzVzd+vPizE7qzg5eruhEyC1wnFO","tlshash":"a24386e2fd95419e20332daf9875f2fc676e600e4e10de6071ad67640bd8bc58f76842","dom_hash":"domhash3c140f2e4d917e78a5af4f91db11181f","first_seen":"2026-09-02T20:26:21.302886Z","last_seen":"2026-09-02T20:26:21.302886Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nvmp.live/","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"172.67.213.151","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-07T20:25:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-30T23:14:54.105192Z","alert_count":0,"request_count":3,"received_data":460584,"sent_data":1492,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hcaptcha.com","ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":3135,"first_seen":"2018-04-03T03:49:29Z","last_seen":"2026-08-28T02:01:56.624517Z","alert_count":0,"request_count":1,"received_data":349410,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-08-30T23:05:19.421151Z","alert_count":0,"request_count":1,"received_data":71827,"sent_data":557,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ba0ab75608c4.w.hcaptcha.com","ip":{"addr":"104.18.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":0,"first_seen":"2026-09-02T20:26:15.555851Z","last_seen":"2026-09-02T20:26:15.555851Z","alert_count":0,"request_count":1,"received_data":3314,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"nvmp.live","ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-02T20:25:44.620634Z","last_seen":"2026-09-02T20:25:44.620634Z","alert_count":276,"request_count":138,"received_data":8140314,"sent_data":62843,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Material Design Lite","description":"Material Design Lite is a library of components for web developers.","website":"https://getmdl.io","common_platform_enumeration":"","icon":"Material Design Lite.png","categories":["UI frameworks"]},{"name":"Lodash","description":"Lodash is a JavaScript library which provides utility functions for common programming tasks using the functional programming paradigm.","website":"https://www.lodash.com","common_platform_enumeration":"cpe:2.3:a:lodash:lodash:*:*:*:*:*:*:*:*","icon":"Lodash.svg","categories":["JavaScript libraries"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":4,"received_data":117188,"sent_data":2202,"comment":"","tags":null,"fingerprints":null},{"fqdn":"newassets.hcaptcha.com","ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":29228,"first_seen":"2021-03-22T10:55:22Z","last_seen":"2026-08-26T20:55:32.588702Z","alert_count":0,"request_count":4,"received_data":2325473,"sent_data":3016,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"34bd7e5b1f8f.w.hcaptcha.com","ip":{"addr":"104.18.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":0,"first_seen":"2026-09-02T20:26:15.565607Z","last_seen":"2026-09-02T20:26:15.565607Z","alert_count":0,"request_count":1,"received_data":3314,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"cdn.materialdesignicons.com","ip":{"addr":"138.199.36.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"2014-06-29","domain_rank":293345,"first_seen":"2015-07-23T17:07:28Z","last_seen":"2026-08-28T12:47:49.855025Z","alert_count":0,"request_count":1,"received_data":1232,"sent_data":519,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"api.hcaptcha.com","ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":28177,"first_seen":"2021-07-31T14:27:15Z","last_seen":"2026-08-27T06:48:01.963748Z","alert_count":0,"request_count":1,"received_data":1418,"sent_data":901,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nvmp.live/app%7E30ac1eb4.3abf3b61.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"39659864d3003c8c3918c3bbf32db02c","sha1":"e6f99a4e0c798d4f44334a9f7040ed85ad6e1815","sha256":"1f86cabea73f5b17490f8a79eee0d371cf995b1eac8da3d06f63de618452ed6a","sha512":"af0a7434ac50bb9eee953e34001912310e6a573e3e308891bb70c514119e0bfd5296d34aff8c8c22ed73cc3bde449e5d6e0c610fbeede7fe6d16cfcfb257e1cf","ssdeep":"192:NNoSbvGy74Qk4Ia4Uf4mZ4rxDLR1bdx4rPaabWitMj9uMwKakMyzi8o3CVbWaHJW:xey74Qk4Ia4Uf4mZ4h/IOqKlbo3Ck","tlshash":"a3522d9e3ccee64923573522241f354cf2b6645a784ee196a718c4e3ee1894d7233fe8","size":13846,"data":"","first_seen":"2026-02-08T21:15:07.786255Z","last_seen":"2026-09-02T20:26:21.479217Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/3115eb7fbcf7e72ba1ba0f0894c95450cb2c797e/static/hcaptcha.html#frame=challenge\u0026id=0f8673f7bbq\u0026host=nvmp.live\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=ru\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=2f20b3b0-44ce-404c-97be-2c1c2d641422\u0026theme=light\u0026origin=https%3A%2F%2Fnvmp.live\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22ru%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"57caa2466f228b440d0b002cd5571a7f","sha1":"3ec5e7ab035cff9b9980f5d76725292ed8f2c970","sha256":"2a3a206da015d06d08afe53b6e4c07ef984568def245e68a8a6545425c1242a9","sha512":"4d12fe5650450d9184404db716fdbc00f6f015d7c154e6c389c526e8ce1fb92fcacc1bde969a53bbc528700d2d2b7e680ffcd473c54a185ac3fc7a51958252cd","ssdeep":"","tlshash":"4e9004d570c75400cfd3135c10571cc5547c4c7035444fd44070d5511f55030511545d","size":40,"data":"","first_seen":"2023-04-14T01:04:24Z","last_seen":"2026-09-02T23:18:13.904118Z","times_seen":68456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/3115eb7fbcf7e72ba1ba0f0894c95450cb2c797e/static/hcaptcha.html#frame=challenge\u0026id=0f8673f7bbq\u0026host=nvmp.live\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=ru\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=2f20b3b0-44ce-404c-97be-2c1c2d641422\u0026theme=light\u0026origin=https%3A%2F%2Fnvmp.live\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22ru%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-09-02T23:18:13.913821Z","times_seen":399033,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"24f140c6d5bf0a1d6e6a3d589b27319f","sha1":"c01f3d5b417348b04088f62715e92d10da19b313","sha256":"065f1051895c79ff197473b8598bb06dd1ed427903e288e2f99e37f1c276a526","sha512":"9d07e71635c780a08e3d7604b21fa7740e233bde91cb97541dc97f179806cc66c0d4a5782e722b79c6840d1ad5dc9db163bd0b659c73de981f3eff7f304f5cc6","ssdeep":"","tlshash":"67d097aa30e8ead212a204508a0f2108e1a25ad70b21f444bf25ee41fc1038fc27796a","size":254,"data":"","first_seen":"2026-09-02T20:25:56.552916Z","last_seen":"2026-09-02T20:26:21.504841Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2aa1ac3d776aed62522a4b9bb41729e8","sha1":"6caec72a172206b39907f27a10487db6c91619e7","sha256":"dadbb8693ecf1484c060438cd778f821cf07059638dc94b9920a5e6d039e77fc","sha512":"3e89d698a366cf34707b0afcb8630fa471d55fd93c77c890453e8783fe442d8116e36dd845e4df161946b8a6bc37f9dfb407481d361d8be67841ba58ba0c016b","ssdeep":"192:VdDHatPHO8Q6WypDNZTzquNvzAAQB+3PprPim8IyOxdnOtNI3ZyhO:VxHatPON6WyVHCuNx1fpr38IyOetNpO","tlshash":"b61280ed7ddb50b2bab310790eaf65807964982b8489c090bd5de0902f94717477cffa","size":9745,"data":"","first_seen":"2026-09-02T20:25:56.55391Z","last_seen":"2026-09-02T20:26:21.506259Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc607e0a0846fa6178a2b527830ae9c8","sha1":"8058b785eaee1512dd99483d02b64c1fc65dd718","sha256":"bdcf815320b9904aeb69edef7f27a63da435734f864fe690d912232e388640ed","sha512":"105f075c41ae4cb32f9e160799e354217c50e2f732821b204aa2d5ec4803b926d42acde674436c341bf6a7eff91e4a92ffa2a706ac09044a12f6893f6e891b1f","ssdeep":"","tlshash":"08f020f77c89453c836213b17333a2497666253d680aeca2e90c18662480f65547750c","size":553,"data":"","first_seen":"2026-09-02T20:25:56.555093Z","last_seen":"2026-09-02T20:26:21.507551Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bb8565a1c8db5662169a6bfe8a7528b5","sha1":"f6a9bfe21374fd08d583ce11a5f2d9858687b459","sha256":"d8a435c7957b22c2f882e7a83f1b322491e2b43fe3e2eedbb26e441a52bf0925","sha512":"12676c0df3fb33ff20c56179108f5bb4265013bf1a6ebb82f13dc2fce2e1a4068827a156615db10a3eabb283b6ee9938f91fd91d30c32811f0d2616ae88c9bef","ssdeep":"","tlshash":"a111eff0d346d5b08286c32a4baef759ac71ec56680370454a1ec0a919e4f81e0f5e9b","size":865,"data":"","first_seen":"2026-09-02T20:25:56.555947Z","last_seen":"2026-09-02T20:26:21.508416Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E1e049fba.67e270e1.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8943e063c3576b174a5e829e0e6af8d","sha1":"2a3a309cab966ab207e74ed517e0fe95e3581f1a","sha256":"2b6f6581f17c45c19cc77d4bdadc177afeb97c2029852743dee198a289971e16","sha512":"e875ab390dafd59acff66628764358107043bf9ab29e93791fee3aae52dcb9c21441212647b63c18481fa3d5bf4f39befb64bc8db54244451ee876e8914ab222","ssdeep":"384:vV8rBHs1YRKPSAeBUdWIvsHPpkQMtqakCMj5K4qKjKer8rFYNzeuFMtjaHKr8L7Z:as1LmMXIzbcWHxzw8TgRYWeAMu6","tlshash":"fa2396847e85707c26e67060146f649a7136c8ef614ae934f85ec8c96c39e3e61bbd3c","size":46014,"data":"","first_seen":"2026-02-08T21:15:07.878912Z","last_seen":"2026-09-02T20:26:21.381985Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/3115eb7fbcf7e72ba1ba0f0894c95450cb2c797e/static/hcaptcha.html#frame=checkbox\u0026id=0f8673f7bbq\u0026host=nvmp.live\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=ru\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=2f20b3b0-44ce-404c-97be-2c1c2d641422\u0026theme=light\u0026origin=https%3A%2F%2Fnvmp.live\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22ru%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ec9269a12205b7a706d595141a30dc5a","sha1":"f70c575f98b10b8dd2f552cb702debfae45280b7","sha256":"1468df060390954cb6b4e5cfeece8d0208e0e6cc7700d1487b67b9a78f304833","sha512":"6e0a2c93862357a9546bad29a6be6e6231e85575511a092d4468e0a2f0cb83e6dedbc55aa2cdd1095c6b2c13246c68d90ab83be0d0957c0281c8a30f72251691","ssdeep":"6144:wwzb/clNaGq1X00QOPsGfERdSmtUuh6ySUtk803f/Ir7z/xj6M4eNlFDg6oXFPW/:fD8aGq1X0MmPVt6iopTgz","tlshash":"fad4d76f6310613b47e622e854df190f67b6d01a645664ecf731dceeb8ad84b103ab38","size":617825,"data":"","first_seen":"2026-09-01T08:26:59.029428Z","last_seen":"2026-09-03T00:11:23.684778Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/moment%7Ecc99a214.82c5ac5e.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7f04a49da0e719ce9318218d583837f","sha1":"663ba99271afade0cfe37fc3291acd2969e3024d","sha256":"7b8072e0bc8c39a32328cfb0e12e9fd26d1e75cebcdb054440bc341de49d03de","sha512":"1dc97be389b8357a26ec800237d76ae4235d908ea37e60691c006c9c75d02f129e57036d39708807529bba327821671c6eca8ce6c12d82610f2ede7a605d5c30","ssdeep":"192:ApOqoPuuxIf0yPOqooZU2urIf06YuOqKPmuDajmM4fPOqoPuurIf0pgtuiQtOV:wDotlADooZiznuDKFDa4HDotzp1iZV","tlshash":"cb12a46a5a8bbe82c70389c5b42f3e10795d1735586e4c328ed1a2126c3cf9d8731f7a","size":9769,"data":"","first_seen":"2026-08-16T15:23:56.035104Z","last_seen":"2026-09-02T20:26:21.441006Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/vuetify%7E447e62b2.8d776630.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0d59ac923bcb164d0f7f91e9cdb5f62","sha1":"b904c66a16907d2800f11c797a427fd8fb4d1b85","sha256":"32ad212d2bc54dc9b1b8ed3e9d5458c4cd3356d4953eade973196be51d76f47f","sha512":"b3f7184078b3b2945e40be84d50c6d0c27ca4978c188134bb3144278f0f99bd8ce1daca20bda9e4ac978abb0daa470add958ea8d46822716756c217b9019dfe5","ssdeep":"768:dY784EUgKt/kS4BIPslpqVj9irgnZeQp7l:dYY4EbKt/kZqfWwDl","tlshash":"7d23d55a74c3f5181bbbb2d6406f2206f1aa0494b80a95cdfcbce5e9a964d4c113bf3d","size":45587,"data":"","first_seen":"2026-02-08T21:15:07.874193Z","last_seen":"2026-09-02T20:26:21.464051Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.instantsearch.js%7Ef94c76f1.abab70c5.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eba74a29e72fae897436606d2415bb9e","sha1":"db720ed59a3135427125fe3f88eb13f6c43844d6","sha256":"31b1c1506d5fc90f9675f9388fb7a43bcd2a39a74613145ae4c06cb61645d108","sha512":"5139afc9ccf1c280637d9abc78fe1e52f6d9de0d4525441f81c84128ae1a359a8e7089462ad55b494ba5df6326a03118bccab60679c88f7e8cc33fe6e96196d1","ssdeep":"384:6/KRAEQfu96S5lN293BlhohoLarZZgdQ6VGk5o+Kver7B6IVRovsx:607YalN2931o+Ov3Aj5ort2Dx","tlshash":"ece2b7cc76a5f5a607f761b1443f6207f2312564741ce000ab29d8d2ac69c9f927be3e","size":33143,"data":"","first_seen":"2026-02-08T21:15:07.697257Z","last_seen":"2026-09-02T20:26:21.404336Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E91a0ff31.550632c7.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"afca4e85e141b10c8293bdceacdb8fa9","sha1":"f558bd9458b00073414b2b8d20e005ee0315fd53","sha256":"a214360732336fd3960ae631538430da8d4a5b4e697d6bc9075cabd972f6df8d","sha512":"1d92476608cdea51867b735d5cba757903cd689ddc7b67fb07ade92014d40076da6f14dc3b8ccc6d47328f1d3d6e0801476712ea6cb06e510e498df0086cdb4f","ssdeep":"768:ZlVIt4VNJX29lUgJKBZfPRO/SiT+gCfO5SeqBra22XIGlTU4OotNtgCAWOFSjl3P:ZlVIS9sXPqlaz4GTOkDg9KvBkyNV8kUw","tlshash":"ead3f84ef0fb602c4b5b7236345a3049717a2997a448c1dbb6b4c4f95e98e0c1b3bb6d","size":135438,"data":"","first_seen":"2026-09-02T20:25:56.513578Z","last_seen":"2026-09-02T20:26:21.372316Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E46fbf940.62a3ef92.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e20714f1dc1b1db64e7f07cc2a133f4","sha1":"07968dc6f2ea43e6636d8537e609a43e98842e9b","sha256":"33a385f700f5fbdc1f941cf91f1ed385ec6e4212e7923ef7a81a26ab96f3f6e8","sha512":"1938c9c4da50d999c02ae5a2da637d62018755617b0479e212e07b2081af202c3960c872679794c8f32317b6f35ffa392d21dca8710e58a9b45ae4d437dd3146","ssdeep":"1536:IBVuQlGK3dkcTXxZwtktSHe5z7uOs87VRH8RKVdQzrsN8lxI07ztK6aH7J9UaVqy:ANxBM9KVaFTtKbV8WbTY0x6dK+y","tlshash":"df0419c87381712686a721a4502f150ee23b7a54290b4694f37ad4d6bc7ca8e71bff3d","size":174957,"data":"","first_seen":"2026-02-08T21:15:07.868945Z","last_seen":"2026-09-02T20:26:21.471081Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E748942c6.6913cb42.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"036b221b71ac389349ece605582250a4","sha1":"0fd6e7a5bc178fc736328f3a6d3eb2e98d053fd5","sha256":"407deff586cad2b3258fa075d7c920b1b510b4136ba123afbddc410dfde4289c","sha512":"a47221fac357d6ba3640dfa0a0d16fb3b46ac466b93545bf62ac4ca292c5c5055b6ca0e65154aff0d5b6c6db064bed6a07f82da3f4d0cd40ea91641fac40a700","ssdeep":"768:f5N/2I5STgC4RUCxDgLVDGGi3Qzy71Opjbh8RrX9TWZoXCSrC4:f5N/2I5STS10LVDTi91OpjbhgrX9TWg/","tlshash":"10e2b68cb192f0e507aba2f5803f510ff276a425614fe442d255e5d82c78dbe6237e2e","size":31620,"data":"","first_seen":"2026-02-08T21:15:07.952175Z","last_seen":"2026-09-02T20:26:21.416545Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E281a44dd.3843dd47.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f6c81aea39ef1a9606573817e44d9a2","sha1":"43bfa8c70942142ad43167e3f0f5ede85819a363","sha256":"21d0f8803a81e25e94163792d5b7f64cae9c928021c25a6d44bda7e72e65a451","sha512":"249368fdddb14b9e9fe51a9585dec38a533caf5dfdfec82c8356e41d249ebbc964037a8520d77f7adb726644db009b9fa5bbdc4ccd90f77d249fdbc3c9870852","ssdeep":"768:nBnQenKxChnN9UVCPQArwe7CTev81WvUwunoqVneCUqjLI6:1NOCYcD75hUr9JFUqj06","tlshash":"e903d4d133e2b477878a52e650ba1002f3aa56e8b409091cfb2c54db7df064961fefb4","size":40663,"data":"","first_seen":"2026-02-08T21:15:07.899638Z","last_seen":"2026-09-02T20:26:21.329284Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Eff867824.7c66bce1.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1486b7ffce3c517d9a38f1819386dd9c","sha1":"0d1de8e742fee247d567c42cb2bbe0fa586e5927","sha256":"4dd37798685db92ccc8c3650c5d420f18f6262c7483fa0013007350abb92e4d3","sha512":"ac75c9876fa1294a773bb6c00d2baba7494e615afab8cbfad46d20fd0c80924e7c2fc5b84d6d8079e8dd89b9bebd047f558ec4f032f08f3a90e291e2df56c0bf","ssdeep":"768:hD+g1XXLqharOOmVQJZRhAQj+BF5vRDqZ6PFBPaLzoDnJbVUdpAs5LfDDZLrSaW7:hD+mGArOFQRhEVqi/SUopFDS","tlshash":"8953b90671d7943d4e5eb73524193904f03a2d96a109c5cdb778c8ead8bc9882b3bf6d","size":66271,"data":"","first_seen":"2026-02-08T21:15:07.759229Z","last_seen":"2026-09-02T20:26:21.499354Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Efdc6512a.2b2cf337.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"983ca1c037656204e173f81ab9b6d866","sha1":"96f55349063d612ecdadabd717d504cead9d3ea1","sha256":"fa168c9416ce1c7b3feacedf3cc788323ee84be0b8dd935e37ac909636f7cab6","sha512":"8f71255808b022c4f2f9876d180e63d237fc468a2117860a1defdb34e4b3fad0a2c59181fc5cac3ef0d3aca9b594dc8395324b94d626ef625a074332c3e0ca20","ssdeep":"192:ku3B1ceBZ5ErK1u4X+7CrV7KWjWz0A4GiWKwuDpAHY69r96tlQtlctlytlZhK/HO:keBuZrKI4v3A4S2gVhmYLOJC","tlshash":"7f6284ccf6a6b4261b2734b4613f110be37ab564240a8094f395e4db6c3d15ea56bf3c","size":15339,"data":"","first_seen":"2026-09-02T20:25:56.548602Z","last_seen":"2026-09-02T20:26:21.47346Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E53ca99a6.980c40da.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"464c513640ef1b22b1b59b145bfba97a","sha1":"dc32fa636a2ae5a5e9ba1f1d97e7c7a07478c415","sha256":"18ee29a118b5a23ac4a534810e9c0ae5c9ff358dc6a63e7e78a565e7b4217a77","sha512":"62fd4be17d946f5e78058202b37bc0fceb06030d42dc2a0f9e637259f087a75b5c3ade6e1e5c0026bbd3db8d383a8829aa36fc75641b6eeafce7c623dd90bab2","ssdeep":"1536:DjJEygXmI87Ak9rY7R1VuEDikCvssd4iqNkVtY31Sq6z:ARuSMvssdB","tlshash":"0993ea0e71fb943c166eb329245a2908703639667908c5da77f0cad94dac9481f3ff6e","size":88952,"data":"","first_seen":"2026-03-12T16:27:49.87157Z","last_seen":"2026-09-02T20:26:21.405885Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/vuetify%7E94969a38.85614ab0.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8add1ffe794f435fa21a474d433bfaa","sha1":"3d1126fd969af6f45ed8a2484a7ab8eef674ac4e","sha256":"e13b23ce4b157a72ab72d8cf63c457b6bbcb41645e1e8662b2633acb3cc7dc85","sha512":"bcce6adbb227f40c406a257f7390e35aaba78325739b8ece2936ac3bc272a5989a16987bbe3d4bc98c69f03122ddd24eb312ead915a6f8ffb8b3e7dc6685d036","ssdeep":"","tlshash":"59a0027d2005b415557ec05c116177e55d4961083e6304b41616556239559c75554386","size":84,"data":"","first_seen":"2026-02-08T21:15:07.8513Z","last_seen":"2026-09-02T20:26:21.464798Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/moment%7Ee258e298.8636d2ff.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d5ad51a1c73127c7132bf96ce2250ea","sha1":"5ed12067ba932c08dd4d1ec5bfec2e4a6a180969","sha256":"6309565a293735cfdaa91268fd7abc1ac9da3ff46dbde7154a1de38763982946","sha512":"89fdd431009b678f0350fe31826b7276db54a32b2148b3ea4e25a88a98769a45f95af5e996024249be5052ec36559ba5f105353446c8db1a4e94790b6044ef57","ssdeep":"3072:nEumZprIGnhurxxUzy9ZSQcKKn4TdOQOSR:nEumZprInUzyyQqn4TdOQOSR","tlshash":"3db318ca144fff53db491596442f3f79ac2c1b76544ec8229aa5e186f874cac83723b8","size":111194,"data":"","first_seen":"2026-02-08T21:15:07.735602Z","last_seen":"2026-09-02T20:26:21.41413Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Ef764b1e7.69141c52.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"481baf00e0e56791a1bb8ae9aafe7a0f","sha1":"98b8327c27b1f0f5a7c2d9d227472db3461fe8fd","sha256":"3fff509b76de9de9dd5c7cfc81c728a6ed43ead4c83c70829268aeeab49cb5ad","sha512":"cc970ad4547b600b8c4d6226240cb968e0ba2d2addeac5c8806f7b39f5aadca1885ee79896b5083c2c20b73b9b329af265e22df82cc68c3968987712fc185c98","ssdeep":"3072:Q+/Q6xzwLADXUaP9TC4lqIE+f6AorlkJ68f+lIblx:QvLedPlCkf6M68feIbb","tlshash":"96242ad9f398246691a363e950af12464233b50d280bc9acb93dc9e7a838d4d313ff75","size":211058,"data":"","first_seen":"2026-02-08T21:15:07.930817Z","last_seen":"2026-09-02T20:26:21.472457Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E51e805b3.91a8ee04.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d454d4552001c90b62f290738aab591","sha1":"376c9e34f7e7037b865d6b960b0aed69434d7b10","sha256":"de47269c3d74a1c301c4323011dc398784341079faf4ad8e6957deaa85af1d3b","sha512":"fc0a0ee6525469764aa3e670d1aee596de103a2b8337a99ccbdc91eea0b2500d19783c5514e65e645b1391a56a89999b6a2b03d47f45badfc624f39d85dc6787","ssdeep":"192:tN0uFb2zsr1YWCC9ygCDdl52ovCeDUK83j2RIR9lTyq03PP4d+lyzDBT1llbR/t6:tZFosHEDdl52o6eDf8Pr5r/tfYiWR","tlshash":"3a42d99132b2b0abc7df10eaa8e50502b37515d8684a060cf4b96c8b3c7195617fbf3a","size":12363,"data":"","first_seen":"2026-02-08T21:15:07.90155Z","last_seen":"2026-09-02T20:26:21.405096Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E5388b003.20ea86ee.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c87dc8b62e5e021ee069059f8283795","sha1":"3940c8e64f74390b31ee93a12572628e190008fe","sha256":"293e5f2ab2475ad6010339deaf5c8fd05eff47ad060f3b33f3153efaecd4a38b","sha512":"acd4f9cc56e1f725fed991ef040d8d1d30624032579a5e1d1767db87d3f67ee50c7c3cabba755956ae6e0dd87f3100d909852899cb5f5e00f38acd84c1bd0888","ssdeep":"1536:m8NtBYDgBfsroCRWrHbSKhXRv5hBSbzycTf2D:OhkCRy2wRv5hBSZTf2D","tlshash":"2a43db0ab1eba43d0a9d733634492508b0363a977049c5cd76f4c9ed99ecd481b3be6d","size":56977,"data":"","first_seen":"2026-02-08T21:15:07.858776Z","last_seen":"2026-09-02T20:26:21.330328Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Eb07b7304.1b2033dc.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"12fc36690e6adc6dc40281f642a90f43","sha1":"331b731375414d67f038020ab726958e81cddef0","sha256":"bd71d52b9357b4d5059829dda0ce5f32c198f15901a994358db72a050c3d4935","sha512":"1e2adc695a3a4223da9201998668c0d7b24e721c3d599e9f043cfb0f72cf1d27bdadc678c9ae7f86e5c142c31e7c2f39883e24a37b23ce789c2c3c95e3f95d2d","ssdeep":"1536:hJS/TDK3jUYKD7vLu6eijyBLiNXZgIrdoD0c0jrmy1S7iR:ET23jUYKfy6ekyBLiNXZgIrd00curmyx","tlshash":"024364a1d65a64ee2045f46aec08bf4b7cbe44fe7fa7935209b5583d30f1424832ab1d","size":60405,"data":"","first_seen":"2026-09-02T20:25:56.434629Z","last_seen":"2026-09-02T20:26:21.312436Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Ee73b60ec.32c5f5fc.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"22b757855cd7284a19bb6410df00d5fc","sha1":"2f815d34aff6b3a251e91b513e7ac8ff6f418a8b","sha256":"ab8155c86cf56f892991addb3acd680d37b01a9491b3f224f0a48107ba962531","sha512":"29a8ffc990e031fe3889e31e3509e620ca4df06c9ef5f8609054370a0d94dc44d31dc68ccd6802d9ccbffa0dc8f5d4105159844c8135bf9b24cd5f4611dec59f","ssdeep":"1536:obOga93zchPPRtXgbRLogNhgPIAyqT8xHhF7ynOm8u8bHTCPw53JAwBMovSsNdmM:I5hsbpsQGTmHhFenRYTThzNdvTnt","tlshash":"6993081bb0d3a43e49b7b146205a2612f0373dc5a405d58df6b0cdec99ecd582b2abbd","size":92808,"data":"","first_seen":"2026-02-08T21:15:07.827684Z","last_seen":"2026-09-02T20:26:21.498665Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.vue-loading-spinner%7Eb955b015.7d396a73.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8c538a3c18ba06c1cf725909dcf2a65","sha1":"91875796de82e1062fe9b3f9bf53ab7aa54b444a","sha256":"0e82282e36ad335e6b90ead6fd126ecf47eda4570d7f2e59f5d614cdb9187653","sha512":"cea4cc5431e6b6da0eefbcca2ed50bdee6a277f4766ba1ef81093428520cc69335ea15fe1e880f081020f4a0288008960bcc0ac24cb95176f5028814a105ddb1","ssdeep":"192:hOv35g1Vl43IkNDxdKF6pn+ieV2wd/pcSvby7Q:hOvi1Vl4BNDxdO6pn+FV2wdxcGbyk","tlshash":"1712eb49b0e2f17c9e63a496915f1535e0564f993234a8d1f3f1cdd4aa309ac933eb2c","size":9126,"data":"","first_seen":"2026-02-08T21:15:07.865605Z","last_seen":"2026-09-02T20:26:21.496208Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E7e769104.39ad4441.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3f4997a5b2a06bd37752727ef817499","sha1":"758b7d4a144dd9b5610d60d09facb283f98941b8","sha256":"4ced0a9e1e87a81db8720aa64b886a23d03519eaebd201c9e18747834fc3a681","sha512":"0877df51c635226186dd00c387c1219f58d194bc08e14882f594e29719eff33ca6b0d2d39a933624fa5e01bd0c34d09c68085f8e876f7e6afe58bcea4c9ecf15","ssdeep":"","tlshash":"90b092be2005a81504bee198265333e8184a63042e170cb81a2840b06ab4a87441168a","size":104,"data":"","first_seen":"2026-02-08T21:15:07.73125Z","last_seen":"2026-09-02T20:26:21.406638Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E3fb717ea.ee2913f6.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"613372e121b9f2cfd6c2a219643edba4","sha1":"a562330c9adc39344aa21dd30c76631b3a9b3a0c","sha256":"c0933cbc5853f6f40a44a233f9d78f27b5c2fca1558fec45d05d59754becca8e","sha512":"ffb71a6a2c78aaf2e2093b9b627f747c8342f56b07bfb44dcdb0b8088da329734ee4f0a050bdbf06fb0d18f8fa4a82fe2a493c2a90afb1afd68253bc548aa6ce","ssdeep":"192:Qr/KZZslgr0MKZgt6HwGApJUo0vDwit0qTP3ZwO3MqOwSNq7EbN:QryvslIujApzit0M+O3MqOwSNqIN","tlshash":"6f922f4f39cbe64d235331b6201f3849b2b69055388ee5a7e668d4c7ee289483373f95","size":21222,"data":"","first_seen":"2026-02-08T21:15:07.85714Z","last_seen":"2026-09-02T20:26:21.339943Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/runtime.7fddb192.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"40e7e567d3093cacc1aac3fd690d6e69","sha1":"3a4c67e7972f8aea04b5b29734f01a64f1d468ad","sha256":"b99522b82218618e605deb5af1295bdff08d48f192a9418c0f8d471fab397d74","sha512":"238e8e204cf03e7bae313c11b0c6c8a07e791c4526f943c7305eaa2abf579a7018bc5fbba3acf4f36a3c5a55cedd51d4278a768eb5e3166e3e633893c16d6fa9","ssdeep":"96:DH5TL+7WKv6PVRFNxeE1BGULSv7gdD+jsScBo1XkL3X6nZ4:0ZvoSv7gN+jTRU76nZ4","tlshash":"cdb16ff473a4f5388296bc23103ff36161a71a732c3a95b4820de4a4bf649c4539ba0e","size":5116,"data":"","first_seen":"2026-08-16T15:23:56.100411Z","last_seen":"2026-09-02T20:26:21.403576Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/chunk-2d228e46.26470204.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0caaed79686eced1895124a1ec09804","sha1":"8cf3218f8c892012ed6a7308a03366ddc8aebf94","sha256":"748fd47d4326ef80263ed9830e0b26224f40ccb130458ecd392b1100d8c644ff","sha512":"5b1cd3701c3e50cff30adb1466665770598255d082e3fe4c1ddecdc7a44f439b6b3c3a3d64740e0333fb198342e66ab1a71cdb2165b34ac2636859ad09de9399","ssdeep":"","tlshash":"82519479b1d3a8285c2bf01c716e3125a06666b9710240c6ff70c99e2fe4da8ab19a5d","size":3051,"data":"","first_seen":"2026-08-16T15:23:55.998632Z","last_seen":"2026-09-02T20:26:21.433204Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Ecf55716b.ae441771.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9aa43f95c8adf4a3713556a7e1c0ce2e","sha1":"0cbf6526825fa69222a84c377667442a30618bbe","sha256":"571620e7610f4c1e5bfbd6dc3cbf2fe2694e86d033c3fa4de7c556589da8d10c","sha512":"1e28bff695baabb19f4dd6f1245a7def7c5249bf30893da0d2cf3c04e74bbe222d790bfa0451d9bc089a3ca1be9223b5351dde9d0e6d715e86afde77752b8d6e","ssdeep":"1536:ujb4/KmdXTe0mQnWZpepSrr9zcjLOcz+hWQpj/60D7i2McVE:pqZpzPf60D7i2Mc6","tlshash":"8e83f98c7693b12e0f972060a07f2406b23a5d5da41a9598f2b9d4ea7c2cd4c917ff3d","size":87249,"data":"","first_seen":"2026-02-08T21:15:07.903624Z","last_seen":"2026-09-02T20:26:21.410515Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.vue-loading-spinner%7E5dcd9a8f.99684bc4.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"98d2425f1beb79ebdd75f366778eed5f","sha1":"b1fddf82bedf35c290c8e2af753742504d519048","sha256":"6d35fac8e1d1b18d2fe3b22f0927c96da2648efccedb817ae047e4e45ae66bbb","sha512":"60eff2f075cd2a679f8ab494e3c9dc73fd2bcb52d3564b011806bee089042626e6239da07adc4c08b2935260fbdf2a5ca4393d564cdd9b8090d6bd7337e11d14","ssdeep":"192:aX3qbP5lzUOf9kd8d3SiX+BwwiMKBEd63+LhOS:aX3qbxNUOfud8d3SiX+BwwiMKBEd63+R","tlshash":"1732105eb0a2f478ae63a8d5416f2421e0164e593638acc5b3f2cdd46570aad523ff3c","size":10928,"data":"","first_seen":"2026-02-08T21:15:07.771187Z","last_seen":"2026-09-02T20:26:21.378365Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Eacdbd055.42adbc9f.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3ffb53fa07fdc36439d106b2290981c","sha1":"0b509e6d43d9f70561fcd5969b3a5812d8315b76","sha256":"0573292eda0ba7bb17979162f9692b20a21f063191c6283e6b09eb72f0d7b151","sha512":"38550c9ba7cee3931e265c7341dfedaafeee5b8596b9fd2cc6a507c955cf447631d215c4749fe7d5f74a6dd918be6f0203e8d453d4d043beac3da282ac56d528","ssdeep":"768:AKCyqQGUEwWXtrLAAWwM94Z3Yx2yyXsHTSkOBXT1:AKCytEZXdRWwm4UDyXsHhY","tlshash":"7613b50a71e7953d5e2bb03524de3508b03a19c5a118c28fffb4c999a9b4d481f3fa6d","size":41981,"data":"","first_seen":"2026-02-08T21:15:07.813252Z","last_seen":"2026-09-02T20:26:21.471755Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E00cb062a.750143bb.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"20872370dd7c4b7d79cf26150cd036e6","sha1":"77444d195e0f72840eea0417c99176ad379de00f","sha256":"97b099180cfc81ff72681436438030c35d434fa98d291a99e85df56ccad8a8fb","sha512":"b8cfbf1acef3f4df572b3495f205171d0850b00ad38504ef5cdbe466621b2070ec99d4754b3d041310eba9da6477cea8d63bbd57c420a81ab9d9e6b71c3f857f","ssdeep":"1536:jlLi9LlY8s+4Ezbzmx6GSWDS0ENTrctYYISQLo3DEyQLIBbJkWDWEWPK0+CLJKB4:jgctYYIS1W6D6JKBOf","tlshash":"149309ddb3cab02247ab70b940af510bf236199d284d8400f155e4e9bc78a4e9277f7d","size":90719,"data":"","first_seen":"2026-02-08T21:15:07.728196Z","last_seen":"2026-09-02T20:26:21.466412Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Ed2305125.399f17b1.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"907920f507974526426a596012489c34","sha1":"e5be495bbcc5264b57f82bb83406efb5b26098cc","sha256":"50def982d66febdbc4dfbfcd544ad953a0a4b92d0151d72e9e8a423332e5f4cd","sha512":"3a41b8a74c55ab90ed645f19b9fd2e13fecb997f7af2b43a6761c6ec9b2d1c6983e2bd88950aea92aa24b99dcf7755ac7df329a564a2237495745aeaa668a00c","ssdeep":"768:hqmU2hXjRmJvPm6rSn1paSJXL44tnerKN8tTOaK9yxWdL+UfcUap9eZzb57PNhsu:hBUKX8pJenjPLOrQkJIf9aPeZzl7/N","tlshash":"2853d6dd7396b57017ab24f5517f440bf2367918a80ac0a0f216e8d93cb888ea167f7d","size":66378,"data":"","first_seen":"2026-02-08T21:15:07.732652Z","last_seen":"2026-09-02T20:26:21.417519Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E918791c6.7235c2e8.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d93cbc49de634289b3c17a0e93c2ab00","sha1":"5a798ddaa01d4cfec570df0e2a329df40bf11c17","sha256":"9b6568f7ca4cbc30af95e3837c69438930911f0d2084d3729a630aa9ef3146b8","sha512":"4ae4ac73ce9c94cc6da0d072b26894b1b4c1a7eb99f019e1395fbc699bfbbc5e8dddedfeb00a3615484504a52258b5bb83bb3e227d03efb455cae1d1dc507855","ssdeep":"768:vWasa+AMfnodAZBFqYBPqcga+urbpwGfhNiXvgcAjYgCM:vxTMPodWpCiBwmhbn","tlshash":"2d53d8ddf394684699f23394486f178a4333ba1c1846c96c797edcd7a864c0a313ebb9","size":62720,"data":"","first_seen":"2026-02-08T21:15:07.679088Z","last_seen":"2026-09-02T20:26:21.388987Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E2a42e354.3e803b09.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dda2ee3eb8d9650cdaca6c71d617babf","sha1":"d64a7a4f3a59b40b32c33cbdb4692b61f962efa1","sha256":"490a85992564746f60777c09fb76948b48aa3f3a2d9b8d3f43a3c41ac1c8494c","sha512":"9b9addae43c0ae9b65d47cb261acbad90fe7d4cad21eb7a921d29054e43c04af2cbad197a99271d3c263bb57efe94c005de1df129f999ddcb2ab1e92e4d67d85","ssdeep":"384:lygmn1Uh6otX7i2XdXZPSP9epQv/524d1hHSrt8yB5Ap4aTX:1/igkP9ec/52uj4qzX","tlshash":"7d62a6ceb4a1b09357a320f0809f5a0fb3ba563a754d88a0f650e9f69c7652d5723f4c","size":14633,"data":"","first_seen":"2026-09-02T20:25:56.489237Z","last_seen":"2026-09-02T20:26:21.435902Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E067239b9.ec05cb9d.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88cc8922c85c35283fba4f07970de19d","sha1":"9d043c76a3bb49a163f148704118bbc96f4289f8","sha256":"086600b401227725f91e878e0829f41b47a80777fd905158334d8f3babe8f54d","sha512":"bb0355ce89621a7e4f02e14f8e02099ba628b68880ec1d777a5ed4fae9976e2028bd933af60d9b222cf95365b25191811bc25cdbd430f12256cfd059f4ed5e9c","ssdeep":"1536:vIi1G9AobXoL8eEnT8BPh/oi4FiLgX9rOSNLKR+:FKxgaKs","tlshash":"1583db1971d3a13d191ab23524193808b07b3e56b549c58eb7f0caf989a8e4c1f3bf5d","size":82049,"data":"","first_seen":"2026-02-09T03:46:44.784382Z","last_seen":"2026-09-02T20:26:21.387052Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E07e1c6e1.1dab38fc.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecd903b7652bd8aad4a6c71ab9ffc3fd","sha1":"026c207ad6761ed0e60a9bdf1313a5961b439762","sha256":"233f9b2488e57d9aac384ca1df42932ee5412fd754d415f6836bd62297013dfc","sha512":"7af86928e7db0dd6f36bd22fd15c73a26d32d980cd688a11ef8661967cc6a304d9c0c3066f31d92f822cc9f86a95e5a55c1481bad3dabd6726562c5c8d0320f3","ssdeep":"768:U4FFRZQMr+NO/EezF8kAnFJYpxlVHhrimzoX0TDcSKhjWdsq:U4vRtr+NO/EezRAnFmVHhrimzVDcSKhU","tlshash":"ce03b59d729174b802ff24ad805f030eb2366466764f40d4b261eef56e787b92226f3d","size":38134,"data":"","first_seen":"2026-02-08T21:15:07.920009Z","last_seen":"2026-09-02T20:26:21.409316Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E8f033120.ee8c4aeb.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"46b4a86856ebeedd9176b1483b54dd35","sha1":"82b9ad1ce238ea2ae012798d1d7c0fb8b8e9ac18","sha256":"e3efd2b89bc01968fb5d3af82d1e6f670df0c4c791e4dd0ecd076ea1cbbf013d","sha512":"7ec615f5c9b463900614c28506583e613ba21a31b0c77885a6addaad40f7d54df42842c9a9af46e744f8e543df6462dc086ad812ea63462e108179cecc835077","ssdeep":"768:hYpArKbg8AebPZypPBiTEsNdyStR0dpO13lWJ4vmoytvVxN:hYpAr38AebspPBiTdyStq6114wytvt","tlshash":"7433f80470e7e07d1d6b9126100d6914b07a3aaa9115d4cbf7fccde597a8c182f2fead","size":51214,"data":"","first_seen":"2026-09-02T20:25:56.510315Z","last_seen":"2026-09-02T20:26:21.482437Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/vuetify%7Ef535d4d8.d250e8cd.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d4951974fdaf8816ed298a201594b22","sha1":"66ca5b07b66dd65b0aa2d8898314f975de299ed4","sha256":"17c84ae81f8ef4528800a2afcb379838e87017b5520e3a7f7436a8a4f193e682","sha512":"bab663870aa2d18ed925394ddcff292723d0c88616966f162fa406670973114ccd9c0bb02d2044774df57b0470e163e41a93b688e31447fdaa1b2e4fa2d7f21a","ssdeep":"384:vj+h5k9V0ivPVZ1ZNXSljhMZKfW0KRwh0X2b4MnVrBxsLIOzaLRsvT/3UqHwtVlh:vmivP1STyKEMrDqrUICnL9D11H7v","tlshash":"eff2b699b1c7f4141a77b2e4402f1105f2ae2889b409d8cdfab9e8c66d64d4ca13bf7d","size":37105,"data":"","first_seen":"2026-02-08T21:15:07.754541Z","last_seen":"2026-09-02T20:26:21.424408Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/moment%7E15f0789d.2da6f755.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a252d6744e22e5c73ec87f6d69cf607","sha1":"2f251fa55a6ab463aeb91a7717b7973a5bc46d94","sha256":"f125f2cd22ee51171698c02a039513295c3eb26aa1d8c8205174761079f52a5b","sha512":"e9e3cfb379486f24d3959a4c8eab3c7788499d95e0b2415a897c7096e77477e9208669a6cf1f31ca1a4c40807c5d812cee6e9b2d5b4ffaddf21c894adbe00db5","ssdeep":"192:dTa+/DuJLsDWW7HqpxOxZYDPVEu4+V9UxP/T4QY5g5KTt:05sqAi6Y59Up4Qr5At","tlshash":"3422e7ee510f29939b0a4587c05f3a44dd5c6bf97c5fc621e5a2b206f8b0a6ccb71728","size":10876,"data":"","first_seen":"2026-02-08T21:15:07.880561Z","last_seen":"2026-09-02T20:26:21.451772Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E7927e0ff.f978fbcf.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2067bba09de1b42bdb182f5a3f1a479b","sha1":"11bb3de45982a48e21e3a3737149925a19748d98","sha256":"9c1ca1d50ca7d9cdc64c1c6dfbeef2ac67679a0f79349b988fe1078a3eb78aee","sha512":"f255502b18f3f40db27d1038e4a7c74ae3c8ca35f4bfc8a505d0375715f299392cae3cf3cc52387a434c16b429b8ec6c8ebb492cf5bff42ce5ec26cd1c80bbe5","ssdeep":"384:HLM0f7DEpOJWSOvqzlMYmejkgenlVlG/DIXfW:rM0fXEpFCfTkXlVlG7z","tlshash":"3f82b7cc37c6b456979395b2806f248f733e6d80245d9890d629f1e83c3486e8977eed","size":18098,"data":"","first_seen":"2026-02-08T21:15:07.963303Z","last_seen":"2026-09-02T20:26:21.387703Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E09e77756.39a37d9c.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f361ebf5021c6b459775bc6ff403e1df","sha1":"1b875ea95e9cac3c5cbd75c02464a8b232b2b0d1","sha256":"ad4cdf1918d5ffe42e220c640f1f930e3a8307258a06863b4bc266e3875b29fe","sha512":"c14a5855e273530b7537a4c4ba1d0cb957f019a24ecafbb4da06c31b98f7365d8515d92770dabaf35d83c0cf92ed2a7402347e1755842fe7c85b5c5920119d2d","ssdeep":"768:NZmkQTb70nPPhxgGJtGfGBo3S3OFYi7KCqap+8ghiNfCjBmccfsOOIa+xoDZk0A3:NZob7aLUi+FYxCS8TNfsK4kSY4Sx/oq","tlshash":"e973e68db2c1b0a513e772b5412fa20ff277a954744e9480e22ae5d4bc3895e913bf3c","size":80319,"data":"","first_seen":"2026-02-08T21:15:07.824547Z","last_seen":"2026-09-02T20:26:21.49737Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/chunk-2d0daf15.f0f973e6.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ba9971f89e1ad2943038c9c3903e0ec","sha1":"8411993d969609ccdb924c5277af14061e6287b2","sha256":"ae8cc2b03a0eff86206e7b6a1e7ae094a1b3e22f29450288152b6eaa8e684d16","sha512":"0b503be5f6a197fdc1bd1de401062484aae31218a3025af9e371e45919fa50ce6d5c65459568e764c25160b3d70aaa8988f7413ab275df640233cf3e66889201","ssdeep":"192:C9Z6XH7HHb4c90w5rGRsdOfCzjFx4WYKuU/wvzoF8:C9Mws0wv3fVnJ/A","tlshash":"42f1d69c72c1f9571fe76990012f6144a223687e1c4e68a1b795e8f56e3888e8037f78","size":7748,"data":"","first_seen":"2026-09-02T20:25:56.439378Z","last_seen":"2026-09-02T20:26:21.485083Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Ebc261e74.faa2ddc2.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f8188cc4bc6176b492d908bc6482e6d","sha1":"a688aa026f873b9318aa160dbfe547a94364f520","sha256":"080046420500c3610ed05446c935ae62e4310e9356611b23eeeb45071808afcc","sha512":"ef6ce64c0c6deaf464d09b71dc73fd9a7742b45361f353d6395eea06b5f7a83da22dc04270b27633f89408fd58350e7c14b82aa749d53ed91522100826b68eaa","ssdeep":"192:UE3H3uqDRAtta4yIDg9O5jFyq+TxWAE+g7t+6UJ3E8bTw54loMvnyArr4W:HHHctaRwg9O5ZbMWArgB+q8no2nsW","tlshash":"ba32c4d47991f01a466a22d5688f540fb3786b3af48ce890f680d8f1b4fa58e4553f2b","size":11335,"data":"","first_seen":"2026-02-08T21:15:07.870627Z","last_seen":"2026-09-02T20:26:21.4397Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/moment%7E399b027d.1d43625a.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b78ba020b6f54f48b677b4c05aa68c0","sha1":"3e00105ae9a9999c91fd858cf34a98a6e29df43c","sha256":"ac96f6b405fdc1bd21eb2caae2a6d8d9b3028f5ba37c63c2d3cc8a8d8c728184","sha512":"6ee66f65b5ec7c746c1b5e9f7c19a8284a94e21147119bd0aef2d0b00cea4a372805cf03dff9df739ce3cceebd19b3d34759b9e61054d61381fc50d2cd075a52","ssdeep":"1536:BqeRC3vuK/n2ATRbCdVn7ByJtBFCM4nYCuHLU/h8A68molm/qF/uhBI62G39c40m:BqYouK/n2AJgV7ERFCM4nYDw/hdzDF/8","tlshash":"24931aca440f6da397450996847f3f689d2c6fa5905edc11eed1a102b8b8cbc83bb774","size":94965,"data":"","first_seen":"2026-02-08T21:15:07.69418Z","last_seen":"2026-09-02T20:26:21.377381Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Eec673aab.9e62ebf7.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88646d714df3c7618876e400ba8e1ef1","sha1":"c33bdce4a0b394bdb0bb7efa1825eb37769ecfed","sha256":"0a6fbb9be0f3c1f5c1bb9ff6296440163f2a6499cc2cda57b605aaee85fc13e7","sha512":"64099213510021de018229e2dded11c69caf2b337a0478b3c2977da63c3960418bf10aed7753a4c883a599eb734076dfd0ae7f30d4b4de5d9457ea0a4b09611d","ssdeep":"192:HNjYaqUgUBdDQlQAS5iX9QXdXhs6cPrxSJL+q:tK+CX9QXdXhAr8v","tlshash":"e152705e79cbe15d131b3171101f364a22f3601e784ee567eb68d4cbee28c496273ea8","size":13699,"data":"","first_seen":"2026-02-08T21:15:07.766816Z","last_seen":"2026-09-02T20:26:21.389652Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E20014605.e8aa3253.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"827f82a7732bda808067d7bb6d2df6e1","sha1":"2e2ab0235bdf0c1f1a97df0ab28c3dacca12c96b","sha256":"50ad67cdf0bdb0741e0fa93bf1b90e76f41ec8f57dccbef314277bc650413097","sha512":"95e2bc26c70f4c01b26aa64ed3fc6c3ea9c68b9e388eeba401287f7f005d5885781dff48e942dcea8ef66d8556569dd92b862b446db1b8ad14ee049b41ffa418","ssdeep":"192:/sstHAgrPI7vCLys3xboRtB8TS386Beml0GDVaOvhhEbRtqOkhT+W3AS:/ngUPuqLyGtmaOQbRFkhcS","tlshash":"d882b719b1e3a02d5e6ab134241d2418b03a2d97e049d1def6b4cddd98b8d4c1f3be2e","size":18411,"data":"","first_seen":"2026-02-08T21:15:07.769846Z","last_seen":"2026-09-02T20:26:21.382622Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Eafc135f4.78bdda4a.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4f86ae41dd0d70d1bbe918658eb6bb7","sha1":"3be956147c1e68a0dbc61ebdb2ec9138d80a7cef","sha256":"b332a73cef145f5d7953ee7a828570932aab71f63baa8b4d8a5f4aa90ef3aa78","sha512":"ff285a5e68a27eb6d0ac3130ff8e5dbae4815eb4342fea52315510a67f756384c078571dbf8625ad0d57095f9a23ad66710ce12d296d925366589c8c41f46369","ssdeep":"1536:IMqGwoqkICA98oKovgXihUPIjvemPBA7odTVG/fhPG7nqBcc/UWdqczldolAFGUY:kb7EwB9t1Wdqc8lUGZD","tlshash":"ebe3db06b1e7553d0a9eb236240d3804b0363e86a049d19ebbf4c9ed95ecd582f3be5d","size":144986,"data":"","first_seen":"2026-08-16T15:23:55.920606Z","last_seen":"2026-09-02T20:26:21.39416Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.lodash%7E2930ad93.38b6ef55.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9f323c1d8c5d2ce0e267f8712463caa","sha1":"28e3784575ef759be1681f7d2be41630a93edc71","sha256":"8defb2430cd9299a9a5f8632e07695bb0c4ecc21a67dc9f60dc9da4160f67d9b","sha512":"518f0f75d93cabf1b65a21854a4e7fa9d024341dc7b3bcf8143fdfdde46fcb480774c48f828944f09caff5ca61f0cabb3949825d7a7c26977a74d5958ac6bfdf","ssdeep":"1536:dTBBrGzo+fKaS+tyLnWPf/O6rdPKKVrH2RN3hGrgHXowvFzQ4BSG1MQHhvg0ITSZ:6/1Kc7T3w","tlshash":"2a33228dbac1f0545373a92ac22fb91bb2b92946f50edad091afd5d09c3859f4233c1d","size":53471,"data":"","first_seen":"2026-02-08T21:15:07.950258Z","last_seen":"2026-09-02T20:26:21.483501Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E06837ae4.2aed1d86.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f8efeb3d53048c029a27004d5debd12e","sha1":"8bce9d1b249a2f11819bc8efff154cb8a2dd268e","sha256":"a97b46573e8ca545123a1125900f23f85f22fb59c5db0f71d8864c493897958c","sha512":"504b0fb8133b64abdce759e0248ea0140869506fe76eec2f8c45df890b407ead40424ce2cfb0c80f1e9ce5bdea00553a21611aa3f7589b3fe7a09eafefcdefdc","ssdeep":"768:h18Ni58vwv7+nOm1dLgcABgX4L5JHmvM9DaBDdSLAK0KqYUJN:hmNi58vwv7+LLccABg05B6JN","tlshash":"bc23ddecb4dbf2b946277071517b056eb23b3cc07dec19019e916e99387880da162bf9","size":47748,"data":"","first_seen":"2026-08-16T15:23:56.079651Z","last_seen":"2026-09-02T20:26:21.381305Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8e97e26f6649ae53ee5c226d080c1b6f","sha1":"a6629873663a59457f804cf75d6cad5074f125b2","sha256":"9cd1315fc74685fddc7bb9e52cc5b6d7461b4f5f804d26a832983995ffe5f8d8","sha512":"64d48950f5e9fefa785542ad5e241cb8f3dc713b36acce7ad7e95674b75a2cad17ebd7ffc9e103dcab17e05934f4693026b6af2060df0339dba9c067a0a0f7eb","ssdeep":"","tlshash":"b690041c1314c7351cd347414501d4411d05145f403d477c1c0374c35034c445411d50","size":47,"data":"","first_seen":"2023-04-11T00:43:32Z","last_seen":"2026-09-02T20:26:21.511187Z","times_seen":5640,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E205977d4.e3dcf3dd.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f252ab7fcaf2c4289949b1ca74a3225","sha1":"7c49984e4e37c06a0b0d0c7b77fc0a6da72aa440","sha256":"5ad26e8894acef1baadb5784ad08ca1a0689da4d8ae627e833576ee9f9729eb1","sha512":"c32047665a54a61e4366cf6db1540fbf2c1f3492d1d6efa1c304e6695569818fc189f62db2391e8034fc8ed9546f31a9493b970950dd76af3ce633d259bd27df","ssdeep":"1536:HGXXitHak7HltlfpDxZTZAJPDsrR6LpITE9OBOdFYRAODcmdqj:H28HRthl6L2TEyBMj","tlshash":"949307ce72c7b47547c771b9482f210ab276a8651889c00cf536c9c5aef8d8d61a7fb8","size":89621,"data":"","first_seen":"2026-02-08T21:15:07.772514Z","last_seen":"2026-09-02T20:26:21.399412Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/moment%7E0a56fd24.0407924c.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e10dc249d6bf07a4f149acaa1072b864","sha1":"bb986ced2437796eac2cd48a8994b40b12a6d019","sha256":"9ddfac62c93ba79e6c9c3ce536760e2db62e840633b159bbe13f22b487752e02","sha512":"41af90f61cc7653b3f5bb1f57745dd366225ebea736a26877ca420bc0acf0eea5ce60b125994393f7d0e65c11e9ac85f2f242af06a4efde57060a4022c367d22","ssdeep":"768:FutW5Y2I2OTgFY+F1/HqEKghOG9zwYnLHj2IOECXNh3SG5/b4q/FcimsRp:8OI2O5I1iEVOy26mhCo6Sp","tlshash":"235391ce3682b122577602b548bf480bf33d6d55684e4d0cf518e9dd3828c7a927bab8","size":60689,"data":"","first_seen":"2026-02-08T21:15:07.940531Z","last_seen":"2026-09-02T20:26:21.365526Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Ee179c149.18bc38aa.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bed3f51b25ccd7969d5af4217217c7c","sha1":"5c1051a5d6c484947b0b6de48b5257c4cba53c95","sha256":"a69b009b4349e906fbdda80841a189ee6cd1cec103e7dda37fabcf62df33526c","sha512":"582f3350de00d1b196fa803b80d96ab1db267bc592a6618b028c55a293d14cab125dbb07f7957c682eedd9a11d1b6a1a197529f50308e0b4bb16053e8fd9094c","ssdeep":"768:1nSf02s7KT+VQ7q3je1LUJAR69RdXaaua5mGuzbjaAc7RpFFzIYDsQ7X9iunb8HX:BKb7q3GuDXavgmGukHtco1STpd","tlshash":"df83b5a633517177a7ee13aa14fa4400f3b6948c984d046cb93c98eb3c7065a61eff79","size":88239,"data":"","first_seen":"2026-02-08T21:15:07.928593Z","last_seen":"2026-09-02T20:26:21.36294Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/vuetify%7E793fb972.e022b373.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"844f06f6933e1fe44c1d50d0ac517110","sha1":"c6f729cf0884a2316d97fc2a5ed0e7cf5df03e6b","sha256":"aa8ddd8409fdd4f73a913d5a872490fa22370b8930f3dcfc5579da676dda7efd","sha512":"e95b5aaed08359659afe457b654a4b3f4f028ead93cc8beac0497642b1bd8613ae5d4c54e116535d6588fadfe629e47944f3bd7e7332685033a360a1d77d8739","ssdeep":"1536:9wkez4+PXdcPG/78Nf8zlJG78gF6SzLDvOmNjco:9wketSg8p8zlgFFTvPjco","tlshash":"59b3c749b2c7f41507a7b2e9446f120af36a1498b41a84ccf9b5e4eaad54e4c103ffbd","size":117874,"data":"","first_seen":"2026-02-08T21:15:07.833538Z","last_seen":"2026-09-02T20:26:21.414913Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Ecdf581c8.5a51a74a.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aadd7d6a7c4807f6e6415649c3454ce6","sha1":"4dc1a3134989babc39f87275ef70b4db7ddedcea","sha256":"ef7d2f5cfce69b9b5807c583e6f10af5e081ded13b97910adf54d2cfe2b67de4","sha512":"47ad377eb9526f372d924911115521113ea95fc4f97be017d38fe76cd737196efa2addb6d7a2a68d279dc98a2a7778e1509bedbdc40a456e2acd4a846c8c659d","ssdeep":"192:wqskMIvYKM2bjg8oklmYgDUFu1fQfA17QfwWxrkohl8S2JrGcSabJ20MIrCQpsLX:wq/YKM2XYGsZ0aohl8qWg/HIsdzxqZm","tlshash":"af8250cdb686b0261b977075906f250ef33b7a44340f84a0e621f9c67cb955e9223fb9","size":18607,"data":"","first_seen":"2026-02-08T21:15:07.826017Z","last_seen":"2026-09-02T20:26:21.421605Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E0426f6d1.64a97e08.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"908bd975416b31ec625b7b87c2a13d96","sha1":"5e445e611d89425c3996decee6576bca1914ee30","sha256":"6dda6feca49b2e2e18a7a66cb90a460156201bc817f551a8b6b43e17b414696f","sha512":"d1e6d197cd69b5a3fb62f6737cdfae322b51e53942745d7d9d14753e9d0c75d360d95e1f7efa972f4e3c90a6b0d65ef50d279f060e00ad499b5f76027772db50","ssdeep":"1536:DUvBjuf58G3pCRXRJel4gO/SZR8LwlTny8ulGn7HF4PCA:YPJoFJqGn7lu","tlshash":"05a3b70971e7a53c0b5ab235249b2408b0373a55b44d84daa7f4c6dac9b8d4c2f3bf6d","size":97691,"data":"","first_seen":"2026-08-16T15:23:55.890958Z","last_seen":"2026-09-02T20:26:21.396971Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Eec8c427e.b5a86992.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"052ae89af8a93c628ce0bbd606f8eaf8","sha1":"7cd897742ab6f766271cb6517895862f1182f31e","sha256":"c6f1fbdf97fd4699f865d7db0c20005f7dfba122d8b6e6ce9ebdb534813f1bea","sha512":"5fd2709811dbd02b62b31275ba80630da989e0526c3dabd7068af48fe7e580247ef46e0714d515acb9be554c8adad02c31223b862a9783b296886d18adf7867e","ssdeep":"1536:Klp3s20F/2Hwfz16rTpVog4Jxgo+F82zMAIm6r:CLaaFF82zMAx6r","tlshash":"517319c8b384763517db51b2817f110bb3316184780b8068b63adae56d3c9ae726bf7d","size":75037,"data":"","first_seen":"2026-09-02T20:25:56.514743Z","last_seen":"2026-09-02T20:26:21.400842Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Eb1f96ece.a7c6745c.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2dda5b0229e5cc01f4f1b98284783467","sha1":"b9b123018ab5035ce5299e80a427fd71758b96b8","sha256":"d525f309ebf294a88b16a1a73c481b679c20a47665c8f52dc9806b816afa11d8","sha512":"dcbc51dfcb0683d8ad29b9dc9384c4817540623999a0f180e4d3f2a1588d1e8706a28d2fd1961e6dab24c729fa3f08026add3cf51935ff0c0e2677549166b4f8","ssdeep":"384:t3/6xYUCpRuKSRxfCn17+vOan6LqLPw1Sk/93rA9rYrrZrNKX3OoLWF:himsKSDCn14fn6a0Z/93rfrevLWF","tlshash":"a5d2c5ddb682f03547e326b0416f110bf2376699744e8098f26ae4d83c7e84e9527f7a","size":29646,"data":"","first_seen":"2026-02-08T21:15:07.926213Z","last_seen":"2026-09-02T20:26:21.461964Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/vuetify%7E237e29c4.efe01b40.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c85d32a4edc37c70dd781a7b693e3b36","sha1":"c9a58097c66a184e0a2ba2844bf8abf54c0e2cfe","sha256":"6e04f85b3a20f54626173375ed2881ddadf84c6b216967ef19f222d0bca4a95a","sha512":"4fbd6846faec989ee1516946c2277d468f6e6c25e092d5e0c9b22b35160f33ccb97e06e43926ee0094119524709dfcf4b3b09656cf821f0f8eabd90aaaf17620","ssdeep":"12288:uBrySDzhW4tn9rhGpwQNo/VGR1GGTfjL0vTp0VNGW:I5SpwQNom","tlshash":"80050a49b1c6fd5003f32195646f06c3e33a188cb846f498b165f4eaa9ec45d21bbb7e","size":866018,"data":"","first_seen":"2026-02-08T21:15:07.967136Z","last_seen":"2026-09-02T20:26:21.360837Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Ed8b9b6c1.6718e9a4.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"397118cdf96561fbd002cf1d2f784e86","sha1":"7a5412c35a6c01f72442458d988101e3f530b595","sha256":"20a8915f278ce60e24730edb8053890d1919d6bccb63fc25acf69bdad40cd1dd","sha512":"848a984ed6b3de765740b8db7ff7cc380cc1c8d3f8e98120348379a7dd38ff6ab157f192d20fd7ce0cfff0785fa2b2bef01106bf98f594629207eca2c54df786","ssdeep":"384:Y7n8ExEU7C7nE77G7+au7P7T7EQ7Y97i7757f7u7XEVEe7zEP7t:YL8+9uD+yyjHYQE9Wf5DKT2JPuh","tlshash":"f87257acf0dbf2604662707452bb055fb33a2de53d1901168e6292867d3860fa573bfe","size":16621,"data":"","first_seen":"2026-02-08T21:15:07.814708Z","last_seen":"2026-09-02T20:26:21.358554Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.vue-loading-spinner%7Ea78bbb77.7d418840.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d37cd501d8e50ad3033a4d6b17bbb52","sha1":"321fcd3c5b306797c12b7e8d78d33d73d218d492","sha256":"08b0af19fa9daf956d22c3b3f58c21396f925f5a8df968e8eb43a47c71cd9fd6","sha512":"ee40d961ee3c061fb4c47bb96ad603c948f4df5b1a068429510d646f19bbbef529331e15ecad698d2e7da81467b39634e331b5cd72447f59e9f6b4f7a7a65683","ssdeep":"384:OQL27LwIo22xOWx+PENaWxIiboR+30t6MMpq73WLl2UxHK5cDG1us81aUcmWAJwZ:3L27Ljo2+OWx+PENaWxIiboR+30t6MMo","tlshash":"5c82794af892e96cde37a46a822f1536f1100fdc523564d2f779cce826609bc876db1c","size":18223,"data":"","first_seen":"2026-02-08T21:15:07.832005Z","last_seen":"2026-09-02T20:26:21.452542Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Ede0c4698.02be63db.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"499c72c1a9c9e431a073d4611d89187f","sha1":"a0098fc36b273196cc6c87a991be0f95c3909cdc","sha256":"d46859f4face89edb1601c06f7e40a4b1865100866e9fb6858c125e07c0ea731","sha512":"ad29df17b395bba425c8326ef25fe76724a38450774fbba40c616a9cf926d454bf143d490aecf9937428efaa88fefb890bc99c8acbad19b72058c72811454b5b","ssdeep":"768:0G71/UR6gfvLG0QPJqKa0VW5epznxfgeEr4ggrFuODazh0ZrNfaL/3B3ff8y4KR7:T71f0Q60Vb1nePh0ZrNfc7","tlshash":"6fc32e9e79dbe25813073172211f394d72b3a05a788e90679658d8d7ee28d0d3373ee8","size":118790,"data":"","first_seen":"2026-08-16T15:23:56.056672Z","last_seen":"2026-09-02T20:26:21.383298Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/session/login?redirect=%2Fmarketplace","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8e97e26f6649ae53ee5c226d080c1b6f","sha1":"a6629873663a59457f804cf75d6cad5074f125b2","sha256":"9cd1315fc74685fddc7bb9e52cc5b6d7461b4f5f804d26a832983995ffe5f8d8","sha512":"64d48950f5e9fefa785542ad5e241cb8f3dc713b36acce7ad7e95674b75a2cad17ebd7ffc9e103dcab17e05934f4693026b6af2060df0339dba9c067a0a0f7eb","ssdeep":"","tlshash":"b690041c1314c7351cd347414501d4411d05145f403d477c1c0374c35034c445411d50","size":47,"data":"","first_seen":"2023-04-11T00:43:32Z","last_seen":"2026-09-02T20:26:21.511187Z","times_seen":5640,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/static/vendor/telegram-web-app.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2db55d684f07c95beee17f42802f772b","sha1":"75d76d0be4d644d3fb0de488752ce1a4f28e6480","sha256":"89a574824215075b5392730f04d2afa3fef7d8992311deb5ff3ea1975f7ee3bd","sha512":"3969ffc5a234ef527e8e1631f5e58e6a7189a14b3b8fc54ca4bf9d260f0781d638046a8cfb8f9e52604b43af146864f69bb660e2342cc2873b45c9f691e76ba7","ssdeep":"1536:pU5TpRdo54F0WN2Zbjcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV76/xHK8ITr5:u5TpRdccKFU76x1q","tlshash":"69b32e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","size":113893,"data":"","first_seen":"2025-04-12T01:53:48.55722Z","last_seen":"2026-09-02T20:26:21.380509Z","times_seen":443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/vuetify%7Ece053847.5fe52b32.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c686feb1699671326c8f5e374e79a3a9","sha1":"41117a172baf9a32df0ac455697c55dc238972ba","sha256":"e710bb3ad77d14de69fba5516ab4510d42157490243de821fbd30af61ec76d4d","sha512":"19949b5e22e6e4442bc1069233ba281358477d595e45de5c56195936394585968fdb6f4b0c1cb6b0629f7e1281f5d649e447b47148d4be45bfc1857b33baae06","ssdeep":"1536:jeMZu0le7i71lcGHnn5AjL0vTp0V78iMLOU34jJFFRvP47DsY:I7iplcGHnn5AjL0vTp0V4CjJFFRvODN","tlshash":"a363ea9eb1c2b06506a772f4501f6307f26724a4b40ed0c8fab9e4d26d60e8d616bf7d","size":68956,"data":"","first_seen":"2026-02-08T21:15:07.7098Z","last_seen":"2026-09-02T20:26:21.484295Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.babel-polyfill%7E5d5f8003.3e8a6215.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cfe570cbf8fddfcea13258d06201a8c","sha1":"15f5205c1d65b975472cb3ad862f905ef6265500","sha256":"1a73b44f2153e28ba711221fc50d631da412897f24f2b296dcb5f43f74c0af46","sha512":"411d39859fc68b79771aacdd4074929d5125f9e3239571d282ed1c9762df4dc034b79b79b11a3aacf8e909659875072479a91128e091f3de4b875085143a677e","ssdeep":"1536:vkPaqSXtlTGOR8J8q6SJUpST1VzDMEches6ElwjRY:cPavJJSXzDseQlEW","tlshash":"b593848cf6c2b08816a37078512fb40bf2b71e54784f8991f629d2e4ad7a60f6177e1d","size":94514,"data":"","first_seen":"2026-02-08T21:15:07.830564Z","last_seen":"2026-09-02T20:26:21.408309Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E05ca0e47.551f0afa.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"56c3567b987d48de5c9a303b46aea4ca","sha1":"9db6987974182dea99c564792e8f0363a648e069","sha256":"66a67879e3f8ac9f2dcb42f6e3b3b7beaa4ad410f0f03596eb3deb72fe3e1a8c","sha512":"724265c42e7d47e6d824a077ad1afbad1d850860a0fc5342373aca12a8680954e93a434627c1d31790c94ef11df8a56ab2b1690e0530daae9744d6711265bef9","ssdeep":"1536:dMu71uaRWDIdn98p3cimS9PcKM48JuNf8pHXVcy9TFCHjNiB07YlrIAZNoYox8V:dWEdnw3cQ/M48J6EX1WjN4oEsAZyy","tlshash":"13141b88f291716143e721e1012f810fb37be938740a81e8f295e5e56c7dd8e91a7fb9","size":191824,"data":"","first_seen":"2026-02-08T21:15:07.744626Z","last_seen":"2026-09-02T20:26:21.453317Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/3115eb7fbcf7e72ba1ba0f0894c95450cb2c797e/static/hcaptcha.html#frame=challenge\u0026id=0f8673f7bbq\u0026host=nvmp.live\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=ru\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=2f20b3b0-44ce-404c-97be-2c1c2d641422\u0026theme=light\u0026origin=https%3A%2F%2Fnvmp.live\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22ru%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"542047d5519f8f7786da3347cacd50f1","sha1":"26126775ecd7dc31220350803c52a7906f5b7f84","sha256":"044864a3a23637e127e34fb229fb61ad454086cdcddc913be30cf177d1808f2d","sha512":"a95b0d5e19779e50e983254ac5cffb26bd6f0245baf36a4d931a9c8edfdba26ebcc7e331a13c32504e6002f7a8d5ee3e353fe6d85d2340f9eb90c38498b7f78b","ssdeep":"","tlshash":"699004dd34c370104753115400571cc4f074dc70144c4d40c04cd4511cd5030711d45c","size":39,"data":"","first_seen":"2023-05-12T18:19:29Z","last_seen":"2026-09-02T23:34:46.227657Z","times_seen":1153,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E3addf2b8.238c166a.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"562970b45bfa1584fce05cf653a55c2c","sha1":"6c725d699a511dacc64ec0aafa6c604f63cf4390","sha256":"f09fc616e435a24c147b0d819bfa54964ab7cc672971d55e8e6a92cf496c1bc9","sha512":"526dc437257a41107489f8090936b9909c4524e93579c965316518573dfbf8a2a3df1f224d97f9e076baaed116bc0b3c694b3fa21a84fa1b29c29b05ac185f90","ssdeep":"192:nW/dXoij6BF/An2U/qKdFS6xcsDGG/N/8FQohv1FN/z7P:nw4KeC2U/q6xFDNxohdFpP","tlshash":"8942b65fa2c3a03d0b3b369d6a6b2908e01b1cc9540d98d67ebacad594f830d0673d9d","size":12738,"data":"","first_seen":"2026-02-08T21:15:07.674066Z","last_seen":"2026-09-02T20:26:21.311331Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E6ff199a4.274a9b78.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3bb890a2009eb2544074c6f271591473","sha1":"fa6666474480f03696881ae69ebab1262d3786cc","sha256":"f6b3014d5eac49cfdbbe2f35e5c5f289ae5399da9e7ee0881799de452e8c056a","sha512":"0679fb420b5bd43d095eca18520d4ffe7804baeadd23b3f598b2877f50713c8a2d1c15b12c6127a2d3cc46a7b05372d7e43353379c8550a2bf8f7f5563754891","ssdeep":"192:pNeJRyDLb9tjD5nwIXa1oQmfOCHTHwSr6sSoZ9nSuTT7kimZNy15iXhNktvVvi9d:iCptP5n1zQmRwSrxBZqGb/U3vJ","tlshash":"83a296eef196b0935393a9fb102f224b723726a47419501cba78e8f1ac6560d5277f3c","size":23348,"data":"","first_seen":"2026-02-08T21:15:07.804214Z","last_seen":"2026-09-02T20:26:21.415721Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/c/d93a76be0beeef7eea0d7aa760190da474edbe960390808ec43a39d58d28d0bb/hsw.js","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a54426257a3b36cb97500130add04203","sha1":"eb4a41e0dc5f2bedd163e7aca8fd43d88bdc3f61","sha256":"fce9466ef697ba21388c078a3301bd6b58cc229242865177fcf91865fa6e8683","sha512":"a3a28b540513532c37b62d2594c77dc4affd84a3c16d39ea45cb4380f03256fa8813484cec5d6ba03305f61d66eb859590a5f379f812d52044eafaa0d085b15a","ssdeep":"24576:WOjA1ESwTxE+sM2TyjWWtgOGjsyOsPM67CWl6HnVjD5FSUPXx8Wjs+e5yjgZEe:HvlOt","tlshash":"88352abf6715da7bebf205ec0c0e34472c8488db8269dde4da8d98f7a4505af48491ec","size":1061918,"data":"","first_seen":"2026-09-02T20:25:56.55875Z","last_seen":"2026-09-02T20:26:21.512965Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/vuetify%7E0bd4cf6f.84198bf9.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a6ad28102530b2f36573525da54ce6e","sha1":"276756e173a841b2c42fbabab57d7c3413a7dea0","sha256":"26a9304e3b39d432a592428ff13e0b442bc718848f57aa16edff19b02f704d1f","sha512":"e0f6bcc23a7f40af06add0b9cb8d0c7d51838d8d41834a334f7985ed6d601421b536fe91b95af17281495cdd0aa7892835c8c88e2d670c44ac86df1b344c591d","ssdeep":"384:XCzxs6XAuxxvWeyJ4GK5GFqJJL2jNJR9ou9gfdFYr:XCzxTQuxsEGNqJFAJRKLQr","tlshash":"3b03d74ab0c7f4150bb3b2ea501f1206f26a58c4b81a91ccf9b8d5de6e58e4d113af7d","size":39320,"data":"","first_seen":"2026-02-08T21:15:07.849628Z","last_seen":"2026-09-02T20:26:21.486184Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.zrender%7Efd542d86.f3c97e3b.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f16074116cbf4413057f734058fe4474","sha1":"4760bea7886a87595ab4f5a85f114d7fd0e60f0b","sha256":"e3ef71a789bc9b3da4f3a553bbf7eb654565082611433a4d74e666b44d9c5e27","sha512":"6fd692e31ac5c01bff69b3573c2a2ad9264875ada7a31742538f8fbc8840d0400b2d62892834bdf9443ee213a23d7ba545e1d3f2db5cf34d6696cb85ef86b812","ssdeep":"384:yRFrzSpzlHRfmAv9jA0EMPNr9+u7vqrt3v5OmGCpfD217Se9eApgHf9sYrMrsxS8:L/AjKBz0xPClV+eteJq8","tlshash":"6cf21ad872cc701c4252566850bf268be137291ea50ecec8f26ed6da6cbd60d2277f35","size":35502,"data":"","first_seen":"2026-02-08T21:15:07.838114Z","last_seen":"2026-09-02T20:26:21.367073Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.echarts%7Ebdcda83c.4081707d.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"596684065e139aabae9659698e96d59c","sha1":"4dfa680ee4db86b0ae25cad94722323fda5bd2e3","sha256":"bee54f50e54ee2b9fe37fc4d2bfa9421a393af1290e6d606135b73a35f29f8b6","sha512":"c94a38b63ae969e242b4650c35d4b0133287e93ebd7f6c3affa2dbc93fe169a4e2b9aed4571c2209636df29a9a61139f0aa64069db88d2ffc5ecc2e5696f2f64","ssdeep":"384:ZKlOtbXluc6X1AATW9iEVzSBjHRP6HZhfBsm9MK+ASLXZWqHnQlY/wpKCDoTVHdZ:slOzuaAd7/wwVo7RGh","tlshash":"a2d2b5d87784f02045ab116498bf560fd3352809784a959cf699d8cebc7c96b322bf3c","size":30926,"data":"","first_seen":"2026-02-08T21:15:07.822977Z","last_seen":"2026-09-02T20:26:21.463149Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/moment%7E8eeb4602.907375be.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"23d174638ca853b532e2f0cc9f9ef013","sha1":"21d144dae18f6ac579e87857938d7ed7acceae49","sha256":"689d5799cb66bff0d6bb11e5c6cc4297e50930cf11ff94df818e4d5b7443b3cd","sha512":"bd6c8fd24b29e8763f9d77d44c487ddd0e90590a163e76605d067ff3df39550a0dcc4c7e615367c2006762bdcd61a69c3a1909d2db058fbe99760c271b7180cc","ssdeep":"384:hGsMS3ZQtYdcvlFoFtOOq19FsfSkUgKDKDWwCCKcB7ROe:3MS6tYdcvleFtxu96fS7RCke","tlshash":"7872d58f280fab969b09010bd42e3a499c0d1f5574498ce197e1f16cbbb4d6cd272ebc","size":16240,"data":"","first_seen":"2026-02-08T21:15:07.723409Z","last_seen":"2026-09-02T20:26:21.402041Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E5a11b65b.33c971a8.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7af9cc2f5d8d753ceb3d6da1435e4922","sha1":"0a9c4bfb1954eb6cf410f935d37dab78573a1f17","sha256":"3b786924168e2f22a83ffd4520a0c8cf9d2b9dd012345147f7ba7fc70642db21","sha512":"98145d3d42cbf63e44ffe2d0db80c3c01d8da86bb559d6b9f0b4b3551d3af1824dd19934dde8b8c7032e9bcb6ff6cb9e34703c9da408c993ddd1978b4c257ac2","ssdeep":"192:t2sWX/Cg2HNsaEzhoFbT1UVIRHI+lt1xDY0zfHQEO:t2sWvCg2OaEu1BK+l60HQD","tlshash":"827256fad54d58bc3c3611c4ab683701314a4c86d89f94134c05fea637dea2873a6bee","size":17168,"data":"","first_seen":"2026-09-02T20:25:56.490857Z","last_seen":"2026-09-02T20:26:21.392974Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E678f84af.f8f7b55e.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"68e6d1cc27c9a51adf15b2c3251d3daa","sha1":"2097f1f6d8a899c11060510f25ecacfeb141b8af","sha256":"41d6651a7a6d2918bb4cc0d85bd3e912d3eaca8c2f4477b89a978119da26d093","sha512":"9a8f8126f93217145a410d91cd457a970032a7ed5206eef7075614411784d3a9f9445e5a8ff93b99733a1738e33b290dc67da5de0f385da3317d48c3bd0e9a82","ssdeep":"192:/oLiCB8w4AafzAxcfocxBzPjsSclSrDYYo44mmvdsx/qDVqUgtBglPzsiqC+rPh1:/WsHHcQQG4mm6HbtBmJt+rP6p+ixgv","tlshash":"b97273ddb2d5f02083d7a52b652f210ba33a075de8098018e36ce8f57c7595a936bf78","size":16964,"data":"","first_seen":"2026-09-02T20:25:56.418222Z","last_seen":"2026-09-02T20:26:21.331511Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/vuetify%7Edde583c9.3a9d6102.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ad1417e17857201c58756ba8a40c0e1","sha1":"0b00b86b39fece4a2560cc7e03508a6fc00a267b","sha256":"6e0c496fb22b12f19a7488babd52a2c7b006f96e0b1b3b559b4552eb7f09f49d","sha512":"597a629de745175165918e331b6078502bd3cfc4c4e6c4dd58fd315cc9ce882deeba83a1fe4a5a3d2b28cd66b68563ebdda7643514afa66ec5e9d39a9ff8778c","ssdeep":"","tlshash":"e241286dadbcf614285224f6214fbef854bb12183caa6db149b0f1d0cb3229e2117f0d","size":1985,"data":"","first_seen":"2026-02-08T21:15:07.834894Z","last_seen":"2026-09-02T20:26:21.391642Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.echarts%7E943f0697.3022c5a3.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b76cf76bb130542f34eb52b5d137c997","sha1":"97b02ad2c050cba337723252f088ca066350b2be","sha256":"bb272cbf796a9374b5cb32b34b2ba34f8085fee0a8c8a2f6c16cf528c5c733f4","sha512":"78ab6bb409e84c5ab118cd864e0224f7148d65b04b984b2a7fd11bf3203189a0bca20bfc208b35478caa46622b6332f1679004ca29b3f2e87f92d8ad0fc1ca73","ssdeep":"768:p6rpbsg36p7duMycLrbf092R3GrJdOrFm:p6pnqp7duMXbhRgj","tlshash":"e4e2e4ae339c70a9d7a73672109f600b42761805550bd904be24d9c6bcbe99f627ff38","size":31553,"data":"","first_seen":"2026-02-08T21:15:07.905589Z","last_seen":"2026-09-02T20:26:21.423475Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Ebd2a49b8.8a9cb64f.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"23924fdbd67672bf009eb86dc9ba02a8","sha1":"5ce4e50af05ab31b377485be1d044ffbe583e955","sha256":"2533b405365f5cac7e4f92289cc14216927d1cc10d85c6d7e1127e2501cb358b","sha512":"5f4f7de4f0b251bf6699d0e99341be2032f55f4fce7643dcaea7b77a062c1204d631e957571d5cc70d4bd57ef8f69ee150ef2c2ff5a6e6ec201fef16ef2c955c","ssdeep":"768:lB51kUGEf5F4NNnF+FLWmytLHCz91Af2zP0NiFAlesbSWo:h1kUGsF4NVF+FzytjCz91AfGsNqAlM","tlshash":"b21329d8b386711687d7606d944f0306a1bec6997839c880f736d2d02c2d5af11abfae","size":45132,"data":"","first_seen":"2026-02-08T21:15:07.751804Z","last_seen":"2026-09-02T20:26:21.498048Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E0071c937.d047c824.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"248b6029f1daf7d99f6c1d79de888371","sha1":"99e0daf28f416e852bc7a2ed70719628d7ca935b","sha256":"403e3ad4baae3a293368186c2385915471cc47b34913d678ee608eb574491d85","sha512":"cc028644e53976dd0d0283d784409801dc7f323cb897dd52e93806772d195fdd4d1b28a267dbe6517443885d3419515c2cbc6f0864abb804df644da0492d3bea","ssdeep":"384:f6DFy+vcuGCy3K+W71cjOsaTkbmKlEdxwR4gWJ5IOVPECzCzPrn7ZjMQwjctrJF:yD8+6FauOKb6qgIO6CzCD6QGKJF","tlshash":"59c2828cb6c1b48517a360a8422f640ff3bb5965b44fd5d0f62ad1e1ac7a80f407be6d","size":28033,"data":"","first_seen":"2026-02-08T21:15:07.720131Z","last_seen":"2026-09-02T20:26:21.321454Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Ed8a25cd3.fac1b975.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce4e2b1929f66f7182f34a064d5be545","sha1":"bdb43c163b9524a504548a32f32b281ec603a92e","sha256":"f50bdbc4a4461cb3dcc98a4e6a874a43601e56fc4a0943cd2346e17da35d14c1","sha512":"a9ab1a07c9ea3d9a94773d755b446a6fe6a25486a1de228739b2d3d4215387fa737f9024bfc0b9cf3972dd145264bc48c25d30009aadf70dadbe756a95f630cb","ssdeep":"768:fkXQu4HqCyeHiTrZohryPfv+gMX5BRSwPzfvI//StA2Zp9BkY4H2NBjP:vineBBR3UgP","tlshash":"2303b6aeb1e6b2a019a200d2c83f1545f2389ff83449909df27ddeca6c64514f277bb5","size":39282,"data":"","first_seen":"2026-02-08T21:15:07.757999Z","last_seen":"2026-09-02T20:26:21.412462Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E3af8bccc.d266b9ed.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25a49261db0364dd3d60eedf556ba592","sha1":"d5792d57e994772b1de38f6aaaaeeb38666d56e6","sha256":"c84c200b625ff887db22a78354a3284d4dcf0ff4af71b29c374a0362949f9d70","sha512":"ad6bae75cb81ec31176a235acf66cc1bc2146519f4d384818c046cb2c8f90a3564b093a32a980d2001b6f856f7bda78834791d64acc1f070d9a8cb054eed80cb","ssdeep":"192:nRDFP5U/GiFPpNGdekNM3IeiNMyZHFPc6foYv5Ry6lP+dB5cbK4L75FhbYq+TJOZ:nht5Uuitp0dLNNmq1cMoqEG3NwQb","tlshash":"4a52b6c872a770ba97ee69ee80bf0042f2bf4c95740c4484e124e4657db135a61bbf1e","size":13697,"data":"","first_seen":"2026-02-08T21:15:07.891824Z","last_seen":"2026-09-02T20:26:21.40013Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Ed6bca244.51429b05.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"968303fd52fed91d0f892b22fa770689","sha1":"9910faca74213b64b9668de006194300e253aab0","sha256":"a3e36e795d4874cddb2518ce529d8746ba9146d021de4e34b893c4c6c99ae3cb","sha512":"6bdc5556771c737579753cc9ccade39ae5f725ab2941ca71ee6d24152f9559e873dcc9e5ed3b250149e6a7805ad8265fcc9d40d5628d22f4e9e4b016edd06a5e","ssdeep":"","tlshash":"ccc0125da86875360477b0f6208f37dc1c9781043d7e6c74067480919b3364f5403b4d","size":173,"data":"","first_seen":"2026-02-08T21:15:07.848157Z","last_seen":"2026-09-02T20:26:21.314808Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.zrender%7Ecfcd6536.3bef41c2.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f585cfb1a56f56d3177e51444f221315","sha1":"17526adee5d06011fb259e6416bc691a03feb9a3","sha256":"e7c9bf71bbd0882e399f7f83fa2e266c24b0a189306cbbef1c480f3e1112d03e","sha512":"368095ac46f6faa69468485e8076084360d6e46c98bafe3a0a890165966a8654243e72706f493b5b86132ef6014bad3b7a70a9eb2ab8c52077e829a3c350474f","ssdeep":"192:GP+K3P9lmEO8d1CeQwGzkNqJRqry+frJYAYjdnX:GmExA6MTsy+fm7jBX","tlshash":"1d12418eb2c1715983d6a261053f3d0ba03a2554380f891df935d4debdbcb9d52aae3c","size":9884,"data":"","first_seen":"2026-02-08T21:15:07.896392Z","last_seen":"2026-09-02T20:26:21.391003Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hcaptcha.com/1/api.js?render=explicit\u0026onload=_hcaptchaOnLoad\u0026hl=ru\u0026sentry=true","fqdn":"hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2b56fbeb12c46d2dd857c4dec975add","sha1":"ec56485b9dbd82bf3a21e233077e9aed2af9f644","sha256":"521b9ca61b59188d42990a32c6bf26fd69ff9de319601ccb1475bcf5085c04a3","sha512":"f1f9d27d999f7084785e5a9168600d1b74c2d78bd359595bd37a043828dc6a00e83f4af20d0fb677a90e2a5ebf02a44e89ba4f306d15e0085efa8482f0a9bfc7","ssdeep":"6144:Fwdl5h9GiA2zuXqp4vOjwVhY6LqnaiUuh6ySUtk803f/Ir7z/xj6M4eNlFDg6oXw:aluKP","tlshash":"7174847f1350563b53f612d8a4de290f6bf6d416686868ecf7326ceebc9e8430035a25","size":348536,"data":"","first_seen":"2026-09-01T08:26:59.010442Z","last_seen":"2026-09-03T00:11:23.665674Z","times_seen":277,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E03977e4c.922a3a30.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2475e8a30ee6cfebeda2cd09b2d69919","sha1":"a8dc5d738825731234cfcf1b4bad0c11d5869b1c","sha256":"440c3c6315cbd894d58f86db612e645dbdf5dde87e6f07116a9eb44425649bbb","sha512":"72cd3b4d812eb9702093e0ba30cfea453517c50c00d831af8c1260f883462fe18378c5121183bc148fd176b7c4fbb025799072a14735878645643efe58aad1ac","ssdeep":"384:uEZjYO8iEOnBj+/eIcjGRyJ+zJajmtbKr1HCpFr4aRsi6SF+uEs7E3:NxApyJ+zJaOecbUu8NH","tlshash":"1d03325e38dee28c27133176511f284e72b65499389e94a3e764d8d3ee18d083337ea9","size":39921,"data":"","first_seen":"2026-03-12T16:27:49.697239Z","last_seen":"2026-09-02T20:26:21.370541Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.zrender%7E2e545ea6.e9fbdcd6.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc746630d626af2aedf5f10157b1eba6","sha1":"42765ae9c9d90009cb37f76cbb1c0bda480e63f6","sha256":"3441f756e770eb61380931a43614851933afc567f7d63df797290ed078849d9c","sha512":"d544f68d9c7a94215dedfd873455299d379a3b51d6fbd083084fa0ca0a687fe6b3fd172f8744b68b0529109df395ba49e5470dc9335d2c14a3d188ee2cfc6976","ssdeep":"384:jL+N6FGotQVengRHmBVCG29M+KEmrzphoLnH46yl:j0DFHmBEk+i+LH46g","tlshash":"aca2d6f932467039e3238999c85f3a0351366168b94e4c34fb31d5c67caca9e6733b66","size":22504,"data":"","first_seen":"2026-02-08T21:15:07.790937Z","last_seen":"2026-09-02T20:26:21.307255Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E7274e1de.d98259c6.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7fde58677baa569e963267f1f8791c1","sha1":"08bdfc001e59a9ab53d0510567eaf74d59c29f9f","sha256":"d9ffa07e4989bf7d0aa2b0f85e925b0f89d8a126b59605192eab400d5299f396","sha512":"28bc7bec5b8f6f2009c25f373c87de5a106d2212ef175acc57e9ec3e3cbbb061c7f4da3abe498bc5c4f5938865460e4b447a52a78980510f1f7e30d8d5bb5bec","ssdeep":"1536:Qmn8cI8g+Eck+voYItMe3W2r/v8v7HLpG4QJddZ:Qmne+EsmMe3FIHNGrVZ","tlshash":"c263f8c8b198b4a153bb74e5043f214bb177742612098a98f225e5deecbc6de903bd3c","size":68268,"data":"","first_seen":"2026-09-02T20:25:56.446728Z","last_seen":"2026-09-02T20:26:21.481088Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.instantsearch.js%7E6432e5c4.0b783dc7.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f17e788114540fab023e492ffb9369f","sha1":"2c17846860d3372412cfee19b5150293211c9eb7","sha256":"5e5ac4a4bf0a158c664aaf6f99a7d132dbf4e31a05b3dc5b7543247d95b2b2fd","sha512":"b14cd275cbfcdea5ef68292b2e37f931ca453569830658e1c086d3f36b947d4694c5b18354d70c2d514769c791068075cd1a2c9787c213e44163e8c43a707fb4","ssdeep":"768:sm0rr3OSnUQry8UtbfgRDtcveFawetC7sj6achROlI+Gkj3A:Bk3dUn8qb4dew/QCYuCfTjQ","tlshash":"3853c78876d5b5da06e760a0847fb607f0359d16700ee150ea29dec2ac18dbf91e7c2f","size":65961,"data":"","first_seen":"2026-02-08T21:15:07.907624Z","last_seen":"2026-09-02T20:26:21.478287Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.echarts%7Ededa5bc4.24dc05a7.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea89dbf88cac38cd2d17b9e5c20d567d","sha1":"cac1d25df9e8d829f6be2bdfb4b0908a126bee00","sha256":"7cc8bd44eec2aefe8c67db09e75d324e3b8b455d5af98db94da6d0dc631f23ea","sha512":"eb41bc64ddeb61d17f243df64077cf2277e3a6a7788f4c0a4cb7ffed37ed785ad6fffe93c08fd540d792fb2c0edc706fddb2f00c368a6e3792e5e6479863ac03","ssdeep":"768:YprKtjQRi7Fec4NaY69mRHqLw4FzBbtufZU:YprKXulK9kfO","tlshash":"ba23e7dc72d9b06667b3227a50af180b92365d0a690eca10b525f4c9bc7c06e7377f6c","size":46495,"data":"","first_seen":"2026-02-08T21:15:07.946452Z","last_seen":"2026-09-02T20:26:21.442699Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E9cb83820.a2d548ef.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e930d9faf729c4bd958cf792b4a5859","sha1":"baffc2599518515e7acab6eaedc0bc1d5f5221d3","sha256":"4aa8e932b64a2f0af427f623ea37a9b14d02e10caa6efc50040e8b62b8ba6451","sha512":"9858a7fc870ca524394e12c724802c299757e36daafc4c753bb20c4bf899caede47ffa61d1edde76c424873f7ff8829eccd2d48c73cd30cc8c3c54ad4dcffb6d","ssdeep":"768:FkSjRC8dSq+MA3Mzyo9iKMQlRslsdRVMK1pURe5cFhWsO:6l8+WhibuVHUJqn","tlshash":"4d53744e39cff25c235331b2141f385a72b66849784da1a6ea54d4c7fe24a083773fa9","size":64147,"data":"","first_seen":"2026-08-16T15:23:55.939645Z","last_seen":"2026-09-02T20:26:21.343578Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.echarts%7Eef4b7b69.6b06c552.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"635973a95e3008c1b61804f90bee2694","sha1":"0459ab01a84f9adc7333209cae202bff7329cf87","sha256":"ebe534c4a09795070493b020b3cb0406920d7164218effcde23070c269009bf7","sha512":"dc849fc40b319247d3cd64839e1f7b135b5695547269bb12aee9c2084c2b914d35790da77c2c202e70ea78be9efe208e551bdae3d7241027ee78b32cd5ba35a0","ssdeep":"768:4i1jvvwfoFKiSHw3ZnTYhUh+Mq5qu0IzGyIVlQxV1JV4V3:V5SE8hUTBlQxRi9","tlshash":"8413099cb288b46952e73074247f250f823a29097807c994fe6ad9d5acbc51b7237f3c","size":42854,"data":"","first_seen":"2026-02-08T21:15:07.948334Z","last_seen":"2026-09-02T20:26:21.38396Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.core-js%7E93acefaf.c85b1011.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b50a635d03b3598b53b1c00adeacfe0e","sha1":"5ce554c513133eec1a767c41e6c0cae6439f9d9e","sha256":"9b5ba22d16988bfc3845d9f7ba93c2688ed248f3333c81977de5e3ff1bac9acc","sha512":"78445811a4e9d561b51d6f7fab4c7060fafc1b3319a40fdb7d42c06f581d2095dc7fe6fd9f9f73a89cd947584502167f56e5240e7a66fed421ff802470ebc93f","ssdeep":"768:vDg/fMvAbjqXBaos6AcRTvbx2W+SUae2MLDnT+LYcmwDn:vDgyAb2XoJ63RXxzUae2M3acwj","tlshash":"2633748df6c574d126e7a4e4025fa70bb1bb1854b84fcad0c266e2d0ac7994e4227f7c","size":55057,"data":"","first_seen":"2026-02-08T21:15:07.779199Z","last_seen":"2026-09-02T20:26:21.390336Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/3115eb7fbcf7e72ba1ba0f0894c95450cb2c797e/static/hcaptcha.html#frame=challenge\u0026id=0f8673f7bbq\u0026host=nvmp.live\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=ru\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=2f20b3b0-44ce-404c-97be-2c1c2d641422\u0026theme=light\u0026origin=https%3A%2F%2Fnvmp.live\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22ru%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7df22b1a05fbf93eea23a0f998a5ce5b","sha1":"23687e27df2f3d2753a9206cd4a77c1e04600ffd","sha256":"3165b72c1b09a822a4e395b85adcda0748797e0c56c5ff4433b6ebf3734cbfee","sha512":"6e397541208e52483e633463c6a4412ba8254b2e75a66ae2cb204f3cdfdd96bb0d962d3f967223a470eb577b649826dfe9353c136deb54e2f7b432b8595aa5c6","ssdeep":"","tlshash":"c2a024d454d7d01003fd011410157441f4fcc4731344cd704030c4330f7403103444cd","size":74,"data":"","first_seen":"2025-01-09T03:11:45.291974Z","last_seen":"2026-09-02T23:34:46.232588Z","times_seen":63768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/vuetify%7Ec964cbd5.90c1ab47.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eacd49a2b6793177cf1ed8821ce5f7fd","sha1":"e09e8f5ccdd92d845fd4050f6b35ac809eed7bb0","sha256":"bb86546c848b6f303754fc5e17889845f95ed1224ea69cb0c9de066d7cc1ef9d","sha512":"71523d682c9419f4f4c5e0dc2fc9385b9b970531d3d49d32591c493d4a81c605cff2b96a9a0c332007c74dd57b190987979b24995af6d441f988a22c8bcdf9b5","ssdeep":"192:BGtqcgKMW1rRIHgYygKWMKjygS/EuAoojJ1qY5l0uZqvz:BqQKnnvgKsUEuABjJp0uovz","tlshash":"0b62238c76c7f49a4b936074847f524bf27a6e90384c9942c112f5b13834d6fb277eaa","size":15377,"data":"","first_seen":"2026-02-08T21:15:07.762678Z","last_seen":"2026-09-02T20:26:21.465635Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.core-js%7E31c671ca.3f5a11e1.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4c545a5dad18a0343f3519bcba7520c","sha1":"a3f17a92264c1a3d13bf4dccc52cc3b05e7619c7","sha256":"e9c1dd77ec0201f1c1fbeda6b94ee7c9c003d29733e717f65a5cb3dc2e3af899","sha512":"08c4afb2d7747d33f61100eb6c279c30371cc4668dea10561025e40d593986535dbf6e8f275362c21812bf6712c3ab5925dab3cd8e7a3782c55c79b27f0448fc","ssdeep":"1536:rH15IvX+f1MPCDCY+eWS2IDgPnJwK8BVjUdF+Lj:rnGSsY+et2IDwOPV/","tlshash":"d843a78cffc6f0a856d276a4842b6107e1772a18f84e55d0e9a3d2c1ac78e4f4177e39","size":57214,"data":"","first_seen":"2026-02-08T21:15:07.716803Z","last_seen":"2026-09-02T20:26:21.352569Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/vuetify%7E85da75cb.a0494b32.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3e6c419d6317f933c1e56f1693fea33","sha1":"9df9a59ba30241e6188ddb575dfeba2d5ad03e16","sha256":"dba6ba6665420a4c1bb2f054650999b13dd87dfd262d667cc73b534e341e4b06","sha512":"4806c954028e2fd636d7dbd0ad7d6ab2800c169de8de4d54b291d696d2bf247be3e0a32823ad9d315a8737081c8c154b72d7af0d7745f92c03aef986e1cb6e7c","ssdeep":"192:J9b/CsKKV4l1EUhColmc7B9aUO0QWquC6pAHdM6rTH3y4QKklm:HbL1V4l1lColmclSbi4QKklm","tlshash":"2742c68f7745707713e3b2f2e0bf520af37a1504a05a88546437eae42875da96383ebd","size":12431,"data":"","first_seen":"2026-02-08T21:15:07.792333Z","last_seen":"2026-09-02T20:26:21.495318Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E02939381.9dd84fd3.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a285589a8e9cbddae163f125d7b8b8d0","sha1":"94ad16a075d79512918f25b04c8f7e479af228f1","sha256":"3f20603863569f2b84ef27a082825ebd5f056373f85d593fd21404a1f1cb3638","sha512":"329cde115690b60db059c1b3ec14bf4bd5432669871cb2ceb884ec1fdfe12238cd058ba0670a4e2720c1ab5588c40f0a54cf8e5b313fef4f062afb11608f142c","ssdeep":"1536:Sbvc2uO0s0QMnMuqyV7y8WFhmUkrnVyFZMVjk6S9/5IR63P9FKk7+1VFCH6BLzO3:1O0kVkzVyFlV5CL6s+","tlshash":"dfb3a909b1d3a13d4a6a6231245e3914f03a3e956108c5cefbf4c9da9968d4c2f3ef6d","size":110064,"data":"","first_seen":"2026-03-12T16:27:49.803622Z","last_seen":"2026-09-02T20:26:21.347676Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Ea4660fb7.90d994a7.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ba5a447fd5a15f0dc5945ec73f6500d","sha1":"86bed095ba362db9a71468e59b959860f391fe8a","sha256":"a9893ad5cea8aaeaceb25c4bedca04216f5f875aaf28497fc3e890fdf61f46a2","sha512":"e930e1054b1cb523b356b614cad86fa672069a4914da636f6e1fdb3b39b5d4842ff5dd5cf328448e8a68f4719fa2c1f8eb6c3822d312e7586a4166a592630d28","ssdeep":"768:GAeMN/kfUEg0PLbgIFNT/vPYLvmwYOiV6FuVBv24hU+PV:Gs/hEdPLb//XYDTiV6FI1LX","tlshash":"4523d7f933ea303743dc119654b51641f339999da80d082dfa68a4eb7ce5a44a0fefb4","size":47514,"data":"","first_seen":"2026-02-08T21:15:07.721821Z","last_seen":"2026-09-02T20:26:21.333952Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/vuetify%7Eb8448254.dbf35b79.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e981633927775abbaa5f8307e3d9b2e","sha1":"01b22040b149751f60af6d5ecd3dd85a64ffaad4","sha256":"aa597e9b48e475cbd0a93c97494ef42bcbe98b6ce04041eb2343a2fab75abbe2","sha512":"6758d1787e9a06ba6b1a6d238c7fa1007cd0520873cf41237cefe7a91bb2b6f45d388a6c029ab1550b42dde0d715d9a7898a04b5d3eab95bf582c2a30647b248","ssdeep":"768:X9zlIt4uIPBzONEHfKOyrnXSLrJDoHY6FD1WcYvHgX0Jj1f4DoJayYf4Drd:X922u2BzONEKDN4aoVvHpjHld","tlshash":"1163a68ab1c7f51003a7a1f1402f1506f37a6588f41aa5ddf978e5da7868e48a03fe7c","size":70976,"data":"","first_seen":"2026-02-08T21:15:07.725054Z","last_seen":"2026-09-02T20:26:21.443952Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/3115eb7fbcf7e72ba1ba0f0894c95450cb2c797e/static/hcaptcha.html#frame=challenge\u0026id=0f8673f7bbq\u0026host=nvmp.live\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=ru\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=2f20b3b0-44ce-404c-97be-2c1c2d641422\u0026theme=light\u0026origin=https%3A%2F%2Fnvmp.live\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22ru%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ec9269a12205b7a706d595141a30dc5a","sha1":"f70c575f98b10b8dd2f552cb702debfae45280b7","sha256":"1468df060390954cb6b4e5cfeece8d0208e0e6cc7700d1487b67b9a78f304833","sha512":"6e0a2c93862357a9546bad29a6be6e6231e85575511a092d4468e0a2f0cb83e6dedbc55aa2cdd1095c6b2c13246c68d90ab83be0d0957c0281c8a30f72251691","ssdeep":"6144:wwzb/clNaGq1X00QOPsGfERdSmtUuh6ySUtk803f/Ir7z/xj6M4eNlFDg6oXFPW/:fD8aGq1X0MmPVt6iopTgz","tlshash":"fad4d76f6310613b47e622e854df190f67b6d01a645664ecf731dceeb8ad84b103ab38","size":617825,"data":"","first_seen":"2026-09-01T08:26:59.029428Z","last_seen":"2026-09-03T00:11:23.684778Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/vuetify%7E2d226131.5d4b430f.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3fd82c336a613354071f54ccc4b7a80","sha1":"f9cd356a0330052909bba26c30cb7df4563b4356","sha256":"8f2cdb09c2d35c6e3d2745398b4ccd392eaf28678ce45def0342b73d5eae941f","sha512":"59ba2f37ca9d13d293c277b6f156d738443b9817a094301c872a5ec375d2bfbbf2bc6f0f5d417ba0e944e41d22669a80f0c86547874cba37811775572a1bf9a1","ssdeep":"","tlshash":"4ea0127e1011a404097ec00c116277e4484d11082e3204b4071250a138009878500282","size":84,"data":"","first_seen":"2026-02-08T21:15:07.884929Z","last_seen":"2026-09-02T20:26:21.368982Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.echarts%7E16d3814e.85faed5c.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d9c5f662f522a6ce4455a54233c3ebd","sha1":"6a7d882589074c4853425495b2c9e3d37f5e647d","sha256":"c7b3b0452da64aa7ccdcd5581a95cad741b8e9a1d64e9b4fb6d56276acd42777","sha512":"dca81370822e2d95f144bddb2a644390be32544ef72b862a176847ef894cb40ca19731c9194c4aaf3f889232c789025a8caca532d0bdd9e1794949a6d5d38a0d","ssdeep":"384:vZF/fD2Q58OsA5LDhNDoW7BE+B01l+635J6wEgK6qu0j9Cn0C68p:hF3KS1hPvu3+CvfK6OCnNbp","tlshash":"38a2c598b744ba26d2eb31b999bf1407627624458c4e8518b26ae0cd7e7c41b3337f7c","size":21783,"data":"","first_seen":"2026-02-08T21:15:07.707768Z","last_seen":"2026-09-02T20:26:21.494491Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.zrender%7E308aa24e.0184bb82.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"645f085ea723cd9aef60ef6ccc7146db","sha1":"555edc9db5c652bd8473e85eb226614c64c3d77e","sha256":"07ceb1a3b3be92343140244764d7bf3abaac5c2cb97cead1ae2ec5f99cdc0e47","sha512":"1569c65d545f2f6d17318b11b54a7ab1cf52d3e8a3e3e30538ec84e5c9c482023b5b92d3888134ecb81f8eeab7eb3006c4e01ef70e46b858b329675ee93bf9a0","ssdeep":"192:LHm51ju3ph3+7g8dlBzMgpDkGaf+MyKysq+HUts:LwBQh34g8dlBzMgpQdxyKysq+9","tlshash":"ff42c7e47b94691045e63171183f2607b2332949690bc29cbb38f4df6cfda88357ab78","size":12502,"data":"","first_seen":"2026-02-08T21:15:07.883517Z","last_seen":"2026-09-02T20:26:21.458008Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.zrender%7Ef538a826.ec7c8169.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"052a6e7b0dd1c725011a682884cf1833","sha1":"139e85ff79341a4f95f6a201a8bdae8cab0ecbf6","sha256":"9ac3a234dc200b7636743c9a44608f3ae765e0e187ec231670c1846c9cd84e7a","sha512":"e0da4796b10aa97bfaa358b2a15e766a458794f0882ae8f9e4295b8c427774ea31e832f6b365a6674288dc4d37d909e1ddf8fdba0f0b5696441f97b45ce8c8da","ssdeep":"768:SDTcKPDQ4XBScr1JT6CELTMtjPNnpoDdsHqjuZykk4krqQJ+XNMjObU:gPE4xS1fLgNTKjeykk4fQJ++MU","tlshash":"1123f8d832817025529669b6402f640bf136b405740e8d95f229f5cbbcb88ee93bbf7d","size":48702,"data":"","first_seen":"2026-02-08T21:15:07.954195Z","last_seen":"2026-09-02T20:26:21.402828Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E690b702c.ad314ba5.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b3aee2fe8f9c5ba51beea780f79eba1","sha1":"4516a12303da8324e88fbfc4ba76e5fed6ab1540","sha256":"bb739fcd992895e5046b002b870dd205dd58752cc1449d998042fb0eae12bcca","sha512":"74cd28b603c4c5442e1d35aef427ab4f36e19e6ecb3aa7b65ba7c34cf4d02f4154ba6542699787b1c43f0f15088b7deefe0d46b46fb1338b397e620e4113a409","ssdeep":"768:8gJ1e2P/0IrCexwDqDYc00iok33fpMRDXK1t8aAsgYuzeW4dVLTnsHhDxDE5DGGA:HQEYc0doHRhst3sB9gJTPNDEneds","tlshash":"ea5308ccb2d1b03413de16d5147f500bf278a99ab81c44a9f218e8f27cb598e45abf39","size":63411,"data":"","first_seen":"2026-09-02T20:25:56.404954Z","last_seen":"2026-09-02T20:26:21.449795Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Edb300d2f.04f6818e.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae692f3c8a733b5a5813357f7282b651","sha1":"d28c5ae73f182acdedf3cf3c6980d31394d5384f","sha256":"59f7f5283484e1ab0ac43882e610971c8dedff6ebfde24b310b7af1760f4b622","sha512":"4b497ba11f30bcd5fda7c4df0f306b180f57f41b418863ab9c22c225cc1bcd1ab5d305c3e17d441be96eaea33e6165e8cc9eeccbf7eff6c445e44d42c7290779","ssdeep":"768:0pxs6tNXaQNkoidelPa30AmyZZGnSC9a8fIlT:0Yg7l2QtY","tlshash":"c5d2d98eb590e07296e421d6906a000bb72a4b76f40944d8fb7cddf758f980f7126f39","size":28430,"data":"","first_seen":"2026-02-08T21:15:07.753237Z","last_seen":"2026-09-02T20:26:21.375747Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Ec32a6968.09a8c10b.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5d78f3aa0e056e46ee207137679de99","sha1":"15fc6024d1b28a48c2b4d177328cc8b1b0f3a392","sha256":"8ef333d9fa712f7f5c68a35ee9ccb0d95f0f6daf4fc975e0f5128d2964f5dee9","sha512":"1318edc747d3c3cf0e115fc9be6fcc805192fab6af6825118a5c673bab4aab4767edee001c93430dc11893559b761559f6a7af2e25cf535311ce2679913eae06","ssdeep":"768:kUHB7f1nNieDToLESF3OKn8NTymGbY4yiYYl1Wy4+HtlU2+Cepq7y+EcyNoTibAc:R7DddQ3hBymeK+iWtuJpMWnw","tlshash":"1943c6d970e9b13056ba48d6d4ba0901f2395b49301ac0a9f1addcda6d3a106d37ff3e","size":55838,"data":"","first_seen":"2026-02-08T21:15:07.846542Z","last_seen":"2026-09-02T20:26:21.351535Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E826d011d.af7be75f.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ad2de75120fa296fad796bd92c6eb84","sha1":"778819be107ca1295d54c4d0ff58f679ffd4a256","sha256":"8658ebe5adafcfe18a09dd2d074adf22e368becfa11628e75b2e4da0edda3cb9","sha512":"871e8fe1a70bf6f3b89b7a02e759de796b75849b144920d2f1d2cff50d9f6f5e9a3c51b268a45f0f9a3c29909876c28346aca18d64e537d2bc83f6d6a200a907","ssdeep":"768:MFCdqcgPn4yMa4diHFYz6v/7/xboW6xfbc9UXrnbLOAif:5gQBa4dYxb+xiUXe","tlshash":"09c31f5e39cbf28c235331b6501f385972b66459784ea1a7a764d8c7ee2890c3733fa4","size":119928,"data":"","first_seen":"2026-08-16T15:23:55.917851Z","last_seen":"2026-09-02T20:26:21.341981Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.zrender%7E0e467392.eb7e42d6.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d156a6e9f01b0ca20cd1372ca551bd64","sha1":"20983f4f27fa6060fde44e6cff9811b8a3112485","sha256":"4aa55aca55a8c1f199313ab265e94382d18eb124b22a661286d49a53f51f841c","sha512":"b41fa38914d46c8af2c830fa9eafba14895a889e938c85d4325cd1b8961b2d98bf9f9490b2d2a9f87c91300b683f1e9d9d8aed06780a53091f26e8238735f35e","ssdeep":"96:zK4dU/Wjb4RUsJby/ocBreoclgP43ApGVd5O2nIXTnnZiEdGY/zsSdNGKqUmydUk:+LujbS7MocBrRclGEAZn5KSdRm4R","tlshash":"96e1b5df714038a185b7a6aa546f27076137624d640ec16c3638e4ee4efc94d312af7d","size":7425,"data":"","first_seen":"2026-02-08T21:15:07.761044Z","last_seen":"2026-09-02T20:26:21.359738Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E2354c829.52b9cc2b.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7efa6895bed12d33a0c88163c561c0d","sha1":"ea48c3e35815aeaf0dbc4f702cc4900503e59f39","sha256":"01443bd048bb8349b90fd60a3a818a65125a330b7ff14b49eb764a395a8fd471","sha512":"53eab5fa44fec42a8646dcebe00dc55d458de38a4b9ea5495dbc07211a31f01effcd58ee65ad0de3b9f62f86284c46c1cf6ee4e394e917b89c1c492231553330","ssdeep":"1536:p0NHbePp7QSsuXw9ADUbMGypMrbOe2OCu3DtR4E:E7IpDgaiMGyobOetR4E","tlshash":"a293d81a71e7a42d0a5f7236340e240471363997b449c1deb7f4c9e999ecd081b3bbae","size":97424,"data":"","first_seen":"2026-02-08T21:15:07.738726Z","last_seen":"2026-09-02T20:26:21.420745Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_header_colormap[actor:server1.conn0.watcher14.process7//obj25 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color_key:map[configurable:true enumerable:true value:bg_color writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://nvmp.live/static/vendor/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_bottom_bar_colormap[actor:server1.conn0.watcher14.process7//obj26 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color:map[configurable:true enumerable:true value:#ffffff writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://nvmp.live/static/vendor/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_theme","filename":"https://nvmp.live/static/vendor/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_viewport","filename":"https://nvmp.live/static/vendor/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_safe_area","filename":"https://nvmp.live/static/vendor/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_content_safe_area","filename":"https://nvmp.live/static/vendor/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_ready","filename":"https://nvmp.live/static/vendor/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_expand","filename":"https://nvmp.live/static/vendor/telegram-web-app.js","line_number":135,"column_number":13},{"level":"warn","text":"[Telegram.WebApp] Header color is not supported in version 6.0","filename":"https://nvmp.live/static/vendor/telegram-web-app.js","line_number":740,"column_number":15},{"level":"log","text":"Add Dragula plugin:map[actor:server1.conn0.watcher14.process7//obj126 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://nvmp.live/app%7E205977d4.e3dcf3dd.js","line_number":6,"column_number":35362}]},"http":[{"url":{"schema":"https","addr":"nvmp.live/npm.zrender%7E2e545ea6.e9fbdcd6.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.082Z","timestamp":1788380705082,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /npm.zrender%7E2e545ea6.e9fbdcd6.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FvCLMLfkLUd89pwWowxeknVh6aj4iKI6Y%2BerMiSWV4fpzdsoaQVZrayM4tuQ%2FSBdsIcPw00Rfvfm6EOPpNi4QK8kXolztiLh3fJgKh3fo2l1QC18iL3yPMxArRc%3D\"}]}\r\netag: W/\"6a98474c-57e8\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deec8c9c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22504,"size_decoded":9344,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22504), with no line terminators","md5":"dc746630d626af2aedf5f10157b1eba6","sha1":"42765ae9c9d90009cb37f76cbb1c0bda480e63f6","sha256":"3441f756e770eb61380931a43614851933afc567f7d63df797290ed078849d9c","sha512":"d544f68d9c7a94215dedfd873455299d379a3b51d6fbd083084fa0ca0a687fe6b3fd172f8744b68b0529109df395ba49e5470dc9335d2c14a3d188ee2cfc6976","ssdeep":"384:jL+N6FGotQVengRHmBVCG29M+KEmrzphoLnH46yl:j0DFHmBEk+i+LH46g","tlshash":"aca2d6f932467039e3238999c85f3a0351366168b94e4c34fb31d5c67caca9e6733b66","first_seen":"2026-02-08T21:15:07.790937Z","last_seen":"2026-09-02T20:26:21.307255Z","times_seen":84,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E3addf2b8.238c166a.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.921Z","timestamp":1788380704921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E3addf2b8.238c166a.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9LbppFgfeCQKy09pFhh7Crbk4vFE%2FoiKojVpmaWGQvv2v0hDI5%2BbJLR1bHDlDEg1YcyenwVxCttcel%2FjKEMSf%2B0y%2FgM%2BfY14M926CB6xcuGvq4c1Hwy9SRiHle8%3D\"}]}\r\netag: W/\"6a98474c-3221\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dedc843c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12833,"size_decoded":4446,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12638), with no line terminators","md5":"562970b45bfa1584fce05cf653a55c2c","sha1":"6c725d699a511dacc64ec0aafa6c604f63cf4390","sha256":"f09fc616e435a24c147b0d819bfa54964ab7cc672971d55e8e6a92cf496c1bc9","sha512":"526dc437257a41107489f8090936b9909c4524e93579c965316518573dfbf8a2a3df1f224d97f9e076baaed116bc0b3c694b3fa21a84fa1b29c29b05ac185f90","ssdeep":"192:nW/dXoij6BF/An2U/qKdFS6xcsDGG/N/8FQohv1FN/z7P:nw4KeC2U/q6xFDNxohdFpP","tlshash":"8942b65fa2c3a03d0b3b369d6a6b2908e01b1cc9540d98d67ebacad594f830d0673d9d","first_seen":"2026-02-08T21:15:07.674066Z","last_seen":"2026-09-02T20:26:21.311331Z","times_seen":84,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Eb07b7304.1b2033dc.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.964Z","timestamp":1788380704964,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7Eb07b7304.1b2033dc.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WaZSP2%2BVTe81hdzMlTFyKkAWrM0yfTS21UnbsWv7u7BIqKfqNuZ0hdfkitICMo44VElbzNlGWYsA9JHSl6xINdnDkw6BbF9m46dkT1gAwa4L9dJXuQxnFghXhhU%3D\"}]}\r\netag: W/\"6a98474c-ebf5\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 26\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee0863c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60405,"size_decoded":15777,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46993), with no line terminators","md5":"12fc36690e6adc6dc40281f642a90f43","sha1":"331b731375414d67f038020ab726958e81cddef0","sha256":"bd71d52b9357b4d5059829dda0ce5f32c198f15901a994358db72a050c3d4935","sha512":"1e2adc695a3a4223da9201998668c0d7b24e721c3d599e9f043cfb0f72cf1d27bdadc678c9ae7f86e5c142c31e7c2f39883e24a37b23ce789c2c3c95e3f95d2d","ssdeep":"1536:hJS/TDK3jUYKD7vLu6eijyBLiNXZgIrdoD0c0jrmy1S7iR:ET23jUYKfy6ekyBLiNXZgIrd00curmyx","tlshash":"024364a1d65a64ee2045f46aec08bf4b7cbe44fe7fa7935209b5583d30f1424832ab1d","first_seen":"2026-09-02T20:25:56.434629Z","last_seen":"2026-09-02T20:26:21.312436Z","times_seen":2,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Ed6bca244.51429b05.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.980Z","timestamp":1788380704980,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7Ed6bca244.51429b05.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lKzyAK9gDBvV4hL63%2FO8XUWl7GG2lWTMFLjbnLwXWJ%2FBMO8gMZf4N689U6fIgBXMtsSNnWBXY1zGrn%2Frr%2BdfQjBfdO12Evji9cjq%2FuSPp3JZGEJF6cI67DdmBpA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\npriority: u=1,i=?0\r\nage: 27\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a98474c-ad\"\r\ncf-ray: a34f3dee2870c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173,"size_decoded":825,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"968303fd52fed91d0f892b22fa770689","sha1":"9910faca74213b64b9668de006194300e253aab0","sha256":"a3e36e795d4874cddb2518ce529d8746ba9146d021de4e34b893c4c6c99ae3cb","sha512":"6bdc5556771c737579753cc9ccade39ae5f725ab2941ca71ee6d24152f9559e873dcc9e5ed3b250149e6a7805ad8265fcc9d40d5628d22f4e9e4b016edd06a5e","ssdeep":"","tlshash":"ccc0125da86875360477b0f6208f37dc1c9781043d7e6c74067480919b3364f5403b4d","first_seen":"2026-02-08T21:15:07.848157Z","last_seen":"2026-09-02T20:26:21.314808Z","times_seen":84,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/css/npm.vue-loading-spinner%7Eb955b015.7dab09b0.css","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.030Z","timestamp":1788380705030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /css/npm.vue-loading-spinner%7Eb955b015.7dab09b0.css HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FxOPcp%2Bf5cx6tDwato91eBEZCaichd9ZO3UC7ivZ7FmCkbe6nawFm91FCOR77iH0d62DnzhKawPJ23S8Ym%2B5AM5r8ERxa75yqTpjrmXgt1lhLW5SVdTVH5RNmqs%3D\"}]}\r\netag: W/\"6a98474c-8ab5\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=0,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee789bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35509,"size_decoded":4910,"mime_type":"text/css","magic":"ASCII text, with very long lines (35509), with no line terminators","md5":"dff967d662ca4c23c0810b80004e4b79","sha1":"d6857aa4755de6db1184ff2a3870bfdb654a1897","sha256":"e7ed7e1331b5223e794cc658b96f29dcd034e1ba521524526df3f57df64a76ab","sha512":"6d9bcd0b3021ede2a388b6bc2e6e49bdc40de17f30dca08e39a09d179dc1842c2a9b3eb05c654a692f3e805dfdde119370029609ed5084ad0ba2753f0d0752e1","ssdeep":"768:VvG6d7t1c4QjhO5AAzVt+RxVtWUBVtrMmVt1fSVtH+0VtJtLVtzM7KSir2OQElj7:VvG6d7t1c4QjhO5AAzVt+RxVtWUBVtra","tlshash":"15f2c9276c9405459d2b8e2463cc1e590328eb23a92249deb34339458f83ffd236e76b","first_seen":"2026-02-08T21:15:07.743209Z","last_seen":"2026-09-02T20:26:21.317158Z","times_seen":84,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/css/vuetify%7E2d226131.7fe4f77f.css","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.031Z","timestamp":1788380705031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /css/vuetify%7E2d226131.7fe4f77f.css HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I9QIz%2BZ8HHv%2FeBUm31G%2BNlsG7mOQZxifRyeHUbGtyavoY6t%2F31iQbIQaOZZG1BBOOBVJxQRDMFVY%2FJ08%2FnQNzKJZmVdEcU33MW1J%2BkyZH7IfD8X01bC8F2uPvIo%3D\"}]}\r\netag: W/\"6a98474c-854cb\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=0,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee789dc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":545995,"size_decoded":63576,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (58526)","md5":"65557d877c184f448dfe4e5730cdeffc","sha1":"e03cb069f5f764bb2c13a378960a6cd3135701d5","sha256":"67c7dee01a4d4d44a34f9f4d0998598f8841f385288ed29dae11da7378febec2","sha512":"7d9a68f3833afca1368af0f32c23413b7f4f178ac91237acb439fd871dc6994042b1bea47c4215bb2e15ce063ace614c1ffb111364c50416beb25edc677bfa2c","ssdeep":"3072:ianb4IywUe3h16SAS+ozC8YQNa5Lv2gLjKuzwqwGaow:qIp3h16SAS+oz0QNa5Lv2gLjKuzwqwmw","tlshash":"f0c4dfe3b2c2108a4673957f9080f7fce63f569d5b92b8729606bb2543812df1b9214f","first_seen":"2026-02-08T21:15:07.944267Z","last_seen":"2026-09-02T20:26:21.318423Z","times_seen":84,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":214,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:07.126Z","timestamp":1788380707126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/montserrat/v29/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nvmp.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35468\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 30 Aug 2026 12:46:05 GMT\r\nexpires: Mon, 30 Aug 2027 12:46:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 286742\r\nlast-modified: Wed, 06 Nov 2024 17:30:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35468,"size_decoded":36281,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35468, version 1.0","md5":"ea21cc6e4b393851204d1a3160ad6abc","sha1":"20afe60afe856f29c75f318348ed89d8b3efa8cc","sha256":"1fa9166e5c7342af403e851b0dc9cba7bfe829ccdc9bbef32ee24da7fe66215d","sha512":"711da977344bd58faefbc92290d5ab3c1c0b59b983e035058ee2da727ede37226ffa557f69d9c970dbe41e5d04a056617c1a45cdb0da55e7667e53a9d6189522","ssdeep":"768:K2FjueA7DX+N5j1BBG9VNPhns7UkjMhhlI2TfhvxKUP:lNuR7ivY9VzsLoHT13","tlshash":"c8f2f18304266164c61d44948f88fa8bf06e6cdc16573f9077e06edcbceb898c49eadd","first_seen":"2024-11-11T14:27:44.773723Z","last_seen":"2026-09-02T20:26:21.319677Z","times_seen":7952,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E0071c937.d047c824.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.886Z","timestamp":1788380704886,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E0071c937.d047c824.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3MFMBhoEOW69bS5SkYABqzw2HoBN1coOdydIQ42axypEUC1ct5QKr5CH132xzSog5hLZ%2FpbJ7kcpg4OAFyuneCcUJG2M%2FbQ90d4Ud2nlZSrYJMVJy0Nii1FruKI%3D\"}]}\r\netag: W/\"6a98474c-6d81\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: HIT\r\nage: 26\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3ded882cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28033,"size_decoded":11511,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28032), with no line terminators","md5":"248b6029f1daf7d99f6c1d79de888371","sha1":"99e0daf28f416e852bc7a2ed70719628d7ca935b","sha256":"403e3ad4baae3a293368186c2385915471cc47b34913d678ee608eb574491d85","sha512":"cc028644e53976dd0d0283d784409801dc7f323cb897dd52e93806772d195fdd4d1b28a267dbe6517443885d3419515c2cbc6f0864abb804df644da0492d3bea","ssdeep":"384:f6DFy+vcuGCy3K+W71cjOsaTkbmKlEdxwR4gWJ5IOVPECzCzPrn7ZjMQwjctrJF:yD8+6FauOKb6qgIO6CzCD6QGKJF","tlshash":"59c2828cb6c1b48517a360a8422f640ff3bb5965b44fd5d0f62ad1e1ac7a80f407be6d","first_seen":"2026-02-08T21:15:07.720131Z","last_seen":"2026-09-02T20:26:21.321454Z","times_seen":84,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E281a44dd.3843dd47.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.915Z","timestamp":1788380704915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E281a44dd.3843dd47.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lxrfg8uCX4hrsNOEiPNJgaQaLF%2BBVqUCJbv4k7TrmuzLxWDwdBDxtPZ6jabb2Na%2FJXHT26iLmU6Q%2B%2Ff0ln15V3s7eZilZwfSn%2FP%2BXPsGtIKlFbRKR%2BV57MFfzrY%3D\"}]}\r\netag: W/\"6a96c513-9ed7\"\r\nlast-modified: Tue, 01 Sep 2026 12:29:07 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: HIT\r\nage: 26\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dedb83fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40663,"size_decoded":13605,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40663), with no line terminators","md5":"9f6c81aea39ef1a9606573817e44d9a2","sha1":"43bfa8c70942142ad43167e3f0f5ede85819a363","sha256":"21d0f8803a81e25e94163792d5b7f64cae9c928021c25a6d44bda7e72e65a451","sha512":"249368fdddb14b9e9fe51a9585dec38a533caf5dfdfec82c8356e41d249ebbc964037a8520d77f7adb726644db009b9fa5bbdc4ccd90f77d249fdbc3c9870852","ssdeep":"768:nBnQenKxChnN9UVCPQArwe7CTev81WvUwunoqVneCUqjLI6:1NOCYcD75hUr9JFUqj06","tlshash":"e903d4d133e2b477878a52e650ba1002f3aa56e8b409091cfb2c54db7df064961fefb4","first_seen":"2026-02-08T21:15:07.899638Z","last_seen":"2026-09-02T20:26:21.329284Z","times_seen":84,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E5388b003.20ea86ee.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.931Z","timestamp":1788380704931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E5388b003.20ea86ee.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=26yZAYqFiLLOe0ChUkaK5a8qOfJCCLdthcFjMU50NZG8JZCcFmsh49Q%2BCFkdnWAZ1DVChyUoUeB6pZNsFgIyspJDaixcPcnZmB5NGbql4%2B5X1hTcZzzlxDQXGSY%3D\"}]}\r\netag: W/\"6a98474c-de91\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dedd849c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56977,"size_decoded":14924,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54689), with no line terminators","md5":"4c87dc8b62e5e021ee069059f8283795","sha1":"3940c8e64f74390b31ee93a12572628e190008fe","sha256":"293e5f2ab2475ad6010339deaf5c8fd05eff47ad060f3b33f3153efaecd4a38b","sha512":"acd4f9cc56e1f725fed991ef040d8d1d30624032579a5e1d1767db87d3f67ee50c7c3cabba755956ae6e0dd87f3100d909852899cb5f5e00f38acd84c1bd0888","ssdeep":"1536:m8NtBYDgBfsroCRWrHbSKhXRv5hBSbzycTf2D:OhkCRy2wRv5hBSZTf2D","tlshash":"2a43db0ab1eba43d0a9d733634492508b0363a977049c5cd76f4c9ed99ecd481b3be6d","first_seen":"2026-02-08T21:15:07.858776Z","last_seen":"2026-09-02T20:26:21.330328Z","times_seen":84,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E678f84af.f8f7b55e.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.938Z","timestamp":1788380704938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E678f84af.f8f7b55e.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bCo%2BltClPYgNJ85WXpabN5vQGWuDFv288ITsud6fiwZFxcba1ufDTn67HbnlBDBCZG8V3bWT%2FZIrjxGvxyA82Lefo4q9kvOro%2Fdq6RJyn5TF4EledUsFX6z0R0s%3D\"}]}\r\netag: W/\"6a98474c-4244\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dedd84ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16964,"size_decoded":6523,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12114)","md5":"68e6d1cc27c9a51adf15b2c3251d3daa","sha1":"2097f1f6d8a899c11060510f25ecacfeb141b8af","sha256":"41d6651a7a6d2918bb4cc0d85bd3e912d3eaca8c2f4477b89a978119da26d093","sha512":"9a8f8126f93217145a410d91cd457a970032a7ed5206eef7075614411784d3a9f9445e5a8ff93b99733a1738e33b290dc67da5de0f385da3317d48c3bd0e9a82","ssdeep":"192:/oLiCB8w4AafzAxcfocxBzPjsSclSrDYYo44mmvdsx/qDVqUgtBglPzsiqC+rPh1:/WsHHcQQG4mm6HbtBmJt+rP6p+ixgv","tlshash":"b97273ddb2d5f02083d7a52b652f210ba33a075de8098018e36ce8f57c7595a936bf78","first_seen":"2026-09-02T20:25:56.418222Z","last_seen":"2026-09-02T20:26:21.331511Z","times_seen":2,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Ea4660fb7.90d994a7.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.959Z","timestamp":1788380704959,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7Ea4660fb7.90d994a7.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jnqReJ%2FMxBw2WQWzBLWK62j1I9rAmgT4KH8XKZw1yGqwCPSSPpaSwkGO%2BSdT4oqnGE32o6TOzXlBXnzv5o%2BvnOmWQubuDGhVbpKC2vPCafLYT%2BiY7SRWvguEV9s%3D\"}]}\r\netag: W/\"6a98474c-b99a\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee085ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47514,"size_decoded":16765,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (47514), with no line terminators","md5":"3ba5a447fd5a15f0dc5945ec73f6500d","sha1":"86bed095ba362db9a71468e59b959860f391fe8a","sha256":"a9893ad5cea8aaeaceb25c4bedca04216f5f875aaf28497fc3e890fdf61f46a2","sha512":"e930e1054b1cb523b356b614cad86fa672069a4914da636f6e1fdb3b39b5d4842ff5dd5cf328448e8a68f4719fa2c1f8eb6c3822d312e7586a4166a592630d28","ssdeep":"768:GAeMN/kfUEg0PLbgIFNT/vPYLvmwYOiV6FuVBv24hU+PV:Gs/hEdPLb//XYDTiV6FI1LX","tlshash":"4523d7f933ea303743dc119654b51641f339999da80d082dfa68a4eb7ce5a44a0fefb4","first_seen":"2026-02-08T21:15:07.721821Z","last_seen":"2026-09-02T20:26:21.333952Z","times_seen":84,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/css/app%7E067239b9.257b1706.css","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.003Z","timestamp":1788380705003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /css/app%7E067239b9.257b1706.css HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1SEiw%2Byc6z5IH8d4cX%2FXLUNzVXLpUYqHnOaIQi1%2BLZGEMO7GXs9kgZl%2Bst%2FfpiC9j%2FXnbF6c5jpUeXIpjftlsyIEcfPBQhzLsTz10pilmPvqbEhmo7gr3DBllp0%3D\"}]}\r\netag: W/\"6a98474c-13e\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=0,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee4887c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":318,"size_decoded":913,"mime_type":"text/css","magic":"ASCII text, with very long lines (318), with no line terminators","md5":"548e67b8507e0773f1b9f8d2fdf92cfa","sha1":"1ec02e3b003ea3d285d289703f30e8d839f14794","sha256":"3109fb054525371be1a37e7fd432174a49d1af194a67e9a2667deaa7f943c422","sha512":"d45a1de8126b5c91a77210863ff8c1613eb1ee315b5dac7f73d81f038c0dbee5c5ae719cc7c87d8655a0f1a7f9e207e962dc7477fbe40e4ac76854ddfe914ce1","ssdeep":"","tlshash":"a8e0cd82ff9c11193077c26d5061fd2e521bb21eace61bac7e7153751d474cb311711a","first_seen":"2026-02-08T21:15:07.747417Z","last_seen":"2026-09-02T20:26:21.336543Z","times_seen":84,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/css/app%7E690b702c.19ae0a91.css","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.009Z","timestamp":1788380705009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /css/app%7E690b702c.19ae0a91.css HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sX16Rdms%2FT%2BxiymJ9jnFYMrZH%2F9kuCUu2GUPICfz6ovd33ig9W%2FlI71FJC7qzIvzWXJVtms4Sya4u7NapYspUak8HaZHwtRR6y2CsNilv%2B8Cf5eb%2F6OgPkoZKWY%3D\"}]}\r\netag: W/\"6a98474c-3f8f\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=0,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee588dc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16271,"size_decoded":7472,"mime_type":"text/css","magic":"ASCII text, with very long lines (16271), with no line terminators","md5":"480d8917e8a133d11f12f41629d967b3","sha1":"012adb3685f91ff96d143d5d45283b00bcc36a5c","sha256":"00984f69b60d5fd6eb921867e725baf1cdf1fc8a1855392f736e20aee94b0212","sha512":"e36b08c50a2c4406a4148e1b73f4438709de8358d12d156811a97c5c8e7ccf3c29be72f4709beee70c6dd137d796cf3f9a86e9f30bbcf709eb1e6c196f8807be","ssdeep":"192:bEt3MlMGKvExv22ZavRWLNZIg5669EQUqxtAIyPToOfcogfiJqtdjtAGvw:bXKvIvRcvCN6E6tQUqxtGf3gf9uKw","tlshash":"0f72a523b77c3369e826851be6b485743e16e802d123cbbdb6dcb307c785a2c5c97619","first_seen":"2026-09-02T20:25:56.525306Z","last_seen":"2026-09-02T20:26:21.337542Z","times_seen":2,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/css/app%7Eff867824.53b80b48.css","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.026Z","timestamp":1788380705026,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /css/app%7Eff867824.53b80b48.css HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uSHitbLmh%2Fe8J%2FoDkh8EIAUKz74yLNXoELRAzFZh3vs99Bgk8iHTFLFvVsGCK0pIc7qxOiPW0im8L%2FRm1hxuMAhMZEW6JT6qgMDdl36k5MKc12M7Ek8eZ1Lq53c%3D\"}]}\r\netag: W/\"6a98474c-154\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: HIT\r\nage: 27\r\npriority: u=0,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee6897c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":340,"size_decoded":860,"mime_type":"text/css","magic":"ASCII text, with very long lines (340), with no line terminators","md5":"957c833584f53589bf6c29388d059b98","sha1":"7fccc11a4b041de9f707290d8e4b56a7eb9ee117","sha256":"d8c1b51c53bd7c77c6033e2e50ff10f1cc6d4cd952dc656565e3ef65853088e2","sha512":"ec9b897e51817f09e9b04881a3f304f56b129deeb03d4500ad1fd900dd273c28e5853f43acdac2e4b6c86e66a2ea232380000e766098c41ed9a61597ae71d510","ssdeep":"","tlshash":"79e04fd3faa826382173c3b90827750dd70ef62ef8d2066cf00494a84c838976523a24","first_seen":"2026-02-08T21:15:07.934839Z","last_seen":"2026-09-02T20:26:21.338877Z","times_seen":84,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E3fb717ea.ee2913f6.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.925Z","timestamp":1788380704925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E3fb717ea.ee2913f6.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7yaCkZoTCqdnZ6zedJZUktyRGUQgxMQNGX%2Fo7OvIMYf5rAkRKKHU1qQem92a62kXtdM4VLMmlukhYXjP9gP5et9BmPM99%2BihusTEM4W4DFDEMyecW7EQ93C47TY%3D\"}]}\r\netag: W/\"6a98474c-52fc\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dedc846c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21244,"size_decoded":4199,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21200), with no line terminators","md5":"613372e121b9f2cfd6c2a219643edba4","sha1":"a562330c9adc39344aa21dd30c76631b3a9b3a0c","sha256":"c0933cbc5853f6f40a44a233f9d78f27b5c2fca1558fec45d05d59754becca8e","sha512":"ffb71a6a2c78aaf2e2093b9b627f747c8342f56b07bfb44dcdb0b8088da329734ee4f0a050bdbf06fb0d18f8fa4a82fe2a493c2a90afb1afd68253bc548aa6ce","ssdeep":"192:Qr/KZZslgr0MKZgt6HwGApJUo0vDwit0qTP3ZwO3MqOwSNq7EbN:QryvslIujApzit0M+O3MqOwSNqIN","tlshash":"6f922f4f39cbe64d235331b6201f3849b2b69055388ee5a7e668d4c7ee289483373f95","first_seen":"2026-02-08T21:15:07.85714Z","last_seen":"2026-09-02T20:26:21.339943Z","times_seen":84,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E826d011d.af7be75f.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.949Z","timestamp":1788380704949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E826d011d.af7be75f.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JyIvKdoCLX2JiFFoglKS9wg8Q4NGaTFW%2BB4VAGE7cYKSrmHf940DnuB4CA7cRpCozqI1RVYfx3uLpiQCjIuvONjtm%2BP5H5x6FHNQN%2BiFsZsGLDzRxOtFiihFvYY%3D\"}]}\r\netag: W/\"6a98474c-1d478\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dedf856c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119928,"size_decoded":14572,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65446), with no line terminators","md5":"4ad2de75120fa296fad796bd92c6eb84","sha1":"778819be107ca1295d54c4d0ff58f679ffd4a256","sha256":"8658ebe5adafcfe18a09dd2d074adf22e368becfa11628e75b2e4da0edda3cb9","sha512":"871e8fe1a70bf6f3b89b7a02e759de796b75849b144920d2f1d2cff50d9f6f5e9a3c51b268a45f0f9a3c29909876c28346aca18d64e537d2bc83f6d6a200a907","ssdeep":"768:MFCdqcgPn4yMa4diHFYz6v/7/xboW6xfbc9UXrnbLOAif:5gQBa4dYxb+xiUXe","tlshash":"09c31f5e39cbf28c235331b6501f385972b66459784ea1a7a764d8c7ee2890c3733fa4","first_seen":"2026-08-16T15:23:55.917851Z","last_seen":"2026-09-02T20:26:21.341981Z","times_seen":5,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":271,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E9cb83820.a2d548ef.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.957Z","timestamp":1788380704957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E9cb83820.a2d548ef.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yNY5coRqS9gRITKzI4MvcCYCgHqucMnJLM9GcynXUkAsFDF4L7UasMTZJomdvmIRn%2B%2BUQpJCeXC1Wi5pLff0aX3bxaL8aPctmiCO%2FMUwoSbNFn%2FXeYc9j5hyIQI%3D\"}]}\r\netag: W/\"6a98474c-fa93\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dedf85bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64147,"size_decoded":11747,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64084), with no line terminators","md5":"9e930d9faf729c4bd958cf792b4a5859","sha1":"baffc2599518515e7acab6eaedc0bc1d5f5221d3","sha256":"4aa8e932b64a2f0af427f623ea37a9b14d02e10caa6efc50040e8b62b8ba6451","sha512":"9858a7fc870ca524394e12c724802c299757e36daafc4c753bb20c4bf899caede47ffa61d1edde76c424873f7ff8829eccd2d48c73cd30cc8c3c54ad4dcffb6d","ssdeep":"768:FkSjRC8dSq+MA3Mzyo9iKMQlRslsdRVMK1pURe5cFhWsO:6l8+WhibuVHUJqn","tlshash":"4d53744e39cff25c235331b2141f385a72b66849784da1a6ea54d4c7fe24a083773fa9","first_seen":"2026-08-16T15:23:55.939645Z","last_seen":"2026-09-02T20:26:21.343578Z","times_seen":5,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":229,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/css/app%7Ed6bca244.53655a94.css","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.019Z","timestamp":1788380705019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /css/app%7Ed6bca244.53655a94.css HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GOe%2BVktTNm3lwR1EB7Ht23qOVEcky2MG9j2j%2Bvj5vU8WCw%2BtXelVeVj%2FM2AB9fZrsupI%2FMHPuEqHUGKbmKu0IDDLfkAqsZfAlc4jvDvj7lEfrjqTClb%2FaDpNfUw%3D\"}]}\r\netag: W/\"6a98474c-35741\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=0,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee5893c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":218945,"size_decoded":39677,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (51656), with CRLF, LF line terminators","md5":"c6d144970b6bb2a16a7d8113fd3d7123","sha1":"d014e183b94b2dcd30cd4c078f7206537a4d0414","sha256":"10ec2b084ca745a834a1b8d96632228cf4aa88d3316e64a8540b9eaec6839370","sha512":"b3be0db79125d8fc079004a0894e09eee203c0c07ae7c3866c02419dbf7816e4fc44ad07a7dd8d37b075b9facd65ecb3bd14e779833bc2a3a0ee7336c9f6343c","ssdeep":"1536:FArTYasn3dfJ0RLibGMhFrqNl9NJGssFvMnO1WE7:F5asjHNmNl9NJGsJOn7","tlshash":"da2442a1e4950aec3373d557d188b7281e2ee422d2531eedf057b71d4bc63a322a2b5c","first_seen":"2026-02-08T21:15:07.801155Z","last_seen":"2026-09-02T20:26:21.344607Z","times_seen":84,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":219,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/c/d93a76be0beeef7eea0d7aa760190da474edbe960390808ec43a39d58d28d0bb/hsw.js","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://newassets.hcaptcha.com/captcha/v1/3115eb7fbcf7e72ba1ba0f0894c95450cb2c797e/static/hcaptcha.html#frame=challenge\u0026id=0f8673f7bbq\u0026host=nvmp.live\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=ru\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=2f20b3b0-44ce-404c-97be-2c1c2d641422\u0026theme=light\u0026origin=https%3A%2F%2Fnvmp.live\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22ru%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","date":"2026-09-02T20:25:07.927Z","timestamp":1788380707927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 23:28:23 GMT","end":"Sun, 15 Nov 2026 00:28:20 GMT"},"fingerprint":{"sha1":"36:C6:15:F5:21:0B:24:21:0E:72:00:85:DD:C6:59:8A:81:39:9C:5F","sha256":"B5:5A:2F:A2:18:D9:09:15:65:93:EE:31:DD:99:81:9A:9F:6D:7C:C4:A9:1B:38:21:57:51:63:4D:18:F6:2D:E3"}}},"request":{"raw":"GET /c/d93a76be0beeef7eea0d7aa760190da474edbe960390808ec43a39d58d28d0bb/hsw.js HTTP/1.1\r\nHost: newassets.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newassets.hcaptcha.com/captcha/v1/3115eb7fbcf7e72ba1ba0f0894c95450cb2c797e/static/hcaptcha.html\r\nCookie: __cf_bm=7ew4HdkghJn4_F8VuhGpwt_O7jSUgGoZe9LBXkapwkM-1788380707.1270103-1.0.1.1-9P39pbwaZEkgfqo8UuKQojU9wIuay7VoEg9tdDiJuoyKVEI_n8w5171DbhzPm41B1beY58EhWufjMQAPLA3dJzilhj1.PEpdpXjixvRWb5KgfTkx1qOEWqQpNOeM_KWl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 20:25:07 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncache-control: max-age=3024000\r\npriority: u=3,i=?0\r\ncontent-encoding: gzip\r\netag: W/\"a54426257a3b36cb97500130add04203\"\r\nvary: Accept-Encoding, Origin\r\ncf-cache-status: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: a34f3e008d12b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1061918,"size_decoded":467205,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65395)","md5":"c046a8d7dce5eaf9ba47434ac0596e7c","sha1":"503572d92cb2a205e4f2adf0b7c15a1b01fc8468","sha256":"1e4201f5dbc23b04cdea9480a3d3741fc3299d77bcfd8b20442faa2ddcb3d80f","sha512":"f0738d24792955c83c24a2e21ba08d3ca5c8db3befce78c2a57f1cb40bfe087bcdfb6f40bbb5275087a1159a0290471656583072b86faa98ad83f8b44fb21c7d","ssdeep":"24576:WOjA1ESwTxE+sM2TyjWWtgOGjsyOsPM67CWl6HnVjD5FSUPXx8Wjs+d:Hvl3","tlshash":"9c251abf5715da7bebb205ed0c0e34472c8488db8229dde4db8e98f7a4505af48491ec","first_seen":"2026-09-02T20:25:56.365355Z","last_seen":"2026-09-02T20:26:21.345656Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E02939381.9dd84fd3.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.891Z","timestamp":1788380704891,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E02939381.9dd84fd3.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z9XDW6scoNdOtjVqFWO6Z54R6sy%2BgWsKfg1Irhv4S0y%2Fatr%2F4P8s7uLwx67adHuJCvFgZOkrUH55cPNhCFDD8aAxNKaPmHKs7%2F7TV8KIH%2B0m2tg5jKvrx0scvEc%3D\"}]}\r\netag: W/\"6a98474c-1ae01\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 26\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3ded982ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110081,"size_decoded":23927,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64788), with no line terminators","md5":"a285589a8e9cbddae163f125d7b8b8d0","sha1":"94ad16a075d79512918f25b04c8f7e479af228f1","sha256":"3f20603863569f2b84ef27a082825ebd5f056373f85d593fd21404a1f1cb3638","sha512":"329cde115690b60db059c1b3ec14bf4bd5432669871cb2ceb884ec1fdfe12238cd058ba0670a4e2720c1ab5588c40f0a54cf8e5b313fef4f062afb11608f142c","ssdeep":"1536:Sbvc2uO0s0QMnMuqyV7y8WFhmUkrnVyFZMVjk6S9/5IR63P9FKk7+1VFCH6BLzO3:1O0kVkzVyFlV5CL6s+","tlshash":"dfb3a909b1d3a13d4a6a6231245e3914f03a3e956108c5cefbf4c9da9968d4c2f3ef6d","first_seen":"2026-03-12T16:27:49.803622Z","last_seen":"2026-09-02T20:26:21.347676Z","times_seen":8,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Ec32a6968.09a8c10b.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.973Z","timestamp":1788380704973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7Ec32a6968.09a8c10b.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I%2Blh4MaXXMs5PwhDBU%2BS7FCQrMiDvqHS9bScFN6CF6bqkVrqTMdwQwg9NXFesrcdygw%2Bb6yarNttJXOxc2oOaCl8DtoW2MX5cJF%2FSDwM%2BUTx72P9X5Bae%2BJ%2B3Ls%3D\"}]}\r\netag: W/\"6a98474c-da1e\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee1868c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55838,"size_decoded":18187,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55836), with no line terminators","md5":"c5d78f3aa0e056e46ee207137679de99","sha1":"15fc6024d1b28a48c2b4d177328cc8b1b0f3a392","sha256":"8ef333d9fa712f7f5c68a35ee9ccb0d95f0f6daf4fc975e0f5128d2964f5dee9","sha512":"1318edc747d3c3cf0e115fc9be6fcc805192fab6af6825118a5c673bab4aab4767edee001c93430dc11893559b761559f6a7af2e25cf535311ce2679913eae06","ssdeep":"768:kUHB7f1nNieDToLESF3OKn8NTymGbY4yiYYl1Wy4+HtlU2+Cepq7y+EcyNoTibAc:R7DddQ3hBymeK+iWtuJpMWnw","tlshash":"1943c6d970e9b13056ba48d6d4ba0901f2395b49301ac0a9f1addcda6d3a106d37ff3e","first_seen":"2026-02-08T21:15:07.846542Z","last_seen":"2026-09-02T20:26:21.351535Z","times_seen":84,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":259,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.core-js%7E31c671ca.3f5a11e1.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.050Z","timestamp":1788380705050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /npm.core-js%7E31c671ca.3f5a11e1.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=53xvRgtg6gM7FXEnjOuUZOyE0H1JiqjN2A%2Bnaem%2B5CwbrtSSZvbDqtPFGspr22PIV4q6hLLPthk%2FBZPBET0DHWFhHOM5GGRJ0x8gh7xORgvph2UgYIFAMtEESDQ%3D\"}]}\r\netag: W/\"6a98474c-df7e\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee98aec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57214,"size_decoded":21628,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (57214), with no line terminators","md5":"d4c545a5dad18a0343f3519bcba7520c","sha1":"a3f17a92264c1a3d13bf4dccc52cc3b05e7619c7","sha256":"e9c1dd77ec0201f1c1fbeda6b94ee7c9c003d29733e717f65a5cb3dc2e3af899","sha512":"08c4afb2d7747d33f61100eb6c279c30371cc4668dea10561025e40d593986535dbf6e8f275362c21812bf6712c3ab5925dab3cd8e7a3782c55c79b27f0448fc","ssdeep":"1536:rH15IvX+f1MPCDCY+eWS2IDgPnJwK8BVjUdF+Lj:rnGSsY+et2IDwOPV/","tlshash":"d843a78cffc6f0a856d276a4842b6107e1772a18f84e55d0e9a3d2c1ac78e4f4177e39","first_seen":"2026-02-08T21:15:07.716803Z","last_seen":"2026-09-02T20:26:21.352569Z","times_seen":84,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/3115eb7fbcf7e72ba1ba0f0894c95450cb2c797e/static/hcaptcha.html#frame=checkbox\u0026id=0f8673f7bbq\u0026host=nvmp.live\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=ru\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=2f20b3b0-44ce-404c-97be-2c1c2d641422\u0026theme=light\u0026origin=https%3A%2F%2Fnvmp.live\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22ru%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:07.329Z","timestamp":1788380707329,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 23:28:23 GMT","end":"Sun, 15 Nov 2026 00:28:20 GMT"},"fingerprint":{"sha1":"36:C6:15:F5:21:0B:24:21:0E:72:00:85:DD:C6:59:8A:81:39:9C:5F","sha256":"B5:5A:2F:A2:18:D9:09:15:65:93:EE:31:DD:99:81:9A:9F:6D:7C:C4:A9:1B:38:21:57:51:63:4D:18:F6:2D:E3"}}},"request":{"raw":"GET /captcha/v1/3115eb7fbcf7e72ba1ba0f0894c95450cb2c797e/static/hcaptcha.html HTTP/1.1\r\nHost: newassets.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nCookie: __cf_bm=7ew4HdkghJn4_F8VuhGpwt_O7jSUgGoZe9LBXkapwkM-1788380707.1270103-1.0.1.1-9P39pbwaZEkgfqo8UuKQojU9wIuay7VoEg9tdDiJuoyKVEI_n8w5171DbhzPm41B1beY58EhWufjMQAPLA3dJzilhj1.PEpdpXjixvRWb5KgfTkx1qOEWqQpNOeM_KWl\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 20:25:07 GMT\r\ncontent-type: text/html\r\ncf-ray: a34f3dfce87fb4f1-OSL\r\ncf-cache-status: HIT\r\ncache-control: max-age=3600\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Origin\r\ncontent-security-policy: report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4\u0026sentry_environment=prod\u0026sentry_release=csp1;\r\ncross-origin-embedder-policy: require-corp\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]}],"data":{"size":619577,"size_decoded":189744,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39407)","md5":"81cc60dc107e531c60efbbe96362ed15","sha1":"ed3dc25b8d6befcb14b1f8db064063bf47a17c52","sha256":"5261c69e01d5026c2d6844253bcab7f20a0a5a6fdfaecd1eff55f12211261e1b","sha512":"f7231217dc45bf9b6448a5914e8507d5a9c5b825c2ddae0044be4a14169e131c067b7355e2fa06145fe56e19238c363ade095f5d077a3e5f021fc61e5078a795","ssdeep":"6144:swzb/clNaGq1X00QOPsGfERdSmtUuh6ySUtk803f/Ir7z/xj6M4eNlFDg6oXFPWe:jD8aGq1X0MmPVt6iopTgS","tlshash":"92d4d76f6310613b47e622e854df190f67b6d01a645664ecf731dceeb8ad84b103ab38","first_seen":"2026-09-01T08:26:59.023828Z","last_seen":"2026-09-03T00:11:23.670591Z","times_seen":267,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":28,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/static/img/light/background_5.jpg","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:07.117Z","timestamp":1788380707117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /static/img/light/background_5.jpg HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/css/app%7Ed6bca244.53655a94.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:07 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\netag: \"6a98474c-5fb47\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 27\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V3SLA3Bz37O4sxSpBvs%2B3TGA8L6JkJwA2TNqt7SNvx3qAjYwIVixETKBECRP9%2BMbw3%2FKPwwUQNhX5RAhYj%2BWPsb7Ln2QvFCT5eP%2BtcsIXhtXbqmWanmT5Y9wq2Y%3D\"}]}\r\ncf-ray: a34f3dfb8c2ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 392007\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":392007,"size_decoded":392726,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1080x1620, components 3","md5":"704f0ac598b4ffcce1741b1dd4467806","sha1":"33c907ed52892e2569c5894fb55c9bec6ac686a7","sha256":"8a175a698b90be61fc4380b309e4c5300ce27cc2126f52abf01375fa5e128515","sha512":"830e2000fcfcc610dde5395855afc4773ddd0d7acaa120949accb5ce1db233dc76a88c51593e4058527782347eea368e498ae36105b2ca2acac95b60a9a4a9b5","ssdeep":"6144:QUaoujIIAZtHMYZ2/f4e+ejgFSDQYblt0BM/zNCr7bzmsaYYzLYrgF3QwY+y:QtoMZAbHVMFjg0hBt0BMI73Yzc+3QwYv","tlshash":"3484232e366dd94121fc842d0237083e5edce07ad3ad8b3ee6d5ed108ed67a7668409d","first_seen":"2026-02-08T21:15:07.853907Z","last_seen":"2026-09-02T20:26:21.354469Z","times_seen":84,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":11,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/socket/?EIO=4\u0026transport=polling\u0026t=Q1Zo_nT\u0026sid=WjVDjLLSAi2frOSUABTU","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:07.948Z","timestamp":1788380707948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /socket/?EIO=4\u0026transport=polling\u0026t=Q1Zo_nT\u0026sid=WjVDjLLSAi2frOSUABTU HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/session/login?redirect=%2Fmarketplace\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:32 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: private, no-store, no-cache, must-revalidate\r\nx-cache: BYPASS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=05FMBhpG9Rsao1it%2FLZ0ZuiQINs%2BbGaGGpduxf%2BgKRTCR3Hkz6VmFa4ln7m4sXgjHWZ%2FUk18x6dNMBBcvD7UVLkRHYO9DFw0kE%2FTTVQ3jviJ0DahzYd4H6TiqZY%3D\"}]}\r\ncf-ray: a34f3e00ad2ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":693,"mime_type":"text/plain; charset=UTF-8","magic":"very short file (no magic)","md5":"c81e728d9d4c2f636f067f89cc14862c","sha1":"da4b9237bacccdf19c0760cab7aec4a8359010b0","sha256":"d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35","sha512":"40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114","ssdeep":"","tlshash":"c700000000000000c0000030000300000c000000c00000000000000000000000000000","first_seen":"2023-03-07T01:03:28Z","last_seen":"2026-09-02T20:26:21.356997Z","times_seen":5779,"resource_available":true,"data":null}},"time_used":24107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Ed8b9b6c1.6718e9a4.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.983Z","timestamp":1788380704983,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7Ed8b9b6c1.6718e9a4.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GMPEefwrVsrnBvBhaInVujAFBXRiMnYjeH5gZez67MqWY%2BrjMSxNuMssUVd1iunlGiC4bfRmSnzpvUzRMyi%2BwX3WE1MKUrvhqURObHLDdB2kVgJ6GRRh3B6L7aA%3D\"}]}\r\netag: W/\"6a98474c-40ed\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee2872c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16621,"size_decoded":3931,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16621), with no line terminators","md5":"397118cdf96561fbd002cf1d2f784e86","sha1":"7a5412c35a6c01f72442458d988101e3f530b595","sha256":"20a8915f278ce60e24730edb8053890d1919d6bccb63fc25acf69bdad40cd1dd","sha512":"848a984ed6b3de765740b8db7ff7cc380cc1c8d3f8e98120348379a7dd38ff6ab157f192d20fd7ce0cfff0785fa2b2bef01106bf98f594629207eca2c54df786","ssdeep":"384:Y7n8ExEU7C7nE77G7+au7P7T7EQ7Y97i7757f7u7XEVEe7zEP7t:YL8+9uD+yyjHYQE9Wf5DKT2JPuh","tlshash":"f87257acf0dbf2604662707452bb055fb33a2de53d1901168e6292867d3860fa573bfe","first_seen":"2026-02-08T21:15:07.814708Z","last_seen":"2026-09-02T20:26:21.358554Z","times_seen":84,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.zrender%7E0e467392.eb7e42d6.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.079Z","timestamp":1788380705079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /npm.zrender%7E0e467392.eb7e42d6.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gDKSMXyZKOOyrIE2WpybM3ai6D8hVFH7JbeUsFtVcSY7vqAHySk9s3HQzCPgSfp5Pxy5txinRleYcj558FDH%2BL4hfxYgzW7xOnGFSdqTrAdRXEhLDRFiBu9hfSk%3D\"}]}\r\netag: W/\"6a98474c-1d01\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deeb8c6c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7425,"size_decoded":3814,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7425), with no line terminators","md5":"d156a6e9f01b0ca20cd1372ca551bd64","sha1":"20983f4f27fa6060fde44e6cff9811b8a3112485","sha256":"4aa55aca55a8c1f199313ab265e94382d18eb124b22a661286d49a53f51f841c","sha512":"b41fa38914d46c8af2c830fa9eafba14895a889e938c85d4325cd1b8961b2d98bf9f9490b2d2a9f87c91300b683f1e9d9d8aed06780a53091f26e8238735f35e","ssdeep":"96:zK4dU/Wjb4RUsJby/ocBreoclgP43ApGVd5O2nIXTnnZiEdGY/zsSdNGKqUmydUk:+LujbS7MocBrRclGEAZn5KSdRm4R","tlshash":"96e1b5df714038a185b7a6aa546f27076137624d640ec16c3638e4ee4efc94d312af7d","first_seen":"2026-02-08T21:15:07.761044Z","last_seen":"2026-09-02T20:26:21.359738Z","times_seen":84,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/vuetify%7E237e29c4.efe01b40.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.095Z","timestamp":1788380705095,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /vuetify%7E237e29c4.efe01b40.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B8%2F7MZxp%2Bg0SyidDkfPT0z2%2FJw6pNCDG6iyPwSUwm4eSJMaDgWGCbtfJMdYwAJY%2BNIPgfec7eCj103MzxIkDlIoHcGTMNzsoXWyYgWjD99p1%2FPmvAjmFu3RgqHs%3D\"}]}\r\netag: W/\"6a98474c-d36e2\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deed8d8c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":866018,"size_decoded":182983,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7705)","md5":"c85d32a4edc37c70dd781a7b693e3b36","sha1":"c9a58097c66a184e0a2ba2844bf8abf54c0e2cfe","sha256":"6e04f85b3a20f54626173375ed2881ddadf84c6b216967ef19f222d0bca4a95a","sha512":"4fbd6846faec989ee1516946c2277d468f6e6c25e092d5e0c9b22b35160f33ccb97e06e43926ee0094119524709dfcf4b3b09656cf821f0f8eabd90aaaf17620","ssdeep":"12288:uBrySDzhW4tn9rhGpwQNo/VGR1GGTfjL0vTp0VNGW:I5SpwQNom","tlshash":"80050a49b1c6fd5003f32195646f06c3e33a188cb846f498b165f4eaa9ec45d21bbb7e","first_seen":"2026-02-08T21:15:07.967136Z","last_seen":"2026-09-02T20:26:21.360837Z","times_seen":84,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Ee179c149.18bc38aa.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.987Z","timestamp":1788380704987,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7Ee179c149.18bc38aa.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=absj7p51YDe%2BpH0%2FbaurOh6K5EXUoSW%2BUBdhDRR4%2F7y9AbWJH9QbgVxhuLSFPo66VhNTl0i22AoSbSY3NuArvfPi4RH0DIXfPt8AC2%2BaCmO3UBypjWFG632X6lU%3D\"}]}\r\netag: W/\"6a98474c-158af\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee2879c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88239,"size_decoded":30245,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"6bed3f51b25ccd7969d5af4217217c7c","sha1":"5c1051a5d6c484947b0b6de48b5257c4cba53c95","sha256":"a69b009b4349e906fbdda80841a189ee6cd1cec103e7dda37fabcf62df33526c","sha512":"582f3350de00d1b196fa803b80d96ab1db267bc592a6618b028c55a293d14cab125dbb07f7957c682eedd9a11d1b6a1a197529f50308e0b4bb16053e8fd9094c","ssdeep":"768:1nSf02s7KT+VQ7q3je1LUJAR69RdXaaua5mGuzbjaAc7RpFFzIYDsQ7X9iunb8HX:BKb7q3GuDXavgmGukHtco1STpd","tlshash":"df83b5a633517177a7ee13aa14fa4400f3b6948c984d046cb93c98eb3c7065a61eff79","first_seen":"2026-02-08T21:15:07.928593Z","last_seen":"2026-09-02T20:26:21.36294Z","times_seen":84,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":269,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/css/app%7E91a0ff31.450b356d.css","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.017Z","timestamp":1788380705017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /css/app%7E91a0ff31.450b356d.css HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cLeJYIQdr4gbqWmaEMzTLcvtazKcG2KH3iQHqyqtn1DxfdLZ0lnXt8TbeDiQz1olKD6sQ7R8LJfrbYAaU5h8slJCEIK8PahbLpHN2ZcMSc4WZ4EFOw6QOBD18KI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\ncache-control: public, max-age=86400\r\nx-cache: HIT\r\npriority: u=0,i=?0\r\nage: 27\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a98474c-76\"\r\ncf-ray: a34f3dee5891c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118,"size_decoded":771,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"3dfdd0191b18a7252812bdabef8f3c5d","sha1":"a46836208dc55047b245b99fc78fc450a19a7dca","sha256":"2121e628242bdc691ab0be338e8e41fb451807831fe12af8d988508427840155","sha512":"a10c9d73d24e973e7b400f1ac3282d48b3bd87e29f100977ac1ff5e02cf3f1dc274e17f0b609f51ee2023e144130ed87d060815b9e8f56318faa159d451e114d","ssdeep":"","tlshash":"f4b04802b7810400b05448829ca32fbc082c62108a01ce61c6213a390e710d72ac0aa8","first_seen":"2026-02-08T21:15:07.817652Z","last_seen":"2026-09-02T20:26:21.364186Z","times_seen":84,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/moment%7E0a56fd24.0407924c.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.035Z","timestamp":1788380705035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /moment%7E0a56fd24.0407924c.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9CKZQ%2BOmJpcNWYtAJAGkodGtMsdgRPlVRw%2F5Hu8e7FZrp%2Fpmkh1AnuqPnHdqxvhcVRp%2FTMtKuAYKDKzSJN5uKPRbLipzDqYNUu1FwmNW6O4Zg31eXI7Z%2F2CttCs%3D\"}]}\r\netag: W/\"6a98474c-ed11\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee78a1c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60689,"size_decoded":21556,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (59715)","md5":"e10dc249d6bf07a4f149acaa1072b864","sha1":"bb986ced2437796eac2cd48a8994b40b12a6d019","sha256":"9ddfac62c93ba79e6c9c3ce536760e2db62e840633b159bbe13f22b487752e02","sha512":"41af90f61cc7653b3f5bb1f57745dd366225ebea736a26877ca420bc0acf0eea5ce60b125994393f7d0e65c11e9ac85f2f242af06a4efde57060a4022c367d22","ssdeep":"768:FutW5Y2I2OTgFY+F1/HqEKghOG9zwYnLHj2IOECXNh3SG5/b4q/FcimsRp:8OI2O5I1iEVOy26mhCo6Sp","tlshash":"235391ce3682b122577602b548bf480bf33d6d55684e4d0cf518e9dd3828c7a927bab8","first_seen":"2026-02-08T21:15:07.940531Z","last_seen":"2026-09-02T20:26:21.365526Z","times_seen":84,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.zrender%7Efd542d86.f3c97e3b.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.092Z","timestamp":1788380705092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /npm.zrender%7Efd542d86.f3c97e3b.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=144kzDbiWFLjwuRca75GoPmkdExYtDtafIH2Rs0yD6v1ln8GPPLY%2FGUW1BA7xefRBYDrOInq2k5sKfsbDaSwVHlJUSnyM%2FoZqi6lcwxYK%2Fh1qSMq1AF5D9CpuU0%3D\"}]}\r\netag: W/\"6a98474c-8aae\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deed8d4c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35502,"size_decoded":13597,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35502), with no line terminators","md5":"f16074116cbf4413057f734058fe4474","sha1":"4760bea7886a87595ab4f5a85f114d7fd0e60f0b","sha256":"e3ef71a789bc9b3da4f3a553bbf7eb654565082611433a4d74e666b44d9c5e27","sha512":"6fd692e31ac5c01bff69b3573c2a2ad9264875ada7a31742538f8fbc8840d0400b2d62892834bdf9443ee213a23d7ba545e1d3f2db5cf34d6696cb85ef86b812","ssdeep":"384:yRFrzSpzlHRfmAv9jA0EMPNr9+u7vqrt3v5OmGCpfD217Se9eApgHf9sYrMrsxS8:L/AjKBz0xPClV+eteJq8","tlshash":"6cf21ad872cc701c4252566850bf268be137291ea50ecec8f26ed6da6cbd60d2277f35","first_seen":"2026-02-08T21:15:07.838114Z","last_seen":"2026-09-02T20:26:21.367073Z","times_seen":84,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/vuetify%7E2d226131.5d4b430f.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.096Z","timestamp":1788380705096,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /vuetify%7E2d226131.5d4b430f.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AcbSKOkw%2BWs4PD9bSRLTf%2FSO16dcFT4GybBd0qVtiwH%2FLsfBzfzULn7hqL%2B7mBV%2F5sbNhIamfhItJQYCAbUZ6kJmcpHS%2FkihjR9IhkSLUqATLFVOqj0bxmh3dIA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 01 Sep 2026 12:29:07 GMT\r\ncache-control: public, max-age=86400\r\nx-cache: HIT\r\npriority: u=1,i=?0\r\nage: 27\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a96c513-54\"\r\ncf-ray: a34f3deed8d9c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84,"size_decoded":790,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"a3fd82c336a613354071f54ccc4b7a80","sha1":"f9cd356a0330052909bba26c30cb7df4563b4356","sha256":"8f2cdb09c2d35c6e3d2745398b4ccd392eaf28678ce45def0342b73d5eae941f","sha512":"59ba2f37ca9d13d293c277b6f156d738443b9817a094301c872a5ec375d2bfbbf2bc6f0f5d417ba0e944e41d22669a80f0c86547874cba37811775572a1bf9a1","ssdeep":"","tlshash":"4ea0127e1011a404097ec00c116277e4484d11082e3204b4071250a138009878500282","first_seen":"2026-02-08T21:15:07.884929Z","last_seen":"2026-09-02T20:26:21.368982Z","times_seen":84,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E03977e4c.922a3a30.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.892Z","timestamp":1788380704892,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E03977e4c.922a3a30.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fX9qo3AaxmhIfewFxKfxBBwDcwjx%2F587CNUnKo2tIGr1gvfu74gXsnustejRNxZFtO7%2FNkD2B8Y0Nh9HQS5oNoGJa4jvirpl0oMe%2F5bnVKBcXzEW13XRggV0ZQQ%3D\"}]}\r\netag: W/\"6a98474c-9bf1\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 26\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3ded9830c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39921,"size_decoded":6046,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (39739), with no line terminators","md5":"2475e8a30ee6cfebeda2cd09b2d69919","sha1":"a8dc5d738825731234cfcf1b4bad0c11d5869b1c","sha256":"440c3c6315cbd894d58f86db612e645dbdf5dde87e6f07116a9eb44425649bbb","sha512":"72cd3b4d812eb9702093e0ba30cfea453517c50c00d831af8c1260f883462fe18378c5121183bc148fd176b7c4fbb025799072a14735878645643efe58aad1ac","ssdeep":"384:uEZjYO8iEOnBj+/eIcjGRyJ+zJajmtbKr1HCpFr4aRsi6SF+uEs7E3:NxApyJ+zJaOecbUu8NH","tlshash":"1d03325e38dee28c27133176511f284e72b65499389e94a3e764d8d3ee18d083337ea9","first_seen":"2026-03-12T16:27:49.697239Z","last_seen":"2026-09-02T20:26:21.370541Z","times_seen":8,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E91a0ff31.550632c7.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.955Z","timestamp":1788380704955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E91a0ff31.550632c7.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vvfc06ZgqPUePtN1g%2FalQv7cmSEOk70ulTiVV%2BOk5%2B6XcTn2s5YTLK1MjV6g3oZGsD0PrATkOfRpwqsw5zgigU0mNozSzVcEcUWIZ3TfirZcVFlqtLDzVjFzSjg%3D\"}]}\r\netag: W/\"6a98474c-2111d\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 26\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dedf85ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":135453,"size_decoded":24306,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65077), with no line terminators","md5":"afca4e85e141b10c8293bdceacdb8fa9","sha1":"f558bd9458b00073414b2b8d20e005ee0315fd53","sha256":"a214360732336fd3960ae631538430da8d4a5b4e697d6bc9075cabd972f6df8d","sha512":"1d92476608cdea51867b735d5cba757903cd689ddc7b67fb07ade92014d40076da6f14dc3b8ccc6d47328f1d3d6e0801476712ea6cb06e510e498df0086cdb4f","ssdeep":"768:ZlVIt4VNJX29lUgJKBZfPRO/SiT+gCfO5SeqBra22XIGlTU4OotNtgCAWOFSjl3P:ZlVIS9sXPqlaz4GTOkDg9KvBkyNV8kUw","tlshash":"ead3f84ef0fb602c4b5b7236345a3049717a2997a448c1dbb6b4c4f95e98e0c1b3bb6d","first_seen":"2026-09-02T20:25:56.513578Z","last_seen":"2026-09-02T20:26:21.372316Z","times_seen":2,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":286,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Edb300d2f.04f6818e.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.984Z","timestamp":1788380704984,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7Edb300d2f.04f6818e.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ZwLE7wlG9IYJIwPsMEG81fre8hHx%2BpvLbRMyx02Pqs8q9OtvUxO9sC1eUzDx1TXbVqNDYGjLZE5%2Bz20AjbJITj3ZPx6gDqemIYoQCyTdC5oiMU17mA%2BukMTPcY%3D\"}]}\r\netag: W/\"6a98474c-6f0e\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee2874c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28430,"size_decoded":10154,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26801)","md5":"ae692f3c8a733b5a5813357f7282b651","sha1":"d28c5ae73f182acdedf3cf3c6980d31394d5384f","sha256":"59f7f5283484e1ab0ac43882e610971c8dedff6ebfde24b310b7af1760f4b622","sha512":"4b497ba11f30bcd5fda7c4df0f306b180f57f41b418863ab9c22c225cc1bcd1ab5d305c3e17d441be96eaea33e6165e8cc9eeccbf7eff6c445e44d42c7290779","ssdeep":"768:0pxs6tNXaQNkoidelPa30AmyZZGnSC9a8fIlT:0Yg7l2QtY","tlshash":"c5d2d98eb590e07296e421d6906a000bb72a4b76f40944d8fb7cddf758f980f7126f39","first_seen":"2026-02-08T21:15:07.753237Z","last_seen":"2026-09-02T20:26:21.375747Z","times_seen":84,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":208,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/moment%7E399b027d.1d43625a.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.040Z","timestamp":1788380705040,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /moment%7E399b027d.1d43625a.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zPoUD8f7%2BYJOiIPLqmaNQkNQPWfNMHWhRtyXPPp5VcMqGsmZkDqBzQ0IcLbcOdYvtGfDe0VPwnUWp0HLKs1owEB9%2BC17nEh8B%2BmxwCTIJoGydYa4sLOUl2Jx%2FOQ%3D\"}]}\r\netag: W/\"6a98474c-17472\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee88a4c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95346,"size_decoded":21488,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2667)","md5":"9b78ba020b6f54f48b677b4c05aa68c0","sha1":"3e00105ae9a9999c91fd858cf34a98a6e29df43c","sha256":"ac96f6b405fdc1bd21eb2caae2a6d8d9b3028f5ba37c63c2d3cc8a8d8c728184","sha512":"6ee66f65b5ec7c746c1b5e9f7c19a8284a94e21147119bd0aef2d0b00cea4a372805cf03dff9df739ce3cceebd19b3d34759b9e61054d61381fc50d2cd075a52","ssdeep":"1536:BqeRC3vuK/n2ATRbCdVn7ByJtBFCM4nYCuHLU/h8A68molm/qF/uhBI62G39c40m:BqYouK/n2AJgV7ERFCM4nYDw/hdzDF/8","tlshash":"24931aca440f6da397450996847f3f689d2c6fa5905edc11eed1a102b8b8cbc83bb774","first_seen":"2026-02-08T21:15:07.69418Z","last_seen":"2026-09-02T20:26:21.377381Z","times_seen":84,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.vue-loading-spinner%7E5dcd9a8f.99684bc4.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.074Z","timestamp":1788380705074,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /npm.vue-loading-spinner%7E5dcd9a8f.99684bc4.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2F%2FpWsCaHMlQ44SZbnvbPT8bPLDF%2FDKdKcsQ1Mp4HVf4Y41vkQJNt4FWwEDfzYCDwaclwgITtneFHzffWlKrGuaXCg6d0Bgc%2FpdzYHfFuXmQXEq2Glrt6w%2FJUpE%3D\"}]}\r\netag: W/\"6a98474c-2ab0\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deeb8bfc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10928,"size_decoded":2631,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10924), with no line terminators","md5":"98d2425f1beb79ebdd75f366778eed5f","sha1":"b1fddf82bedf35c290c8e2af753742504d519048","sha256":"6d35fac8e1d1b18d2fe3b22f0927c96da2648efccedb817ae047e4e45ae66bbb","sha512":"60eff2f075cd2a679f8ab494e3c9dc73fd2bcb52d3564b011806bee089042626e6239da07adc4c08b2935260fbdf2a5ca4393d564cdd9b8090d6bd7337e11d14","ssdeep":"192:aX3qbP5lzUOf9kd8d3SiX+BwwiMKBEd63+LhOS:aX3qbxNUOfud8d3SiX+BwwiMKBEd63+R","tlshash":"1732105eb0a2f478ae63a8d5416f2421e0164e593638acc5b3f2cdd46570aad523ff3c","first_seen":"2026-02-08T21:15:07.771187Z","last_seen":"2026-09-02T20:26:21.378365Z","times_seen":84,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/socket/?EIO=4\u0026transport=polling\u0026t=Q1Zo_ZB\u0026sid=WjVDjLLSAi2frOSUABTU","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:07.025Z","timestamp":1788380707025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"POST /socket/?EIO=4\u0026transport=polling\u0026t=Q1Zo_ZB\u0026sid=WjVDjLLSAi2frOSUABTU HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-type: text/plain;charset=UTF-8\r\nContent-Length: 2\r\nOrigin: https://nvmp.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"40"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:07 GMT\r\ncontent-type: text/html\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: private, no-store, no-cache, must-revalidate\r\nx-cache: MISS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HX7jA4j66N9sv1WijEEQmCmh4UxxwYNBOdM%2Fk8q2T4cogzjaUehlhWUePfV7y%2BqkPxXtLVjMt6pbRNOxXsAlWSzfFBB5kvTlvjFsdA7TorYXltXN5keo%2Bzh7IgM%3D\"}]}\r\ncf-ray: a34f3dfaec08c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":672,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-09-02T23:09:02.593952Z","times_seen":455387,"resource_available":true,"data":null}},"time_used":568,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":568,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/3115eb7fbcf7e72ba1ba0f0894c95450cb2c797e/static/i18n/ru.json","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:07.365Z","timestamp":1788380707365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 23:28:23 GMT","end":"Sun, 15 Nov 2026 00:28:20 GMT"},"fingerprint":{"sha1":"36:C6:15:F5:21:0B:24:21:0E:72:00:85:DD:C6:59:8A:81:39:9C:5F","sha256":"B5:5A:2F:A2:18:D9:09:15:65:93:EE:31:DD:99:81:9A:9F:6D:7C:C4:A9:1B:38:21:57:51:63:4D:18:F6:2D:E3"}}},"request":{"raw":"GET /captcha/v1/3115eb7fbcf7e72ba1ba0f0894c95450cb2c797e/static/i18n/ru.json HTTP/1.1\r\nHost: newassets.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://nvmp.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 20:25:07 GMT\r\ncontent-type: application/json\r\ncontent-length: 6358\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nx-content-type-options: nosniff\r\netag: \"b1941df3ad1fc4229ca6baa862192f48\"\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Wed, 02 Sep 2026 21:25:07 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method, accept-encoding\r\nset-cookie: __cf_bm=jjDGtbRvaO_aD_ucct66DGKdk7_QAEXDcn_thzZeJ9w-1788380707.3676934-1.0.1.1-RJADibS72kud6FuAHwQPqOfOurVuuzOfMqqLJsWHfanw7ZjkXE48ZL_5v8mZzCX97cmGjzo7L.fPY1ld5HN88YpR7QNrwYM0Cp_S.iWGita_rjpPPTQOYqWjG3bx7bGu; HttpOnly; SameSite=None; Secure; Path=/; Domain=hcaptcha.com; Expires=Wed, 02 Sep 2026 20:55:07 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\npriority: u=3,i=?0\r\ncf-ray: a34f3dfd089db4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"jjDGtbRvaO_aD_ucct66DGKdk7_QAEXDcn_thzZeJ9w-1788380707.3676934-1.0.1.1-RJADibS72kud6FuAHwQPqOfOurVuuzOfMqqLJsWHfanw7ZjkXE48ZL_5v8mZzCX97cmGjzo7L.fPY1ld5HN88YpR7QNrwYM0Cp_S.iWGita_rjpPPTQOYqWjG3bx7bGu","quoted":false,"path":"/","domain":"hcaptcha.com","expires":"2026-09-02T20:55:07Z","raw_expires":"Wed, 02 Sep 2026 20:55:07 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=jjDGtbRvaO_aD_ucct66DGKdk7_QAEXDcn_thzZeJ9w-1788380707.3676934-1.0.1.1-RJADibS72kud6FuAHwQPqOfOurVuuzOfMqqLJsWHfanw7ZjkXE48ZL_5v8mZzCX97cmGjzo7L.fPY1ld5HN88YpR7QNrwYM0Cp_S.iWGita_rjpPPTQOYqWjG3bx7bGu; HttpOnly; SameSite=None; Secure; Path=/; Domain=hcaptcha.com; Expires=Wed, 02 Sep 2026 20:55:07 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21546,"size_decoded":7399,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (400)","md5":"f076093aa115165da3daa92744c2a18e","sha1":"e096db8293b5f56fed71c5a117ab680a737ac5cc","sha256":"5341c38c49787bff9d4393581305a282ff90ac1e260d55865ec4afa2bfa07bed","sha512":"5f3321ecb8a76299d5dbb9ba3a77982fe7782b43e0d5d71a03d13580dbed0a1600a22968d6e409d18a3ce92806ad94b79d854e4df44ccb906cd18250817a31f2","ssdeep":"384:c9oNmn7iZGHcZBYa4al+e3iJ9uGDP6qOkyIrX5MhZB+55n4ve:c9DiZG8ZBL4c+eSbuG2WyW8B+3nl","tlshash":"d6920171554920bf01c6a11bd808be0a39ab48bf3f6b736a16767d3d31fe026c23965d","first_seen":"2026-06-18T19:09:37.403454Z","last_seen":"2026-09-02T20:26:21.379794Z","times_seen":21,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/static/vendor/telegram-web-app.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.869Z","timestamp":1788380704869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /static/vendor/telegram-web-app.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gU52v%2F8Hspp8MR6tn8iUqHGXHLtBBfvOpp7DCZJmhu2ou9EwkiMJLhcF750z3iH4S0x4qUB48B%2BAd07w1AldvSYvBNVOfz08yxcING2LBnCcM90JaWID5FD7dWI%3D\"}]}\r\netag: W/\"6a98474c-1bce5\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 26\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3ded7828c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113893,"size_decoded":20696,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"2db55d684f07c95beee17f42802f772b","sha1":"75d76d0be4d644d3fb0de488752ce1a4f28e6480","sha256":"89a574824215075b5392730f04d2afa3fef7d8992311deb5ff3ea1975f7ee3bd","sha512":"3969ffc5a234ef527e8e1631f5e58e6a7189a14b3b8fc54ca4bf9d260f0781d638046a8cfb8f9e52604b43af146864f69bb660e2342cc2873b45c9f691e76ba7","ssdeep":"1536:pU5TpRdo54F0WN2Zbjcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV76/xHK8ITr5:u5TpRdccKFU76x1q","tlshash":"69b32e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","first_seen":"2025-04-12T01:53:48.55722Z","last_seen":"2026-09-02T20:26:21.380509Z","times_seen":443,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E06837ae4.2aed1d86.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.901Z","timestamp":1788380704901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E06837ae4.2aed1d86.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hdyr10%2FVVzw%2FpCy6GdOOPEjFxub54n%2BUGm%2FdGeyKqv%2BkqG9zU4V78srQXYMyOwx9n%2BKWmVxN8pl4wmyHPQdnoUByYRlsu0utcVMFbCqC0sOoGUlUTBseZWqh6lE%3D\"}]}\r\netag: W/\"6a98474c-ba84\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 26\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deda836c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47748,"size_decoded":10728,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (47748), with no line terminators","md5":"f8efeb3d53048c029a27004d5debd12e","sha1":"8bce9d1b249a2f11819bc8efff154cb8a2dd268e","sha256":"a97b46573e8ca545123a1125900f23f85f22fb59c5db0f71d8864c493897958c","sha512":"504b0fb8133b64abdce759e0248ea0140869506fe76eec2f8c45df890b407ead40424ce2cfb0c80f1e9ce5bdea00553a21611aa3f7589b3fe7a09eafefcdefdc","ssdeep":"768:h18Ni58vwv7+nOm1dLgcABgX4L5JHmvM9DaBDdSLAK0KqYUJN:hmNi58vwv7+LLccABg05B6JN","tlshash":"bc23ddecb4dbf2b946277071517b056eb23b3cc07dec19019e916e99387880da162bf9","first_seen":"2026-08-16T15:23:56.079651Z","last_seen":"2026-09-02T20:26:21.381305Z","times_seen":5,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":212,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E1e049fba.67e270e1.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.906Z","timestamp":1788380704906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E1e049fba.67e270e1.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0rNgqxS%2FKGR822b1IGckaULRaHCftPHzzDcZN7%2BSUMWOdxJePo2op7B3%2BbQDwvaCP1XXnzp5CVnCeemx2yq%2BHrmQ2IVQYUj9tlQr8f96Xc%2FKLu8ehUETCIQtuto%3D\"}]}\r\netag: W/\"6a98474c-b3be\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 26\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deda839c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46014,"size_decoded":12391,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (46014), with no line terminators","md5":"a8943e063c3576b174a5e829e0e6af8d","sha1":"2a3a309cab966ab207e74ed517e0fe95e3581f1a","sha256":"2b6f6581f17c45c19cc77d4bdadc177afeb97c2029852743dee198a289971e16","sha512":"e875ab390dafd59acff66628764358107043bf9ab29e93791fee3aae52dcb9c21441212647b63c18481fa3d5bf4f39befb64bc8db54244451ee876e8914ab222","ssdeep":"384:vV8rBHs1YRKPSAeBUdWIvsHPpkQMtqakCMj5K4qKjKer8rFYNzeuFMtjaHKr8L7Z:as1LmMXIzbcWHxzw8TgRYWeAMu6","tlshash":"fa2396847e85707c26e67060146f649a7136c8ef614ae934f85ec8c96c39e3e61bbd3c","first_seen":"2026-02-08T21:15:07.878912Z","last_seen":"2026-09-02T20:26:21.381985Z","times_seen":84,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":302,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E20014605.e8aa3253.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.908Z","timestamp":1788380704908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E20014605.e8aa3253.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ONb3bv7glJurr4xPk6X6NwLPAX4lbUZC4VUtomw9%2FUhKT1NCpXQ3PRphj%2BC8CQGJvtAfIUG1Hr0JH6eKt%2FXAPbQSpRbFC%2BZ0%2BpMDjNtK7pSmhvrGVhJOba5M%2BBs%3D\"}]}\r\netag: W/\"6a96c513-47f7\"\r\nlast-modified: Tue, 01 Sep 2026 12:29:07 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: HIT\r\nage: 26\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deda83ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18423,"size_decoded":6408,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18072), with no line terminators","md5":"827f82a7732bda808067d7bb6d2df6e1","sha1":"2e2ab0235bdf0c1f1a97df0ab28c3dacca12c96b","sha256":"50ad67cdf0bdb0741e0fa93bf1b90e76f41ec8f57dccbef314277bc650413097","sha512":"95e2bc26c70f4c01b26aa64ed3fc6c3ea9c68b9e388eeba401287f7f005d5885781dff48e942dcea8ef66d8556569dd92b862b446db1b8ad14ee049b41ffa418","ssdeep":"192:/sstHAgrPI7vCLys3xboRtB8TS386Beml0GDVaOvhhEbRtqOkhT+W3AS:/ngUPuqLyGtmaOQbRFkhcS","tlshash":"d882b719b1e3a02d5e6ab134241d2418b03a2d97e049d1def6b4cddd98b8d4c1f3be2e","first_seen":"2026-02-08T21:15:07.769846Z","last_seen":"2026-09-02T20:26:21.382622Z","times_seen":84,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Ede0c4698.02be63db.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.986Z","timestamp":1788380704986,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7Ede0c4698.02be63db.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eMT3VlatnHXtKSUXoWaD0YPSaFPU%2BBJJDTTIAivIuQ7TnRdp4p9hdI2zt2rEbpi64RgbzYctT3BWP8uDxP3SZ8bQpu%2F%2FQCniRv%2Bnru7rcRRohU1SU1ArRMqI4S8%3D\"}]}\r\netag: W/\"6a98474c-1d006\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee2877c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118790,"size_decoded":14818,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65366), with no line terminators","md5":"499c72c1a9c9e431a073d4611d89187f","sha1":"a0098fc36b273196cc6c87a991be0f95c3909cdc","sha256":"d46859f4face89edb1601c06f7e40a4b1865100866e9fb6858c125e07c0ea731","sha512":"ad29df17b395bba425c8326ef25fe76724a38450774fbba40c616a9cf926d454bf143d490aecf9937428efaa88fefb890bc99c8acbad19b72058c72811454b5b","ssdeep":"768:0G71/UR6gfvLG0QPJqKa0VW5epznxfgeEr4ggrFuODazh0ZrNfaL/3B3ff8y4KR7:T71f0Q60Vb1nePh0ZrNfc7","tlshash":"6fc32e9e79dbe25813073172211f394d72b3a05a788e90679658d8d7ee28d0d3373ee8","first_seen":"2026-08-16T15:23:56.056672Z","last_seen":"2026-09-02T20:26:21.383298Z","times_seen":5,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.echarts%7Eef4b7b69.6b06c552.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.065Z","timestamp":1788380705065,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /npm.echarts%7Eef4b7b69.6b06c552.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CAMZiE8QRzrAlkaOUzv1uaLXgOl%2FEAJbKK9%2F%2FXtBns3x7lOq0ECJUgo6Xhe8rQgs35LrhbrluJ16c7ow6Bc2Q%2FuQQFX9yAT1Va3Ys%2FU%2Bmjuuvv7XvqMwY6weu9w%3D\"}]}\r\netag: W/\"6a98474c-a766\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deea8bac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42854,"size_decoded":16405,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42854), with no line terminators","md5":"635973a95e3008c1b61804f90bee2694","sha1":"0459ab01a84f9adc7333209cae202bff7329cf87","sha256":"ebe534c4a09795070493b020b3cb0406920d7164218effcde23070c269009bf7","sha512":"dc849fc40b319247d3cd64839e1f7b135b5695547269bb12aee9c2084c2b914d35790da77c2c202e70ea78be9efe208e551bdae3d7241027ee78b32cd5ba35a0","ssdeep":"768:4i1jvvwfoFKiSHw3ZnTYhUh+Mq5qu0IzGyIVlQxV1JV4V3:V5SE8hUTBlQxRi9","tlshash":"8413099cb288b46952e73074247f250f823a29097807c994fe6ad9d5acbc51b7237f3c","first_seen":"2026-02-08T21:15:07.948334Z","last_seen":"2026-09-02T20:26:21.38396Z","times_seen":84,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"34bd7e5b1f8f.w.hcaptcha.com/logo.png","fqdn":"34bd7e5b1f8f.w.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.18.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:07.282Z","timestamp":1788380707282,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w.hcaptcha.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 01:50:48 GMT","end":"Tue, 17 Nov 2026 01:50:47 GMT"},"fingerprint":{"sha1":"3D:9E:AC:1D:EF:71:F1:A9:E3:C5:02:19:80:CA:15:0D:03:CE:54:D6","sha256":"5E:54:2A:52:E9:AD:43:D7:1F:CF:1B:BC:C9:13:D3:8E:D9:E4:E9:49:C1:8A:59:F3:4D:09:32:07:87:C3:7C:00"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: 34bd7e5b1f8f.w.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nvmp.live/\r\nOrigin: https://nvmp.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 20:25:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 2593\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: no-store, no-cache, must-revalidate, proxy-revalidate\r\nExpires: 0\r\nVary: *\r\nPragma: no-cache\r\nTiming-Allow-Origin: *\r\ncf-bgj: imgq:15\r\ncf-polished: qual=15, origSize=85005\r\nset-cookie: __cf_bm=sqEYoPQ_3GL_ub5B8L70H9AeFW19R_d3p4DHaq5GWGA-1788380707.3124013-1.0.1.1-k3ClzsZjhdY41.TDlDyotM8RrW61O2xt7LONW139AtGppS_fB0rPJmo2w4dExyb8H9eo7TBfzUCEArtGkwLSPCOJNqbBFUhm57Z_muPykwVDU0CZoZ4n5VzulmEq.mt6; HttpOnly; SameSite=None; Secure; Path=/; Domain=w.hcaptcha.com; Expires=Wed, 02 Sep 2026 20:55:07 GMT\r\nServer: cloudflare\r\nCF-RAY: a34f3dfcbada569a-OSL\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"sqEYoPQ_3GL_ub5B8L70H9AeFW19R_d3p4DHaq5GWGA-1788380707.3124013-1.0.1.1-k3ClzsZjhdY41.TDlDyotM8RrW61O2xt7LONW139AtGppS_fB0rPJmo2w4dExyb8H9eo7TBfzUCEArtGkwLSPCOJNqbBFUhm57Z_muPykwVDU0CZoZ4n5VzulmEq.mt6","quoted":false,"path":"/","domain":"w.hcaptcha.com","expires":"2026-09-02T20:55:07Z","raw_expires":"Wed, 02 Sep 2026 20:55:07 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=sqEYoPQ_3GL_ub5B8L70H9AeFW19R_d3p4DHaq5GWGA-1788380707.3124013-1.0.1.1-k3ClzsZjhdY41.TDlDyotM8RrW61O2xt7LONW139AtGppS_fB0rPJmo2w4dExyb8H9eo7TBfzUCEArtGkwLSPCOJNqbBFUhm57Z_muPykwVDU0CZoZ4n5VzulmEq.mt6; HttpOnly; SameSite=None; Secure; Path=/; Domain=w.hcaptcha.com; Expires=Wed, 02 Sep 2026 20:55:07 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2593,"size_decoded":3314,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"e1d4eddcefb14ca72d73544c29881122","sha1":"e10126cdd9341409c7859facbbca2e885f783d73","sha256":"13972d7f4e2a7e6d868d35f220b18b70943b376d407e3ca276feacd57a1a8921","sha512":"56da97af45e2f0e7f0de98336baab615ccd24cd1b5ed92ef1db14658ff5bac55f4304bd701d96641b3226b468df066466ae909b16db7362bd1b613d05f03f176","ssdeep":"","tlshash":"b151b5934d48464ad82e4f7061b05f08f23296edbf2e33dbb525b02d9fe23c229255a4","first_seen":"2026-09-02T20:26:21.384568Z","last_seen":"2026-09-02T20:26:21.384568Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":5,"connect":2,"send":0,"wait":23,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/socket/?EIO=4\u0026transport=polling\u0026t=Q1Zp5gT\u0026sid=WjVDjLLSAi2frOSUABTU","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:32.065Z","timestamp":1788380732065,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /socket/?EIO=4\u0026transport=polling\u0026t=Q1Zp5gT\u0026sid=WjVDjLLSAi2frOSUABTU HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/session/login?redirect=%2Fmarketplace\r\nCookie: XSRF-TOKEN=Bsq02QFQlsxQz6bCsmWQgtzLX0mjK7b9vt_XJX73zT8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T23:18:13.859488Z","times_seen":18244445,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E067239b9.ec05cb9d.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.899Z","timestamp":1788380704899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E067239b9.ec05cb9d.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gudd5wfp4HMwHScoxtltFLkem6dThPcxDUApxa3sPXkM9nrFsnkDCRirHGWjio4XeBm0%2Flq43CvYQM662njc08wGV5qx%2FbCMXJNUMMxf8XgOI8oVOE8iaz2nBwo%3D\"}]}\r\netag: W/\"6a98474c-14087\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 26\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deda835c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82055,"size_decoded":18894,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63363), with no line terminators","md5":"88cc8922c85c35283fba4f07970de19d","sha1":"9d043c76a3bb49a163f148704118bbc96f4289f8","sha256":"086600b401227725f91e878e0829f41b47a80777fd905158334d8f3babe8f54d","sha512":"bb0355ce89621a7e4f02e14f8e02099ba628b68880ec1d777a5ed4fae9976e2028bd933af60d9b222cf95365b25191811bc25cdbd430f12256cfd059f4ed5e9c","ssdeep":"1536:vIi1G9AobXoL8eEnT8BPh/oi4FiLgX9rOSNLKR+:FKxgaKs","tlshash":"1583db1971d3a13d191ab23524193808b07b3e56b549c58eb7f0caf989a8e4c1f3bf5d","first_seen":"2026-02-09T03:46:44.784382Z","last_seen":"2026-09-02T20:26:21.387052Z","times_seen":7,"resource_available":true,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":332,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E7927e0ff.f978fbcf.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.946Z","timestamp":1788380704946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E7927e0ff.f978fbcf.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fk%2FsqVR%2BiRZ0wj4q8qzlyECLyKBmdEkkMF7ipyetqQV9hnBue%2F8FB2UUnth%2FTiPmTgEXjIRMHfSBTgJMfzf%2BipVmrulFRUQuaxVcCjitN3DZRxCvXh5QgOmq%2Bwk%3D\"}]}\r\netag: W/\"6a98474c-46b2\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dede854c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18098,"size_decoded":8265,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18098), with no line terminators","md5":"2067bba09de1b42bdb182f5a3f1a479b","sha1":"11bb3de45982a48e21e3a3737149925a19748d98","sha256":"9c1ca1d50ca7d9cdc64c1c6dfbeef2ac67679a0f79349b988fe1078a3eb78aee","sha512":"f255502b18f3f40db27d1038e4a7c74ae3c8ca35f4bfc8a505d0375715f299392cae3cf3cc52387a434c16b429b8ec6c8ebb492cf5bff42ce5ec26cd1c80bbe5","ssdeep":"384:HLM0f7DEpOJWSOvqzlMYmejkgenlVlG/DIXfW:rM0fXEpFCfTkXlVlG7z","tlshash":"3f82b7cc37c6b456979395b2806f248f733e6d80245d9890d629f1e83c3486e8977eed","first_seen":"2026-02-08T21:15:07.963303Z","last_seen":"2026-09-02T20:26:21.387703Z","times_seen":84,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":138,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/css/npm.vue-loading-spinner%7Ea78bbb77.24799c34.css","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.029Z","timestamp":1788380705029,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /css/npm.vue-loading-spinner%7Ea78bbb77.24799c34.css HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sGex4c1bZjsk2ykcs10DNQvL2L4wuSFtzGoXmKiHKgRtfrKjWsPdaF65fUm75qWuXCo44f2KA5ReNO99SRC60vqYL4a%2Fc6ngx4n%2BKvxRvVy%2B8xzC9qfVrI5SHgM%3D\"}]}\r\netag: W/\"6a96c513-7ce0\"\r\nlast-modified: Tue, 01 Sep 2026 12:29:07 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: HIT\r\nage: 27\r\npriority: u=0,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee689ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31968,"size_decoded":4565,"mime_type":"text/css","magic":"ASCII text, with very long lines (31968), with no line terminators","md5":"cffcaed0577c3ebbc1f351e8ab2ce43a","sha1":"19e28f83b3c48160f83fd5fda5c7c74e4c1a38f7","sha256":"ac54ebba21a2791f62cd530f75839786fdb3a1f5a98a0d787dfe6272c8ea2510","sha512":"fed94c2416cd234d8a696fb7de926eb267fbbee6d006c75c703bc09d067dce5d3337d311d34b864cb59ee7811a200f36d49c21a8ba9ed6373d4167037656ccc8","ssdeep":"768:wAchh2HRTpTXBTrWx3/arNx2/rfCXTrNUfxp+TrpUjpt+3rFykoh0rZUFc6r/jIe:wAchkHRTpTXBrWx3/arNx2/rETrNUfxj","tlshash":"bce27aa718561266d8338f1287dc1a685b3ddb2315620ddf374a381bc783b9d339ab27","first_seen":"2026-02-08T21:15:07.863945Z","last_seen":"2026-09-02T20:26:21.388319Z","times_seen":84,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E918791c6.7235c2e8.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.953Z","timestamp":1788380704953,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E918791c6.7235c2e8.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qpLaT8daU3IhLcJxNabACxTxN8NF4vFW5mC%2FIWA5KDa5UVP7yntkcBrTDIsKbS4%2FJzXXEoRNd72wLRW7kaL16ekCLhki2KuOVz6KR1zP2zXqQaBzv5YN3wX1lAs%3D\"}]}\r\netag: W/\"6a98474c-f500\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 26\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dedf859c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62720,"size_decoded":20366,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (62720), with no line terminators","md5":"d93cbc49de634289b3c17a0e93c2ab00","sha1":"5a798ddaa01d4cfec570df0e2a329df40bf11c17","sha256":"9b6568f7ca4cbc30af95e3837c69438930911f0d2084d3729a630aa9ef3146b8","sha512":"4ae4ac73ce9c94cc6da0d072b26894b1b4c1a7eb99f019e1395fbc699bfbbc5e8dddedfeb00a3615484504a52258b5bb83bb3e227d03efb455cae1d1dc507855","ssdeep":"768:vWasa+AMfnodAZBFqYBPqcga+urbpwGfhNiXvgcAjYgCM:vxTMPodWpCiBwmhbn","tlshash":"2d53d8ddf394684699f23394486f178a4333ba1c1846c96c797edcd7a864c0a313ebb9","first_seen":"2026-02-08T21:15:07.679088Z","last_seen":"2026-09-02T20:26:21.388987Z","times_seen":84,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":284,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Eec673aab.9e62ebf7.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.991Z","timestamp":1788380704991,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7Eec673aab.9e62ebf7.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VAJaf94XBihXLJLSMTss1BgrD%2FtfvaHwXUHbepmK8mnY5Xz540zZcpyoRWiCGIdRk9cq4cdL5JLX1ss%2Fmzbu4cR2BkX8K0EwcRa12DFNxSij3Bbgy602Ru0Q6bk%3D\"}]}\r\netag: W/\"6a98474c-3583\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee387ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13699,"size_decoded":3254,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13620), with no line terminators","md5":"88646d714df3c7618876e400ba8e1ef1","sha1":"c33bdce4a0b394bdb0bb7efa1825eb37769ecfed","sha256":"0a6fbb9be0f3c1f5c1bb9ff6296440163f2a6499cc2cda57b605aaee85fc13e7","sha512":"64099213510021de018229e2dded11c69caf2b337a0478b3c2977da63c3960418bf10aed7753a4c883a599eb734076dfd0ae7f30d4b4de5d9457ea0a4b09611d","ssdeep":"192:HNjYaqUgUBdDQlQAS5iX9QXdXhs6cPrxSJL+q:tK+CX9QXdXhAr8v","tlshash":"e152705e79cbe15d131b3171101f364a22f3601e784ee567eb68d4cbee28c496273ea8","first_seen":"2026-02-08T21:15:07.766816Z","last_seen":"2026-09-02T20:26:21.389652Z","times_seen":84,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.core-js%7E93acefaf.c85b1011.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.052Z","timestamp":1788380705052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /npm.core-js%7E93acefaf.c85b1011.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qbdHaKiPH%2BH3%2B7pzEyCsVaJpM3d9zqKFj6xAqfyYSz8CzHBQDWi%2Fck1EggF1ddAQRxbbig2C3IpjxHPZEjh%2BJTy7rR4Bfur3Pi0PFWabbCFCsKo5elAsgAkmh%2Fg%3D\"}]}\r\netag: W/\"6a98474c-d711\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee98afc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55057,"size_decoded":22127,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44308), with NEL line terminators","md5":"b50a635d03b3598b53b1c00adeacfe0e","sha1":"5ce554c513133eec1a767c41e6c0cae6439f9d9e","sha256":"9b5ba22d16988bfc3845d9f7ba93c2688ed248f3333c81977de5e3ff1bac9acc","sha512":"78445811a4e9d561b51d6f7fab4c7060fafc1b3319a40fdb7d42c06f581d2095dc7fe6fd9f9f73a89cd947584502167f56e5240e7a66fed421ff802470ebc93f","ssdeep":"768:vDg/fMvAbjqXBaos6AcRTvbx2W+SUae2MLDnT+LYcmwDn:vDgyAb2XoJ63RXxzUae2M3acwj","tlshash":"2633748df6c574d126e7a4e4025fa70bb1bb1854b84fcad0c266e2d0ac7994e4227f7c","first_seen":"2026-02-08T21:15:07.779199Z","last_seen":"2026-09-02T20:26:21.390336Z","times_seen":84,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.zrender%7Ecfcd6536.3bef41c2.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.088Z","timestamp":1788380705088,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /npm.zrender%7Ecfcd6536.3bef41c2.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fnLyr87ICC9RZ5Tv%2Fqhyy7VEJx5qN5ynt0Rdtg8hrmjPYVG5qJlKiE8n82unM0I4vCpPBYIg0VLlSSCJramNS9FEx7eJSd3ji%2FBG744zbMQBwr798rNJfUx3rPM%3D\"}]}\r\netag: W/\"6a98474c-269c\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deec8d0c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9884,"size_decoded":4446,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9884), with no line terminators","md5":"f585cfb1a56f56d3177e51444f221315","sha1":"17526adee5d06011fb259e6416bc691a03feb9a3","sha256":"e7c9bf71bbd0882e399f7f83fa2e266c24b0a189306cbbef1c480f3e1112d03e","sha512":"368095ac46f6faa69468485e8076084360d6e46c98bafe3a0a890165966a8654243e72706f493b5b86132ef6014bad3b7a70a9eb2ab8c52077e829a3c350474f","ssdeep":"192:GP+K3P9lmEO8d1CeQwGzkNqJRqry+frJYAYjdnX:GmExA6MTsy+fm7jBX","tlshash":"1d12418eb2c1715983d6a261053f3d0ba03a2554380f891df935d4debdbcb9d52aae3c","first_seen":"2026-02-08T21:15:07.896392Z","last_seen":"2026-09-02T20:26:21.391003Z","times_seen":84,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/vuetify%7Edde583c9.3a9d6102.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.108Z","timestamp":1788380705108,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /vuetify%7Edde583c9.3a9d6102.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sv8Xz7hbB4ou7FAHzTyOA0JZFWpdYIYnJcy14KoawOUZd1H0SWt%2FzQRFqoua2osjTJZMxSBgGXhI1YRuBCysuh5lpTXV9MDbfp1eP74%2Bii9LfppuZ%2BkhXPvir9k%3D\"}]}\r\netag: W/\"6a98474c-7c1\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deef8e5c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1985,"size_decoded":1208,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1985), with no line terminators","md5":"5ad1417e17857201c58756ba8a40c0e1","sha1":"0b00b86b39fece4a2560cc7e03508a6fc00a267b","sha256":"6e0c496fb22b12f19a7488babd52a2c7b006f96e0b1b3b559b4552eb7f09f49d","sha512":"597a629de745175165918e331b6078502bd3cfc4c4e6c4dd58fd315cc9ce882deeba83a1fe4a5a3d2b28cd66b68563ebdda7643514afa66ec5e9d39a9ff8778c","ssdeep":"","tlshash":"e241286dadbcf614285224f6214fbef854bb12183caa6db149b0f1d0cb3229e2117f0d","first_seen":"2026-02-08T21:15:07.834894Z","last_seen":"2026-09-02T20:26:21.391642Z","times_seen":10,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/static/img/light/logo.png","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:07.120Z","timestamp":1788380707120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /static/img/light/logo.png HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:07 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\netag: \"6a98474c-7881\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 27\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BRBGOlprmIax9TMB4ueO6xGdF1mmvgF3svkeAJI6dQwaKdcqjlklbuozghn%2BN2%2B0nhNRqE3%2B8OZ6Tn4mBSHmRbdghqy4xH1b4FdCEsSvKTUyHX93FixUCbDHzl0%3D\"}]}\r\ncf-ray: a34f3dfb8c2bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30849\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30849,"size_decoded":31563,"mime_type":"image/png","magic":"PNG image data, 402 x 122, 8-bit/color RGBA, non-interlaced","md5":"f72ad1b7263c665411040185a39dc62c","sha1":"1207473ea004e0838bdd2ff89267ca86a619dd09","sha256":"f71bbf6e6b3848b80d44c8246190adf780e6c58821542e36b2b6ee9fe1d6e5d3","sha512":"9e032c5d82bc4bd053e0b188343b3e16ea36e4059f735f1a47721f6b49e965dbdda5b2da9310c14758fa85f690badbc8073d68b64f968dc91beb6a76b02cdc19","ssdeep":"768:0xGLJNE0yJinyQltU5Xa6w/ncOwXIvN0gQlRSiEhpbwx:0xGLJC0+ib+5NRJSiE0x","tlshash":"b6d2f1c5c341fc02381eae69176b9d03d80fd5427fe7fe515884c915ad182dd885a6fe","first_seen":"2026-02-08T21:15:07.915032Z","last_seen":"2026-09-02T20:26:21.392302Z","times_seen":84,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E5a11b65b.33c971a8.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.936Z","timestamp":1788380704936,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E5a11b65b.33c971a8.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vTzip2RYJ9oihAffaGQCVV3KO6XSHMmVyjl4CvhW7CFdCE%2FxqbD48PZOLveMmc4zBPdkDLS2UZNoqajEP2%2BjrZMswEba4u1GHP%2BC29RRXKMlDTvi1ABZuUYFluc%3D\"}]}\r\netag: W/\"6a98474c-42f9\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dedd84dc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17168,"size_decoded":5225,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17168), with no line terminators","md5":"7af9cc2f5d8d753ceb3d6da1435e4922","sha1":"0a9c4bfb1954eb6cf410f935d37dab78573a1f17","sha256":"3b786924168e2f22a83ffd4520a0c8cf9d2b9dd012345147f7ba7fc70642db21","sha512":"98145d3d42cbf63e44ffe2d0db80c3c01d8da86bb559d6b9f0b4b3551d3af1824dd19934dde8b8c7032e9bcb6ff6cb9e34703c9da408c993ddd1978b4c257ac2","ssdeep":"192:t2sWX/Cg2HNsaEzhoFbT1UVIRHI+lt1xDY0zfHQEO:t2sWvCg2OaEu1BK+l60HQD","tlshash":"827256fad54d58bc3c3611c4ab683701314a4c86d89f94134c05fea637dea2873a6bee","first_seen":"2026-09-02T20:25:56.490857Z","last_seen":"2026-09-02T20:26:21.392974Z","times_seen":2,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Eafc135f4.78bdda4a.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.962Z","timestamp":1788380704962,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7Eafc135f4.78bdda4a.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sf5noQ%2Bkvvh%2BwBHMg113T5SFlKUh4cseP%2F7FtqKj9NXBllVdV%2FGPYsXc4niEIZgoWKnJ%2B6Et%2FJPy5CW0CE5A45KaOPDrTaof%2BDqtsiGn%2BRB8fxd8zqdNBKPMzfQ%3D\"}]}\r\netag: W/\"6a98474c-236cc\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee0861c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":145100,"size_decoded":28618,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64850), with no line terminators","md5":"f4f86ae41dd0d70d1bbe918658eb6bb7","sha1":"3be956147c1e68a0dbc61ebdb2ec9138d80a7cef","sha256":"b332a73cef145f5d7953ee7a828570932aab71f63baa8b4d8a5f4aa90ef3aa78","sha512":"ff285a5e68a27eb6d0ac3130ff8e5dbae4815eb4342fea52315510a67f756384c078571dbf8625ad0d57095f9a23ad66710ce12d296d925366589c8c41f46369","ssdeep":"1536:IMqGwoqkICA98oKovgXihUPIjvemPBA7odTVG/fhPG7nqBcc/UWdqczldolAFGUY:kb7EwB9t1Wdqc8lUGZD","tlshash":"ebe3db06b1e7553d0a9eb236240d3804b0363e86a049d19ebbf4c9ed95ecd582f3be5d","first_seen":"2026-08-16T15:23:55.920606Z","last_seen":"2026-09-02T20:26:21.39416Z","times_seen":5,"resource_available":true,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":282,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/css/app%7E02939381.3bd38359.css","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.001Z","timestamp":1788380705001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /css/app%7E02939381.3bd38359.css HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cjofSbplgasCpCZJQNkavH9GYw2E2Tfs%2Bncipmk%2F3Lp6zbgRETZW3vEGLqijuqrApiWSAOYoA04h0nkb%2FXF0dH2eQLKy7KsIO35R3BUO43AyRNPJi1dcIczLlWc%3D\"}]}\r\netag: W/\"6a98474c-1f9\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: HIT\r\nage: 27\r\npriority: u=0,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee4884c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":505,"size_decoded":900,"mime_type":"text/css","magic":"ASCII text, with very long lines (505), with no line terminators","md5":"9d844e733623e31c8c783746117ee3be","sha1":"b364b84bf543e233d639ce3688fc9035c505e7e6","sha256":"303a9e60aaa32694b86663c5f714cdc6afa31d3c639bd213045bbf8fc0ebaf63","sha512":"7d2ab32812c3bfefc382e82cfaa66c1f2aa9d2fb30dd5c116759b397f275c35d70b601974a8cf95f209494bfc56e0c17f939f06590297803a274e68549c4153e","ssdeep":"","tlshash":"acf01208a8f81305c416d744ded897ac4779e38755764cdf338d19478b02aad319caa3","first_seen":"2026-02-08T21:15:07.932925Z","last_seen":"2026-09-02T20:26:21.395111Z","times_seen":84,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-02T20:25:04.541Z","timestamp":1788380704541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: private, no-store, no-cache, must-revalidate\r\nx-cache: HIT\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ffRa1ugcUqWP9Q%2BqtEgtCbpjr7WXscyplm3VILrIrU5Z%2F93JMLmPpsgSvH1kZE8hoYavTn15BLjjCIKLLC3Q3iUhARl6SeNHlif0E5n7mqLU65J1rYUoq2QmHCY%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deb8f96c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Material Design Lite","description":"Material Design Lite is a library of components for web developers.","website":"https://getmdl.io","common_platform_enumeration":"","icon":"Material Design Lite.png","categories":["UI frameworks"]},{"name":"Lodash","description":"Lodash is a JavaScript library which provides utility functions for common programming tasks using the functional programming paradigm.","website":"https://www.lodash.com","common_platform_enumeration":"cpe:2.3:a:lodash:lodash:*:*:*:*:*:*:*:*","icon":"Lodash.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":32734,"size_decoded":9273,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (22315)","md5":"849225aa2bfd0ad8cf009dbf2ae38d5a","sha1":"6544c3cfb155fea01204088fe3c337907af26fd9","sha256":"10d67531048ef275dac56daccdf5133fccf6079d41bf1b24d99fd1e250b8dd70","sha512":"f641bd2096f00d6d9859eddf8e56bc1f98e8ea3ac731c24c72c33ec5ee07cacad2e9813806ec9151002bfac17fcadc2f105c4ba96154176bddf6ae863fc7c780","ssdeep":"384:6xHatPON6WyVHCuNx1fpr38IyOetNpWw9m7y8yjy8yC0HRHJj9fXYyZGt72vdUwg:kyVHCkx1BrMtWw9mezGzC0HRHJG+QFr","tlshash":"9ce2ffa9ed09c1fd64322ddbeab6f158c4cab80f4c60d8a0a4fd46199b78fc44e65c47","first_seen":"2026-09-02T20:25:56.50583Z","last_seen":"2026-09-02T20:26:21.395813Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":7,"connect":17,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E0426f6d1.64a97e08.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.894Z","timestamp":1788380704894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E0426f6d1.64a97e08.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y005YteLdSY7HwC32TH4FofKhcczoXMjcwCLVWHdMiggj8HXSGwO9hL3K8KDwKBSfp8LjP3gTrQwb8f%2B35g8alGxDvbkLMEBM8ZvR5QMnUN4nK1Q12FdokcD970%3D\"}]}\r\netag: W/\"6a98474c-17dc2\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 26\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3ded9833c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97730,"size_decoded":20711,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64201), with no line terminators","md5":"908bd975416b31ec625b7b87c2a13d96","sha1":"5e445e611d89425c3996decee6576bca1914ee30","sha256":"6dda6feca49b2e2e18a7a66cb90a460156201bc817f551a8b6b43e17b414696f","sha512":"d1e6d197cd69b5a3fb62f6737cdfae322b51e53942745d7d9d14753e9d0c75d360d95e1f7efa972f4e3c90a6b0d65ef50d279f060e00ad499b5f76027772db50","ssdeep":"1536:DUvBjuf58G3pCRXRJel4gO/SZR8LwlTny8ulGn7HF4PCA:YPJoFJqGn7lu","tlshash":"05a3b70971e7a53c0b5ab235249b2408b0373a55b44d84daa7f4c6dac9b8d4c2f3bf6d","first_seen":"2026-08-16T15:23:55.890958Z","last_seen":"2026-09-02T20:26:21.396971Z","times_seen":5,"resource_available":true,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":337,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/css/npm.vue-loading-spinner%7E5dcd9a8f.52bdd3d2.css","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.027Z","timestamp":1788380705027,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /css/npm.vue-loading-spinner%7E5dcd9a8f.52bdd3d2.css HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O680%2B9KHib0HhlnD4qU57AlPOBRue%2Bh35tT9AwMnZB5VGS4WG951NPub9%2Bm9MTz3GNmdsxDtCBa5AP6wOuTsnyRryxS2OEDVbIyfYo4kiTP8zfEKXx4cy2t9NRQ%3D\"}]}\r\netag: W/\"6a98474c-1aee5\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=0,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee6899c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110309,"size_decoded":9020,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"10ed650121324dc879993a4f4824742c","sha1":"a2be670b97b5df6cd3694f1697c87dbc476c216e","sha256":"fb540354f2ba656a4c0ad47ca7441a90dd48383dc92b8f718e8752914ffd31a3","sha512":"89346fbdfb91899fbb300d1f046e784a5677e626faf49853c8b286fd10b7dd9bca4148c09d29a64b6fd4190e2aa7583d2b33be06c7afa45a6144eef8be0eee79","ssdeep":"3072:aAf+NlpnpwNlpnpbs2sZ1w1WfVf1Nd00ygqXfpLM:aAfRs2sZ1w1WfVf1Nd00ygqXfpLM","tlshash":"79b39fbb994116c6d122af64c2cd2f704e29c25368600dce7ba5340a4b6bbef32f5757","first_seen":"2026-02-08T21:15:07.88206Z","last_seen":"2026-09-02T20:26:21.397707Z","times_seen":84,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:06.627Z","timestamp":1788380706627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/montserrat/v29/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nvmp.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35468\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 30 Aug 2026 12:46:05 GMT\r\nexpires: Mon, 30 Aug 2027 12:46:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 286741\r\nlast-modified: Wed, 06 Nov 2024 17:30:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35468,"size_decoded":36281,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35468, version 1.0","md5":"ea21cc6e4b393851204d1a3160ad6abc","sha1":"20afe60afe856f29c75f318348ed89d8b3efa8cc","sha256":"1fa9166e5c7342af403e851b0dc9cba7bfe829ccdc9bbef32ee24da7fe66215d","sha512":"711da977344bd58faefbc92290d5ab3c1c0b59b983e035058ee2da727ede37226ffa557f69d9c970dbe41e5d04a056617c1a45cdb0da55e7667e53a9d6189522","ssdeep":"768:K2FjueA7DX+N5j1BBG9VNPhns7UkjMhhlI2TfhvxKUP:lNuR7ivY9VzsLoHT13","tlshash":"c8f2f18304266164c61d44948f88fa8bf06e6cdc16573f9077e06edcbceb898c49eadd","first_seen":"2024-11-11T14:27:44.773723Z","last_seen":"2026-09-02T20:26:21.319677Z","times_seen":7952,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":3,"connect":34,"send":0,"wait":17,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459W1hyyTh89ZNpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:07.129Z","timestamp":1788380707129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/montserrat/v29/JTUSjIg1_i6t8kCHKm459W1hyyTh89ZNpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nvmp.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21500\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 28 Aug 2026 12:41:06 GMT\r\nexpires: Sat, 28 Aug 2027 12:41:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 459841\r\nlast-modified: Wed, 06 Nov 2024 17:30:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21500,"size_decoded":22313,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21500, version 1.0","md5":"a3fd0c427e31c0cadb48607ee8c7876b","sha1":"9c4d089ec8d829275aeba85fc69b82b6ea9acee8","sha256":"42903388b3eb583d6f076ad495f2d7ac4baef468d78523edfa20a475c61e85bc","sha512":"ef4c9f0e5d40e7d86875a5ebac56f514b0c6bc4a7ec573482f457ecbec975daadbeb7a64caba605e378c125ac20f0ab3ecbbad327b1f541ae68bf6b327427823","ssdeep":"384:ShUFQO5Rk/iKFhAabUtC7gKEbh3iefAOuOQxX7Bt7A:CUGO5ciWAabYC8ryYGXE","tlshash":"0fa2d188a3438a424ca761b49818d9d40f7967fdef8076772fe50e04d5a2d8553e9f2c","first_seen":"2024-12-04T16:27:13.476598Z","last_seen":"2026-09-02T20:26:21.398635Z","times_seen":261,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E205977d4.e3dcf3dd.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.911Z","timestamp":1788380704911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E205977d4.e3dcf3dd.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dFAEOBpxxwW5O7fkQTZsxEy79oTAZG%2FnzgtCs3BoCBWamonOKTwj%2BbAcyXvZ%2F5SoBgarMcatdXFR2IuCzrrRy6h4Ru%2FpugYtTDM000osbrUZBrl4p8Gvq6aP1uE%3D\"}]}\r\netag: W/\"6a98474c-15e15\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 26\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dedb83dc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89621,"size_decoded":28057,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65280)","md5":"3f252ab7fcaf2c4289949b1ca74a3225","sha1":"7c49984e4e37c06a0b0d0c7b77fc0a6da72aa440","sha256":"5ad26e8894acef1baadb5784ad08ca1a0689da4d8ae627e833576ee9f9729eb1","sha512":"c32047665a54a61e4366cf6db1540fbf2c1f3492d1d6efa1c304e6695569818fc189f62db2391e8034fc8ed9546f31a9493b970950dd76af3ce633d259bd27df","ssdeep":"1536:HGXXitHak7HltlfpDxZTZAJPDsrR6LpITE9OBOdFYRAODcmdqj:H28HRthl6L2TEyBMj","tlshash":"949307ce72c7b47547c771b9482f210ab276a8651889c00cf536c9c5aef8d8d61a7fb8","first_seen":"2026-02-08T21:15:07.772514Z","last_seen":"2026-09-02T20:26:21.399412Z","times_seen":84,"resource_available":true,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":331,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E3af8bccc.d266b9ed.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.923Z","timestamp":1788380704923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E3af8bccc.d266b9ed.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MEXowQHA3kyHxYsSCdceP433F7jxuSE2lAHxzUOSoGmGctAgy%2BESt3jo8MrgiI1rdWhTevqZsE4G2kANyb0iCq2EmNLMHlmEk7E4kpj5NxnEX1b96h%2F4m7inab4%3D\"}]}\r\netag: W/\"6a98474c-3581\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dedc845c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13697,"size_decoded":5642,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13697), with no line terminators","md5":"25a49261db0364dd3d60eedf556ba592","sha1":"d5792d57e994772b1de38f6aaaaeeb38666d56e6","sha256":"c84c200b625ff887db22a78354a3284d4dcf0ff4af71b29c374a0362949f9d70","sha512":"ad6bae75cb81ec31176a235acf66cc1bc2146519f4d384818c046cb2c8f90a3564b093a32a980d2001b6f856f7bda78834791d64acc1f070d9a8cb054eed80cb","ssdeep":"192:nRDFP5U/GiFPpNGdekNM3IeiNMyZHFPc6foYv5Ry6lP+dB5cbK4L75FhbYq+TJOZ:nht5Uuitp0dLNNmq1cMoqEG3NwQb","tlshash":"4a52b6c872a770ba97ee69ee80bf0042f2bf4c95740c4484e124e4657db135a61bbf1e","first_seen":"2026-02-08T21:15:07.891824Z","last_seen":"2026-09-02T20:26:21.40013Z","times_seen":84,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Eec8c427e.b5a86992.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.993Z","timestamp":1788380704993,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7Eec8c427e.b5a86992.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q7U0H5FMaUvhHupa%2Fmugxw3f6DWb9OeaSAIp9W9c4YQy1KThBvkLy4M3O2yavBlK5DILRZNEBex8094dlFiGN6puJl%2BeItIeATURtYsj89ijnzVqhCl2GhjrGig%3D\"}]}\r\netag: W/\"6a98474c-1251d\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee3880c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75037,"size_decoded":26367,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (48354)","md5":"052ae89af8a93c628ce0bbd606f8eaf8","sha1":"7cd897742ab6f766271cb6517895862f1182f31e","sha256":"c6f1fbdf97fd4699f865d7db0c20005f7dfba122d8b6e6ce9ebdb534813f1bea","sha512":"5fd2709811dbd02b62b31275ba80630da989e0526c3dabd7068af48fe7e580247ef46e0714d515acb9be554c8adad02c31223b862a9783b296886d18adf7867e","ssdeep":"1536:Klp3s20F/2Hwfz16rTpVog4Jxgo+F82zMAIm6r:CLaaFF82zMAx6r","tlshash":"517319c8b384763517db51b2817f110bb3316184780b8068b63adae56d3c9ae726bf7d","first_seen":"2026-09-02T20:25:56.514743Z","last_seen":"2026-09-02T20:26:21.400842Z","times_seen":2,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":262,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/moment%7E8eeb4602.907375be.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.043Z","timestamp":1788380705043,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /moment%7E8eeb4602.907375be.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LPeL%2F7tkmpBlw0u5PL9jQH%2Fkm5eM61D70OoUWWJQGZxekvDOJ7pRAEsoV4RtQXFSRycBGjtD7ZhcDOeHwCpQh5kWknY%2BU4T7M5BV9AI%2BEnTj2lj%2Ftxe6cgq6mhQ%3D\"}]}\r\netag: W/\"6a98474c-3f97\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee88a6c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16279,"size_decoded":6117,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1904)","md5":"23d174638ca853b532e2f0cc9f9ef013","sha1":"21d144dae18f6ac579e87857938d7ed7acceae49","sha256":"689d5799cb66bff0d6bb11e5c6cc4297e50930cf11ff94df818e4d5b7443b3cd","sha512":"bd6c8fd24b29e8763f9d77d44c487ddd0e90590a163e76605d067ff3df39550a0dcc4c7e615367c2006762bdcd61a69c3a1909d2db058fbe99760c271b7180cc","ssdeep":"384:hGsMS3ZQtYdcvlFoFtOOq19FsfSkUgKDKDWwCCKcB7ROe:3MS6tYdcvleFtxu96fS7RCke","tlshash":"7872d58f280fab969b09010bd42e3a499c0d1f5574498ce197e1f16cbbb4d6cd272ebc","first_seen":"2026-02-08T21:15:07.723409Z","last_seen":"2026-09-02T20:26:21.402041Z","times_seen":84,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.zrender%7Ef538a826.ec7c8169.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.089Z","timestamp":1788380705089,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /npm.zrender%7Ef538a826.ec7c8169.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gS18RbqvC5GS%2BUIUMId%2FEtaChX1EafW2p3DCWyHqMZVAtWfZWgGd6MZNfHfJpt6Z06xQsD9Lr2Rggng5HwvIoF5%2Fyul%2BJxMx3WMXRiPeJc%2F9IJWTJTeOIfN2Ojw%3D\"}]}\r\netag: W/\"6a96c513-be3e\"\r\nlast-modified: Tue, 01 Sep 2026 12:29:07 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: HIT\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deec8d1c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48702,"size_decoded":19509,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48698), with no line terminators","md5":"052a6e7b0dd1c725011a682884cf1833","sha1":"139e85ff79341a4f95f6a201a8bdae8cab0ecbf6","sha256":"9ac3a234dc200b7636743c9a44608f3ae765e0e187ec231670c1846c9cd84e7a","sha512":"e0da4796b10aa97bfaa358b2a15e766a458794f0882ae8f9e4295b8c427774ea31e832f6b365a6674288dc4d37d909e1ddf8fdba0f0b5696441f97b45ce8c8da","ssdeep":"768:SDTcKPDQ4XBScr1JT6CELTMtjPNnpoDdsHqjuZykk4krqQJ+XNMjObU:gPE4xS1fLgNTKjeykk4fQJ++MU","tlshash":"1123f8d832817025529669b6402f640bf136b405740e8d95f229f5cbbcb88ee93bbf7d","first_seen":"2026-02-08T21:15:07.954195Z","last_seen":"2026-09-02T20:26:21.402828Z","times_seen":84,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/runtime.7fddb192.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.093Z","timestamp":1788380705093,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /runtime.7fddb192.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=faJ%2FzQkOk9SL0pzeaC%2Bm4KRRiDLJavOlsiyUcZQc174GcGG2tPDrL41cd%2BjD4ycnKAi9rgztEozQ9m1YTy%2BJfY%2BZtQRn8vTFOM1LlTDgTyjELGE12UzoiT0TC%2FU%3D\"}]}\r\netag: W/\"6a96c513-13fc\"\r\nlast-modified: Tue, 01 Sep 2026 12:29:07 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deed8d5c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5116,"size_decoded":2902,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5116), with no line terminators","md5":"40e7e567d3093cacc1aac3fd690d6e69","sha1":"3a4c67e7972f8aea04b5b29734f01a64f1d468ad","sha256":"b99522b82218618e605deb5af1295bdff08d48f192a9418c0f8d471fab397d74","sha512":"238e8e204cf03e7bae313c11b0c6c8a07e791c4526f943c7305eaa2abf579a7018bc5fbba3acf4f36a3c5a55cedd51d4278a768eb5e3166e3e633893c16d6fa9","ssdeep":"96:DH5TL+7WKv6PVRFNxeE1BGULSv7gdD+jsScBo1XkL3X6nZ4:0ZvoSv7gN+jTRU76nZ4","tlshash":"cdb16ff473a4f5388296bc23103ff36161a71a732c3a95b4820de4a4bf649c4539ba0e","first_seen":"2026-08-16T15:23:56.100411Z","last_seen":"2026-09-02T20:26:21.403576Z","times_seen":5,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.instantsearch.js%7Ef94c76f1.abab70c5.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.069Z","timestamp":1788380705069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /npm.instantsearch.js%7Ef94c76f1.abab70c5.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ug4lk6PeHfdYIRuxY4fMaRplMcWEMuiDQ9RFbKlYUM%2BleurQDihQ6J807cJ0N283u7PibT9NTH%2B751q8KUJ5WbCvluT1h6btCPvairT6PJq%2FqH3c6kEg5V%2FgV4%3D\"}]}\r\netag: W/\"6a98474c-8177\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deeb8bdc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33143,"size_decoded":9520,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (33143), with no line terminators","md5":"eba74a29e72fae897436606d2415bb9e","sha1":"db720ed59a3135427125fe3f88eb13f6c43844d6","sha256":"31b1c1506d5fc90f9675f9388fb7a43bcd2a39a74613145ae4c06cb61645d108","sha512":"5139afc9ccf1c280637d9abc78fe1e52f6d9de0d4525441f81c84128ae1a359a8e7089462ad55b494ba5df6326a03118bccab60679c88f7e8cc33fe6e96196d1","ssdeep":"384:6/KRAEQfu96S5lN293BlhohoLarZZgdQ6VGk5o+Kver7B6IVRovsx:607YalN2931o+Ov3Aj5ort2Dx","tlshash":"ece2b7cc76a5f5a607f761b1443f6207f2312564741ce000ab29d8d2ac69c9f927be3e","first_seen":"2026-02-08T21:15:07.697257Z","last_seen":"2026-09-02T20:26:21.404336Z","times_seen":84,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E51e805b3.91a8ee04.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.929Z","timestamp":1788380704929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E51e805b3.91a8ee04.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aZGCAoSMUsORy4GrgUNBgDulglKUOTZYAgbQrOoBLhMaEGetH%2FsDghdnegxG1TaGJvcZjw96TeWymsJXT3H43%2BszeADlV7krHI7YE730SjZixSoJv%2FVE28VFmHA%3D\"}]}\r\netag: W/\"6a98474c-304b\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 26\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dedc848c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12363,"size_decoded":5543,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12363), with no line terminators","md5":"3d454d4552001c90b62f290738aab591","sha1":"376c9e34f7e7037b865d6b960b0aed69434d7b10","sha256":"de47269c3d74a1c301c4323011dc398784341079faf4ad8e6957deaa85af1d3b","sha512":"fc0a0ee6525469764aa3e670d1aee596de103a2b8337a99ccbdc91eea0b2500d19783c5514e65e645b1391a56a89999b6a2b03d47f45badfc624f39d85dc6787","ssdeep":"192:tN0uFb2zsr1YWCC9ygCDdl52ovCeDUK83j2RIR9lTyq03PP4d+lyzDBT1llbR/t6:tZFosHEDdl52o6eDf8Pr5r/tfYiWR","tlshash":"3a42d99132b2b0abc7df10eaa8e50502b37515d8684a060cf4b96c8b3c7195617fbf3a","first_seen":"2026-02-08T21:15:07.90155Z","last_seen":"2026-09-02T20:26:21.405096Z","times_seen":84,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E53ca99a6.980c40da.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.934Z","timestamp":1788380704934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E53ca99a6.980c40da.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2nN5ux%2FhtpxWgkMZaP0gpa4KArvfteR08l7P6gjS4hNb0EASlRyb%2F6CledYP7Ipu%2BGb9HZKMgJhXg1Xvs3TZSEMUp7QixMigY5Sr7Cl9xxoFCX7plRYXCBBc6YA%3D\"}]}\r\netag: W/\"6a98474c-15baa\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dedd84bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89002,"size_decoded":20065,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63255), with no line terminators","md5":"464c513640ef1b22b1b59b145bfba97a","sha1":"dc32fa636a2ae5a5e9ba1f1d97e7c7a07478c415","sha256":"18ee29a118b5a23ac4a534810e9c0ae5c9ff358dc6a63e7e78a565e7b4217a77","sha512":"62fd4be17d946f5e78058202b37bc0fceb06030d42dc2a0f9e637259f087a75b5c3ade6e1e5c0026bbd3db8d383a8829aa36fc75641b6eeafce7c623dd90bab2","ssdeep":"1536:DjJEygXmI87Ak9rY7R1VuEDikCvssd4iqNkVtY31Sq6z:ARuSMvssdB","tlshash":"0993ea0e71fb943c166eb329245a2908703639667908c5da77f0cad94dac9481f3ff6e","first_seen":"2026-03-12T16:27:49.87157Z","last_seen":"2026-09-02T20:26:21.405885Z","times_seen":8,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":266,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E7e769104.39ad4441.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.948Z","timestamp":1788380704948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E7e769104.39ad4441.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mRNWjtl53Hts8w53V8D332bHk6lelX0wT%2BEa2UxUkrWckDQf6in2UkioRU18VmpCWdbpyOe7dBzPubtAtvkvo5BIH4ibi0xjzRaKxMFozhfE8QV%2BRPpLbQ5fSSE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\npriority: u=1,i=?0\r\nage: 27\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a98474c-68\"\r\ncf-ray: a34f3dede855c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104,"size_decoded":803,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"a3f4997a5b2a06bd37752727ef817499","sha1":"758b7d4a144dd9b5610d60d09facb283f98941b8","sha256":"4ced0a9e1e87a81db8720aa64b886a23d03519eaebd201c9e18747834fc3a681","sha512":"0877df51c635226186dd00c387c1219f58d194bc08e14882f594e29719eff33ca6b0d2d39a933624fa5e01bd0c34d09c68085f8e876f7e6afe58bcea4c9ecf15","ssdeep":"","tlshash":"90b092be2005a81504bee198265333e8184a63042e170cb81a2840b06ab4a87441168a","first_seen":"2026-02-08T21:15:07.73125Z","last_seen":"2026-09-02T20:26:21.406638Z","times_seen":84,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/css/app%7Eec8c427e.5c04fe19.css","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.023Z","timestamp":1788380705023,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /css/app%7Eec8c427e.5c04fe19.css HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eIsnRVDZ2YW8OsREiopJ0YCCMjW3vHKToLVzwojXMS0jC8G3raImK9fvqPlYMDzGNLq7WMjPHu3bVTRdiMJmyKv9EnIjl6XaNifuxgS63VrUxtB4vyOolx3aScE%3D\"}]}\r\netag: W/\"6a98474c-3467\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: HIT\r\nage: 27\r\npriority: u=0,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee6895c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13415,"size_decoded":4631,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13405), with no line terminators","md5":"ddd3cf8d7e89715ff95f5782f89bd297","sha1":"b82a6d1d8dc98947e408c9b919921b6429197357","sha256":"845defec2c9a8f3171abc860961af52ff9b98ef4d8a549b52757ef7173af4001","sha512":"cdafe09f86132b3f844a9b9208e6bb7cdfb35cfd72c5b6393ae894fae3d8c859b0b0b217ff759e8f806762bab3115794f37c6064b01f2c10e7691a893e305aec","ssdeep":"192:qrJGIZJCmN2GYgwbjOxo5JCmN2GYgwbjOxoMTFT0ryGvUmN2GYgwbjOxohHkvJ:qkIZ0mNTYPew0mNTYPebqvUmNTYPeQI","tlshash":"d552a6b9425abdd61337de0189426a843dd635a7677843acfdd44334e0ee2118fe46ac","first_seen":"2026-02-08T21:15:07.787919Z","last_seen":"2026-09-02T20:26:21.40746Z","times_seen":84,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.babel-polyfill%7E5d5f8003.3e8a6215.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.049Z","timestamp":1788380705049,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /npm.babel-polyfill%7E5d5f8003.3e8a6215.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bb4iARa4AhZRRoEjAR8AFEBPmbisshd1wgsoiAHHNo%2FyD%2F58p7ZJzJq5aPik3Z4Gsa73GexdUjgcMGN%2BHqnVNOsNxgBs6wcevDXLXEPIqU1w257l9EvdARPeki4%3D\"}]}\r\netag: W/\"6a98474c-17132\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee88adc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94514,"size_decoded":34640,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65497), with no line terminators","md5":"6cfe570cbf8fddfcea13258d06201a8c","sha1":"15f5205c1d65b975472cb3ad862f905ef6265500","sha256":"1a73b44f2153e28ba711221fc50d631da412897f24f2b296dcb5f43f74c0af46","sha512":"411d39859fc68b79771aacdd4074929d5125f9e3239571d282ed1c9762df4dc034b79b79b11a3aacf8e909659875072479a91128e091f3de4b875085143a677e","ssdeep":"1536:vkPaqSXtlTGOR8J8q6SJUpST1VzDMEches6ElwjRY:cPavJJSXzDseQlEW","tlshash":"b593848cf6c2b08816a37078512fb40bf2b71e54784f8991f629d2e4ad7a60f6177e1d","first_seen":"2026-02-08T21:15:07.830564Z","last_seen":"2026-09-02T20:26:21.408309Z","times_seen":84,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E07e1c6e1.1dab38fc.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.903Z","timestamp":1788380704903,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E07e1c6e1.1dab38fc.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d4ikIx5yMqLJorletALIxUBGY8W2bV4CU4BLmiUqTOt02x73ZBlkYbVogMZ8M9MZcdaVK4PlYf%2F2BeK7nSUqHI4V2qXxu7JoEKde1zzBcZoREAlq9MAPw6FtTv0%3D\"}]}\r\netag: W/\"6a98474c-94f6\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deda837c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38134,"size_decoded":12543,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34282)","md5":"ecd903b7652bd8aad4a6c71ab9ffc3fd","sha1":"026c207ad6761ed0e60a9bdf1313a5961b439762","sha256":"233f9b2488e57d9aac384ca1df42932ee5412fd754d415f6836bd62297013dfc","sha512":"7af86928e7db0dd6f36bd22fd15c73a26d32d980cd688a11ef8661967cc6a304d9c0c3066f31d92f822cc9f86a95e5a55c1481bad3dabd6726562c5c8d0320f3","ssdeep":"768:U4FFRZQMr+NO/EezF8kAnFJYpxlVHhrimzoX0TDcSKhjWdsq:U4vRtr+NO/EezRAnFmVHhrimzVDcSKhU","tlshash":"ce03b59d729174b802ff24ad805f030eb2366466764f40d4b261eef56e787b92226f3d","first_seen":"2026-02-08T21:15:07.920009Z","last_seen":"2026-09-02T20:26:21.409316Z","times_seen":84,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":301,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Ecf55716b.ae441771.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.976Z","timestamp":1788380704976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7Ecf55716b.ae441771.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GNhURexPkMLEy6FNfCWedjcbAzBa0cd05u0FOp0D9zyhyUWgcicoNJo0zZZkrUATMq5TCuwGRk4hK0lXyqS2QNajp7CqosultGyqcxgiom2JUiV3DH1knAASnfU%3D\"}]}\r\netag: W/\"6a96c513-154d1\"\r\nlast-modified: Tue, 01 Sep 2026 12:29:07 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: HIT\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee186cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87249,"size_decoded":25604,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59237)","md5":"9aa43f95c8adf4a3713556a7e1c0ce2e","sha1":"0cbf6526825fa69222a84c377667442a30618bbe","sha256":"571620e7610f4c1e5bfbd6dc3cbf2fe2694e86d033c3fa4de7c556589da8d10c","sha512":"1e28bff695baabb19f4dd6f1245a7def7c5249bf30893da0d2cf3c04e74bbe222d790bfa0451d9bc089a3ca1be9223b5351dde9d0e6d715e86afde77752b8d6e","ssdeep":"1536:ujb4/KmdXTe0mQnWZpepSrr9zcjLOcz+hWQpj/60D7i2McVE:pqZpzPf60D7i2Mc6","tlshash":"8e83f98c7693b12e0f972060a07f2406b23a5d5da41a9598f2b9d4ea7c2cd4c917ff3d","first_seen":"2026-02-08T21:15:07.903624Z","last_seen":"2026-09-02T20:26:21.410515Z","times_seen":84,"resource_available":true,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":270,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/css/vuetify%7E94969a38.4fe6f6c7.css","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.033Z","timestamp":1788380705033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /css/vuetify%7E94969a38.4fe6f6c7.css HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F3qe9Tvgaj4G%2B7SndOFMISYuJETWsvF4Xo860mVOzRjzq8xLk5dIE6npXswLNzndsNoXEIQGtvdzKk0mC%2FyN0cR9ydcre0G3PwrgUkkXW9qMQpcghjdDJR1jwr8%3D\"}]}\r\netag: W/\"6a98474c-440cc\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=0,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee789fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":278732,"size_decoded":23968,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (50867)","md5":"793dae5b2a5b8e9d5716307e9d894fa6","sha1":"8a538c83b266a0add762dddef1da48ca8ddc4a54","sha256":"0f915432c0612b677f5d410eb50bba8c88bf70f0fc8f4fdb3b5db64879043804","sha512":"79eabb3a374b820d916758c4375b769a87b6f038407316e0c92ba00d712f2a5b7366be146a0bd4cf4cf705b5025fba558667ade830d5e9dd7798e9fcd0caf60f","ssdeep":"3072:Panb+ImwUe3h16SAS+ozC8WQNa5Lv2gLjK8:HIl3h16SAS+ozqQNa5Lv2gLjK8","tlshash":"0d54b6e3f6d6008a8ab3553f8051f7fce93f569d4b81b9765606bb3142843df2b8211a","first_seen":"2026-02-08T21:15:07.819639Z","last_seen":"2026-09-02T20:26:21.411588Z","times_seen":84,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":202,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Ed8a25cd3.fac1b975.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.981Z","timestamp":1788380704981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7Ed8a25cd3.fac1b975.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VkcaWWDpYiMUlMUlJCvSfn6US7VhLBCP%2BHeAKd6cctwE2oOoW5w%2F%2BG8Wwe57MkZHBGdxu0kR0ucywB7QTiIEo9wWVe5UpK67cjfueZolAMknaTVG1A3%2BcmTSyJA%3D\"}]}\r\netag: W/\"6a98474c-9972\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee2871c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39282,"size_decoded":10710,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (39276), with no line terminators","md5":"ce4e2b1929f66f7182f34a064d5be545","sha1":"bdb43c163b9524a504548a32f32b281ec603a92e","sha256":"f50bdbc4a4461cb3dcc98a4e6a874a43601e56fc4a0943cd2346e17da35d14c1","sha512":"a9ab1a07c9ea3d9a94773d755b446a6fe6a25486a1de228739b2d3d4215387fa737f9024bfc0b9cf3972dd145264bc48c25d30009aadf70dadbe756a95f630cb","ssdeep":"768:fkXQu4HqCyeHiTrZohryPfv+gMX5BRSwPzfvI//StA2Zp9BkY4H2NBjP:vineBBR3UgP","tlshash":"2303b6aeb1e6b2a019a200d2c83f1545f2389ff83449909df27ddeca6c64514f277bb5","first_seen":"2026-02-08T21:15:07.757999Z","last_seen":"2026-09-02T20:26:21.412462Z","times_seen":84,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/css/app%7E205977d4.9a7e241a.css","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.004Z","timestamp":1788380705004,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /css/app%7E205977d4.9a7e241a.css HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X052DHxz9HAp1dlKqLGKCsU1J7eKiXJBhan7z%2BAl6UjtJUW7iijHYqLfQu7KObGaDUyEMhFQYrGw4jLUqxBVv%2FQdyM6oK%2FLByxxjSsInIC%2FGyGeSQp8qZ46dTtI%3D\"}]}\r\netag: W/\"6a98474c-2a6c\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=0,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee4888c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10860,"size_decoded":3377,"mime_type":"text/css","magic":"ASCII text, with very long lines (10860), with no line terminators","md5":"45a0cb4f89e476847c72cc0757903f51","sha1":"70ca2a8bfa359b5084975ab140b35f0854a543b7","sha256":"bcf6010f047963e33571b1cda66a4b349d4a124d4328bce841a032f7e87998dc","sha512":"ade54d0f9492c5bb28327256e1a0921b865186c4cb0f124e8621a15ee9fcf874adad012c80b14177b8fb315e5cb84856d503698472decf4d481c8b6c47ab3c4d","ssdeep":"192:B6cjEariWEAUHT+HteUrNwNmli87DR5u9D9gxST0CaM/ne:IztZ+EUrt","tlshash":"112265bdb645016d901bca0269f1ea8456aeed4279330bcff1efe855cb473c529223c2","first_seen":"2026-02-08T21:15:07.805773Z","last_seen":"2026-09-02T20:26:21.413314Z","times_seen":84,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/moment%7Ee258e298.8636d2ff.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.047Z","timestamp":1788380705047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /moment%7Ee258e298.8636d2ff.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HbuKb55w3sc81IIo0zKmnwHzFXZwg4OGqR9NFZt5Yl80XJrqZfxuGaR%2BKZvaBFxySq0wJkp0CaQGhL%2Bna0%2FR73UIMyq68J4E33pIDuha0Wf3OtiNgHNPCQ%2BaVO8%3D\"}]}\r\netag: W/\"6a98474c-1b610\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee88acc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112144,"size_decoded":30517,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2367)","md5":"1d5ad51a1c73127c7132bf96ce2250ea","sha1":"5ed12067ba932c08dd4d1ec5bfec2e4a6a180969","sha256":"6309565a293735cfdaa91268fd7abc1ac9da3ff46dbde7154a1de38763982946","sha512":"89fdd431009b678f0350fe31826b7276db54a32b2148b3ea4e25a88a98769a45f95af5e996024249be5052ec36559ba5f105353446c8db1a4e94790b6044ef57","ssdeep":"3072:nEumZprIGnhurxxUzy9ZSQcKKn4TdOQOSR:nEumZprInUzyyQqn4TdOQOSR","tlshash":"3db318ca144fff53db491596442f3f79ac2c1b76544ec8229aa5e186f874cac83723b8","first_seen":"2026-02-08T21:15:07.735602Z","last_seen":"2026-09-02T20:26:21.41413Z","times_seen":84,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/vuetify%7E793fb972.e022b373.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.099Z","timestamp":1788380705099,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /vuetify%7E793fb972.e022b373.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3v4nL93lK5L9JlE2ZQJAsxxFG69vNTXgtk32y4taW26lX%2B05lAlRqjhBIevYB5mEJPURLf9%2FYqL7Yc%2FVoD1KyUfHVRDPUEWjKC8M2j85hvvYJPtZqAg0uA46TPI%3D\"}]}\r\netag: W/\"6a98474c-1cc72\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deed8dcc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117874,"size_decoded":32860,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"844f06f6933e1fe44c1d50d0ac517110","sha1":"c6f729cf0884a2316d97fc2a5ed0e7cf5df03e6b","sha256":"aa8ddd8409fdd4f73a913d5a872490fa22370b8930f3dcfc5579da676dda7efd","sha512":"e95b5aaed08359659afe457b654a4b3f4f028ead93cc8beac0497642b1bd8613ae5d4c54e116535d6588fadfe629e47944f3bd7e7332685033a360a1d77d8739","ssdeep":"1536:9wkez4+PXdcPG/78Nf8zlJG78gF6SzLDvOmNjco:9wketSg8p8zlgFFTvPjco","tlshash":"59b3c749b2c7f41507a7b2e9446f120af36a1498b41a84ccf9b5e4eaad54e4c103ffbd","first_seen":"2026-02-08T21:15:07.833538Z","last_seen":"2026-09-02T20:26:21.414913Z","times_seen":84,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E6ff199a4.274a9b78.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.941Z","timestamp":1788380704941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E6ff199a4.274a9b78.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QaciIbNvGjYxgF%2BTZaxQnNLStPnK2LdtuTeKThRcRxWAjHgjK3nU1MtoX9UOJyTAHUFIl%2FxVP7NLE2IsGv2%2BjBHowKh2tlD5tpZGYdfibsProIh89ldY4ZEIbIw%3D\"}]}\r\netag: W/\"6a98474c-5b34\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dede851c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23348,"size_decoded":7662,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23348), with no line terminators","md5":"3bb890a2009eb2544074c6f271591473","sha1":"fa6666474480f03696881ae69ebab1262d3786cc","sha256":"f6b3014d5eac49cfdbbe2f35e5c5f289ae5399da9e7ee0881799de452e8c056a","sha512":"0679fb420b5bd43d095eca18520d4ffe7804baeadd23b3f598b2877f50713c8a2d1c15b12c6127a2d3cc46a7b05372d7e43353379c8550a2bf8f7f5563754891","ssdeep":"192:pNeJRyDLb9tjD5nwIXa1oQmfOCHTHwSr6sSoZ9nSuTT7kimZNy15iXhNktvVvi9d:iCptP5n1zQmRwSrxBZqGb/U3vJ","tlshash":"83a296eef196b0935393a9fb102f224b723726a47419501cba78e8f1ac6560d5277f3c","first_seen":"2026-02-08T21:15:07.804214Z","last_seen":"2026-09-02T20:26:21.415721Z","times_seen":84,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E748942c6.6913cb42.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.945Z","timestamp":1788380704945,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E748942c6.6913cb42.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NETIHxBVGPCxtsPdzFXmfJq58s%2BcLEq5F5%2FSnrYSOhcKrEf4jSha7%2F0mDb5F72lFbF6mAwcqWzOWr1yPo2XRn%2FElAh1hDn%2BWwe3WIRKGT85zn%2FPRkKB5fwc1vDg%3D\"}]}\r\netag: W/\"6a96c513-7b84\"\r\nlast-modified: Tue, 01 Sep 2026 12:29:07 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: HIT\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dede853c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31620,"size_decoded":11368,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31620), with no line terminators","md5":"036b221b71ac389349ece605582250a4","sha1":"0fd6e7a5bc178fc736328f3a6d3eb2e98d053fd5","sha256":"407deff586cad2b3258fa075d7c920b1b510b4136ba123afbddc410dfde4289c","sha512":"a47221fac357d6ba3640dfa0a0d16fb3b46ac466b93545bf62ac4ca292c5c5055b6ca0e65154aff0d5b6c6db064bed6a07f82da3f4d0cd40ea91641fac40a700","ssdeep":"768:f5N/2I5STgC4RUCxDgLVDGGi3Qzy71Opjbh8RrX9TWZoXCSrC4:f5N/2I5STS10LVDTi91OpjbhgrX9TWg/","tlshash":"10e2b68cb192f0e507aba2f5803f510ff276a425614fe442d255e5d82c78dbe6237e2e","first_seen":"2026-02-08T21:15:07.952175Z","last_seen":"2026-09-02T20:26:21.416545Z","times_seen":84,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Ed2305125.399f17b1.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.978Z","timestamp":1788380704978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7Ed2305125.399f17b1.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WBNPTCegm8E2%2BQKSWR6WUDsUiP1s4nniwn6VoZbPzH%2FkrhZp9jkJAV14g%2FtWgi3bkmz0omAPaDc6w3gLaqaoNJc%2B6i%2FZXg6jmzrW9tjnefyqWRP9pjHHOWsJ0V0%3D\"}]}\r\netag: W/\"6a98474c-1034a\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee186ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66378,"size_decoded":25722,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65317)","md5":"907920f507974526426a596012489c34","sha1":"e5be495bbcc5264b57f82bb83406efb5b26098cc","sha256":"50def982d66febdbc4dfbfcd544ad953a0a4b92d0151d72e9e8a423332e5f4cd","sha512":"3a41b8a74c55ab90ed645f19b9fd2e13fecb997f7af2b43a6761c6ec9b2d1c6983e2bd88950aea92aa24b99dcf7755ac7df329a564a2237495745aeaa668a00c","ssdeep":"768:hqmU2hXjRmJvPm6rSn1paSJXL44tnerKN8tTOaK9yxWdL+UfcUap9eZzb57PNhsu:hBUKX8pJenjPLOrQkJIf9aPeZzl7/N","tlshash":"2853d6dd7396b57017ab24f5517f440bf2367918a80ac0a0f216e8d93cb888ea167f7d","first_seen":"2026-02-08T21:15:07.732652Z","last_seen":"2026-09-02T20:26:21.417519Z","times_seen":84,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":268,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/css/app%7E8f033120.05281584.css","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.015Z","timestamp":1788380705015,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /css/app%7E8f033120.05281584.css HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pTbTAd17l0bHGpv7k5MyVxzJN8TDNZJY4AMPA1I2qgQQqKRYLoqY5ALG%2F2Ns56dgtKxds0eW1vNl6F6bfLi8Zapn916ZmcwTVl4XUc2GjfO0%2FtEAJEbdYyFxngk%3D\"}]}\r\netag: W/\"6a98474c-266\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=0,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee5890c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":614,"size_decoded":1054,"mime_type":"text/css","magic":"ASCII text, with very long lines (614), with no line terminators","md5":"d7a415020265cdc2e6479892bc365c07","sha1":"b011e5cdf542460525bed7587aedd5e22e1c10c1","sha256":"2336e312b49d496c2498a136188e591252510b8060657fd655bf666ebecac666","sha512":"8ece647fdb2f2c5b781861e664fa3140d4aff0743117b41fed38daa289bedc93c709d4765daebff0438227403de6fb3c410e2e2a14f2ddeb6d9b9a2fb28522a5","ssdeep":"","tlshash":"cdf02db6fa8c017e2437ea6408f2f12e4a1ef556ab520fbda051969c4f560d3251399c","first_seen":"2026-09-02T20:25:56.540101Z","last_seen":"2026-09-02T20:26:21.418331Z","times_seen":2,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/broadcasting/platform/state","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:06.622Z","timestamp":1788380706622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /broadcasting/platform/state HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:08 GMT\r\ncontent-type: application/json\r\nserver-timing: cfExtPri\r\nexpires: Wed, 02 Sep 2026 20:25:07 GMT\r\nset-cookie: XSRF-TOKEN=Bsq02QFQlsxQz6bCsmWQgtzLX0mjK7b9vt_XJX73zT8; path=/; samesite=lax\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.4.33\r\ncache-control: private, no-store, no-cache, must-revalidate\r\nx-cache: BYPASS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cwd4QYMwD63WFlJ0krZfesTzFuZE2k9SuLtJeTm7l1rie0xD6FQkenrAoNcynI9FSSIv94MiTABjB8SjByDPf4OMuawE9QUsH7PPBkcSY1fMHE5NhntmeMNzPzE%3D\"}]}\r\ncf-ray: a34f3df86b67c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"Bsq02QFQlsxQz6bCsmWQgtzLX0mjK7b9vt_XJX73zT8","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=Bsq02QFQlsxQz6bCsmWQgtzLX0mjK7b9vt_XJX73zT8; path=/; samesite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":28,"size_decoded":849,"mime_type":"application/json","magic":"JSON text data","md5":"2680dae282f27288492250b978020629","sha1":"70e0d6f13fbae1d787bb834932f2dd63b2d1c676","sha256":"1c1d03c6d241ca20cee95b74b18f0385c363ba19aab5973170e431394b6e2fa4","sha512":"f55cbed804556ea0b7261a2cfb93ffd4ea42c3e7945d3a811b03841cad068ed32682432da38c2bec07787136e2502cde79f4d1f46f53b2397d5db21278f4ac33","ssdeep":"","tlshash":"e9800082c0832800c8030802ac8a0000eea80ea0a0ae03800eaa883088c8082ca20000","first_seen":"2026-02-08T21:15:07.780684Z","last_seen":"2026-09-02T20:26:21.419827Z","times_seen":83,"resource_available":false,"data":null}},"time_used":1448,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E2354c829.52b9cc2b.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.913Z","timestamp":1788380704913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E2354c829.52b9cc2b.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k%2Bn%2B4p4UQNUc5pKHw9bdVrfCqZtMhawy%2F7aYtqS9qo2b7aO13oPJIvfcIzbUAdz5p9z4NclF58iJBFWJuChA2KrF0VGvk%2FzVwfl4igvUyFT784hsyUv0T7f3YfA%3D\"}]}\r\netag: W/\"6a98474c-17c90\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 26\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dedb83ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97424,"size_decoded":22087,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64439), with no line terminators","md5":"e7efa6895bed12d33a0c88163c561c0d","sha1":"ea48c3e35815aeaf0dbc4f702cc4900503e59f39","sha256":"01443bd048bb8349b90fd60a3a818a65125a330b7ff14b49eb764a395a8fd471","sha512":"53eab5fa44fec42a8646dcebe00dc55d458de38a4b9ea5495dbc07211a31f01effcd58ee65ad0de3b9f62f86284c46c1cf6ee4e394e917b89c1c492231553330","ssdeep":"1536:p0NHbePp7QSsuXw9ADUbMGypMrbOe2OCu3DtR4E:E7IpDgaiMGyobOetR4E","tlshash":"a293d81a71e7a42d0a5f7236340e240471363997b449c1deb7f4c9e999ecd081b3bbae","first_seen":"2026-02-08T21:15:07.738726Z","last_seen":"2026-09-02T20:26:21.420745Z","times_seen":83,"resource_available":true,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":312,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Ecdf581c8.5a51a74a.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.975Z","timestamp":1788380704975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7Ecdf581c8.5a51a74a.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uO%2FZdLcu1YwOgQPNmJPuECcm5Vbp73UZtD5%2F5yqJk%2BkTdPLEjOARVmZfO73lxULA4dVcQCNAJ8fPYjvEPbJANrMedKEfUuI6yZ3g2dw%2FFhx%2Bx7wEd6a4M54n%2FZg%3D\"}]}\r\netag: W/\"6a96c513-48af\"\r\nlast-modified: Tue, 01 Sep 2026 12:29:07 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: HIT\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee186ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18607,"size_decoded":6804,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18389)","md5":"aadd7d6a7c4807f6e6415649c3454ce6","sha1":"4dc1a3134989babc39f87275ef70b4db7ddedcea","sha256":"ef7d2f5cfce69b9b5807c583e6f10af5e081ded13b97910adf54d2cfe2b67de4","sha512":"47ad377eb9526f372d924911115521113ea95fc4f97be017d38fe76cd737196efa2addb6d7a2a68d279dc98a2a7778e1509bedbdc40a456e2acd4a846c8c659d","ssdeep":"192:wqskMIvYKM2bjg8oklmYgDUFu1fQfA17QfwWxrkohl8S2JrGcSabJ20MIrCQpsLX:wq/YKM2XYGsZ0aohl8qWg/HIsdzxqZm","tlshash":"af8250cdb686b0261b977075906f250ef33b7a44340f84a0e621f9c67cb955e9223fb9","first_seen":"2026-02-08T21:15:07.826017Z","last_seen":"2026-09-02T20:26:21.421605Z","times_seen":84,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/css/app%7E0426f6d1.8ab7e2a1.css","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.002Z","timestamp":1788380705002,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /css/app%7E0426f6d1.8ab7e2a1.css HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zn6ZJvEER1YXFe0O%2BuricnvtFI325ViQVwGkEeGeeV7l3rRVwrd1RBi2d3kWFEte%2BL%2BWwISFnqoF%2BLaaGB03Pq5OMH2ZvB5mqHSafSG54BVmiprZtxV5FvpP3NU%3D\"}]}\r\netag: W/\"6a98474c-154\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: HIT\r\nage: 27\r\npriority: u=0,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee4886c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":340,"size_decoded":863,"mime_type":"text/css","magic":"ASCII text, with very long lines (340), with no line terminators","md5":"874006993dad2040cb740ceb7d6d4fe9","sha1":"9b860204e6be0126e417e734acef047ce8d03adf","sha256":"19eeaf956270be50cc6c0d83bcd44c80065cdce1b08915998135b50cead5bd05","sha512":"6fffb72ba05cfe3874fa9646e68e6b86e37dc99d1564f54f88f6fc6975560c89c32cb39a628310d541a3c4aebf01c9129e7e89edc4f31b0f4389647802ae57a8","ssdeep":"","tlshash":"b4e04f92faa823385972c3b54823711ed31af91ef8da036cf00085a45cc38966117764","first_seen":"2026-02-08T21:15:07.799705Z","last_seen":"2026-09-02T20:26:21.422532Z","times_seen":84,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.echarts%7E943f0697.3022c5a3.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.056Z","timestamp":1788380705056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /npm.echarts%7E943f0697.3022c5a3.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tnmd7Og%2F5DEw1H0Er9N%2FUO4lsRk0KfUrfEr6BJFGuiQqshAaeCIHzCNfSoKlfWCzM16t3NtajdhdOnS8xf44rk9w4r15i7Csev832SGkK6UmsD%2Fb7AkBarrsX9M%3D\"}]}\r\netag: W/\"6a98474c-7b41\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee98b2c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31553,"size_decoded":13424,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31553), with no line terminators","md5":"b76cf76bb130542f34eb52b5d137c997","sha1":"97b02ad2c050cba337723252f088ca066350b2be","sha256":"bb272cbf796a9374b5cb32b34b2ba34f8085fee0a8c8a2f6c16cf528c5c733f4","sha512":"78ab6bb409e84c5ab118cd864e0224f7148d65b04b984b2a7fd11bf3203189a0bca20bfc208b35478caa46622b6332f1679004ca29b3f2e87f92d8ad0fc1ca73","ssdeep":"768:p6rpbsg36p7duMycLrbf092R3GrJdOrFm:p6pnqp7duMXbhRgj","tlshash":"e4e2e4ae339c70a9d7a73672109f600b42761805550bd904be24d9c6bcbe99f627ff38","first_seen":"2026-02-08T21:15:07.905589Z","last_seen":"2026-09-02T20:26:21.423475Z","times_seen":84,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/vuetify%7Ef535d4d8.d250e8cd.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.109Z","timestamp":1788380705109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /vuetify%7Ef535d4d8.d250e8cd.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DsztChxjPZ81Ln9Ah%2FNK%2B4midD0hK3h4TNugaZM8H1UZPgMF4ZqS%2BqWBrE9Y1istuapQjpbWNEKKTRqrFPGsPLzsfUdOJWCrRQ3XKD%2FB6dYb7x2BCqnOgHnhqBs%3D\"}]}\r\netag: W/\"6a98474c-90f1\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deef8e6c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37105,"size_decoded":11718,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37103), with no line terminators","md5":"1d4951974fdaf8816ed298a201594b22","sha1":"66ca5b07b66dd65b0aa2d8898314f975de299ed4","sha256":"17c84ae81f8ef4528800a2afcb379838e87017b5520e3a7f7436a8a4f193e682","sha512":"bab663870aa2d18ed925394ddcff292723d0c88616966f162fa406670973114ccd9c0bb02d2044774df57b0470e163e41a93b688e31447fdaa1b2e4fa2d7f21a","ssdeep":"384:vj+h5k9V0ivPVZ1ZNXSljhMZKfW0KRwh0X2b4MnVrBxsLIOzaLRsvT/3UqHwtVlh:vmivP1STyKEMrDqrUICnL9D11H7v","tlshash":"eff2b699b1c7f4141a77b2e4402f1105f2ae2889b409d8cdfab9e8c66d64d4ca13bf7d","first_seen":"2026-02-08T21:15:07.754541Z","last_seen":"2026-09-02T20:26:21.424408Z","times_seen":84,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.materialdesignicons.com/2.5.94/css/materialdesignicons.min.css","fqdn":"cdn.materialdesignicons.com","domain":"materialdesignicons.com","tld":"com"},"ip":{"addr":"138.199.36.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.852Z","timestamp":1788380705852,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.materialdesignicons.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 00:02:36 GMT","end":"Sun, 08 Nov 2026 00:02:35 GMT"},"fingerprint":{"sha1":"46:99:A6:5A:85:12:2D:59:21:9A:32:71:C6:F6:D5:AF:DC:CA:69:78","sha256":"75:81:F5:4F:DE:0E:BF:01:5F:E3:AB:B1:89:C0:63:04:97:13:40:01:7E:4E:D7:EA:3D:65:13:00:46:DC:9B:C0"}}},"request":{"raw":"GET /2.5.94/css/materialdesignicons.min.css HTTP/1.1\r\nHost: cdn.materialdesignicons.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Wed, 02 Sep 2026 20:25:06 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 167\r\nlocation: https://cdn.jsdelivr.net/mdi/2.5.94/css/materialdesignicons.min.css\r\nserver: BunnyCDN-DE1-1047\r\ncdn-pullzone: 190968\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W2zhar9W2Imv%2BSWfPNEsC2%2F5uFy27Vl5awEum4DPw1R11yjVTfun692QM1UZptYwUPcuqI15eHOzEpwVjniF1kvYK%2Bzav%2FuvXAjwuj2f8QuHDuI5LgneDsPZhIpUIQGz9BM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a27e960e0dc69d4a-ORD\r\ncdn-proxyver: 1.62\r\ncdn-requestpullcode: 301\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 860\r\ncdn-cachedat: 08/24/2026 22:48:08\r\ncdn-status: 301\r\ncdn-requesttime: 0\r\ncdn-requestid: 59db63c39d2a1393ad676bc1a7045684\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T23:18:13.859488Z","times_seen":18244445,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":91,"connect":84,"send":0,"wait":24,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/chunk-2d228e46.26470204.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:07.021Z","timestamp":1788380707021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /chunk-2d228e46.26470204.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:07 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=orXoTboAaSMUjZRZwdc2JmdorGPa07R5%2F%2FpuVuQ0LFiX58%2BptpVn43IOMi72ux%2BOoOilf9M9yLLdYzx%2B4Us%2F7S0Qkb9nb92JpSXJ5ykpwZSCZUZpw5lpVYElfoo%3D\"}]}\r\netag: W/\"6a96c513-beb\"\r\nlast-modified: Tue, 01 Sep 2026 12:29:07 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dfaec06c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3051,"size_decoded":2193,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2986), with no line terminators","md5":"b0caaed79686eced1895124a1ec09804","sha1":"8cf3218f8c892012ed6a7308a03366ddc8aebf94","sha256":"748fd47d4326ef80263ed9830e0b26224f40ccb130458ecd392b1100d8c644ff","sha512":"5b1cd3701c3e50cff30adb1466665770598255d082e3fe4c1ddecdc7a44f439b6b3c3a3d64740e0333fb198342e66ab1a71cdb2165b34ac2636859ad09de9399","ssdeep":"","tlshash":"82519479b1d3a8285c2bf01c716e3125a06666b9710240c6ff70c99e2fe4da8ab19a5d","first_seen":"2026-08-16T15:23:55.998632Z","last_seen":"2026-09-02T20:26:21.433204Z","times_seen":5,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/3115eb7fbcf7e72ba1ba0f0894c95450cb2c797e/static/hcaptcha.html#frame=challenge\u0026id=0f8673f7bbq\u0026host=nvmp.live\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=ru\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=2f20b3b0-44ce-404c-97be-2c1c2d641422\u0026theme=light\u0026origin=https%3A%2F%2Fnvmp.live\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22ru%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:07.325Z","timestamp":1788380707325,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 23:28:23 GMT","end":"Sun, 15 Nov 2026 00:28:20 GMT"},"fingerprint":{"sha1":"36:C6:15:F5:21:0B:24:21:0E:72:00:85:DD:C6:59:8A:81:39:9C:5F","sha256":"B5:5A:2F:A2:18:D9:09:15:65:93:EE:31:DD:99:81:9A:9F:6D:7C:C4:A9:1B:38:21:57:51:63:4D:18:F6:2D:E3"}}},"request":{"raw":"GET /captcha/v1/3115eb7fbcf7e72ba1ba0f0894c95450cb2c797e/static/hcaptcha.html HTTP/1.1\r\nHost: newassets.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nCookie: __cf_bm=7ew4HdkghJn4_F8VuhGpwt_O7jSUgGoZe9LBXkapwkM-1788380707.1270103-1.0.1.1-9P39pbwaZEkgfqo8UuKQojU9wIuay7VoEg9tdDiJuoyKVEI_n8w5171DbhzPm41B1beY58EhWufjMQAPLA3dJzilhj1.PEpdpXjixvRWb5KgfTkx1qOEWqQpNOeM_KWl\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 20:25:07 GMT\r\ncontent-type: text/html\r\ncf-ray: a34f3dfce87ab4f1-OSL\r\ncf-cache-status: HIT\r\ncache-control: max-age=3600\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Origin\r\ncontent-security-policy: report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4\u0026sentry_environment=prod\u0026sentry_release=csp1;\r\ncross-origin-embedder-policy: require-corp\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]}],"data":{"size":619577,"size_decoded":189922,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39407)","md5":"81cc60dc107e531c60efbbe96362ed15","sha1":"ed3dc25b8d6befcb14b1f8db064063bf47a17c52","sha256":"5261c69e01d5026c2d6844253bcab7f20a0a5a6fdfaecd1eff55f12211261e1b","sha512":"f7231217dc45bf9b6448a5914e8507d5a9c5b825c2ddae0044be4a14169e131c067b7355e2fa06145fe56e19238c363ade095f5d077a3e5f021fc61e5078a795","ssdeep":"6144:swzb/clNaGq1X00QOPsGfERdSmtUuh6ySUtk803f/Ir7z/xj6M4eNlFDg6oXFPWe:jD8aGq1X0MmPVt6iopTgS","tlshash":"92d4d76f6310613b47e622e854df190f67b6d01a645664ecf731dceeb8ad84b103ab38","first_seen":"2026-09-01T08:26:59.023828Z","last_seen":"2026-09-03T00:11:23.670591Z","times_seen":267,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":3,"connect":13,"send":0,"wait":31,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E2a42e354.3e803b09.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.917Z","timestamp":1788380704917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E2a42e354.3e803b09.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A7tNrqT029AxmcKEcK5%2FZybXPZHw5yX%2BiQzpbIjv3wuWKJYl9%2Fm1%2BBGP9%2FOaMgh6St7udCEf2eaf4V71UOJnciMAHfT7isPC06LEnMJ6X9lXdDIuL7lwjT2p1zM%3D\"}]}\r\netag: W/\"6a98474c-3929\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dedb840c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14633,"size_decoded":6048,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14633), with no line terminators","md5":"dda2ee3eb8d9650cdaca6c71d617babf","sha1":"d64a7a4f3a59b40b32c33cbdb4692b61f962efa1","sha256":"490a85992564746f60777c09fb76948b48aa3f3a2d9b8d3f43a3c41ac1c8494c","sha512":"9b9addae43c0ae9b65d47cb261acbad90fe7d4cad21eb7a921d29054e43c04af2cbad197a99271d3c263bb57efe94c005de1df129f999ddcb2ab1e92e4d67d85","ssdeep":"384:lygmn1Uh6otX7i2XdXZPSP9epQv/524d1hHSrt8yB5Ap4aTX:1/igkP9ec/52uj4qzX","tlshash":"7d62a6ceb4a1b09357a320f0809f5a0fb3ba563a754d88a0f650e9f69c7652d5723f4c","first_seen":"2026-09-02T20:25:56.489237Z","last_seen":"2026-09-02T20:26:21.435902Z","times_seen":2,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Ebc261e74.faa2ddc2.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.967Z","timestamp":1788380704967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7Ebc261e74.faa2ddc2.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jRmw6Wp36UULTb9jm9nT0uD7KeBOLi6JvbJHRrDOx8nDnfAYBBiY%2BN0p96LPDFzcqD3ORz%2FH0QS5YHMrf8MeyWf6MJO7ZkSZ9oFCMap65QzLK23viqZTYZmnV4c%3D\"}]}\r\netag: W/\"6a98474c-2c47\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee0865c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11335,"size_decoded":4969,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11335), with no line terminators","md5":"6f8188cc4bc6176b492d908bc6482e6d","sha1":"a688aa026f873b9318aa160dbfe547a94364f520","sha256":"080046420500c3610ed05446c935ae62e4310e9356611b23eeeb45071808afcc","sha512":"ef6ce64c0c6deaf464d09b71dc73fd9a7742b45361f353d6395eea06b5f7a83da22dc04270b27633f89408fd58350e7c14b82aa749d53ed91522100826b68eaa","ssdeep":"192:UE3H3uqDRAtta4yIDg9O5jFyq+TxWAE+g7t+6UJ3E8bTw54loMvnyArr4W:HHHctaRwg9O5ZbMWArgB+q8no2nsW","tlshash":"ba32c4d47991f01a466a22d5688f540fb3786b3af48ce890f680d8f1b4fa58e4553f2b","first_seen":"2026-02-08T21:15:07.870627Z","last_seen":"2026-09-02T20:26:21.4397Z","times_seen":84,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/moment%7Ecc99a214.82c5ac5e.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.045Z","timestamp":1788380705045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /moment%7Ecc99a214.82c5ac5e.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W1DALM2Oj%2FxQg3SRyg%2FckzY2KEvx574Hmo%2FhsVSVBL3IGD6Au%2FLM2iAbeu322FkvIh7RpSUgngqDsKzG9yIB7aE3x%2BrgR%2Fgmy1ObdSFp%2FzoITXtdhPhllMgDjNU%3D\"}]}\r\netag: W/\"6a98474c-2629\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee88a9c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9769,"size_decoded":3165,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1437)","md5":"e7f04a49da0e719ce9318218d583837f","sha1":"663ba99271afade0cfe37fc3291acd2969e3024d","sha256":"7b8072e0bc8c39a32328cfb0e12e9fd26d1e75cebcdb054440bc341de49d03de","sha512":"1dc97be389b8357a26ec800237d76ae4235d908ea37e60691c006c9c75d02f129e57036d39708807529bba327821671c6eca8ce6c12d82610f2ede7a605d5c30","ssdeep":"192:ApOqoPuuxIf0yPOqooZU2urIf06YuOqKPmuDajmM4fPOqoPuurIf0pgtuiQtOV:wDotlADooZiznuDKFDa4HDotzp1iZV","tlshash":"cb12a46a5a8bbe82c70389c5b42f3e10795d1735586e4c328ed1a2126c3cf9d8731f7a","first_seen":"2026-08-16T15:23:56.035104Z","last_seen":"2026-09-02T20:26:21.441006Z","times_seen":5,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.echarts%7Ededa5bc4.24dc05a7.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.062Z","timestamp":1788380705062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /npm.echarts%7Ededa5bc4.24dc05a7.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mZ0LTjSsbzTp9Wv%2Fz3rZd4d2b%2FEa0CzkBags2jRdbeDge77EdNwDB%2FFjCU1O6FwrnqCI8tnVZXVVKNI6Qsydp2s9Az0mwoilbMVTr8NfQBoOO14z%2Fq%2FLuxkj6KA%3D\"}]}\r\netag: W/\"6a98474c-b59f\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deea8b8c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46495,"size_decoded":18984,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46487), with no line terminators","md5":"ea89dbf88cac38cd2d17b9e5c20d567d","sha1":"cac1d25df9e8d829f6be2bdfb4b0908a126bee00","sha256":"7cc8bd44eec2aefe8c67db09e75d324e3b8b455d5af98db94da6d0dc631f23ea","sha512":"eb41bc64ddeb61d17f243df64077cf2277e3a6a7788f4c0a4cb7ffed37ed785ad6fffe93c08fd540d792fb2c0edc706fddb2f00c368a6e3792e5e6479863ac03","ssdeep":"768:YprKtjQRi7Fec4NaY69mRHqLw4FzBbtufZU:YprKXulK9kfO","tlshash":"ba23e7dc72d9b06667b3227a50af180b92365d0a690eca10b525f4c9bc7c06e7377f6c","first_seen":"2026-02-08T21:15:07.946452Z","last_seen":"2026-09-02T20:26:21.442699Z","times_seen":84,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":175,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/vuetify%7Eb8448254.dbf35b79.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.104Z","timestamp":1788380705104,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /vuetify%7Eb8448254.dbf35b79.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yyPBiVWn3hwWHfE2znaBh%2BVpGEwSgahRY10JWW%2FW43oSs9E%2BM%2FElS%2F0lPFGRdnjZSKqbKTnYsiaXrjC07aL4S5c6WYjNImiAhZF908hEBtsz88BqkJR9DwjfuE0%3D\"}]}\r\netag: W/\"6a98474c-11540\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deee8dfc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70976,"size_decoded":19652,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2e981633927775abbaa5f8307e3d9b2e","sha1":"01b22040b149751f60af6d5ecd3dd85a64ffaad4","sha256":"aa597e9b48e475cbd0a93c97494ef42bcbe98b6ce04041eb2343a2fab75abbe2","sha512":"6758d1787e9a06ba6b1a6d238c7fa1007cd0520873cf41237cefe7a91bb2b6f45d388a6c029ab1550b42dde0d715d9a7898a04b5d3eab95bf582c2a30647b248","ssdeep":"768:X9zlIt4uIPBzONEHfKOyrnXSLrJDoHY6FD1WcYvHgX0Jj1f4DoJayYf4Drd:X922u2BzONEKDN4aoVvHpjHld","tlshash":"1163a68ab1c7f51003a7a1f1402f1506f37a6588f41aa5ddf978e5da7868e48a03fe7c","first_seen":"2026-02-08T21:15:07.725054Z","last_seen":"2026-09-02T20:26:21.443952Z","times_seen":84,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@mdi/font@2.5.94/css/materialdesignicons.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:06.765Z","timestamp":1788380706765,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/@mdi/font@2.5.94/css/materialdesignicons.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nvmp.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 20:25:06 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 20008\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 2.5.94\r\nx-jsd-version-type: version\r\netag: W/\"1b052-kgcz7zM5mc2El2R7+uapoyuDDg0\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230154-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 783201\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J8d9qKhSVkslBPyQJLIfl90axUARwSbAY87MstUiOoi6kbsbkvAXyj%2BoUVjzOFi0YRrY4LAkJTggH%2Bz%2BLtK2TjTf4Db4KoN%2BgyynBegHxdM4l5fGR%2BMV5H%2FZwZZzjZEg3FY%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a34f3df9496356bf-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110674,"size_decoded":21116,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"effad7d6a4f6bb0301490e573e33a86c","sha1":"920733ef333999cd8497647bfae6a9a32b830e0d","sha256":"ac7ad3c9a91f1d12d7875446ff72bd52a5119b66cca84d607f36e8857dedb762","sha512":"5c33c615589d07bc97054b4b6137507e65408a2f3c68cdfc22bbaeeb65264dbc179c8e8f0cf4aab85a294ec7d99acd76928b17e04ed6db9fd9dc15898f317ce7","ssdeep":"1536:Kgjtx6y/8DOOo4jTWPZkbCUor7zI3SIwWE:Kgjtx5UDOTILuLrYtJE","tlshash":"f8b31ce9e04c24e77733c453e380b7a8658bf2b1d5851d5afa8f010e2ac7a251687f6d","first_seen":"2023-05-07T20:34:25Z","last_seen":"2026-09-02T20:26:21.445915Z","times_seen":137,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.hcaptcha.com/checksiteconfig?v=3115eb7fbcf7e72ba1ba0f0894c95450cb2c797e\u0026host=nvmp.live\u0026sitekey=2f20b3b0-44ce-404c-97be-2c1c2d641422\u0026sc=1\u0026swa=1\u0026spst=0","fqdn":"api.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://newassets.hcaptcha.com/captcha/v1/3115eb7fbcf7e72ba1ba0f0894c95450cb2c797e/static/hcaptcha.html#frame=challenge\u0026id=0f8673f7bbq\u0026host=nvmp.live\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=ru\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=2f20b3b0-44ce-404c-97be-2c1c2d641422\u0026theme=light\u0026origin=https%3A%2F%2Fnvmp.live\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22ru%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","date":"2026-09-02T20:25:07.836Z","timestamp":1788380707836,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 23:28:23 GMT","end":"Sun, 15 Nov 2026 00:28:20 GMT"},"fingerprint":{"sha1":"36:C6:15:F5:21:0B:24:21:0E:72:00:85:DD:C6:59:8A:81:39:9C:5F","sha256":"B5:5A:2F:A2:18:D9:09:15:65:93:EE:31:DD:99:81:9A:9F:6D:7C:C4:A9:1B:38:21:57:51:63:4D:18:F6:2D:E3"}}},"request":{"raw":"POST /checksiteconfig?v=3115eb7fbcf7e72ba1ba0f0894c95450cb2c797e\u0026host=nvmp.live\u0026sitekey=2f20b3b0-44ce-404c-97be-2c1c2d641422\u0026sc=1\u0026swa=1\u0026spst=0 HTTP/1.1\r\nHost: api.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://newassets.hcaptcha.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newassets.hcaptcha.com/\r\nCookie: __cf_bm=7ew4HdkghJn4_F8VuhGpwt_O7jSUgGoZe9LBXkapwkM-1788380707.1270103-1.0.1.1-9P39pbwaZEkgfqo8UuKQojU9wIuay7VoEg9tdDiJuoyKVEI_n8w5171DbhzPm41B1beY58EhWufjMQAPLA3dJzilhj1.PEpdpXjixvRWb5KgfTkx1qOEWqQpNOeM_KWl\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 20:25:07 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://newassets.hcaptcha.com\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a34f3e000c7eb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":808,"size_decoded":1239,"mime_type":"application/json","magic":"JSON text data","md5":"8d8a13a14ec471518778e6658974f340","sha1":"5affd550cba057458578db1059d8cde42c9c455f","sha256":"2cf4b32662502d265e55f0a7776d6f4e7e8dde65430877bc74162c4e76d59a17","sha512":"b3ea1631340efc6d0c2f2dc31929c153823351cac6b8992116a692541baeec00ad7a76653eae3273dfd5dc429130e4efb654c692b1aa2cb4c8ada5247ba509ca","ssdeep":"","tlshash":"b40186a519283a2075c3631a85dbbf362c63a3b409a2a835008df421a74b58cc003324","first_seen":"2026-09-02T20:26:21.447095Z","last_seen":"2026-09-02T20:26:21.447095Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":4,"dns":4,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E690b702c.ad314ba5.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.940Z","timestamp":1788380704940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E690b702c.ad314ba5.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nPXOPwKYKt%2BgXqBx85AH2w5ODNmsz71EhmQHlkgq0b60Irj2AA1EwchKmckbaQdRDBAOWtlvFN6MhPbanr5bul2LI8HfKhwwHA%2BLLs4UTTs8QyRX86WHVaS%2FIUQ%3D\"}]}\r\netag: W/\"6a98474c-f7b3\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dede850c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63411,"size_decoded":26233,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34282)","md5":"4b3aee2fe8f9c5ba51beea780f79eba1","sha1":"4516a12303da8324e88fbfc4ba76e5fed6ab1540","sha256":"bb739fcd992895e5046b002b870dd205dd58752cc1449d998042fb0eae12bcca","sha512":"74cd28b603c4c5442e1d35aef427ab4f36e19e6ecb3aa7b65ba7c34cf4d02f4154ba6542699787b1c43f0f15088b7deefe0d46b46fb1338b397e620e4113a409","ssdeep":"768:8gJ1e2P/0IrCexwDqDYc00iok33fpMRDXK1t8aAsgYuzeW4dVLTnsHhDxDE5DGGA:HQEYc0doHRhst3sB9gJTPNDEneds","tlshash":"ea5308ccb2d1b03413de16d5147f500bf278a99ab81c44a9f218e8f27cb598e45abf39","first_seen":"2026-09-02T20:25:56.404954Z","last_seen":"2026-09-02T20:26:21.449795Z","times_seen":2,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":293,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/css/app%7Ee73b60ec.e2c2cd57.css","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.021Z","timestamp":1788380705021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /css/app%7Ee73b60ec.e2c2cd57.css HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5DtuBHwA2%2BJPuBIi3UUq5RnT60dUvBXYQQ0%2BrdpnY8Tkcaaj4P3d1emS1h3AC5cVV%2FGNMe9xRLeMKTJLmUpW8YoWsQ5uHG%2Bwx1m7aKl7T9M7IcqbvKNMX1f%2BgEA%3D\"}]}\r\netag: W/\"6a98474c-7cc\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=0,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee6894c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1996,"size_decoded":1432,"mime_type":"text/css","magic":"ASCII text, with very long lines (1996), with no line terminators","md5":"fda4d5edd8ed4a08c1babb9af5d45859","sha1":"688931a7295be22ef2c545e5cbb8c6957c24ab6b","sha256":"02eb71a14d19530ef9c46f5d397c9e1a409b66c7ebb6dad4a4510c687fd6a385","sha512":"44c52dcb614650d1abeee612e74e1a5c3ca825ace6ac9d1cafc470011893f26e23a11d2d1df22e4a3b0ff049ade3fda1a82a30b54f012d0c703d84666c3032c7","ssdeep":"","tlshash":"144101d7daddcf6f2224c3d5a892adc4720613a0663c0f9c6a36947169f117b9e20781","first_seen":"2026-02-08T21:15:07.829117Z","last_seen":"2026-09-02T20:26:21.450989Z","times_seen":84,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/moment%7E15f0789d.2da6f755.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.037Z","timestamp":1788380705037,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /moment%7E15f0789d.2da6f755.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CFpdf51QlSO67XTaohH%2F7RptrjCSMvvp6XdQ%2B3kalI5ZfeojWrVq7J%2FRTXdD%2Fan00vbfJsJPAP1b7B2TqlVRr9cU7IrkAykIJYy5Y4gXm9mIRhX3dOLiKa5uswc%3D\"}]}\r\netag: W/\"6a98474c-2a7c\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee78a2c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10876,"size_decoded":4720,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2403)","md5":"3a252d6744e22e5c73ec87f6d69cf607","sha1":"2f251fa55a6ab463aeb91a7717b7973a5bc46d94","sha256":"f125f2cd22ee51171698c02a039513295c3eb26aa1d8c8205174761079f52a5b","sha512":"e9e3cfb379486f24d3959a4c8eab3c7788499d95e0b2415a897c7096e77477e9208669a6cf1f31ca1a4c40807c5d812cee6e9b2d5b4ffaddf21c894adbe00db5","ssdeep":"192:dTa+/DuJLsDWW7HqpxOxZYDPVEu4+V9UxP/T4QY5g5KTt:05sqAi6Y59Up4Qr5At","tlshash":"3422e7ee510f29939b0a4587c05f3a44dd5c6bf97c5fc621e5a2b206f8b0a6ccb71728","first_seen":"2026-02-08T21:15:07.880561Z","last_seen":"2026-09-02T20:26:21.451772Z","times_seen":84,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.vue-loading-spinner%7Ea78bbb77.7d418840.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.075Z","timestamp":1788380705075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /npm.vue-loading-spinner%7Ea78bbb77.7d418840.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZxaN7WiX2PngtWThFndzftECAci2LfczojyDmWGuuMlh5kuLneEi3C32hrOxVVAibG5rJYvl2Wvrq%2FQynS7RmOOrvNySUahwcBGYu49sxQ9mypQKRv0i62JYU4E%3D\"}]}\r\netag: W/\"6a98474c-472f\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 26\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deeb8c0c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18223,"size_decoded":3186,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18223), with no line terminators","md5":"9d37cd501d8e50ad3033a4d6b17bbb52","sha1":"321fcd3c5b306797c12b7e8d78d33d73d218d492","sha256":"08b0af19fa9daf956d22c3b3f58c21396f925f5a8df968e8eb43a47c71cd9fd6","sha512":"ee40d961ee3c061fb4c47bb96ad603c948f4df5b1a068429510d646f19bbbef529331e15ecad698d2e7da81467b39634e331b5cd72447f59e9f6b4f7a7a65683","ssdeep":"384:OQL27LwIo22xOWx+PENaWxIiboR+30t6MMpq73WLl2UxHK5cDG1us81aUcmWAJwZ:3L27Ljo2+OWx+PENaWxIiboR+30t6MMo","tlshash":"5c82794af892e96cde37a46a822f1536f1100fdc523564d2f779cce826609bc876db1c","first_seen":"2026-02-08T21:15:07.832005Z","last_seen":"2026-09-02T20:26:21.452542Z","times_seen":84,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E05ca0e47.551f0afa.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.897Z","timestamp":1788380704897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E05ca0e47.551f0afa.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vY1iL6EFw50Q6Zr%2BtPZ4wUdHp5Nd6%2Fxn%2Bu1wqPTJkircSMI4aVpdj4dxXypqABrsy%2BpuPNTrUs0ERzVThuKPJ%2BU9TOJftou%2Fzp9awo5Faxl2Mvpd03b%2FF8J8Alo%3D\"}]}\r\netag: W/\"6a98474c-2ed50\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 26\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deda834c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":191824,"size_decoded":60501,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (47615)","md5":"56c3567b987d48de5c9a303b46aea4ca","sha1":"9db6987974182dea99c564792e8f0363a648e069","sha256":"66a67879e3f8ac9f2dcb42f6e3b3b7beaa4ad410f0f03596eb3deb72fe3e1a8c","sha512":"724265c42e7d47e6d824a077ad1afbad1d850860a0fc5342373aca12a8680954e93a434627c1d31790c94ef11df8a56ab2b1690e0530daae9744d6711265bef9","ssdeep":"1536:dMu71uaRWDIdn98p3cimS9PcKM48JuNf8pHXVcy9TFCHjNiB07YlrIAZNoYox8V:dWEdnw3cQ/M48J6EX1WjN4oEsAZyy","tlshash":"13141b88f291716143e721e1012f810fb37be938740a81e8f295e5e56c7dd8e91a7fb9","first_seen":"2026-02-08T21:15:07.744626Z","last_seen":"2026-09-02T20:26:21.453317Z","times_seen":84,"resource_available":true,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":355,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/css/vuetify%7Edde583c9.bae64812.css","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.034Z","timestamp":1788380705034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /css/vuetify%7Edde583c9.bae64812.css HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fx7hS1rkFFDWzloQ%2BdR%2BfuJsFgbIwNRSfHMHyFE2dLvBy9eoygSiiSP8XtxIb8%2FVBXiV1VtCfnFdZKOt1XXzx%2BXswHd58d%2FtRJRhMwfEZbZwZG4z60Xvs1JDBKA%3D\"}]}\r\netag: W/\"6a98474c-37e0b\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=0,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee78a0c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":228875,"size_decoded":33683,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8a673d659164ad66b6ae7fa4f1ff1902","sha1":"1daa3b1c17e8536bd44ec6b24950a22d54985ec0","sha256":"e0787ab817c68f5b16ea0b078b9776058e08cb32f5642a09103e4f4b6a748cf6","sha512":"8325e122bac01a25886b34d66c8a0baff54b7a641f0aac9dd40f01f2ed4406d000fb2071be79ad80d7d29dcc05182a51f7fe6b8cfd2735838c7ce25b116ee281","ssdeep":"1536:AaKKC+0weSY8vdcaD36LM4LFCngZ+Uxfaaf+mi:Aa3TWSaa","tlshash":"c9249560528025990237e8bba5c0da88d73ecb17e7f2d8b3d4a2bd4a478264d5f7345f","first_seen":"2026-02-08T21:15:07.796596Z","last_seen":"2026-09-02T20:26:21.454262Z","times_seen":81,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/socket/?EIO=4\u0026transport=polling\u0026t=Q1Zo_Rk","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:06.545Z","timestamp":1788380706545,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /socket/?EIO=4\u0026transport=polling\u0026t=Q1Zo_Rk HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:07 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: private, no-store, no-cache, must-revalidate\r\nx-cache: BYPASS\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rc%2FZUvHL%2FFOiXV9rbO9lB9en5gw7ZMV1YdJfQ6g4wqqCA0YksMUreU%2B7RB3qNtEY4HH%2FtAQSk%2B36SzbckdxVCLIvDGt0AWhi6tulT7g3vRqfuXZIXRgcXXhSdJI%3D\"}]}\r\ncf-ray: a34f3df7eb59c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97,"size_decoded":803,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"491cdebf0718898b255fbc91eae3cf4a","sha1":"80b4f570cf52cdcc66685634a38a480a827ffd21","sha256":"4d6b0137b355da94eeb9f066e3bd9fee543187c0efc2c6bb0a167a0301b731bd","sha512":"5124311e4be2df60764a6e9a34bf89ffad079137d06c4d7525e2baff4dc3ae3ec2cb1b50cf4ea6feae0dd922eb13b4f4202d6d893b13d977b551cfef52d5e373","ssdeep":"","tlshash":"f1b01245d63d23c6be207249a1f35e99082c784f4685495c31340ea9155b0001122e37","first_seen":"2026-09-02T20:26:21.456396Z","last_seen":"2026-09-02T20:26:21.456396Z","times_seen":1,"resource_available":false,"data":null}},"time_used":469,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":469,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.zrender%7E308aa24e.0184bb82.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.085Z","timestamp":1788380705085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /npm.zrender%7E308aa24e.0184bb82.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IgjAC3I5XMbunRTNG5sYE2MWWXvCsW%2B8WoUf9YQ8%2BpMbHTvRw3nhyiyG0d0VWJwplX5GMVwvIBPb4WZn1bSrXqaP1bFI0NFe57WEyaGIJdNEbbkFPkMj8lL3PL8%3D\"}]}\r\netag: W/\"6a98474c-30d6\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deec8cbc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12502,"size_decoded":5573,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12502), with no line terminators","md5":"645f085ea723cd9aef60ef6ccc7146db","sha1":"555edc9db5c652bd8473e85eb226614c64c3d77e","sha256":"07ceb1a3b3be92343140244764d7bf3abaac5c2cb97cead1ae2ec5f99cdc0e47","sha512":"1569c65d545f2f6d17318b11b54a7ab1cf52d3e8a3e3e30538ec84e5c9c482023b5b92d3888134ecb81f8eeab7eb3006c4e01ef70e46b858b329675ee93bf9a0","ssdeep":"192:LHm51ju3ph3+7g8dlBzMgpDkGaf+MyKysq+HUts:LwBQh34g8dlBzMgpQdxyKysq+9","tlshash":"ff42c7e47b94691045e63171183f2607b2332949690bc29cbb38f4df6cfda88357ab78","first_seen":"2026-02-08T21:15:07.883517Z","last_seen":"2026-09-02T20:26:21.458008Z","times_seen":84,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/socket/?EIO=4\u0026transport=polling\u0026t=Q1Zo_ZC\u0026sid=WjVDjLLSAi2frOSUABTU","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:07.027Z","timestamp":1788380707027,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /socket/?EIO=4\u0026transport=polling\u0026t=Q1Zo_ZC\u0026sid=WjVDjLLSAi2frOSUABTU HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:07 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: private, no-store, no-cache, must-revalidate\r\nx-cache: BYPASS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c7hsjl%2BW7XYe3jVmjezLXCHdErS4kxs0cZLhullwJHF6c6q%2FC%2F1kHJ5cPOrIhP6K82fTO7xSODGgsJNNaN5KMUcNuBf4Rvj8fg7b4ym2hLyqXleo6HmkkmAkqkI%3D\"}]}\r\ncf-ray: a34f3dfaec0ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 32\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32,"size_decoded":721,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"7777c0992685c6355167e25e43bf7e0b","sha1":"e8ca0bcb8799632c4d41c9501b55e43d552c0752","sha256":"9915210c694298a8877f1b46f6fbb5c64339c046612c42060e3a07c3dcfbb54e","sha512":"bb9a00a74224d0c1e7b4b9220160a345930a966657e515a26065116f79c0fe54267f4b6abb012cf7f6c63bc0efda0063eac396e91261c285162c5a0b119e894c","ssdeep":"","tlshash":"81800088202222802800c22ae8b0a800020a838af3808b8802bf20888a0a00cac88200","first_seen":"2026-09-02T20:26:21.458654Z","last_seen":"2026-09-02T20:26:21.458654Z","times_seen":1,"resource_available":false,"data":null}},"time_used":886,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":886,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Eb1f96ece.a7c6745c.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.965Z","timestamp":1788380704965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7Eb1f96ece.a7c6745c.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qA148ZAvlPx%2F7K861wIA6GI%2Fx2O3rciQBf6n9x1A8GzPytUkLe5U0KbZvxV7fTuRxY39CwY2%2ByrkrfncvvFuptckfYvc%2F1%2F9%2BkmbdunRHLxl6NuDT991vcAtitw%3D\"}]}\r\netag: W/\"6a98474c-73ce\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee0864c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29646,"size_decoded":11478,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (29468)","md5":"2dda5b0229e5cc01f4f1b98284783467","sha1":"b9b123018ab5035ce5299e80a427fd71758b96b8","sha256":"d525f309ebf294a88b16a1a73c481b679c20a47665c8f52dc9806b816afa11d8","sha512":"dcbc51dfcb0683d8ad29b9dc9384c4817540623999a0f180e4d3f2a1588d1e8706a28d2fd1961e6dab24c729fa3f08026add3cf51935ff0c0e2677549166b4f8","ssdeep":"384:t3/6xYUCpRuKSRxfCn17+vOan6LqLPw1Sk/93rA9rYrrZrNKX3OoLWF:himsKSDCn14fn6a0Z/93rfrevLWF","tlshash":"a5d2c5ddb682f03547e326b0416f110bf2376699744e8098f26ae4d83c7e84e9527f7a","first_seen":"2026-02-08T21:15:07.926213Z","last_seen":"2026-09-02T20:26:21.461964Z","times_seen":84,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":224,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.echarts%7Ebdcda83c.4081707d.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.059Z","timestamp":1788380705059,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /npm.echarts%7Ebdcda83c.4081707d.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hoPreIltGWInWFlEPrxpXiTRAoHdMiw0toayzrsdBtTHZzp31gFzaQZLtsiDIy87CHpmWU70tWiYoSdVaOXaVTnVXgZ76W7RgQzsRExWtyp76m4NrmJpgIew0PI%3D\"}]}\r\netag: W/\"6a98474c-78ce\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deea8b5c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30926,"size_decoded":11995,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30926), with no line terminators","md5":"596684065e139aabae9659698e96d59c","sha1":"4dfa680ee4db86b0ae25cad94722323fda5bd2e3","sha256":"bee54f50e54ee2b9fe37fc4d2bfa9421a393af1290e6d606135b73a35f29f8b6","sha512":"c94a38b63ae969e242b4650c35d4b0133287e93ebd7f6c3affa2dbc93fe169a4e2b9aed4571c2209636df29a9a61139f0aa64069db88d2ffc5ecc2e5696f2f64","ssdeep":"384:ZKlOtbXluc6X1AATW9iEVzSBjHRP6HZhfBsm9MK+ASLXZWqHnQlY/wpKCDoTVHdZ:slOzuaAd7/wwVo7RGh","tlshash":"a2d2b5d87784f02045ab116498bf560fd3352809784a959cf699d8cebc7c96b322bf3c","first_seen":"2026-02-08T21:15:07.822977Z","last_seen":"2026-09-02T20:26:21.463149Z","times_seen":84,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":158,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/vuetify%7E447e62b2.8d776630.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.098Z","timestamp":1788380705098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /vuetify%7E447e62b2.8d776630.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GppHhal9ZjMf1dey0JTCZtcfhCOv6g5FMoMx7Bnn6QDIZ%2FXD1xX6F%2BQC15ryaiPw1R%2BxGF3W59VYXHRVB6Lx1XPVfDfhYU7ItWT%2BexWeS%2ByY76Zwl0RtOOI5cIg%3D\"}]}\r\netag: W/\"6a98474c-b213\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deed8dbc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45587,"size_decoded":13955,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (45025), with no line terminators","md5":"b0d59ac923bcb164d0f7f91e9cdb5f62","sha1":"b904c66a16907d2800f11c797a427fd8fb4d1b85","sha256":"32ad212d2bc54dc9b1b8ed3e9d5458c4cd3356d4953eade973196be51d76f47f","sha512":"b3f7184078b3b2945e40be84d50c6d0c27ca4978c188134bb3144278f0f99bd8ce1daca20bda9e4ac978abb0daa470add958ea8d46822716756c217b9019dfe5","ssdeep":"768:dY784EUgKt/kS4BIPslpqVj9irgnZeQp7l:dYY4EbKt/kZqfWwDl","tlshash":"7d23d55a74c3f5181bbbb2d6406f2206f1aa0494b80a95cdfcbce5e9a964d4c113bf3d","first_seen":"2026-02-08T21:15:07.874193Z","last_seen":"2026-09-02T20:26:21.464051Z","times_seen":10,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/vuetify%7E94969a38.85614ab0.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.102Z","timestamp":1788380705102,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /vuetify%7E94969a38.85614ab0.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RVN4e22TaM79Up%2B3LR25W5CSY1I%2Bt7t3%2FmqvuzQAh0gEhzbQrfgtT813JQiUaoWxfjlRA888rYWRnisLBTKFmb4NPHdQcwBrbPE1gpshnD51S%2BK7zWExN%2ByR9Vk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\npriority: u=1,i=?0\r\nage: 27\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a98474c-54\"\r\ncf-ray: a34f3deee8dec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84,"size_decoded":789,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"d8add1ffe794f435fa21a474d433bfaa","sha1":"3d1126fd969af6f45ed8a2484a7ab8eef674ac4e","sha256":"e13b23ce4b157a72ab72d8cf63c457b6bbcb41645e1e8662b2633acb3cc7dc85","sha512":"bcce6adbb227f40c406a257f7390e35aaba78325739b8ece2936ac3bc272a5989a16987bbe3d4bc98c69f03122ddd24eb312ead915a6f8ffb8b3e7dc6685d036","ssdeep":"","tlshash":"59a0027d2005b415557ec05c116177e55d4961083e6304b41616556239559c75554386","first_seen":"2026-02-08T21:15:07.8513Z","last_seen":"2026-09-02T20:26:21.464798Z","times_seen":84,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/vuetify%7Ec964cbd5.90c1ab47.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.105Z","timestamp":1788380705105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /vuetify%7Ec964cbd5.90c1ab47.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FhsSoQIiw1ko675B57sJLo1WNBrsXNEwejwYjcFFlhlrlwM2saSXxZRMJ%2BxTkQYHfw1TcmQH%2B2lJBPJuRIZIdhaW%2Ff7UszU3q9qleBwQSuHTCczdRGHnUoQqihk%3D\"}]}\r\netag: W/\"6a98474c-3c11\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deee8e0c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15377,"size_decoded":6486,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15377), with no line terminators","md5":"eacd49a2b6793177cf1ed8821ce5f7fd","sha1":"e09e8f5ccdd92d845fd4050f6b35ac809eed7bb0","sha256":"bb86546c848b6f303754fc5e17889845f95ed1224ea69cb0c9de066d7cc1ef9d","sha512":"71523d682c9419f4f4c5e0dc2fc9385b9b970531d3d49d32591c493d4a81c605cff2b96a9a0c332007c74dd57b190987979b24995af6d441f988a22c8bcdf9b5","ssdeep":"192:BGtqcgKMW1rRIHgYygKWMKjygS/EuAoojJ1qY5l0uZqvz:BqQKnnvgKsUEuABjJp0uovz","tlshash":"0b62238c76c7f49a4b936074847f524bf27a6e90384c9942c112f5b13834d6fb277eaa","first_seen":"2026-02-08T21:15:07.762678Z","last_seen":"2026-09-02T20:26:21.465635Z","times_seen":84,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E00cb062a.750143bb.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.888Z","timestamp":1788380704888,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E00cb062a.750143bb.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y5HjQnUKux0XTs%2FcPVI3KIGWOJpx6iMG5mFTt7wXloiLmHwRWG9DBnY6lOXSfXfY%2Bs9ITI1GAR2jQBIDdgcgSl6JRYosKsV8h7FxaFkXdq%2FlAUND6Dxn1c2gRaI%3D\"}]}\r\netag: W/\"6a96c513-1625f\"\r\nlast-modified: Tue, 01 Sep 2026 12:29:07 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: HIT\r\nage: 26\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3ded882dc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90719,"size_decoded":33912,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61100)","md5":"20872370dd7c4b7d79cf26150cd036e6","sha1":"77444d195e0f72840eea0417c99176ad379de00f","sha256":"97b099180cfc81ff72681436438030c35d434fa98d291a99e85df56ccad8a8fb","sha512":"b8cfbf1acef3f4df572b3495f205171d0850b00ad38504ef5cdbe466621b2070ec99d4754b3d041310eba9da6477cea8d63bbd57c420a81ab9d9e6b71c3f857f","ssdeep":"1536:jlLi9LlY8s+4Ezbzmx6GSWDS0ENTrctYYISQLo3DEyQLIBbJkWDWEWPK0+CLJKB4:jgctYYIS1W6D6JKBOf","tlshash":"149309ddb3cab02247ab70b940af510bf236199d284d8400f155e4e9bc78a4e9277f7d","first_seen":"2026-02-08T21:15:07.728196Z","last_seen":"2026-09-02T20:26:21.466412Z","times_seen":84,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@mdi/font@latest/css/materialdesignicons.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.853Z","timestamp":1788380705853,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/@mdi/font@latest/css/materialdesignicons.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 20:25:08 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 54847\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 7.4.47\r\nx-jsd-version-type: version\r\netag: W/\"54a02-OVjZUfBzAil15Q3gxxGhe/obcD8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230231-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nage: 5603\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Fcy4xsb8%2FdbNiOHENeLjdMk4ME6Daa1zoRZG3L49UGgHNEstPWODsXncUAONVpzafgRuWkFKT0fYjj0hwKQcKxXWNqbcnouhfhilVzBRS41m%2B589nS%2FpSe8YxjQjo3hHnc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a34f3e0718e156c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":346626,"size_decoded":55956,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2c83c4bce691e18f82409f87b2bf84e4","sha1":"3958d951f073022975e50de0c711a17bfa1b703f","sha256":"03fe3caba05e65b14e4035139eee89b12be87cd0bcf342ac3886770eec3a9962","sha512":"fe4eb9f06e94b02bdb906441def3d7a6c3c781679db89c225863c2192d78210c37c69afadc010c740f273181b68266245e2b50c434e7ea288aff67c3e13f3ba8","ssdeep":"3072:LRA3YkpX8O2wOBZuRVOh01y7xBqlaOznO3oDmCleSI5B1H3n/ZdhI97:LRAI64wN89BqZnODweSgH3n/hIB","tlshash":"b5742de5d04d24e3f733c85fd740b798458bf2b2d6690e05f68b660d09cba221687f6a","first_seen":"2023-12-27T17:19:29Z","last_seen":"2026-09-02T22:31:32.614235Z","times_seen":6404,"resource_available":false,"data":null}},"time_used":3144,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":18,"receive":6,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/css/app%7E6ff199a4.a622400b.css","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.011Z","timestamp":1788380705011,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /css/app%7E6ff199a4.a622400b.css HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G6bXNArmTvedQa4QJY4hDgvqxEU92KfCmn0pJXgiWjuF6bv2ForiaizCo4Ev%2BvtkK24OBgUCRlmHVogs7VSIvFlsYInd0KbiWUfAWgTo0fId0xwGsv%2BHu8KAz8I%3D\"}]}\r\netag: W/\"6a98474c-ea6\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: HIT\r\nage: 27\r\npriority: u=0,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee588ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3750,"size_decoded":1514,"mime_type":"text/css","magic":"ASCII text, with very long lines (3750), with no line terminators","md5":"d903f155face013aec81dc32510765e9","sha1":"99684cb1e840a081e779b85d3c72cde4670c8e5c","sha256":"4919e62947b8e6438bb765e9adb9b0bd13e34ae9356d4967b5963a3ec3cb6214","sha512":"abfef0012dfad25a85ebdef17ed9aaf64789459338d0693174f2005665f63b43c544fefb81088d98780794223f1008a174acb7eb7dc5c276096c4ff0c2a7c66a","ssdeep":"","tlshash":"3671687208d119cad8164f6653ec1ca27a37c9638b2439df769170da4bdadb743421a3","first_seen":"2026-02-08T21:15:07.872651Z","last_seen":"2026-09-02T20:26:21.467851Z","times_seen":84,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hcaptcha.com/1/api.js?render=explicit\u0026onload=_hcaptchaOnLoad\u0026hl=ru\u0026sentry=true","fqdn":"hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:07.107Z","timestamp":1788380707107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 04:53:55 GMT","end":"Wed, 11 Nov 2026 05:53:53 GMT"},"fingerprint":{"sha1":"0E:7E:B7:7E:99:98:A9:83:98:76:EA:79:C6:CE:AB:E5:5C:90:F9:9D","sha256":"A0:0F:7C:1E:D9:73:CD:A1:94:49:89:7F:A0:8E:EE:ED:E5:22:AD:92:D3:29:62:A6:36:80:AA:21:4A:94:18:4B"}}},"request":{"raw":"GET /1/api.js?render=explicit\u0026onload=_hcaptchaOnLoad\u0026hl=ru\u0026sentry=true HTTP/1.1\r\nHost: hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 20:25:07 GMT\r\ncontent-type: application/javascript\r\ncf-ray: a34f3dfb888f569d-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: max-age=300\r\netag: W/\"ff5d0cebff8f42ca8840c70ab53bbe5b\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nset-cookie: __cf_bm=7ew4HdkghJn4_F8VuhGpwt_O7jSUgGoZe9LBXkapwkM-1788380707.1270103-1.0.1.1-9P39pbwaZEkgfqo8UuKQojU9wIuay7VoEg9tdDiJuoyKVEI_n8w5171DbhzPm41B1beY58EhWufjMQAPLA3dJzilhj1.PEpdpXjixvRWb5KgfTkx1qOEWqQpNOeM_KWl; HttpOnly; SameSite=None; Secure; Path=/; Domain=hcaptcha.com; Expires=Wed, 02 Sep 2026 20:55:07 GMT\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"7ew4HdkghJn4_F8VuhGpwt_O7jSUgGoZe9LBXkapwkM-1788380707.1270103-1.0.1.1-9P39pbwaZEkgfqo8UuKQojU9wIuay7VoEg9tdDiJuoyKVEI_n8w5171DbhzPm41B1beY58EhWufjMQAPLA3dJzilhj1.PEpdpXjixvRWb5KgfTkx1qOEWqQpNOeM_KWl","quoted":false,"path":"/","domain":"hcaptcha.com","expires":"2026-09-02T20:55:07Z","raw_expires":"Wed, 02 Sep 2026 20:55:07 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=7ew4HdkghJn4_F8VuhGpwt_O7jSUgGoZe9LBXkapwkM-1788380707.1270103-1.0.1.1-9P39pbwaZEkgfqo8UuKQojU9wIuay7VoEg9tdDiJuoyKVEI_n8w5171DbhzPm41B1beY58EhWufjMQAPLA3dJzilhj1.PEpdpXjixvRWb5KgfTkx1qOEWqQpNOeM_KWl; HttpOnly; SameSite=None; Secure; Path=/; Domain=hcaptcha.com; Expires=Wed, 02 Sep 2026 20:55:07 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":348536,"size_decoded":101233,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41132)","md5":"e2b56fbeb12c46d2dd857c4dec975add","sha1":"ec56485b9dbd82bf3a21e233077e9aed2af9f644","sha256":"521b9ca61b59188d42990a32c6bf26fd69ff9de319601ccb1475bcf5085c04a3","sha512":"f1f9d27d999f7084785e5a9168600d1b74c2d78bd359595bd37a043828dc6a00e83f4af20d0fb677a90e2a5ebf02a44e89ba4f306d15e0085efa8482f0a9bfc7","ssdeep":"6144:Fwdl5h9GiA2zuXqp4vOjwVhY6LqnaiUuh6ySUtk803f/Ir7z/xj6M4eNlFDg6oXw:aluKP","tlshash":"7174847f1350563b53f612d8a4de290f6bf6d416686868ecf7326ceebc9e8430035a25","first_seen":"2026-09-01T08:26:59.010442Z","last_seen":"2026-09-03T00:11:23.665674Z","times_seen":277,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":5,"connect":12,"send":0,"wait":31,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/favicon.png","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:07.911Z","timestamp":1788380707911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:07 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 03 Jul 2026 16:50:33 GMT\r\netag: \"6a47e859-238\"\r\nexpires: Wed, 09 Sep 2026 20:24:39 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 28\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OVkwhmO0MSr1RLQbDXdeetivu6tNx6GVouXuGPVywZRpBxJXXEb4xzgA%2FCWSRk9YRo4rwVqMZLEKfh4fA5%2BJjfMm8aYQ0%2FBewhCKdsSYlLWegv1FFTxppaVQcjo%3D\"}]}\r\ncf-ray: a34f3e007d22c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 568\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":568,"size_decoded":1298,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"ce520b1c02b9a95e17d19cc2a2f7227d","sha1":"aad962cdf388a48c67b782b703195ff2261e8e24","sha256":"bf2892966b0835ecbcff7a009f05d3a3b4bc0931c74d300b9bb692a82d557647","sha512":"d4fa4309e91786ce67abfef8273a9ae9411ae49e7af70a9c862382b580d79714a37ee3b7e84c199126d6457786c2d75d5f7bb47bbf109e0c4320569f0d16b589","ssdeep":"","tlshash":"9ff096db3a98a46c4f0680d22d31f6fa953c8ddbf081d00841008475c7d6c39380a4b1","first_seen":"2026-09-02T20:25:56.456754Z","last_seen":"2026-09-02T20:26:21.46947Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E46fbf940.62a3ef92.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.927Z","timestamp":1788380704927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E46fbf940.62a3ef92.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=szhp6AmVGLTXzHLGnmAy1uvVuHdg4zypVUwI8RWl3GyQikQ26gQlq2PbRTPTZ5mhlp1JFAZ9XTkIk4oyTE5Rxy8S0v%2B17rJ%2B6qM0%2FbiJ5i%2BBwas%2FRnuTowWjydA%3D\"}]}\r\netag: W/\"6a96c513-2ab6d\"\r\nlast-modified: Tue, 01 Sep 2026 12:29:07 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: HIT\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dedc847c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":174957,"size_decoded":56742,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65314)","md5":"5e20714f1dc1b1db64e7f07cc2a133f4","sha1":"07968dc6f2ea43e6636d8537e609a43e98842e9b","sha256":"33a385f700f5fbdc1f941cf91f1ed385ec6e4212e7923ef7a81a26ab96f3f6e8","sha512":"1938c9c4da50d999c02ae5a2da637d62018755617b0479e212e07b2081af202c3960c872679794c8f32317b6f35ffa392d21dca8710e58a9b45ae4d437dd3146","ssdeep":"1536:IBVuQlGK3dkcTXxZwtktSHe5z7uOs87VRH8RKVdQzrsN8lxI07ztK6aH7J9UaVqy:ANxBM9KVaFTtKbV8WbTY0x6dK+y","tlshash":"df0419c87381712686a721a4502f150ee23b7a54290b4694f37ad4d6bc7ca8e71bff3d","first_seen":"2026-02-08T21:15:07.868945Z","last_seen":"2026-09-02T20:26:21.471081Z","times_seen":84,"resource_available":true,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":321,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Eacdbd055.42adbc9f.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.960Z","timestamp":1788380704960,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7Eacdbd055.42adbc9f.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z%2B2PBlO7iYMW471OLfm5JrlfS5LxVfLH6wWYPaq4lrNGneKmYbX8hMtlvuCDMoGdvKIIQdBgiCLtDSQtj9hW1tRJ18j7ibmMn2yppznWiTLO2FG%2FU5UBWGJDCWk%3D\"}]}\r\netag: W/\"6a98474c-a3fd\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee0860c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41981,"size_decoded":11529,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41319), with no line terminators","md5":"d3ffb53fa07fdc36439d106b2290981c","sha1":"0b509e6d43d9f70561fcd5969b3a5812d8315b76","sha256":"0573292eda0ba7bb17979162f9692b20a21f063191c6283e6b09eb72f0d7b151","sha512":"38550c9ba7cee3931e265c7341dfedaafeee5b8596b9fd2cc6a507c955cf447631d215c4749fe7d5f74a6dd918be6f0203e8d453d4d043beac3da282ac56d528","ssdeep":"768:AKCyqQGUEwWXtrLAAWwM94Z3Yx2yyXsHTSkOBXT1:AKCytEZXdRWwm4UDyXsHhY","tlshash":"7613b50a71e7953d5e2bb03524de3508b03a19c5a118c28fffb4c999a9b4d481f3fa6d","first_seen":"2026-02-08T21:15:07.813252Z","last_seen":"2026-09-02T20:26:21.471755Z","times_seen":84,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459W1hyyTh89ZNpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:07.127Z","timestamp":1788380707127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/montserrat/v29/JTUSjIg1_i6t8kCHKm459W1hyyTh89ZNpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nvmp.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21500\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 28 Aug 2026 12:41:06 GMT\r\nexpires: Sat, 28 Aug 2027 12:41:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 459841\r\nlast-modified: Wed, 06 Nov 2024 17:30:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21500,"size_decoded":22313,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21500, version 1.0","md5":"a3fd0c427e31c0cadb48607ee8c7876b","sha1":"9c4d089ec8d829275aeba85fc69b82b6ea9acee8","sha256":"42903388b3eb583d6f076ad495f2d7ac4baef468d78523edfa20a475c61e85bc","sha512":"ef4c9f0e5d40e7d86875a5ebac56f514b0c6bc4a7ec573482f457ecbec975daadbeb7a64caba605e378c125ac20f0ab3ecbbad327b1f541ae68bf6b327427823","ssdeep":"384:ShUFQO5Rk/iKFhAabUtC7gKEbh3iefAOuOQxX7Bt7A:CUGO5ciWAabYC8ryYGXE","tlshash":"0fa2d188a3438a424ca761b49818d9d40f7967fdef8076772fe50e04d5a2d8553e9f2c","first_seen":"2024-12-04T16:27:13.476598Z","last_seen":"2026-09-02T20:26:21.398635Z","times_seen":261,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Ef764b1e7.69141c52.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.995Z","timestamp":1788380704995,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7Ef764b1e7.69141c52.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UTxiC5kypSwoR1lCt6dkFIai4gRci3DYzTZUnv1OXe5t4yw7QQnP3ljhyQsYRVUkEcHw6eXgV1V3XjpQCff1vByuLkMOULmcWTm1elvtHKW8Bp2WRwVdRjmb8ew%3D\"}]}\r\netag: W/\"6a98474c-33872\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee387fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":211058,"size_decoded":66567,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"481baf00e0e56791a1bb8ae9aafe7a0f","sha1":"98b8327c27b1f0f5a7c2d9d227472db3461fe8fd","sha256":"3fff509b76de9de9dd5c7cfc81c728a6ed43ead4c83c70829268aeeab49cb5ad","sha512":"cc970ad4547b600b8c4d6226240cb968e0ba2d2addeac5c8806f7b39f5aadca1885ee79896b5083c2c20b73b9b329af265e22df82cc68c3968987712fc185c98","ssdeep":"3072:Q+/Q6xzwLADXUaP9TC4lqIE+f6AorlkJ68f+lIblx:QvLedPlCkf6M68feIbb","tlshash":"96242ad9f398246691a363e950af12464233b50d280bc9acb93dc9e7a838d4d313ff75","first_seen":"2026-02-08T21:15:07.930817Z","last_seen":"2026-09-02T20:26:21.472457Z","times_seen":84,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":274,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Efdc6512a.2b2cf337.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.998Z","timestamp":1788380704998,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7Efdc6512a.2b2cf337.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xfbt4MQ1gu%2BdwEcSg26V4urkAXjRn3udSm0p4VFn1w1iVL2GSTCXKdZ5LolJPeN%2BsBYmuoe8PI8rqd8uf6zJT0LvTlhz2BvHw3Mi%2FOCps%2BKAwN4v%2FDKCHAxbBk8%3D\"}]}\r\netag: W/\"6a98474c-3beb\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee3881c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15339,"size_decoded":6169,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14730)","md5":"983ca1c037656204e173f81ab9b6d866","sha1":"96f55349063d612ecdadabd717d504cead9d3ea1","sha256":"fa168c9416ce1c7b3feacedf3cc788323ee84be0b8dd935e37ac909636f7cab6","sha512":"8f71255808b022c4f2f9876d180e63d237fc468a2117860a1defdb34e4b3fad0a2c59181fc5cac3ef0d3aca9b594dc8395324b94d626ef625a074332c3e0ca20","ssdeep":"192:ku3B1ceBZ5ErK1u4X+7CrV7KWjWz0A4GiWKwuDpAHY69r96tlQtlctlytlZhK/HO:keBuZrKI4v3A4S2gVhmYLOJC","tlshash":"7f6284ccf6a6b4261b2734b4613f110be37ab564240a8094f395e4db6c3d15ea56bf3c","first_seen":"2026-09-02T20:25:56.548602Z","last_seen":"2026-09-02T20:26:21.47346Z","times_seen":2,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/css/app%7E53ca99a6.e016715b.css","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.007Z","timestamp":1788380705007,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /css/app%7E53ca99a6.e016715b.css HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tf0faoQDzApsk5IaAjhWj%2BUlLUh9X1GuJ5icwyifz5zSiS%2BJLMPUauzDpjKfcbUh6FHOMtrIq72RNKhJf5i8vgmcOgm%2FmIEKXTwb7MxwzikughIHvPE10AGH%2FEQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\npriority: u=0,i=?0\r\nage: 27\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a98474c-3e\"\r\ncf-ray: a34f3dee488ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62,"size_decoded":766,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"be24bd7d49d39370e836a6a5f638948c","sha1":"4c6c9ca4e8f36208c92cef3ac200cbef679bd52b","sha256":"3e65ff278b6467926416de3d650994f157aa527c42fef1efb7659332ad8e65ce","sha512":"75667940dda1563bb6029019f08b85078265faecf48c2833b58c9e10ffcd2ec799248cad065bcf0ece8ea1e33f7716728cf443b087484da1a805e0a221d0ee05","ssdeep":"","tlshash":"63a002b5317d832435358507a499acda6a646bed10091220af847c1548113ae6b055c0","first_seen":"2026-02-08T21:15:07.691557Z","last_seen":"2026-09-02T20:26:21.474915Z","times_seen":84,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/css/app%7E7e769104.36733c41.css","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.013Z","timestamp":1788380705013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /css/app%7E7e769104.36733c41.css HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gMySjVSy7sCwnwH5O%2F5oXzmX3VB8wVHgJvH5v1whhy3DMKzJ7Cma8Ej0z4AZjXQj1eVIYpTsGP948ll87ChTjAQlbeN1Hg%2BlVAoYudanZKvHWmfgZ3tsa84nQbk%3D\"}]}\r\netag: W/\"6a98474c-dae1\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 26\r\npriority: u=0,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee588fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56033,"size_decoded":5385,"mime_type":"text/css","magic":"ASCII text, with very long lines (55854), with CRLF line terminators","md5":"288b61af1625b31cb6441df1bc745373","sha1":"90b8c9649fc5f9259c62c7317ca78dee0fd7ef78","sha256":"4410024f17825ca94bed925988d2c7ceb5c4b7b8e921584f23b5cb7ece12c1d6","sha512":"266922ec81ed5161a7362b746e921258f56f7b5560be1082fd323c6059827d360227b113037faf15c2c87cfa084b1730716dc23d2a865ba2738dca8d205ed5de","ssdeep":"768:vkZcIOIVjn46IcI9PGwQ1OAPkWDL32ye5trKem0OTbsys9:vkZoPGwQ1OAPkWDL32ye5trKem0OT6","tlshash":"df43f8af5891229991234f67c7cc5ea8872dc66314721cde33866c4b8b46fde33ca617","first_seen":"2026-02-08T21:15:07.705575Z","last_seen":"2026-09-02T20:26:21.476184Z","times_seen":84,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/css/app%7Efdc6512a.cb99256e.css","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.024Z","timestamp":1788380705024,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /css/app%7Efdc6512a.cb99256e.css HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2WYzNN8kCFbDc8xZo92oNl3TBQorhEVpzw5n0btWRmEqJahyODBrU0rI23UcL07mTo%2BKnl3aKY4sf7DWbivUU4gxyIm9Pvkdj3AQLrvGEM8I4OnXs9YG4uM4VHU%3D\"}]}\r\netag: W/\"6a98474c-2a13\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=0,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee6896c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10771,"size_decoded":2769,"mime_type":"text/css","magic":"ASCII text, with very long lines (9766)","md5":"2e75bad49f6162066be30898e6da94df","sha1":"214514c6dc893aaa42e30adf784e413cedc65d03","sha256":"de63c99299114beb395fedab3f202fd672c97f3a5d59dacf7775f191da938edf","sha512":"e018e7a353c9ae292ae7165dba0c29bce1184d4848558a16d9a5cd731164c72d5dc912b42e66fe4b7bf556f4c9e887d8336f3557d5fa78b953d5f27bd7f515d2","ssdeep":"96:G5YlOr4J45Gy6GjUAtASt9ANAU63ULMnGYbB/D1x7DdIK5DcFX0mR0pxKsDiCraw:kYlhC5Gy6G9yYiSh39n7FdGlu2Craw","tlshash":"6e22efa1ec8d51c26b34c997eb897358c184f73dc7441d8bf26b342e09d676642ccb6a","first_seen":"2026-02-08T21:15:07.777091Z","last_seen":"2026-09-02T20:26:21.477196Z","times_seen":84,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.instantsearch.js%7E6432e5c4.0b783dc7.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.067Z","timestamp":1788380705067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /npm.instantsearch.js%7E6432e5c4.0b783dc7.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6FzMo39lJfcA%2BqEb0Nbk%2B2f5sILvJ2PncKPyxtagT37nPDoMhJD8%2ByuLc38i%2F0Fz5kgkOvhOYMSuJyeKf8LXjllwSuEHWjvbycocEX16vLTbIGsjvej20SNg1vY%3D\"}]}\r\netag: W/\"6a98474c-101a9\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deea8bcc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65961,"size_decoded":14267,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"8f17e788114540fab023e492ffb9369f","sha1":"2c17846860d3372412cfee19b5150293211c9eb7","sha256":"5e5ac4a4bf0a158c664aaf6f99a7d132dbf4e31a05b3dc5b7543247d95b2b2fd","sha512":"b14cd275cbfcdea5ef68292b2e37f931ca453569830658e1c086d3f36b947d4694c5b18354d70c2d514769c791068075cd1a2c9787c213e44163e8c43a707fb4","ssdeep":"768:sm0rr3OSnUQry8UtbfgRDtcveFawetC7sj6achROlI+Gkj3A:Bk3dUn8qb4dew/QCYuCfTjQ","tlshash":"3853c78876d5b5da06e760a0847fb607f0359d16700ee150ea29dec2ac18dbf91e7c2f","first_seen":"2026-02-08T21:15:07.907624Z","last_seen":"2026-09-02T20:26:21.478287Z","times_seen":84,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/mdi/2.5.94/css/materialdesignicons.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:06.644Z","timestamp":1788380706644,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /mdi/2.5.94/css/materialdesignicons.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nvmp.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Wed, 02 Sep 2026 20:25:06 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 111\r\nlocation: https://cdn.jsdelivr.net/npm/@mdi/font@2.5.94/css/materialdesignicons.min.css\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230212-FRA, cache-ber1080037-BER\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding, Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YpgIdwrss7SkmblMFBOFyipLmAZlWiP1KAfOfX73IghBwq1YLzxYXtMRa%2Funko2YtZzDNnICC0AoeBWyzVFPoi%2Fyk1JkQ4eyzCX0E1CQJyKmTPNeC6MKnr0WO8kZTaO%2Fjmw%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a34f3df8a88956bf-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T23:18:13.859488Z","times_seen":18244445,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":0,"dns":0,"connect":2,"send":0,"wait":100,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E30ac1eb4.3abf3b61.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.919Z","timestamp":1788380704919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E30ac1eb4.3abf3b61.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EuwUUm%2BNXakRJQ1NOneI2U9%2FYRHAHWmCsuWX6cNR4e1%2B%2FAJfXRCvfMsK44qTBICgOSEBgKJ5dhWGB9J5Q4OZN%2B1coMrtwu%2FS%2BzGrJW2x5ZgbCgNXwz8jKl3SA8o%3D\"}]}\r\netag: W/\"6a98474c-3616\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dedc842c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13846,"size_decoded":3332,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13789), with no line terminators","md5":"39659864d3003c8c3918c3bbf32db02c","sha1":"e6f99a4e0c798d4f44334a9f7040ed85ad6e1815","sha256":"1f86cabea73f5b17490f8a79eee0d371cf995b1eac8da3d06f63de618452ed6a","sha512":"af0a7434ac50bb9eee953e34001912310e6a573e3e308891bb70c514119e0bfd5296d34aff8c8c22ed73cc3bde449e5d6e0c610fbeede7fe6d16cfcfb257e1cf","ssdeep":"192:NNoSbvGy74Qk4Ia4Uf4mZ4rxDLR1bdx4rPaabWitMj9uMwKakMyzi8o3CVbWaHJW:xey74Qk4Ia4Uf4mZ4h/IOqKlbo3Ck","tlshash":"a3522d9e3ccee64923573522241f354cf2b6645a784ee196a718c4e3ee1894d7233fe8","first_seen":"2026-02-08T21:15:07.786255Z","last_seen":"2026-09-02T20:26:21.479217Z","times_seen":84,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/static/vendor/roboto.css","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.876Z","timestamp":1788380704876,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /static/vendor/roboto.css HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2Fdz5dm9MR3tynYUXOS559khVzZe8r%2FZG0fS1puAEOaeTQCRpR%2F9Ba59BHTh1YNCqDqnLBIBwrDFDgRch5Wr9lZ1QGhrfyQ5nnW8QXiCHrTKA%2FKgo7iAeRlhOz4%3D\"}]}\r\netag: W/\"6a98474c-7f80\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 26\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3ded7829c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32640,"size_decoded":2447,"mime_type":"text/css","magic":"ASCII text, with very long lines (1572)","md5":"396f6bccf906c6bede4832ddd5258654","sha1":"a4b8ff2e256c0b8a6d21cab52f952d09b4e09a37","sha256":"188c5866bf1cabf8ca12c219bd31c728364d722b779bec67c79f65535f49a2b3","sha512":"971db133187f02b25d9a7f5a690ff9e8ef2090f7648f7c7de304bfd4511c7d37efd5a6d1735114d648b964de5c1add7a362c9e7982c2cbb9e6f400ba4be73909","ssdeep":"768:DFcFtFUFWFz4F4LFvFTFBmZuwzS4vzHQLIzhzf4iu6bAzIWzE4NZllqdyMzO4j/Y:oQ7cEKB","tlshash":"2be21e610817400197835ce223cdbf35fe0f92007241d0b5abfcab6baddbda652693ad","first_seen":"2025-06-26T08:46:02.857648Z","last_seen":"2026-09-02T20:26:21.480066Z","times_seen":85,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E7274e1de.d98259c6.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.943Z","timestamp":1788380704943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E7274e1de.d98259c6.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hfxx0uD%2F%2BpOLqzZ1uUj0FxPWb5QYVtsl4fbZFO7mEHt2o%2BJuHoyDEDoNW3LsS69n68SiNtow9J%2BTdu67dHYTT1LHYLHjjy2WolCURr4y7pfNLtfCfcPsBQIuPGg%3D\"}]}\r\netag: W/\"6a98474c-10aad\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dede852c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68269,"size_decoded":24491,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28498)","md5":"f7fde58677baa569e963267f1f8791c1","sha1":"08bdfc001e59a9ab53d0510567eaf74d59c29f9f","sha256":"d9ffa07e4989bf7d0aa2b0f85e925b0f89d8a126b59605192eab400d5299f396","sha512":"28bc7bec5b8f6f2009c25f373c87de5a106d2212ef175acc57e9ec3e3cbbb061c7f4da3abe498bc5c4f5938865460e4b447a52a78980510f1f7e30d8d5bb5bec","ssdeep":"1536:Qmn8cI8g+Eck+voYItMe3W2r/v8v7HLpG4QJddZ:Qmne+EsmMe3FIHNGrVZ","tlshash":"c263f8c8b198b4a153bb74e5043f214bb177742612098a98f225e5deecbc6de903bd3c","first_seen":"2026-09-02T20:25:56.446728Z","last_seen":"2026-09-02T20:26:21.481088Z","times_seen":2,"resource_available":true,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":299,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E8f033120.ee8c4aeb.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.951Z","timestamp":1788380704951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E8f033120.ee8c4aeb.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RKavsI%2B8UkjI15KCcCLClAqO8r52lltY89g7OjtiQC1iG%2Bo0C5wv%2BCmKBnzrAET1i92B4n6%2BXe7TAVF8RE4q99MZRbRMlxXNde2iWxaeEqBOLKZPLUR%2F3GR4QMA%3D\"}]}\r\netag: W/\"6a98474c-c80e\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dedf857c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51214,"size_decoded":14989,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50106), with no line terminators","md5":"46b4a86856ebeedd9176b1483b54dd35","sha1":"82b9ad1ce238ea2ae012798d1d7c0fb8b8e9ac18","sha256":"e3efd2b89bc01968fb5d3af82d1e6f670df0c4c791e4dd0ecd076ea1cbbf013d","sha512":"7ec615f5c9b463900614c28506583e613ba21a31b0c77885a6addaad40f7d54df42842c9a9af46e744f8e543df6462dc086ad812ea63462e108179cecc835077","ssdeep":"768:hYpArKbg8AebPZypPBiTEsNdyStR0dpO13lWJ4vmoytvVxN:hYpAr38AebspPBiTdyStq6114wytvt","tlshash":"7433f80470e7e07d1d6b9126100d6914b07a3aaa9115d4cbf7fccde597a8c182f2fead","first_seen":"2026-09-02T20:25:56.510315Z","last_seen":"2026-09-02T20:26:21.482437Z","times_seen":2,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.lodash%7E2930ad93.38b6ef55.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.072Z","timestamp":1788380705072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /npm.lodash%7E2930ad93.38b6ef55.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F09oisE77NKV66FIF50XZnUiESQUuDJ5vO%2FT3W%2FMKtg%2B%2BdZ04xd2Rkw1A8QonBmAaz1OjvvnMo3WPKkrpjUUC1u69ggsEhVVcasPfTeo5M3F5jBM3UiJI3UuvHI%3D\"}]}\r\netag: W/\"6a98474c-d0df\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deeb8bec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53471,"size_decoded":18499,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (53471), with no line terminators","md5":"a9f323c1d8c5d2ce0e267f8712463caa","sha1":"28e3784575ef759be1681f7d2be41630a93edc71","sha256":"8defb2430cd9299a9a5f8632e07695bb0c4ecc21a67dc9f60dc9da4160f67d9b","sha512":"518f0f75d93cabf1b65a21854a4e7fa9d024341dc7b3bcf8143fdfdde46fcb480774c48f828944f09caff5ca61f0cabb3949825d7a7c26977a74d5958ac6bfdf","ssdeep":"1536:dTBBrGzo+fKaS+tyLnWPf/O6rdPKKVrH2RN3hGrgHXowvFzQ4BSG1MQHhvg0ITSZ:6/1Kc7T3w","tlshash":"2a33228dbac1f0545373a92ac22fb91bb2b92946f50edad091afd5d09c3859f4233c1d","first_seen":"2026-02-08T21:15:07.950258Z","last_seen":"2026-09-02T20:26:21.483501Z","times_seen":84,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":175,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/vuetify%7Ece053847.5fe52b32.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.106Z","timestamp":1788380705106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /vuetify%7Ece053847.5fe52b32.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1HK16ASgqbadrnGzb7w0JZjlUWW6uMYq9fsNm46zj5rK5WN%2BkPd1hu6rZ2cwxbl2arSsfyYCz01OMFRFSZ6DphKx%2F6y8eoWEXJUXrTDzaH3ekL%2FgZruSGhQgJ64%3D\"}]}\r\netag: W/\"6a98474c-10d5c\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deee8e2c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68956,"size_decoded":21760,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c686feb1699671326c8f5e374e79a3a9","sha1":"41117a172baf9a32df0ac455697c55dc238972ba","sha256":"e710bb3ad77d14de69fba5516ab4510d42157490243de821fbd30af61ec76d4d","sha512":"19949b5e22e6e4442bc1069233ba281358477d595e45de5c56195936394585968fdb6f4b0c1cb6b0629f7e1281f5d649e447b47148d4be45bfc1857b33baae06","ssdeep":"1536:jeMZu0le7i71lcGHnn5AjL0vTp0V78iMLOU34jJFFRvP47DsY:I7iplcGHnn5AjL0vTp0V4CjJFFRvODN","tlshash":"a363ea9eb1c2b06506a772f4501f6307f26724a4b40ed0c8fab9e4d26d60e8d616bf7d","first_seen":"2026-02-08T21:15:07.7098Z","last_seen":"2026-09-02T20:26:21.484295Z","times_seen":84,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/chunk-2d0daf15.f0f973e6.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:07.018Z","timestamp":1788380707018,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /chunk-2d0daf15.f0f973e6.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:07 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xqwxKKL50tA0re0HM%2FqxeSQvdjkPNl1cIKXK3Ry%2FIW%2FeeDnar6gjoRv5zSTDQLgUik54zfnZy%2B7Eywtlhpr4aBFdrWBm3UGz5Pk8JQSSeNcmADAzGCxjuXWOpls%3D\"}]}\r\netag: W/\"6a96c513-1dfe\"\r\nlast-modified: Tue, 01 Sep 2026 12:29:07 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dfadc04c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7748,"size_decoded":3705,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7748), with no line terminators","md5":"4ba9971f89e1ad2943038c9c3903e0ec","sha1":"8411993d969609ccdb924c5277af14061e6287b2","sha256":"ae8cc2b03a0eff86206e7b6a1e7ae094a1b3e22f29450288152b6eaa8e684d16","sha512":"0b503be5f6a197fdc1bd1de401062484aae31218a3025af9e371e45919fa50ce6d5c65459568e764c25160b3d70aaa8988f7413ab275df640233cf3e66889201","ssdeep":"192:C9Z6XH7HHb4c90w5rGRsdOfCzjFx4WYKuU/wvzoF8:C9Mws0wv3fVnJ/A","tlshash":"42f1d69c72c1f9571fe76990012f6144a223687e1c4e68a1b795e8f56e3888e8037f78","first_seen":"2026-09-02T20:25:56.439378Z","last_seen":"2026-09-02T20:26:21.485083Z","times_seen":2,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/socket/?EIO=4\u0026transport=polling\u0026t=Q1Zp5gS\u0026sid=WjVDjLLSAi2frOSUABTU","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:32.063Z","timestamp":1788380732063,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"POST /socket/?EIO=4\u0026transport=polling\u0026t=Q1Zp5gS\u0026sid=WjVDjLLSAi2frOSUABTU HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-type: text/plain;charset=UTF-8\r\nContent-Length: 1\r\nOrigin: https://nvmp.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/session/login?redirect=%2Fmarketplace\r\nCookie: XSRF-TOKEN=Bsq02QFQlsxQz6bCsmWQgtzLX0mjK7b9vt_XJX73zT8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1,"data":"3"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:33 GMT\r\ncontent-type: text/html\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: private, no-store, no-cache, must-revalidate\r\nx-cache: MISS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tlp6bByuLsJp4VY6KHXeoCJRfBpTWUDB8jpR%2F649IH523Mc8jbpKp12E3WHb2RbQXfnW%2BmOfBvH7eLTJvlqdancAOWo3ECE5UV0Ji9doLtoS0cdnZOTLCHjicIc%3D\"}]}\r\ncf-ray: a34f3e976e21c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":670,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-09-02T23:09:02.593952Z","times_seen":455387,"resource_available":true,"data":null}},"time_used":1140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/vuetify%7E0bd4cf6f.84198bf9.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.094Z","timestamp":1788380705094,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /vuetify%7E0bd4cf6f.84198bf9.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=maUIpQoRfMReljI9TxWhd8WPM4qK7QDGfMB%2BbnnM2vC%2B15BGeeyE6z6SiVA3E35gcWXPtxOzADmsqRzYr7rZ8L4AbHNW39B%2BAeQqzqxDly%2BcWpwQe9lessJibqQ%3D\"}]}\r\netag: W/\"6a98474c-9998\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deed8d6c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39320,"size_decoded":12203,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39320), with no line terminators","md5":"7a6ad28102530b2f36573525da54ce6e","sha1":"276756e173a841b2c42fbabab57d7c3413a7dea0","sha256":"26a9304e3b39d432a592428ff13e0b442bc718848f57aa16edff19b02f704d1f","sha512":"e0f6bcc23a7f40af06add0b9cb8d0c7d51838d8d41834a334f7985ed6d601421b536fe91b95af17281495cdd0aa7892835c8c88e2d670c44ac86df1b344c591d","ssdeep":"384:XCzxs6XAuxxvWeyJ4GK5GFqJJL2jNJR9ou9gfdFYr:XCzxTQuxsEGNqJFAJRKLQr","tlshash":"3b03d74ab0c7f4150bb3b2ea501f1206f26a58c4b81a91ccf9b8d5de6e58e4d113af7d","first_seen":"2026-02-08T21:15:07.849628Z","last_seen":"2026-09-02T20:26:21.486184Z","times_seen":84,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.854Z","timestamp":1788380705854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 20:25:07 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 5845\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1492621\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:12:09 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BHKriyI95J0R3huZ%2FjitQh13ravOR2nNx%2B%2BLQGXr2cr7za5pKJhi6zZmtEdi9OzmA0wDvyjzoPzDqd7KifRgNlkrQUf3eaPfuv%2Fu7XPCHIH2bZvS0ug%2Bhm7P5cGX4SL%2BKTqLmSqL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a34f3e008e435687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70815,"size_decoded":6857,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e9365fe85b7e4db79a87015e52c3db6c","sha1":"2e2b5eb6e08f0f3d11fe0ada97c962a23ba6a0d9","sha256":"dec3e9f0190a504ed0c8f4a5e957c107206ba106cac4a1bbb6cbac6369a16d56","sha512":"ad142d178576c2d02f5eca2ee22500b369171e2dcb8fd344ef1251efb0c4ec61ecc6063d4535b2f77773317803206f13a224530f8e55b0335d4e251a80e15e64","ssdeep":"768:/KvcqyF7I4rb84dLM+JKvcqyF7I4rb84dLM+k:B/nLMu/nLM5","tlshash":"40631be8e80900d26fb1cc03ef62b7ca1685f0a3f9d10dd8f17a998c29d16551597fab","first_seen":"2023-04-05T03:25:07Z","last_seen":"2026-09-02T22:23:15.849507Z","times_seen":10901,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":4,"connect":10,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ba0ab75608c4.w.hcaptcha.com/logo.png","fqdn":"ba0ab75608c4.w.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.18.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://newassets.hcaptcha.com/captcha/v1/3115eb7fbcf7e72ba1ba0f0894c95450cb2c797e/static/hcaptcha.html#frame=challenge\u0026id=0f8673f7bbq\u0026host=nvmp.live\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=ru\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=2f20b3b0-44ce-404c-97be-2c1c2d641422\u0026theme=light\u0026origin=https%3A%2F%2Fnvmp.live\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22ru%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","date":"2026-09-02T20:25:07.631Z","timestamp":1788380707631,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w.hcaptcha.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 01:50:48 GMT","end":"Tue, 17 Nov 2026 01:50:47 GMT"},"fingerprint":{"sha1":"3D:9E:AC:1D:EF:71:F1:A9:E3:C5:02:19:80:CA:15:0D:03:CE:54:D6","sha256":"5E:54:2A:52:E9:AD:43:D7:1F:CF:1B:BC:C9:13:D3:8E:D9:E4:E9:49:C1:8A:59:F3:4D:09:32:07:87:C3:7C:00"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: ba0ab75608c4.w.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://newassets.hcaptcha.com/\r\nOrigin: https://newassets.hcaptcha.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 02 Sep 2026 20:25:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 2593\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: no-store, no-cache, must-revalidate, proxy-revalidate\r\nExpires: 0\r\nVary: *\r\nPragma: no-cache\r\nTiming-Allow-Origin: *\r\ncf-bgj: imgq:15\r\ncf-polished: qual=15, origSize=85005\r\nset-cookie: __cf_bm=2eYoBiIl65WKpQBn918rYriE_mSKkmF16TTtmnRwVgs-1788380707.6514897-1.0.1.1-oOrYv5OHO52qpD5ZrH8r_nylAcd3PbTplKg8_B90kTGoTpSvZLZ7ORwQdpeuxh5WVVKNj66qyp8uhe9am_HeL_rcKjYYsKZAVir7GXVNv.ApABZdxusK38SViNPVGseS; HttpOnly; SameSite=None; Secure; Path=/; Domain=w.hcaptcha.com; Expires=Wed, 02 Sep 2026 20:55:07 GMT\r\nServer: cloudflare\r\nCF-RAY: a34f3dfecd42b521-OSL\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"2eYoBiIl65WKpQBn918rYriE_mSKkmF16TTtmnRwVgs-1788380707.6514897-1.0.1.1-oOrYv5OHO52qpD5ZrH8r_nylAcd3PbTplKg8_B90kTGoTpSvZLZ7ORwQdpeuxh5WVVKNj66qyp8uhe9am_HeL_rcKjYYsKZAVir7GXVNv.ApABZdxusK38SViNPVGseS","quoted":false,"path":"/","domain":"w.hcaptcha.com","expires":"2026-09-02T20:55:07Z","raw_expires":"Wed, 02 Sep 2026 20:55:07 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=2eYoBiIl65WKpQBn918rYriE_mSKkmF16TTtmnRwVgs-1788380707.6514897-1.0.1.1-oOrYv5OHO52qpD5ZrH8r_nylAcd3PbTplKg8_B90kTGoTpSvZLZ7ORwQdpeuxh5WVVKNj66qyp8uhe9am_HeL_rcKjYYsKZAVir7GXVNv.ApABZdxusK38SViNPVGseS; HttpOnly; SameSite=None; Secure; Path=/; Domain=w.hcaptcha.com; Expires=Wed, 02 Sep 2026 20:55:07 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2593,"size_decoded":3314,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"7e533c8f377be05f502fbf0267102e1a","sha1":"5b1086b733cb9b1bab3f1d35acdf52523e3fff44","sha256":"72927851e22717afd7e0f5085c148649d39f0cc84fcd1acf9603f3eb3eae5f77","sha512":"524032999125fbb102e95dc2e4c93a59a84b4ea2f8fe13445771587face667598094cf9f86ae8a8d8dba41e586be452fa03d88d15df2f8e43fc4e87182c51ee1","ssdeep":"","tlshash":"bc5174879f5cc546d82d0f3120b64f1ad377aab5bf1d234b652474ad9ae27c314191c0","first_seen":"2026-09-02T20:26:21.489787Z","last_seen":"2026-09-02T20:26:21.489787Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":5,"connect":1,"send":0,"wait":20,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/static/vendor/montserrat.css","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.879Z","timestamp":1788380704879,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /static/vendor/montserrat.css HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iQQ%2BFaJVDRNxoYVzsyF0AF9KlNNbv6nXMHitPyr1nyUhVJFKlnFyJOxIfNAUm0ECzUJljLBRb3LqJ8TmBRVNkhrxkA63Dyr9oZS91aXihRIudtO3AeCu4Q7ICcE%3D\"}]}\r\netag: W/\"6a98474c-2ab9\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 26\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3ded882ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10937,"size_decoded":1451,"mime_type":"text/css","magic":"ASCII text","md5":"d228e2b5d3d34dff8856434360abac5a","sha1":"f2cda3ad5ba2745ed06f8291b187797bd1ddb2c8","sha256":"3964b3ed059abb9d598d8e021c61dca91666378dbd3f56486a2c353e0f7287f6","sha512":"b9b33cd182ca369bec4c44ade1cfa3430ecb520dc6912103530d222f9ebae2cf0aed74031f204b70f7c2b83323ba01ee35c98d931c4bb885730bf258b8db4083","ssdeep":"192:APcwPJFPuPJuPQ9arh9asdW99ruaaXdv94rnDaedE9Dr84aRdt9mr1ZaAdg:AEwxFGYYyElmcoPGGa","tlshash":"80328b911066e60067472cca23ce7d36ce4e61667490c536bffd2ca8ede6d261361b3d","first_seen":"2026-02-08T21:15:07.671041Z","last_seen":"2026-09-02T20:26:21.491822Z","times_seen":84,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/static/vendor/material.css","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.884Z","timestamp":1788380704884,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /static/vendor/material.css HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GQ%2FeLr5t4WF0GumEZcvA4yggzoIZ3SigUOFF5mIsMyS54mIsI89882RsD8HY5IJ9OmzkUSwHbQCamtfrRSL2NFYP828M%2Bm2z4lcmdZVql%2BPtkxmHvaGr8GBKj%2BM%3D\"}]}\r\netag: W/\"6a98474c-23c\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 26\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3ded882bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":572,"size_decoded":1069,"mime_type":"text/css","magic":"ASCII text","md5":"02a1aad7fdc14d57b1a35530f2179f60","sha1":"6c2d303328c7f4d792f06a7f3411aa9f174a5d69","sha256":"54536ef1791134c345fd1d7b264c675bb30dee22d74102dd84eea00fcefc0e5d","sha512":"808719032bc04840ee46a6cfe1ea08300320496a8e2d529c898a0e86de827094f28709bd97d1874893a7b0de7c7c6770b789b7ca7afbd47be822808a3e860724","ssdeep":"","tlshash":"aaf08125aa55554556110c86730f3f254e19401f680ac8fe87921d5c8cfb577539670f","first_seen":"2026-02-08T21:15:07.737399Z","last_seen":"2026-09-02T20:26:21.493553Z","times_seen":84,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.echarts%7E16d3814e.85faed5c.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.054Z","timestamp":1788380705054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /npm.echarts%7E16d3814e.85faed5c.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3yFnyWQhdD2jd9wlOUrA%2BhvWNU5hqb7xBMgZ1tMCVtIhqzbNbwKTANMIHGpJuBn70tvogSCkLsXSerhlQga9QC2VoZOxvFTxTN1AYs3twr2cJFVLTUsQ3yHDH2E%3D\"}]}\r\netag: W/\"6a98474c-5577\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee98b0c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21879,"size_decoded":9992,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21341), with no line terminators","md5":"8d9c5f662f522a6ce4455a54233c3ebd","sha1":"6a7d882589074c4853425495b2c9e3d37f5e647d","sha256":"c7b3b0452da64aa7ccdcd5581a95cad741b8e9a1d64e9b4fb6d56276acd42777","sha512":"dca81370822e2d95f144bddb2a644390be32544ef72b862a176847ef894cb40ca19731c9194c4aaf3f889232c789025a8caca532d0bdd9e1794949a6d5d38a0d","ssdeep":"384:vZF/fD2Q58OsA5LDhNDoW7BE+B01l+635J6wEgK6qu0j9Cn0C68p:hF3KS1hPvu3+CvfK6OCnNbp","tlshash":"38a2c598b744ba26d2eb31b999bf1407627624458c4e8518b26ae0cd7e7c41b3337f7c","first_seen":"2026-02-08T21:15:07.707768Z","last_seen":"2026-09-02T20:26:21.494491Z","times_seen":84,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/vuetify%7E85da75cb.a0494b32.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.101Z","timestamp":1788380705101,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /vuetify%7E85da75cb.a0494b32.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PtQeoblXgeqDYke5Tfaj1nKyF4VAnAMMCfHimvIa5AfAPhYGmIHnp06RuV8a8DskBYHmbRZgJuC2f3q7taghRBpiyTsBa81DOjGVga8RyluZLLlmXdoCa%2B8aAF4%3D\"}]}\r\netag: W/\"6a96c513-308f\"\r\nlast-modified: Tue, 01 Sep 2026 12:29:07 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: HIT\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deee8ddc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12431,"size_decoded":4968,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12431), with no line terminators","md5":"d3e6c419d6317f933c1e56f1693fea33","sha1":"9df9a59ba30241e6188ddb575dfeba2d5ad03e16","sha256":"dba6ba6665420a4c1bb2f054650999b13dd87dfd262d667cc73b534e341e4b06","sha512":"4806c954028e2fd636d7dbd0ad7d6ab2800c169de8de4d54b291d696d2bf247be3e0a32823ad9d315a8737081c8c154b72d7af0d7745f92c03aef986e1cb6e7c","ssdeep":"192:J9b/CsKKV4l1EUhColmc7B9aUO0QWquC6pAHdM6rTH3y4QKklm:HbL1V4l1lColmclSbi4QKklm","tlshash":"2742c68f7745707713e3b2f2e0bf520af37a1504a05a88546437eae42875da96383ebd","first_seen":"2026-02-08T21:15:07.792333Z","last_seen":"2026-09-02T20:26:21.495318Z","times_seen":84,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/npm.vue-loading-spinner%7Eb955b015.7d396a73.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.077Z","timestamp":1788380705077,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /npm.vue-loading-spinner%7Eb955b015.7d396a73.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9BNDAsYOdLmiYN%2BLY%2Fn5JR57xqBDRZGDpJ2SLp%2FO7zpGpQJ4z4lSkBKlBPsFnFbZT7E2UHsdJg6inYsvKuBsZ0vXRqF%2FpFiXZw7SrI36ysUyffzXWnRqDPVzr2M%3D\"}]}\r\netag: W/\"6a98474c-23a6\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deeb8c3c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9126,"size_decoded":2733,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9126), with no line terminators","md5":"a8c538a3c18ba06c1cf725909dcf2a65","sha1":"91875796de82e1062fe9b3f9bf53ab7aa54b444a","sha256":"0e82282e36ad335e6b90ead6fd126ecf47eda4570d7f2e59f5d614cdb9187653","sha512":"cea4cc5431e6b6da0eefbcca2ed50bdee6a277f4766ba1ef81093428520cc69335ea15fe1e880f081020f4a0288008960bcc0ac24cb95176f5028814a105ddb1","ssdeep":"192:hOv35g1Vl43IkNDxdKF6pn+ieV2wd/pcSvby7Q:hOvi1Vl4BNDxdO6pn+FV2wdxcGbyk","tlshash":"1712eb49b0e2f17c9e63a496915f1535e0564f993234a8d1f3f1cdd4aa309ac933eb2c","first_seen":"2026-02-08T21:15:07.865605Z","last_seen":"2026-09-02T20:26:21.496208Z","times_seen":84,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7E09e77756.39a37d9c.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.904Z","timestamp":1788380704904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7E09e77756.39a37d9c.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bhTglBR%2FrhMknaSadI7XySl05ah8MsaVXYy0yq%2FSPo7a%2FQw4DesnlZ1PQJpUr0wSofuqL%2BlGrzbWJ%2BvocgBO0r5O0%2FQ%2Bq%2Fajl0bQM7nCzw3%2FZUh2JLpwRXcwVlQ%3D\"}]}\r\netag: W/\"6a96c513-139bf\"\r\nlast-modified: Tue, 01 Sep 2026 12:29:07 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: HIT\r\nage: 26\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3deda838c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80319,"size_decoded":29734,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41991)","md5":"f361ebf5021c6b459775bc6ff403e1df","sha1":"1b875ea95e9cac3c5cbd75c02464a8b232b2b0d1","sha256":"ad4cdf1918d5ffe42e220c640f1f930e3a8307258a06863b4bc266e3875b29fe","sha512":"c14a5855e273530b7537a4c4ba1d0cb957f019a24ecafbb4da06c31b98f7365d8515d92770dabaf35d83c0cf92ed2a7402347e1755842fe7c85b5c5920119d2d","ssdeep":"768:NZmkQTb70nPPhxgGJtGfGBo3S3OFYi7KCqap+8ghiNfCjBmccfsOOIa+xoDZk0A3:NZob7aLUi+FYxCS8TNfsK4kSY4Sx/oq","tlshash":"e973e68db2c1b0a513e772b5412fa20ff277a954744e9480e22ae5d4bc3895e913bf3c","first_seen":"2026-02-08T21:15:07.824547Z","last_seen":"2026-09-02T20:26:21.49737Z","times_seen":84,"resource_available":true,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":340,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Ebd2a49b8.8a9cb64f.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.969Z","timestamp":1788380704969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7Ebd2a49b8.8a9cb64f.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zGuoTZho2sxrDLnsL8aF4%2FlxbbIxjPfDzmGbeI5slTCHzQVxy8GLbt4tBeTYv9JptQXA2%2BLG6ZSXyzCFMJiuyVuiNm1r4w0qNmZT4f2oWUJbCamy0MBAMLgQK7A%3D\"}]}\r\netag: W/\"6a98474c-b04c\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee1866c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45132,"size_decoded":17826,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44906)","md5":"23924fdbd67672bf009eb86dc9ba02a8","sha1":"5ce4e50af05ab31b377485be1d044ffbe583e955","sha256":"2533b405365f5cac7e4f92289cc14216927d1cc10d85c6d7e1127e2501cb358b","sha512":"5f4f7de4f0b251bf6699d0e99341be2032f55f4fce7643dcaea7b77a062c1204d631e957571d5cc70d4bd57ef8f69ee150ef2c2ff5a6e6ec201fef16ef2c955c","ssdeep":"768:lB51kUGEf5F4NNnF+FLWmytLHCz91Af2zP0NiFAlesbSWo:h1kUGsF4NVF+FzytjCz91AfGsNqAlM","tlshash":"b21329d8b386711687d7606d944f0306a1bec6997839c880f736d2d02c2d5af11abfae","first_seen":"2026-02-08T21:15:07.751804Z","last_seen":"2026-09-02T20:26:21.498048Z","times_seen":84,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":262,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Ee73b60ec.32c5f5fc.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.990Z","timestamp":1788380704990,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7Ee73b60ec.32c5f5fc.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:04 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=04N4PWsRDOcEHe7yL%2FUwdtRlGZTIj%2BTV20ncxt7ayYOmqC3IGBxxbU555c2l6ilwraYCtvGEp90dO6RqCG5x9xbEuo%2BvrP2rR3hK%2Fay%2F5pW9wlt8VJPnjM8CUyk%3D\"}]}\r\netag: W/\"6a98474c-16a88\"\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: MISS\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee287bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92808,"size_decoded":18350,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65460), with no line terminators","md5":"22b757855cd7284a19bb6410df00d5fc","sha1":"2f815d34aff6b3a251e91b513e7ac8ff6f418a8b","sha256":"ab8155c86cf56f892991addb3acd680d37b01a9491b3f224f0a48107ba962531","sha512":"29a8ffc990e031fe3889e31e3509e620ca4df06c9ef5f8609054370a0d94dc44d31dc68ccd6802d9ccbffa0dc8f5d4105159844c8135bf9b24cd5f4611dec59f","ssdeep":"1536:obOga93zchPPRtXgbRLogNhgPIAyqT8xHhF7ynOm8u8bHTCPw53JAwBMovSsNdmM:I5hsbpsQGTmHhFenRYTThzNdvTnt","tlshash":"6993081bb0d3a43e49b7b146205a2612f0373dc5a405d58df6b0cdec99ecd582b2abbd","first_seen":"2026-02-08T21:15:07.827684Z","last_seen":"2026-09-02T20:26:21.498665Z","times_seen":84,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":255,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/app%7Eff867824.7c66bce1.js","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:04.999Z","timestamp":1788380704999,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /app%7Eff867824.7c66bce1.js HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3blmzs70NE1d9bDue766%2Fvq78WaB4MCuIi6c926tVNoV3k6LsWQLpp5RdWJmH%2BRYaxsVBH%2FyxIL%2FZVFAT8Zgc17DcZysImf1KObYnSOUeCUO%2Fdxz5DsEZMlqbeM%3D\"}]}\r\netag: W/\"6a96c513-102df\"\r\nlast-modified: Tue, 01 Sep 2026 12:29:07 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=86400\r\nx-cache: HIT\r\nage: 27\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a34f3dee4882c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66271,"size_decoded":16393,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64098), with no line terminators","md5":"1486b7ffce3c517d9a38f1819386dd9c","sha1":"0d1de8e742fee247d567c42cb2bbe0fa586e5927","sha256":"4dd37798685db92ccc8c3650c5d420f18f6262c7483fa0013007350abb92e4d3","sha512":"ac75c9876fa1294a773bb6c00d2baba7494e615afab8cbfad46d20fd0c80924e7c2fc5b84d6d8079e8dd89b9bebd047f558ec4f032f08f3a90e291e2df56c0bf","ssdeep":"768:hD+g1XXLqharOOmVQJZRhAQj+BF5vRDqZ6PFBPaLzoDnJbVUdpAs5LfDDZLrSaW7:hD+mGArOFQRhEVqi/SUopFDS","tlshash":"8953b90671d7943d4e5eb73524193904f03a2d96a109c5cdb778c8ead8bc9882b3bf6d","first_seen":"2026-02-08T21:15:07.759229Z","last_seen":"2026-09-02T20:26:21.499354Z","times_seen":84,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nvmp.live/css/app%7E3addf2b8.2869de1b.css","fqdn":"nvmp.live","domain":"nvmp.live","tld":"live"},"ip":{"addr":"104.21.37.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nvmp.live/","date":"2026-09-02T20:25:05.006Z","timestamp":1788380705006,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nvmp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:09:25 GMT","end":"Mon, 30 Nov 2026 07:08:04 GMT"},"fingerprint":{"sha1":"5B:76:77:A5:7A:D3:DD:99:83:5F:0D:E2:78:F3:98:5D:ED:CC:D6:33","sha256":"6B:07:1E:89:38:BB:C1:8D:85:D2:DE:4F:3F:25:00:22:B9:1D:FA:D7:7D:6E:BC:D5:FB:F6:5F:13:23:D1:35:1F"}}},"request":{"raw":"GET /css/app%7E3addf2b8.2869de1b.css HTTP/1.1\r\nHost: nvmp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nvmp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 20:25:05 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S7oAAeJO1MyRuUbPIRyOWxT1LSRT%2FPOhx8waH5RfzwBMZ%2BMw7L4PP0G4lZ0GsoTbhJhIhwDS3GetGI0tOzbQE7ataU9CLbHB6%2F9s3OBOSCBiFh11kT3castqypQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 02 Sep 2026 15:57:00 GMT\r\ncache-control: public, max-age=86400\r\nx-cache: HIT\r\npriority: u=0,i=?0\r\nage: 27\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a98474c-ad\"\r\ncf-ray: a34f3dee4889c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173,"size_decoded":790,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"14b6c371378239e00ee841e561e42132","sha1":"8d7d6fbd51b0525ed790a71032f0f542c996e756","sha256":"7fc444dfbce2a72a7cc47a28ba0c4f44f1db3cbb53623c3a5a9c9818f1c44d8e","sha512":"39779af478def97c1e223eefa7083ea08dce2c4e6efdc9c7a3ddc0040d95fff0e8f825479744f2228f43aaeda7b07c761ed2c9d8ec38cbb37850d59518543fc7","ssdeep":"","tlshash":"edc00230909d8460be2fb1898d857d43d0112d7d58001cb6f4d1ce85d89a58a3393d90","first_seen":"2026-02-08T21:15:07.942534Z","last_seen":"2026-09-02T20:26:21.500004Z","times_seen":84,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"nvmp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}