{"report_id":"6e3e1d26-6d9e-477b-812d-444c0d9abe84","version":6,"status":"done","tags":[],"date":"2026-02-13T23:00:51Z","url":{"schema":"https","addr":"change-noww.click/","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":0,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"final":{"url":{"schema":"https","addr":"change-noww.click/","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"title":"Instant Cryptocurrency Exchange | Best Rates \u0026Lowest Fees | ChangeNOW","dom":{"size":24941,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (11805)","md5":"c35c1324d6b54a1c8c0c181723796b25","sha1":"f3846dff2f145e1630acb2367596bd46410e0a08","sha256":"f3725bed4633bb874f22518e8884ce4aeff6d7736fed20f9f686e6176c9ccdd6","sha512":"4328a05854c83103c6237c10deb5a74cbb1a5337b948ab0b5e8801b22405c28a766dfc2a2aae1661d33509f537990487cc40cc96e8e7c20fb78898bc0b3a0344","ssdeep":"384:SMXO7zo1UFu29RhP33N67Vgbx6GJRSejH7piyu4MtrUp4B4Qc0r:St7zo1UFu29RhfrzQyudtrUp4BAu","tlshash":"f7b27441f64cf7a80d03c9aa6ec1b7c8991730aaf5510ac6bbfb96d8c7df086d84650c","dom_hash":"domhasha5c3e94adbca7dfec987df2a59f2b26d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"change-noww.click/","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":0,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-20T23:00:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-13T23:00:25Z","timestamp":1771023625,"ip_dst":{"addr":"Client IP","port":43774,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 8","source":"{\"timestamp\":\"2026-02-13T23:00:25.086205+0000\",\"flow_id\":446091091373876,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"62.60.226.213\",\"src_port\":443,\"dest_ip\":\"172.18.0.17\",\"dest_port\":43774,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400007,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 8\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2026-02-13T23:00:25.061236+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"widget.trustpilot.com","ip":{"addr":"3.164.230.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2007-06-30","domain_rank":36063,"first_seen":"2017-02-01T19:05:34Z","last_seen":"2026-02-09T05:25:52.259143Z","alert_count":0,"request_count":15,"received_data":425707,"sent_data":10926,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"content-api.changenow.io","ip":{"addr":"172.66.171.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-09-26","domain_rank":0,"first_seen":"2021-10-19T22:25:55Z","last_seen":"2026-02-10T11:51:23.658917Z","alert_count":0,"request_count":10,"received_data":31784,"sent_data":4633,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ekr.zdassets.com","ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"domain_registered":"2013-01-28","domain_rank":18657,"first_seen":"2018-06-13T23:52:57Z","last_seen":"2026-02-11T13:47:20.636371Z","alert_count":0,"request_count":1,"received_data":1358,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.zdassets.com","ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"domain_registered":"2013-01-28","domain_rank":16846,"first_seen":"2018-06-23T22:11:55Z","last_seen":"2026-02-09T05:04:39.093762Z","alert_count":0,"request_count":1,"received_data":11283,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"change-noww.click","ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"domain_registered":"2026-02-08","domain_rank":0,"first_seen":"2026-02-13T13:50:25.944045Z","last_seen":"2026-02-13T13:50:25.944045Z","alert_count":522,"request_count":174,"received_data":8355868,"sent_data":83934,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Bootstrap:5","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Trustpilot","description":"Trustpilot is a Danish consumer review website which provide embed stand-alone applications in your website to show your most recent reviews, TrustScore, and star ratings.","website":"https://business.trustpilot.com","common_platform_enumeration":"","icon":"Trustpilot.svg","categories":["Reviews"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"change-noww.click/dist/5161.bf95d81af5d007aa9519.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f35cd07272d88a17de56d9c237ac52c","sha1":"86582a1eb6918056784f8bc69d678803fc039d07","sha256":"48e026c4d5c1dc7bab8d9f12647b44187640b2f6ddd93039806bbf27f8ca5dc7","sha512":"55dc21c64bf0e78cffcbdcfc772bc38fc63c534bea6a70002c409491725560cd9732fcd0934f3543e45e0cd39c2e56c294f1da6dfa991927e9d301a4b0eb9427","ssdeep":"384:6BchCs1tdhMFI5eXMqL2JPXh5Y4eVrKbfQf2XUQlCyCDt/JA02j2HPpCK5H31V6u:6Bc8s1wMqL2JPuVebof2kQQRDt/Jk2cy","tlshash":"e772c941f86579ed46ae058cf03b8edaf2593d06e13c8da1e5e4ec886026fdd1539b38","size":17382,"data":"","first_seen":"2025-12-26T02:09:57.271513Z","last_seen":"2026-04-12T23:00:03.925049Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/5353.f0bb87be921b050d7d3e.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"2741bb488284f6b0321ee14f79ea3f02","sha1":"dd8f3a3ee2fe9ef486e2ff0ced2683fdf1e3fd41","sha256":"91e318a0baf3dba2c10063f37e497b82b3d8832a68887214d64449ede3679285","sha512":"cc247e51a06972cceadef747d065b32324028423fe20545bc2fd6161dffc186ee4fbedc5a00a284a8da8cdbbe1e0441d6a8a3e6fe7112c695602013bb0739324","ssdeep":"","tlshash":"8841d7edb089744d06db4b60823f124bb37b93b55c8ce6a6a71491f0317016b43a7fad","size":2240,"data":"","first_seen":"2025-12-26T02:09:57.248385Z","last_seen":"2026-04-12T23:00:03.926148Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/9457.0a692258a80455ecb439.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"aee2bb462babdf1b3a635020b110200f","sha1":"ae257d10a0b38ed73d9b4e1a4968f3628bd12d6a","sha256":"50f666e246a192dc5a8c8300bf27ff892660b272112db9b0f84486a0f526bdaa","sha512":"a27319dadae685dc44aad309f237a590f6ccd28112e4fe28a79d31bef750c571b9fab083136533d9157350d7d1f4af2adc477caecd3c3c26eeaf8d46d18cb1dc","ssdeep":"","tlshash":"0b314070718064bc81ea4f8f73f06bd53abaa0c2b40914e1362d8c0d1a96ddb21b87db","size":1455,"data":"","first_seen":"2025-12-22T03:32:11.413678Z","last_seen":"2026-04-12T23:00:03.946996Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"eventHandler","is_inline":false,"md5":"3bc3163ddd069abcd066e45558538641","sha1":"6f8c255e009c8a8cee15d3b0b1f7a3ebbb0813f3","sha256":"15c400c27f7a1ec912d68e36e914d4ebc3e9e8f6b78865b4513a097b7d804961","sha512":"bcd277354dc795d2ca6d9874bd85c77f873da801173fffd3782e24f645609e3a6ca0c4d64e244a57a9b8cdd6f1e4a0bce20f43f472f329c24da7e745a51666f2","ssdeep":"","tlshash":"adc02bef148cb0bc9303910001770b0313128083c61354e4c0350b08399c0c6a4d8523","size":141,"data":"","first_seen":"2025-12-26T02:09:57.411289Z","last_seen":"2026-04-19T21:28:52.544611Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/main.js","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"3.164.230.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c82033c29f8f6d5b781e1feb4e846a20","sha1":"61ea3fceb2c04e32e14b605bb3350d906f82a272","sha256":"b751dc328f23e2a36ca0b5b28e90c29d50bd2e167baf8f646df4c4a21472fc81","sha512":"bbec4ec5e94903d434cb8df8ad395a296d6a33a667ad887e93f65eb37d56bde6dc20877834f07f33f653239079631a274c993439a18e3bd94aa06d8b07efb260","ssdeep":"1536:1jYYoNLcanaQl6er6exeIeKQUjcIQgjdZzQy+y4iTr0a8zQy+y4t:1jYtXOIQSZz","tlshash":"5cb37ca191e85ad29c0f836a3c181710f160f0fcfa4ad4ddbaed4e6d427298eb716d1d","size":116319,"data":"","first_seen":"2025-09-25T11:49:43.258815Z","last_seen":"2026-06-06T19:23:04.046299Z","times_seen":3813,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/7664.f508ef8e2fc2909b0bad.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"04a7ce9df44018065f7f2033a2443261","sha1":"e98bffc267e206953f76107ae590843dfb95d79c","sha256":"810bf47d7f87ea27ea701f44ddfadc499e22f83089eca7ed4f2c3ee19dd4d52e","sha512":"373256dd243d2135a136cf842b27cb70be20f85afc5f37340dff97fd56bd3bd214c3c5d6ee2341f4e80749665dd30934396914f7d9d105fc4aea4d1c1df03a58","ssdeep":"","tlshash":"0f5145c5128a20d544b149d4ab776fea052060b0289a47d29138cfa32e639d177fb8fd","size":2555,"data":"","first_seen":"2025-12-26T02:09:57.238254Z","last_seen":"2026-04-12T23:00:04.00063Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/850.34e3830e3080a768e417.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a334464212d49b7a1994eda0cc755dac","sha1":"ff4ec2c28666ac599ba6f990d82ef8bb9f58c422","sha256":"e6230e40025d58b80fdfa6db1965ed00d368c74ce8a832b1bc11b1dddabde32a","sha512":"b1d9fec79c75bab65bde2f822823c3f0ebdd2b76fcec306d5874992225e048b7324ed00841461ce3505cb79e7f6477aaff2f7c6b2a9d4497aa885a135b36c071","ssdeep":"","tlshash":"a2e0f114fb6232d356ee5d1c0c392207a437d071010cc0c3b1592c8836e5ebd616bc02","size":391,"data":"","first_seen":"2025-06-25T05:34:40.834944Z","last_seen":"2026-04-12T23:00:03.853344Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/4049.675b0ac13e2e87260164.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"06eda6c98e3fa2201d446d01c8e46c63","sha1":"47deaf87c3ca8e339586a63653b94eab45b0cc23","sha256":"ed29cb90a365ec320cbee46a4fa6ef8c98d68fd3a5b8c62d969ff66d3fefaf07","sha512":"7be2bc988bec538d46c4037787935df12cb82c6c1cf6bb0779de7d7abbda8293feb58b1d17f78b75075b15e0fb7930361a6d2bf3e3e0c76f80b8177db3dd4b41","ssdeep":"","tlshash":"a221dd46bc52f8496e26e580052dcc4aa3bf534164d8d2bcf3e7dce0b938c68a495b38","size":1293,"data":"","first_seen":"2025-12-26T02:09:57.125251Z","last_seen":"2026-04-12T23:00:03.849117Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/5452.2c6295addc463f3a589f.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"db9ebe6edc7b162ceb782ef44cab205e","sha1":"6dc4545e60cde5264bdc3a826c74ae30a7fe5726","sha256":"cc5f9c2f07521d5444facfe0f29d500382a6a4119c3703262f8fcabe40875847","sha512":"459ea77a4b3236866462f6abfb88e14ffa218d1b59b3bc33e3854e88f36a94f121822d38a392245c38e1d17f2d17a44178dc6ceddf5f280be5bc15f2a3f52a53","ssdeep":"192:oRWew2Y5RVOdPAJ/zAPQ2kcP5eaqfrTPCwzpx:oRWNRRO8VW5ea+XKwb","tlshash":"0ad184d431c2b89816ab60a1423f104bf1bfaa25785de110e602e6e1b934c5b8777f7d","size":6438,"data":"","first_seen":"2025-12-26T02:09:57.367398Z","last_seen":"2026-04-12T23:00:03.984963Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/9191.7bde93af8c7ba310e06b.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"5966a2671700975ed71fd87f3b96ad00","sha1":"720c0bb4236294db786dd46d4d00fdc2f618c0a9","sha256":"4ad4428c5bbc23485e67245c7c04eb331f511c6e2d13e00f28ab2c753f1969d1","sha512":"0884d610a8b977083dff0664ced045bef5fd715419c752b8514bff2c22e50c0d965e6ff39d264053524f9bf4bdb65e88fa2c097ccfef63100dae4e7cbe593d94","ssdeep":"384:zoGv13wzagoYeogAxj5Dv/E3PjgUqbjWBFx7btf8C+dCrwZQnf7LjchqpeEacdBH:zoGv13wzagoYeojxj5Dv/E3PjgUqbjQZ","tlshash":"a552a844f479ddad066b488bac78ca44f254361cf73e88e0e2f0ed6e60778853d356a9","size":13605,"data":"","first_seen":"2025-12-26T02:09:57.317087Z","last_seen":"2026-04-12T23:00:03.984263Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/7281.b975b959852e0e6e79a8.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"0126f0cd876a991fb1fbb6565c0ff3b0","sha1":"26f2d46b2ca3e84c27f478e239b98b41e1ded90e","sha256":"b85372925b2435e5efd284a115f6eeeae9b8ef5a9eca4209607a38ac8b1b3b20","sha512":"2679e05e83c027286ad11c90031005c40e887cbd6fd9aee1b86c95864830d70792666bd1d7be4f930dfb4cdb3dc90013bcbeb0b9bee139b1b888cbf689b104d9","ssdeep":"1536:TgVQ6i+NYeRsAZzVpLOHR4vo40hbx6IT56SmtT:UVQtUYeRsqQF5A","tlshash":"6f73d7c9f6d3b01a5393a2f9447f240bb33e6818981d4424fb69e9d5ac7940d923bf78","size":74843,"data":"","first_seen":"2025-12-26T02:09:57.31304Z","last_seen":"2026-04-12T23:00:03.926738Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"eventHandler","is_inline":false,"md5":"239f1c5b496b243fee802ab7b4c70afa","sha1":"3f511d22cc7664ea69e49e1af16b693ee06bd7f1","sha256":"d5535e86298f58041542486bcd217c14eb32728af4a415e927487ed179bf76d4","sha512":"2ad3e7a23ebce120a0c747d15b4c45f49424ebc51d2df657800f4cdde355fc4edf43ee276f41d69c6ef7cfb85fb2f8b8129420f68ce7cd616411143805b3b3f7","ssdeep":"","tlshash":"1cb012fd6cfe70f45b92918031f3571b5794a051940b58e8c220ca75391c1cbf4e9f22","size":110,"data":"","first_seen":"2025-06-25T05:34:40.986631Z","last_seen":"2026-06-03T08:33:36.293969Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"e8745550d3718dca9cca07fc6da882fe","sha1":"360d3050d8248a7d606048655739596b9df2a980","sha256":"e04815379e44565706276a1b1ec930424c8bafcd11b29f7954e5623def2ffa68","sha512":"90a9f2bf9406f5f85ea5efabaed6745c3ec7178b89b683d3d7465071c56c03b8458c26bfc8d83d95f6a82e227fc6cf447e2116656cf68808cb15af280fc6b8c4","ssdeep":"","tlshash":"dab0120405e71c210712b4284f0f3441317111130144d941378c43941f10426c4021dd","size":116,"data":"","first_seen":"2025-12-26T02:09:57.396127Z","last_seen":"2026-04-12T23:00:04.007215Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/mobile-qr.74be0e3ab5c10e1c8605.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"13d407fdb4dd9012ba8e5861cd0154fc","sha1":"d812bacb733a662e4d1f22771746cedf5cc53621","sha256":"f44010d28a56b0a8d75b120e0e1da428ac1b45f8c61c46c56bd2609eff601c39","sha512":"6a8dc5575f88f636d278b413abdb0073462a2d3e4c6a6727446160e4a6f504e42e52a9ce71f4038c013955fece82a23b10d05823bfe5e2069da9277ecc292640","ssdeep":"3072:Y6wbho4v44rcN1tM1/a1/v1/lkP3L4j0XpaWWvltN810A:Y6wm4v4C+1tM1/a1/v1/+wz/N89","tlshash":"bd043ad83991f5626bf311b7106f1407b33d161b280c8550b212eddab8f959ea13bfae","size":181401,"data":"","first_seen":"2025-12-26T02:09:57.241251Z","last_seen":"2026-04-12T23:00:03.847597Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/5796.ea7efcfe5d5e41637095.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"2676904fa83317a042f3417bf96bc165","sha1":"2595ac047fdc733e41f563a5427f4fc2c3a4cd16","sha256":"dcac867bfe893e4e12689bc5de524de4163c9082dd149928cfe70f55c352e8e0","sha512":"01e2922ec2d9ed39694e2235b6fa94e4e27860cc45231c7ec4223c6629ed06fe16b1f25ffd3be7201cd030bd2090601c0bb04d750345335f82d17a9bc7afeba0","ssdeep":"192:TCeMK1VI8gbzjesCjQaEVUbwj7msFVrk6JbQrb7uofaqEjiCmzWngT6:Kaw/ZCcaEm+JcDuo1EqOg6","tlshash":"754276cebb86f44a43937078c06f058ee27f69485a4d5424f641f9e02a7a55ef133eb8","size":12403,"data":"","first_seen":"2025-06-25T05:34:40.853383Z","last_seen":"2026-04-12T23:00:03.960036Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/4052.b15423e016d766c2a7c0.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b7f17d0b7917dce084813990c5ba2d8","sha1":"2a9eac9a78dd3d2e04c4bc97da3d5437679a0eda","sha256":"2895cd65234dbbf0790a157eab08dae1a31384e919ba8738199576ea133c473f","sha512":"62d0372fba0b7c9065c43bebb3171001cc3b9be826ac500ebd833928236e43763c0f3363f620b60d16a677f0b67a1e02cecb5cdc18e0e6672946827c5bef84fc","ssdeep":"384:5TxPvzxPvv+7RwV6T71u5oQM7xPvuoYMwOw8gbRFH346JtA1MgAs:5/lW1dHw1jzPBo","tlshash":"6fe28689b991f07297a221e4412f040bf13d097994dda0e0e7a4ddf16cfa84f967af1e","size":33120,"data":"","first_seen":"2025-12-22T03:32:11.406664Z","last_seen":"2026-04-12T23:00:03.831673Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/7244.d0959743a75bec9d86e4.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6aa1f1d004929abd39dc4cd50f6ddcb","sha1":"b910bb9a7c8ef00831e7ebd61d541157d27aebf1","sha256":"9024ff840268b9cdb189f7d3a56a4abafae9a9e1f45a6e2be9642315d0ddd241","sha512":"ad58f0c584a4b4ff2adf590f2e32f8f05dab0d5f19bc1303113076e58279554e9bbf156b9a61ac392d2c674b54842c7f27ee1ef5ea2ff2d8f09f8207cd6b7aa2","ssdeep":"96:HOsIVnyFJF+0AbvcXUYu5XtV/a655+rAgHLywBmtsGCtEu6qjIf:uLUi0ycXUn5Xv/p55MAgHmwBFGCFIf","tlshash":"06b1a5d771d1bc594372b4a0951ff48ab3ef6900249cc968ff47e89838b8808d175a6d","size":5338,"data":"","first_seen":"2025-12-26T02:09:57.314399Z","last_seen":"2026-04-12T23:00:03.914124Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/2221.0abd4a5031b03df3734f.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"688e15177e0920cdea5ad1b0453f90b2","sha1":"03981b8877f471efd8ffd064f998b1a1f2da4f40","sha256":"fa4eceaa7d23dbd5284f2412ebdb14b6273df0094ad7d55fe931a4d9b7d00f64","sha512":"8829ca598915cc4c2e78103e4c85e2715cfe4143a33baf053fa2558acbec62d917698d0274e588f6b128709cde2266c76bc876a10c24fc76a0c52bcaf8888f16","ssdeep":"768:1ygFPvFoFPD9Ur2DLmA/VqkbpVWf8YRw5GI8ToEOUdnFnAXpBpE1h82LFv4Y6P3T:1HRv69DmSDXlYRfTRIq63qo","tlshash":"fed20a52b069b8bb55f6024b74dd100cb5ad2adce21d4ca2f3bcdcdaf399980225dc5a","size":30846,"data":"","first_seen":"2025-12-26T02:09:57.261966Z","last_seen":"2026-04-12T23:00:03.9401Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"eventHandler","is_inline":false,"md5":"eebb8d48ac5928552197f0647e55bf5c","sha1":"a26c30417a58ef3ab858bec22de57db00eb91d1f","sha256":"0f424a196798849558ec7edc0afd8f4952e2a14d04456dc83f4d0f5c45eaa141","sha512":"545be46de33f46581c437804885695c3e80bd0b43fd44be50d1ca9de423386074b102df37d09869cc0b611b7f896f00d3dad0c28cfb6714e9658e22727f5b43c","ssdeep":"","tlshash":"c2d012e5c2deb5b84682d30c3ce233e9d253414958574defc6940d9716483d6b868719","size":202,"data":"","first_seen":"2025-08-20T18:30:53.56683Z","last_seen":"2026-04-12T23:00:04.008415Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/1082.35506ef9dcb5255ec01e.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"de9252d09d09b9cfc5cc586a31274701","sha1":"1b503aa0e20c03e2cd53a156d77014637bc4f9ad","sha256":"3e1fe428e35e96621b50354d404ca25749510093895290f31eee629a747ce02c","sha512":"4b0ee0162bf9eee8f2c6b7b3b4d16a7d9e97de50d4398b86d9cf426780a9065a274cf76018b313511bd43a189e91498d316b4ee77fae3d78ce80eb8eed53b3ed","ssdeep":"","tlshash":"d6f0e19da040a7f52c8b0dc8d4bdebf6a47151343505dc40182c88706160dbb02dbdd1","size":560,"data":"","first_seen":"2025-06-25T05:34:40.916069Z","last_seen":"2026-04-12T23:00:03.995699Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/722.a902f90c165f54d2575a.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c5c9b5adf608600e566e891368cff2a","sha1":"b8559655a63f9a85158022e344d09eb91121b00e","sha256":"f3be2f461228b72813bf221a6069640e93017385b9d0c606a2411f626b1dcda7","sha512":"be95437c5a750a5230354cc283a9095070ee9e6fcd0f38ce3a4df37d610b6e84bdca244977c07bf0373b6d9914db7f47fb0228db76d2dddbb27610ad33e8096f","ssdeep":"384:K3SjLJmrXSo1LCW+un+abmvjj78tqNcF2U7wBTyJ+BDJaNOPjMjjRxU71JDpoQtQ:JsiLf8t3F2MwBTyJ+Bda6/p5dco6","tlshash":"5413c7c131c2f05557a39998802f0105f32eee39a88fbd50f3dbda81f95695a613afb1","size":42155,"data":"","first_seen":"2025-12-22T03:32:11.516577Z","last_seen":"2026-04-12T23:00:03.934446Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/7789.44db51d1a2e2277380b9.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e6cdb587f4dcba93375c50cc40777e8","sha1":"dbe068d8267d3914019cf2c28e39a8e20224960a","sha256":"29171a6d3036572c3ec0f19393ca57c92bbd3e9b3067a91dc153bd51cb22bba5","sha512":"460dcd1b87810dcea3344c6e16fba37a5b33d98dd757ab5557f144beddd2162b1b4700e6912455898071e83240dd030f3dddee23d9ccc87728aca8bcc2937d74","ssdeep":"96:vw30tltt7vsC7V3t+4Zhq69xucM++zGGpdHS2l25Acpz4v49Cl:40tlv7EQ33ZhEcM96GpRS2lUAcpkv4Yl","tlshash":"f9c1b680b19268be5ae71a90e85f80463190158cdb45cd20f4f3bdda74ebc89b535ff9","size":5859,"data":"","first_seen":"2025-12-22T03:32:11.459886Z","last_seen":"2026-04-12T23:00:03.928325Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/main.js","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"3.164.230.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c82033c29f8f6d5b781e1feb4e846a20","sha1":"61ea3fceb2c04e32e14b605bb3350d906f82a272","sha256":"b751dc328f23e2a36ca0b5b28e90c29d50bd2e167baf8f646df4c4a21472fc81","sha512":"bbec4ec5e94903d434cb8df8ad395a296d6a33a667ad887e93f65eb37d56bde6dc20877834f07f33f653239079631a274c993439a18e3bd94aa06d8b07efb260","ssdeep":"1536:1jYYoNLcanaQl6er6exeIeKQUjcIQgjdZzQy+y4iTr0a8zQy+y4t:1jYtXOIQSZz","tlshash":"5cb37ca191e85ad29c0f836a3c181710f160f0fcfa4ad4ddbaed4e6d427298eb716d1d","size":116319,"data":"","first_seen":"2025-09-25T11:49:43.258815Z","last_seen":"2026-06-06T19:23:04.046299Z","times_seen":3813,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/3611.b265bf68b1a223391d85.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cc70d5c11f6c85693a7072fa0c025c6","sha1":"5063976180495ed6d69c2c53d007f9e8c35b68b4","sha256":"77c7dded2f6affedb7291c143884490c9aea9d38b4b9458f241a58d2617556cf","sha512":"f495e109b9dc75a2c6befb728084e03197f21866a5e7205123134bd19b55ffbef7aa63e65cb1839719e2f0f832784eb1428e82203ed2fd654cb506ec2f402468","ssdeep":"","tlshash":"5e515678f50c7f3d279701b4a2b621483939707f24054871e57bece664bd89b1a15fac","size":2647,"data":"","first_seen":"2025-06-25T05:34:40.964115Z","last_seen":"2026-04-12T23:00:03.883511Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/3132.3d187f27d108aefc5d3c.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb6f5748754bff437592c73b34a32251","sha1":"8d3c787161176e625614424b75be0d44ea4db94e","sha256":"94ac16b9bbfd30071238a6a53bdab916dbf57a0b3365dab04c4837387e42d472","sha512":"de67fe9076fb68149c4aafc692651741a3f5d3d7e7e03e7130cb8be4e303ceab07a82b25249c3663d6e7e0c1f386a569d88db9683878afd9a171ddcfd8f07bcb","ssdeep":"1536:/whneNODEItBOUHp3Px+c3rN6D8u/qg4SWEERdtfzKKpFCPthCaAW+E8LNCbk162:WHDLtZTnxtfHpBB36tbw","tlshash":"db933b21b058dfce85aa425fb8bd4904f1983e5ce63a4ee0f2f4dc6db640a443d3d6a5","size":95452,"data":"","first_seen":"2025-12-26T02:09:57.38008Z","last_seen":"2026-04-12T23:00:03.915077Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/7300.60bcec3c006554d04db9.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d3ce9d25f6980355df032136bd1c32d","sha1":"6fe16785836199df4ff34424ab823e0e2b3794a6","sha256":"e7533bf84711639759ed6067b57921470686558018d5a5a6eae2bcbf7fe2fb0d","sha512":"1f1b85c1e45f2377b5c0067a15eaa854bcaf2de23a2fdeed03fb3d8ea899aea7840c797fc9ec96005cf823a11c9569851440b3077b70381844f05e271027eaf5","ssdeep":"384:AnTgSAc8Zv1wM+HeZXoNP0QQkeRGIyfFMB2Azxuelj+gqtwN71olnWcmEJ3EKW5e:AnTgS/VHeZXomQQkeRGIUSB2Azxueljq","tlshash":"e6b207006168a6ec9bee51a7785c1c06f2d43f5cda394d65b2f8dc3d73c498861b837a","size":23541,"data":"","first_seen":"2025-12-26T02:09:57.300617Z","last_seen":"2026-04-12T23:00:03.931403Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/858.f8c35856f95787f1e09e.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"331e34445de82b32e8ccc817c482179e","sha1":"ae9d04382c6b951e256c39291f5fee44f03ba04e","sha256":"632b80901b9a402f523537da262333e9dda5177d0ebd32d9c5e4020cfcf26236","sha512":"b422a17314c448b1f6bb320976f0dad748bcc20d9213516d461153f3502a3ea70deb7e670bc9c826541f5c39607c6ed28ef661df6869ebacd74a1ade22fbac7e","ssdeep":"6144:Va33b3QuRrblgUMatfLjlPfMBoLJKPC7jm:Va33TQUrbyUMadLjlPfMBUJKPC7jm","tlshash":"dcb4e960f068dead88aa419f3d6d4a04f1582f4dd6398d52e2f8dd2c7661ec43a3d63c","size":496797,"data":"","first_seen":"2025-12-26T02:09:57.256863Z","last_seen":"2026-04-12T23:00:03.894957Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-06T23:07:52.10878Z","times_seen":362464,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d96df5e8ae96c68b5cb5ed1f6d924f0f","sha1":"b99ef893588f4c22f34247517a755433055df3b6","sha256":"a011efc4b0a792732f1daf171fa6f28b321197bb187095ae7fbf69723a1398e4","sha512":"e95d7759378599399bcfce4405a9119a81b7db69502801961c058a09c07cee55f848c4db9248356055c55ca388252d68b35566805df135b52f866c72b5b9d3f0","ssdeep":"","tlshash":"78f02679389330240fbb94dc61ef82407e3490a7f9c6ba20796d521a0f308e28222bcc","size":446,"data":"","first_seen":"2025-12-26T02:09:57.412655Z","last_seen":"2026-04-12T23:00:04.011944Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"3.164.230.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c190c4793c7891eb3538396946c7d37","sha1":"d1ebdb69058db9d979266ee3d3379925d20ee33e","sha256":"752d46d087667198e30f6bfda196f35d670de0dcb6526a00733a715aac4d366f","sha512":"5b1f9f62c8bdbf72eb01693106016d76d1312e69ae2f088c018911f965795fd0ce7d3addb248335bd5d82ecb43c2dd708d0da95a32bca8fecc1223813a69cce1","ssdeep":"768:Bn/Nw7duwqU3o+bz3y2uxtFqmDJvQ6iYB:R/Ncg+bz3lAtFqofiM","tlshash":"14b2e6e431a1f47642cb6169543f620ab2b278687985d488b53cc8f26fa0d9e3137f7d","size":24638,"data":"","first_seen":"2025-11-27T10:58:44.640925Z","last_seen":"2026-05-28T16:18:40.901985Z","times_seen":11765,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/9716.ec4a1fb997c41bdeac03.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3ebc899f196dec7186c9dd298ef253e","sha1":"dbe2cb99186c6e0a19167a6ad33e84a20540ac1e","sha256":"07387ffcf4194b8002bb3ea4e23fe9db3537c5a680eca99528e10c0b8048933b","sha512":"1ac3fdf08ab14895438c11cc37d24016c2fd2c72adc9517529cb46723201dfd954e040343ad4553b65df2cd49669a8f7197668650b0c62c511ab0d370867c046","ssdeep":"192:gp8G4uJDm6g8aA/xQW7vftaekfaDnLpzxuAcyAn3hahW:6JTJDm78v/xf7vQekfaDn9xu35n3hWW","tlshash":"f822638972067832579f81faa91f574eb336243c640580bdb0d8d4de2cf1928672bfb9","size":10423,"data":"","first_seen":"2025-12-26T02:09:57.152461Z","last_seen":"2026-04-12T23:00:03.930757Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/header-authorization.849378eb8d87c3ea2371.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d73f45a28f37035703fbc165815502d5","sha1":"d3fc6f3ca37a3a1a97bf0a04ee3d3567fd555ed2","sha256":"031d18935bf0ced85d9980983b4585b80243b2fe8a9106d436dee034df546e98","sha512":"de156889907b5c9f5e8062f2ade6b04632e2e324379918b979f3a56657461090ed802cbfdbe841d784bba15e96aae0f80a3e5a13cccd799adfeb2b1198870b8b","ssdeep":"12288:Ini5lzL8YLdkLyzxjOna/1etAWeJP8utIbWO+JzYCu:girf8YLdkLCxjOna/1emWep8utIbWOl","tlshash":"ba054ac87195b4a647e311b2407f140bf37a291e680d8860f365ecf5b8b958da23bf79","size":846373,"data":"","first_seen":"2025-12-26T02:09:57.208377Z","last_seen":"2026-04-12T23:00:03.835575Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/cookie-warning.0ce7be0e5c9813549028.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ce1914922e9f6a3f7134ca6f69fd4a0","sha1":"eb2f1e5266ae5fa03b169b9d59b5e81e37871658","sha256":"22b0c725891eedd07eedde2c790bdda36230bcb11a82860f09b76cbae904ba32","sha512":"3334092895c75f789c4cffd51161afb97de01214ae3b3b44f1b4f6a2af93e4754854372beb3f094cdb099aa5615512af88e49138413a8f30e109e32ed2665a18","ssdeep":"1536:avMhL/x6o38PLMioXfHfHuJc5rhb60g+gH3iH5YbDVkD6D9s:aUhL/orsuJyrng+gSebDVkD6G","tlshash":"03d3f7d93952f5615bf311b710af1803733d162b280c8960a212fddab5fd45ea12bf9e","size":133068,"data":"","first_seen":"2025-12-26T02:09:57.310948Z","last_seen":"2026-04-12T23:00:03.93264Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/6337.936f364142edf10d8824.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"54b7cddccc3e46b4fcb2eeb7b10ab45e","sha1":"0b2fe654d96daab5ce9e72007829177d39cd2c6c","sha256":"0a334ed9c1712b98cac6919bfdace03fd1757d381e3bfaf4b87177a5ebc17593","sha512":"3a3f5bd6ea88835817a844ffb0fdd4136d957e63063565a11fdfefeeb6ffebb88b5d52db92f4693478cdd87413d531598d34e7d3b943c5565505e713a2c8592e","ssdeep":"192:5TNqh91jdUoXOB/lihxDSPJ+JlZmWBOEHTZFiGpJYhaaC6Y7:HIdgB/lkDKgJTBOmTCY7","tlshash":"b6126504f616783b83632133223b410f27360458354a5559bab8e8ee6dfed4a5e27b7f","size":9088,"data":"","first_seen":"2025-06-25T05:34:40.844939Z","last_seen":"2026-04-12T23:00:03.882729Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/7656.b922ee7843a968c3e228.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e225346aeeb07c8b235fa09c72d5f0f","sha1":"3360fac25eeaebf50553370ff3bf68c0d1597607","sha256":"2e94a62fad49c29438aeb9d393fdc8cbddec46d7bd080b25f3d56cee1dcc9350","sha512":"af86092c61d860405b64ccc7af214688bba0a81ac7e4759bcc28e7c60be57cbdda710960b6fc4c4ef7d12b2f691ff27e0ef8168e7b2dd56f860772fa9ef6b3a1","ssdeep":"384:gJvngQnH+VjWeQCbiqRP0whHJO8MU1kezPA83H3fkvB:sNPqRP0448MU1ke0iH3fU","tlshash":"ca82eb7ee2c6bb3946bdfe08f239a2047f374934996464b099d0e1857a7d4c30199b73","size":19118,"data":"","first_seen":"2025-12-26T02:09:57.27062Z","last_seen":"2026-04-12T23:00:03.983639Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/6486.c05de76a1e947421f263.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c14854c4c157f62ff8b86c0837076167","sha1":"ba89ac88762e19f0c0b4a78d90ad76110eacdf7d","sha256":"43a24d898e8da6fae79dc47176024fa3feb4e88a26bd33877cc8f970ef44c99b","sha512":"9c06589a4d6fa5e75f1616956a35edbbdc22b109592caa5c46c9c8ec6cf88f52362d241bd3ec82bbf253413b94a9cc5fb615b01e1f44091aace2ef61136036c9","ssdeep":"768:a2c5dudwclrySf9W/Qf5fhN8emPDyTihoUc5j6vaJ13oLygiQiOViP1yq85o3q:a2c58dwcQSFEQf30OTku5mvqobAOWyqu","tlshash":"9d634fc839d3f016876370b1007f048bf23e6e6568eca648d1a0f0edbdb855ea567e59","size":70667,"data":"","first_seen":"2025-12-26T02:09:57.34726Z","last_seen":"2026-04-12T23:00:03.961988Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/6495.6499a58e3c23950d8614.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"582b41459099393392cccc4a389319f1","sha1":"2d338b5d9d95ea69e3e1f63bf4d63be6827ad3f6","sha256":"f2bdbd2267131bc97954bd14113973bfae9c26e8b726fdf496dfef712ac5880e","sha512":"e6c3d294436d4fae30234703e18bb7fa9e2604d1d78e3b4f97834f04d3667d811b94436dcf3ff3583039addecce15ca6f9f4c18072714c6208da0bee0fbab0f7","ssdeep":"384:SbG38FJscRpiRgCqDwtIRYM/ruCNVNprP6zx/x3n:SbG38FJscjsgCqDwtIRfzuCjNJyzx/xX","tlshash":"cf62facdb0d2f4e403e765a5c43f0506f23a681eb6098490e764ece1b8b594e623af7d","size":15006,"data":"","first_seen":"2025-12-26T02:09:57.156428Z","last_seen":"2026-04-12T23:00:03.938011Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/2027.70a6487b9e758929422d.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0720914e88941345476c3aa7ba1e293","sha1":"3ebc95d4fd0719782a8d1dd5b19b59340af3ee40","sha256":"16a0a0d2e523c1051d4c008b399a11c5f6a81c99dc35fb750f52cf7ed9d8e357","sha512":"5bbeb73f9ef3732e00ef58bc31519861b33eff62188ba31461f08d3aeefa9b9514e3d81bcc57753c6dccb8df032baf6eb5d59e87991a7cdb8fd28b2d110e4476","ssdeep":"96:YTJJBhlBRBRd8e3nfXo9fk9YCWXk0BqXK/anAi5q0w+65zRaTotA8TbnRz:YjzfXsM9YHMpnAiH/mwWTvV","tlshash":"bc02635cb55f9f37cadbb46630831040b9ae0ca74c6e0d32faeadc63ad6804095776d8","size":8532,"data":"","first_seen":"2025-06-25T05:34:40.842796Z","last_seen":"2026-04-12T23:00:03.956082Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/8579.d457a608d1bfa2ff2db4.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3bd996e7585ace5577e7b605fd42d2de","sha1":"cde84c8e08b96e3ff71554ad0f6518a08a59c4b2","sha256":"21a92e132f6cd6bb8b25f6b0c4a1dc4c3ad48451760a291946bccc82ca5de289","sha512":"732b7bdd08de453dd2ef4a85200d8ae92d84165153cbdb58bae0a454b30463c4d14d3e31113167d8eb3879c130ebdecfcc70d3db4959ea6d307037f42fe94049","ssdeep":"96:rgJek+ZuYRGs/OSKNNksCrlaZ+dUBIcJ8tHwPP8C00G0VIsqQ2zPFVOzdMRWL1Ww:8JR+IYMs/OXNSsCJaZ+dUBIJHgkCkFPy","tlshash":"9fb19641fca064ea09ee389e743a0999b65d3e15f228cd41b129fc4a2077f967271f38","size":5401,"data":"","first_seen":"2025-12-22T03:32:11.423911Z","last_seen":"2026-04-12T23:00:03.863622Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/5260.53303feb6d45fb20950d.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"528526fc1d5902f31cdeffe70cc65e69","sha1":"71a73bd1556264e065ebb13fc764bd00a184d885","sha256":"dd653acc8d1e59ccb72afacff1f4a60be6bb42bb131d8d61a561ef72105fb49f","sha512":"e7af0e9fb4288ca60330a79eb22b2d81fbd916edae92216d1cc8fe54093420c65b08fcee8982c5d1f0216c74511a2e6401730b5e209f6aad01a721d8612ede6c","ssdeep":"3072:qLkujfjfNPDkyOb6AO592Sf2h8WAs9YYm+xuPOKPLwEMcpM0BM2laCZqEXEIq9ld:YjjGOd279YYm+xuKHchM2laCZoI+","tlshash":"f1b318d93298f45142e3d05c80af0906e177ac7c949af494b3eaddd02ba6e6d2137f39","size":109990,"data":"","first_seen":"2025-12-26T02:09:57.267818Z","last_seen":"2026-04-12T23:00:03.95432Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/9814.b3fe24198f290d257c70.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e4069f31d7c6191871cf5d5c77e7979","sha1":"03f443d67cdfe84c2d96046c5fa1f79afad58799","sha256":"5a75042945d362e3a608ae4950092e3e76057f9cbb8ef253831006b924f7e9df","sha512":"0f054cd16cf943ff49ec91148031cd13ccd68a50c6fe2bc8f77ba56c2179deff64cec5e5fe1806a7a1477e60d099836e66875ae6a6dd2de5757b30598220440c","ssdeep":"3072:f6235F89hiTSb9icfht6HSmcTshNfMqMG9iGa85HZt7t:fQN9lFTsnMMtt","tlshash":"3b54d7a470d4e8119ad68159887f0444e3e26c2c9595b4acf3fbd8d86bb590c313ffba","size":293810,"data":"","first_seen":"2025-06-25T05:34:40.975289Z","last_seen":"2026-04-12T23:00:03.834104Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/8368.b1f9855db1f6ab3ada2d.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c53aa7b4e755b9b25c523e40e04dc49b","sha1":"af06247d8e7d3314de5963e18ce2494fe5db96f5","sha256":"94196e7fffa2d0f211c3e1f26e08b33d4b94b280a9fa0a2d3fae25ce263fe506","sha512":"cf3e70d3af533bea487190b75285861bd04c6e5c1d5b91df1599a832bee58f4a70b73de721fdc9b95b11d27ea2f5832e9911fcc9698ba6a5fdf4ea78b01cdaaf","ssdeep":"12288:hbJZKc4syEfQjRAHPPPT/mm+tgJv5ujEmxHmrLkLnu0Zy6LZ7Dmdn75O+3kBJoJx:hFcc1Pb/mm+kv+xUMy6LZ7Dc7nKJ/Tiv","tlshash":"cf256c25bd6b7c7e47d7118f789e0c0578ec8026fb08ca49f9e9dd3824e9448826bb5d","size":998204,"data":"","first_seen":"2025-12-26T02:09:57.273422Z","last_seen":"2026-04-12T23:00:04.009841Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/3489.658116b508e6a2bbafe8.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad0dca19497c095943fa18fed3175a70","sha1":"9949b4a5dca3303c6be416fac95665c7f62c165f","sha256":"5c82f0f9d733948e115f49a3415388a72f474b2045c61f95daec51c85915717d","sha512":"a51c4c84fc1152b4e205fc119fd5eb4d032df9480dc75fe7aac9b538ea69a175d028a126af66117d9063a9bef8e2e3d682984c08c9df57a969ff01a9c411c3b2","ssdeep":"768:+fDQQq9OLsYDAaDt/J2itRy9pcjmXQlUM6CR3P14BaI5QG5QvUdiCJtoF58DxoO:G99w6QaI5QG54UUCJqmb","tlshash":"ab03f98ef655b4a943e79475c13f010af33a390eb50984b4b665ece16971a8d223bf3c","size":38537,"data":"","first_seen":"2025-12-26T02:09:57.285087Z","last_seen":"2026-04-12T23:00:03.927862Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/5664.3bb7836d75e4fb33eb51.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c8534c13bea20f9378963127b51a19c","sha1":"130baafb8c1e9ac981d7ef75a0a44351613bcd98","sha256":"e32575e2dbaab6bbd2d2911a38b0199d86fb093ff498efc19a62c9bd1a7522fb","sha512":"738bde89ac92f1db132e7fd12e76bba9a80f1b59b6a5621872a4a658bf01aa7f24d4a67550d3199a1b0323954abdbd87807e51b51bbd0c95430c2f63863b8d89","ssdeep":"6144:JGFYYl1iq3uIbzu+B79Rcf/QZgZR3PEh3PX2nCU0qD:JGFYYlMWjbDcf/6gZRfEh3PGnX3","tlshash":"0c94d6cdb6d6b46143e320b5403fa00bf33b6968a41d9020f665d9e6bc7954ea237f2d","size":409528,"data":"","first_seen":"2025-12-22T03:32:11.440727Z","last_seen":"2026-04-12T23:00:03.832989Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/5951.520b43691b51e5622d55.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca764e44acada7765eb6990ae5e2967e","sha1":"2333ac5521bd4b6b397210d0d378f138b68f9bf7","sha256":"d9f24a17aea45c956276a3d8b3fb4c8e04553b95b2846abcaa5908dcb500e310","sha512":"a6be8d6591ea53b52f6511fd4fa0c58b9add0da89d67046d2c052583f852698a31db20d9cd19ed9a9b33ef793044192222de248144b87e3d9af625f9da5d9d2d","ssdeep":"384:4Ghiw+HpEtpUHlKJY/jKg4BsGcgH0daQGIMVB7RVL1l5W3Ifoyv4aWYCgQFRyD:dUFWtpUHlw8jKg4BsGcgH0daQGIMzbLl","tlshash":"8f72944ceaf540bf1ff6a46907be1607b1d12648576c840f52c78e6a323f7b152e2a78","size":16082,"data":"","first_seen":"2025-12-26T02:09:57.272457Z","last_seen":"2026-04-12T23:00:03.982338Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/7340.9d19f300a47690e55662.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea253aa6573a04189f254d94bec962d4","sha1":"8aa8dc07c1e177158a745a88a1cf67aed87440df","sha256":"4b825fb8de063b2883adadbf1efd9046dd2b59acc45e580358c496d37a444f38","sha512":"2079b7c630aaf28628c541661c42678bde4b0330691f9a23cad517e24d41dfc2e0aa7816536da5ed455ee29b40bf865505ebc5e1c956a05d6e0aae01929bb832","ssdeep":"1536:vRRGO+1Azi5kagocLEPc7EOMpuKuqwfuvfKM6FgmYy32OXxHPMTQgkMBmEmlmEOx:ARsxH2lf","tlshash":"ee433b96f1ec6aef0d5a86abbc6e8800f14d2c5dda2dcde1d3f8ccd970019842979d60","size":57094,"data":"","first_seen":"2025-12-26T02:09:57.307202Z","last_seen":"2026-04-12T23:00:03.894214Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/6077.ec381a3ae544b21e8ff9.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ab8073418fd537b1e5627d87db24247","sha1":"0173ee7d974d87d96889f7089581fb0e113639f6","sha256":"05f4f127225c308b929ec835e30fe025d49dd2679e1c88a8e1d0197e8a180139","sha512":"de07a0e824ef5267900d43a263b5fdcba65920159ef2349e22c97c81c46188dee321109fe9fcd12859e453be9dc61317dcc9c95e16522a30cc68a32e9ed6164c","ssdeep":"1536:eSdybHq8qTcNqH24FHezRqSjyvoO5KUhMb57gLYEYbobOMbs:exq/Tck24FHsjygyKUA","tlshash":"ee532bc0b2d7f069876a20e1503a4006f36b9f7d345ec4d8f3685cd738a5a49a1abf79","size":62205,"data":"","first_seen":"2025-06-25T05:34:40.877477Z","last_seen":"2026-04-12T23:00:03.956822Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/5571.dd503e22dab37f7c3dbf.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"1432d16bcb9d6223ebb5b318227e0dd4","sha1":"12b5c04b71dc5a7f199cd237e8762ac7ec04e21a","sha256":"7d65ddc637c7790ca3ce924204e1af6d1ef63b03f8079c5814db5c6ddc026e7f","sha512":"4cf8d6e7ffb4b370f776d298c5c6643c0c8541d9971bab5d7f28834d6920648acfc8e1431c7faa8be69235ca6338e55085901585de07e2873d234703aa4793a4","ssdeep":"768:vf+ibSLCBqQNUNm6urfl9btDVYgi+jrXLXEK6xtyhOMrO3GuMJTS7NfPO+EX:OqSLCBqQNU2rfl9btDVYgJK2U6","tlshash":"83d2b53108193db996a70160a9bcb4ce237c0f5bf86345fdb359ced61ae2a81d1b1d36","size":29856,"data":"","first_seen":"2025-12-26T02:09:57.250868Z","last_seen":"2026-04-12T23:00:03.944481Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/index-page.5b600bbff18706340382.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"1bb36fd61f140eb23543ad768157e6ec","sha1":"43c3947d08dfa6bc4edd6313af0c8d7bd9ceb5f6","sha256":"606f2cbd98ad6034e53cc7fae27553795c780e4db6f6113a832a89a56ad72ced","sha512":"292854897c6cab2d86f5167da880837234e6c7213d84e9a0921d5637ca47eb3cefa865e68b35a8bc685ee077c64049e9faa5cf723f779fca76121ea950fb3a01","ssdeep":"192:3+QCd5ciK6Bemd3jy8cm/xm2+m6GEpP2qnsqMjLYbsuqc44HZHqk:3+QCd5VK6QQom5FspukQLYV/xHv","tlshash":"7312a4ce72c6f46943936760d01f100bf22a5869e1098194e729dce2bcb484ea267ffc","size":9211,"data":"","first_seen":"2025-12-26T02:09:57.282064Z","last_seen":"2026-04-12T23:00:03.913121Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/layout-header-container.0bb293c9873d4e46d3bf.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d98034d9bcd2ad75ae85b31247bdaee2","sha1":"f408583e595510dd3a189db4e4e2ac8e4ff754b9","sha256":"47859954b9bc4667faf56ac84deb22d478ebf25e9c21e20b3fb08f8af953d9d8","sha512":"5de2bdc2604632a7c7711e01225c05a5e6e056fa0e240344879875c874e7c2ac11d7c9728170756cc0495f5e313dcee4063884ea0aa1d3ddf234783b490e802a","ssdeep":"6144:UbU9iP8Sev+bt2GNillvrOplU+mR7NiiiUhCLx+Cc:U+nNiii2CL8","tlshash":"dc942ac4b5d1f4a65bf315b6407f000bb33e191a680dc960f365ece978ba499a227f2d","size":427830,"data":"","first_seen":"2025-12-26T02:09:57.164729Z","last_seen":"2026-04-12T23:00:03.91694Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/exchange-calculator.60a836be91ab50db2818.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9832037796f56a7cac3685bcb3b30710","sha1":"adad4ef0c01cfeb62f332a359e5521939ad39c97","sha256":"66c1cb710dcfb72fe316949112814987f0aee736b872712d8ad5665d1f96537b","sha512":"8d3b05cda40cd7b5d7197e213a799d19c52b7c3f2a94fae652d02a34bdb259b2adae5dfc29acd13d23039e5ae07b31672c70604b16cf4ae22b6b900c96fda12d","ssdeep":"6144:OFbxa/1H9kP/NEAZSeJ3/Doapn90nHbXwCb+lHBoUq9PC68Drh:0ta/1EL3E+lHBoUCPkvh","tlshash":"74c43bc43591f4a60bf311f6807f0407b33e191ab80d8960f2a5ede579b958aa13bf6d","size":546075,"data":"","first_seen":"2025-12-26T02:09:57.268762Z","last_seen":"2026-04-12T23:00:03.929464Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/6066.9db6126af8d7f2b3e8be.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a81f131a9ac673ea916e1c78bd64658","sha1":"06b87464412c1c20cf65bbc5748005a76430c198","sha256":"dc6f03aa649ea8bf90b404dfbf876ae566df37100b545caac7edae948fc33620","sha512":"e95c10c8fc31a77389e2a86568d38934b5fb48f968e2bd3a3438772d6ba64aa3ed07656ce1def35ef5cfb43cc9335aa43bd6f712cae656880324d08bfb086d08","ssdeep":"1536:AdD0gUBoDdkAkbkcGhempgMaG/yvMFiyY:zgH32mpgMu","tlshash":"9453eac9b6a1b0b643d32166903f850bf3ba682da40dd054b361d8e57cbc14e636bf79","size":61244,"data":"","first_seen":"2025-06-25T05:34:40.898108Z","last_seen":"2026-04-12T23:00:03.920077Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/4770.86bd24c1b33adc0d2f83.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"52ef77e7848bdba9832c102b583d0da3","sha1":"6fd6e2918a48a8882d4f18716a8f85d24b50e0ed","sha256":"ad2902b98c32de857edb35abbafadf237c3268b8c656468741c0c3551129c50c","sha512":"1614e27a6c9702cb8e5b6481e5a8362e5776cb106aa675a8e37e5076d37fb941fc4a450a6ffd61c27f352d43e4786c3b76853e9a870daaee76e9fec7abb4e734","ssdeep":"","tlshash":"f7f081cd5542e4940933895043d7259e913a2031402c54c267101cb41c9d63f8619aec","size":513,"data":"","first_seen":"2025-12-22T03:32:11.55946Z","last_seen":"2026-04-12T23:00:03.953394Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/9115.e7465a892d39468e5db9.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c05e4e263823e4cf6ed147e34ff94907","sha1":"c78692fc1131c5069f2951a6b8970892579831bb","sha256":"6d160ed12a9e4acb08aa78b27a29b4d13b6220175d40968ac02173ae6d246f6b","sha512":"b29103156395d8896f7094ef433b8278c27a7e65aff4e860bc56204dc61bbdd3786a2b3eb59580899585f5909f03b38dc2b8ad2f294a7ed15486d237119e0ba7","ssdeep":"","tlshash":"3d41b8edb0c5385402eb1661c63f154bb13512962e9dd1e3e70c94e021b096f4327f9c","size":2113,"data":"","first_seen":"2025-12-26T02:09:57.330849Z","last_seen":"2026-04-12T23:00:03.838692Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/4762.e4c4068712bdee34ca53.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbc97dd872a5736b7ed436fa7a2a9545","sha1":"e108a668992847eff9397514e055dabece5e47ce","sha256":"0356266281518207fd40eaf8dbcb614a7a46ada062d62453c862e801b27426e3","sha512":"d43e1d1b7353da2ddf1417fb87ad8280e2e0ae150991452b93af0913e19acb92d24d60c22c2c9e331708265e21e9084c2f927615fb287a378ffbd72fd6716a5d","ssdeep":"768:/CtUIE1dCql4F5SDUx7xgZ4Rc5lb57XVSY2pq:cUb1dCqoi4Rc5lb57XVSY2pq","tlshash":"04233b4832967b1942a134d3dcfe1249d0bf9e28544df92dfa50d1f3bc6460aa1dbbb8","size":47688,"data":"","first_seen":"2025-06-25T05:34:40.96777Z","last_seen":"2026-04-12T23:00:03.967122Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-06T22:53:23.522542Z","times_seen":112443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/8064.3fa0ef151db5d9c04619.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ce44ef3f694237b60f60ff994e01ad1","sha1":"b985118d17c963c59e1a81301e097e95f4eb6fe2","sha256":"c25f02c3a2f158a03319678be28d216c123c0fa293e0a0e3fb69e94e4bd663f8","sha512":"1860244a0eedfdd89599a9362c9b31730db77cc8e0240f455fec8bf62f8af922eefa7fa2aeb879b1d82bcb3ffdc92572b7849b6cb831738fa18998037f5d76d7","ssdeep":"768:TssM7NAaUsth+Y9Kw37fi9H9IRyHIAJbQhQOt1dpqIAj2QYxWyC29795JjbKjpBb:T3SeYir35ugFy2LRp/w5nw","tlshash":"7603f980f0b5daad45de04c728bc5948f25c0e8ef93a8da5e2f4cc4d7629ec86539b64","size":38056,"data":"","first_seen":"2025-12-26T02:09:57.283868Z","last_seen":"2026-04-12T23:00:03.903354Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/4732.014dfdfcc68e62b092d5.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e903380c58ca726db052429cdd3272a","sha1":"d4d4dfbf5bc429022e5b758c6ee1e084d7d09806","sha256":"553b9f65859eee064a91ce78b07f0d681480110f816667e52cc789b6e40aca04","sha512":"5ffc5191f414f806197e06dd9cfb1c6b8cb659a681fa0261f64ac4461a5d5a6afb55dc87d55cd63b77da9c95d0afd335fb07bad19fd9331b610b8bc6471010e5","ssdeep":"768:EYTWtpUHlw8jKg4BsGcgH0HEQGYPCXEB1Zm9Nft/JcoCRYxcMmChV1uGRXave33u:dT8QH/hCXEB1Zm9p9cj2335QmBi92mnX","tlshash":"24d22a8cf6e6607b0bf39454827f0007b1a52549635c805ea286cee235ba77e52f6f74","size":28594,"data":"","first_seen":"2025-12-26T02:09:57.12923Z","last_seen":"2026-04-12T23:00:03.985642Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/8357.30fad5438bc154b2b6de.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"518af939c254fb99f8167537d201c02f","sha1":"a3d9ef2f2531edd986cfd3c4f90523abdae22b78","sha256":"ef7c84db08eab3f3022d6e8aaafe7769aee20d30bbfac1626c198de973907437","sha512":"fc46cacde759e00851aa5c562230255d33c8316a9f3ee2af91dd284b72ff99029b4dc3d7075386f75ec530ca8e9e096e390d6780b1ee67d46eb7b5918fa62d12","ssdeep":"192:WxbPEuezYMb7sc1bgGRP+nAzbDPuP4F9SWy0yqm0U0NDfMZtNN0aqc6E2:WBEueKc1bgG0WbDvsqm0DNQDT0aqcy","tlshash":"7852b53472d4e42045c3c10d996f5604a2b16c2ccb59b49cf3bbaccd6beaa6d3116fb9","size":13502,"data":"","first_seen":"2025-08-26T12:17:26.892123Z","last_seen":"2026-04-12T23:00:03.935166Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/5807.30a5535d1d5e08fdb732.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ded7a2e71829bbdc7f6676450315ef2","sha1":"c41b5d0c6a6b2d5444e1cf70465c39dc6163d881","sha256":"a0ab870a47da597f5d8982f415011bf0d11fa7d9ce54575fba7d0644ed36ba70","sha512":"aa0070236ab9bf934cea8e9a525152707a7ca38509b839f69ae5d3321c7ca29d20e76963b1e76c19da132746641f0f24485fd22a0c05e76b3df4bb9ddadcefdb","ssdeep":"768:oXkC4EQ1AvYM7maSOP0uSI2bk3kQNcRic7QHmgEKAQhO+5EeC:o0DAdO9","tlshash":"45c20a82a0b0a9bd45bd13df58d96818b1682f9cd5160cf0f2b8fecc71a59c894bde19","size":28131,"data":"","first_seen":"2025-12-26T02:09:57.308539Z","last_seen":"2026-04-12T23:00:03.916046Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/2621.b3969031fca3a7c6edf6.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc8b60e196c32e98705afadacab0fbe0","sha1":"97e15617cb4a09f132cc5fa4fe89442f737bd1d7","sha256":"2296086d8f3b32c5497af1fa777fe8c513717dc1c206a45497798364a5ee2a35","sha512":"0ff81577695de3406b1908a5a6f5ed7876521862a8855608d2d8302914392de0e16ee3c54b05c2cdb67fc4d8f3fd3c76b6c3f47d2c257e3f130f70897058254d","ssdeep":"768:2V1Jc2Bz+FX99NaVC6NfQ5WyB5MSllSa7Rou3zLynw/YF0I1SPcIjA+pYVL1T6LN:2nzBzENN24jLSIxA+CEgGtAGgYWB4LzZ","tlshash":"0223299570dab4ec42d7519ad83e0604f2650c3ebe2e49a0e6f4dce9b5749cc3239e78","size":47005,"data":"","first_seen":"2025-12-26T02:09:57.170021Z","last_seen":"2026-04-12T23:00:03.89324Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/main.js","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"3.164.230.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c82033c29f8f6d5b781e1feb4e846a20","sha1":"61ea3fceb2c04e32e14b605bb3350d906f82a272","sha256":"b751dc328f23e2a36ca0b5b28e90c29d50bd2e167baf8f646df4c4a21472fc81","sha512":"bbec4ec5e94903d434cb8df8ad395a296d6a33a667ad887e93f65eb37d56bde6dc20877834f07f33f653239079631a274c993439a18e3bd94aa06d8b07efb260","ssdeep":"1536:1jYYoNLcanaQl6er6exeIeKQUjcIQgjdZzQy+y4iTr0a8zQy+y4t:1jYtXOIQSZz","tlshash":"5cb37ca191e85ad29c0f836a3c181710f160f0fcfa4ad4ddbaed4e6d427298eb716d1d","size":116319,"data":"","first_seen":"2025-09-25T11:49:43.258815Z","last_seen":"2026-06-06T19:23:04.046299Z","times_seen":3813,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/6025.fa3b4dd1ae5118a2d68b.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3e8e87ddc5edded3420676f2e3e1de0","sha1":"8aab8396a2295177fa9e2fd6102a417ac0c25557","sha256":"1785b31ccdddf6e70eacb194ca2c6bf8a5e8974d677c82282d84879fe32a5c1a","sha512":"9265a2edf2c761f4fa615fc7078005dc09993804b1cc200c872be98c8fc95a39d57198f7e09ae27eb3ebef6d30f22e6d9d2240ab6bd0f89d9a31fe31a7c29c9b","ssdeep":"1536:kSISxrvDcdOcXGJBwtNjqqiFWHazvB2mCTCoCbCnCzC2H7Ikm4EWCzKfNjsQ:mB73km4EWCzKX","tlshash":"a983e940f179a6ef8da640da7c3e8910f1582e0dd57ccda1e2f9ec5874d2e882537a39","size":83429,"data":"","first_seen":"2025-12-26T02:09:57.22575Z","last_seen":"2026-04-12T23:00:03.946123Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/7834.d555269c34a834c2d313.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"00c24622c65fbf79ce584d35d587f9f5","sha1":"ab0f3b23e069168a05406453e5d4f7090299a6d9","sha256":"cf28077da1025ad1faf85de4a91ac453396f14f519fed589f6f99a97653118a8","sha512":"a911ae496cfd003325fbbd38f498b047063ecb9b69e982bf35fe910d8900b4ac877dd1cceb2602ca643ccb93a0575cde5bd695da44913ad59052da1a719e291d","ssdeep":"192:ZqRIMFUQhktvVBAL/ZAPQ45VH5qAEPvvp9:sRIcHMkMH5TE3L","tlshash":"fbd1b3c431c6b89946ab60a2423f104af1bf9a246c4da150e612e5e1bc38c6bc373f7d","size":6502,"data":"","first_seen":"2025-12-26T02:09:57.265994Z","last_seen":"2026-04-12T23:00:03.933837Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/ekr/snippet.js?key=6cd82e6f-a1a1-42f9-ba80-b4d52b98f4ea","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d096b5b24105931fc508ee2125de32fb","sha1":"b62784207151c8d09cde540c933b23f84d178880","sha256":"e56446afa17adbd22ed46a81655739f51874733e396ea3942c508d80136f4264","sha512":"21f20c9ca97db17b89fed8d2613ebc39a1af2e3aeaa94b9390c87e9a4cff25e267a4cfa4e7c41544ca75879db5fd9341478145c39a130630181c294f1607ba96","ssdeep":"192:ITFnkRRORrDkD6B1c4QSZBxtjKkF2P5lQBbUMamqif8Ty1hynl8klCtsiVcHC:kFnk/ORHk+u4QSZYkIPnpcC+0nl8kot1","tlshash":"7a220ac6b1b2e47203a600e1603e8690f765191a360dc478f97cecd6fd66dd1863beb8","size":10134,"data":"","first_seen":"2026-01-27T14:28:45.604965Z","last_seen":"2026-03-09T15:17:18.21333Z","times_seen":2384,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/layout-mobile-menu-container.6ea2d1d4afd8cc20bab4.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5e071cc46ec68bdc9411bb2c0b9493d","sha1":"bf2dce0bcf1ddb110e179ce99850a5bd8052ab5a","sha256":"85eb3f3e39e9c59f051a655970adf8f8da345205f969086832de21e4644be73e","sha512":"2ccc3813a19b7e51a2a94f3d25fe81d3421f2fc6e65e75e9d9656579e85c23efb8d8b42f06e4c5a1b88f426c2e904af62a6bf064792e20aad996c30c601c534a","ssdeep":"6144:n4bma/1u9PPXrSeSRnoaTz6X0BEWFjvUUN7dTxcM6KI0+oYXaNH6:4Ca/1s6DdTxcM6t0+A6","tlshash":"0aa44bc875d2f4a61bf315b6407f000bb33e191a680d8960f365ece978b9599a237f2d","size":486808,"data":"","first_seen":"2025-12-26T02:09:57.243429Z","last_seen":"2026-04-12T23:00:03.911241Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"eval","is_inline":false,"md5":"d617c4e90d5b3d2567a8f5ab571b1707","sha1":"e23761af1809ada737feaf57d1c430be4ec2e910","sha256":"9a8da88ab0d6dd07cc0d7ce51197f801623781504516096fcf1a4c3dca6b63a5","sha512":"34b5a1aa33dca209003c635b43429d3d7262cf0ecfc504ce236c8920e40ad1a2032f8c5047ffbd9f4c0e9b5032727c38437bc4aa6b2f4bf4b0c1e8d77cc2c3a5","ssdeep":"","tlshash":"3fc02bcfdc00a00073dbc2d077c3300e5d3580b48b0c945740980cc4516430f4b364c2","size":147,"data":"","first_seen":"2024-10-04T11:14:04.983941Z","last_seen":"2026-06-03T08:33:36.292423Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/7688.4e8d88156be76566dcd9.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d34061fab4b5b664b59c0883c87f419","sha1":"512a0e6d3d36790e91a841224dd8d3c9de0971ef","sha256":"0d9f47499e7a0d3238f291289437ac9097f61c182ba37008e4c2f4b22bc6d43e","sha512":"36ab56b35f47111880815b5e0c86c445067fb9ae0c9047c4006bc2f54b4f40b49118202150ec1e81676fa7e3266e6e28092f74fd140beb13aa28ec0178150523","ssdeep":"768:F1ljiRnjqnjcYjfSccjwjHZ7BD44lalwt1QShsfJE+MMmC+MsATXTpYAW3DGPEDN:FLUkX+cckFB9u5X3zyx3G43bns05hDX7","tlshash":"6e130b05318ffdef5aa284ab14cf6495a54c2d8ef60f0d56e3aaef43a045485b83e7c1","size":45340,"data":"","first_seen":"2025-12-26T02:09:57.299165Z","last_seen":"2026-04-12T23:00:03.927326Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/3336.1dce8c85df4bba6178b4.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"21a26d39e3dee032bced4273ee556b80","sha1":"76fe0a30c20f6cb6c3421908312c4be25a3d2609","sha256":"f88f69fe1259597daad4fcb73117aa1a40a424ef815c73f02e37e101fe4bfdb1","sha512":"cdde0cf6cd8c7e3a5bd3e2471a400ae43eaec540cab26d0720018df26c522003d19d5aec339448cfced4eba7a02ff8683098c373ee3a63aa7bdbdca655cca496","ssdeep":"","tlshash":"5771c651920471b48bab44e27cbb33e973b94e19790dc144be6c0c592c75ecf210e9bb","size":3485,"data":"","first_seen":"2025-12-26T02:09:57.15985Z","last_seen":"2026-04-12T23:00:03.990208Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/menus.893c05592883f7859454.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"046a388d1b2767439db5421868e4c7b2","sha1":"1c804269f4cadb50e4f34711b67446b737111e9c","sha256":"ec23abd6d994ef8fbee7c407807c96e50c6f97f0ef2d0d4228a674815545d1c4","sha512":"3349d3fcbab7530fffc386e178d502a30b1db59d455d3a2aca1e1ce443da690d8a8e4305a48d7baa913faf3306472c36b6feb93a4c5f34d0d3affc8ab5cdf617","ssdeep":"","tlshash":"683135c961ab60c6d9b28a94583317fa113492f02c9a44c061736bfb3865d467375ced","size":1506,"data":"","first_seen":"2025-12-26T02:09:57.198846Z","last_seen":"2026-04-12T23:00:03.851988Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"change-noww.click/dist/menus.893c05592883f7859454.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/menus.893c05592883f7859454.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Mon, 01 Dec 2025 16:51:18 GMT\r\nETag: \"5e2-644e6c9bc6d80-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 680\r\nKeep-Alive: timeout=5, max=89\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1506,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1506), with no line terminators","md5":"046a388d1b2767439db5421868e4c7b2","sha1":"1c804269f4cadb50e4f34711b67446b737111e9c","sha256":"ec23abd6d994ef8fbee7c407807c96e50c6f97f0ef2d0d4228a674815545d1c4","sha512":"3349d3fcbab7530fffc386e178d502a30b1db59d455d3a2aca1e1ce443da690d8a8e4305a48d7baa913faf3306472c36b6feb93a4c5f34d0d3affc8ab5cdf617","ssdeep":"","tlshash":"683135c961ab60c6d9b28a94583317fa113492f02c9a44c061736bfb3865d467375ced","first_seen":"2025-12-26T02:09:57.198846Z","last_seen":"2026-04-12T23:00:03.851988Z","times_seen":20,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/currencies/polkadot.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:26.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/currencies/polkadot.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:26 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:22 GMT\r\nETag: \"481-6450ede516980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1153\r\nKeep-Alive: timeout=5, max=88\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1153,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e0c3e358cd019f642e1cb9cb5d754b05","sha1":"ef4ced4d4617fb9f7d5989655ceabc4554f25bb6","sha256":"7738414cca7bdeca890ea9594b65b94bd2b9fed6e7b27ca49a5908a7f9de9e58","sha512":"d40aa1ab98cc4703af6f7693d20269653d44ecffb329b05031c833a0545cc3b36c79d0d17d6e8babfaa9e18f179ac6c548a5f067b1de099bba59ffd5db313279","ssdeep":"","tlshash":"a821beedb3f4952d8ec60abcdf1b22f46d2aec76b0044245784b4698bac85c9c5c2e90","first_seen":"2025-06-25T05:34:40.834056Z","last_seen":"2026-06-03T08:33:36.2436Z","times_seen":59,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/fonts/9ceaa06cbe56757d8069.woff","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /fonts/9ceaa06cbe56757d8069.woff HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/dist/index-page.58d0c8c1c98cc9259e2d.16.5.15.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Mon, 24 Nov 2025 23:41:38 GMT\r\nETag: \"3f80-6445fb4503080\"\r\nAccept-Ranges: bytes\r\nContent-Length: 16256\r\nKeep-Alive: timeout=5, max=83\r\nConnection: Keep-Alive\r\nContent-Type: font/woff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16256,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 16256, version 1.1","md5":"04d1dcb5a48c3e8ce1c6e0714c486ed8","sha1":"5090f00729719c3f1382e7a5016381b3f051561e","sha256":"6ab5bd9c0b02853d78d9a0df6b30e29da4859bb42ec19b906c5f210d7dbe166a","sha512":"40c379b90a4076c20ccf934f42f3e1b434b7644a363c87ab22014de1e5fb41cbb3d481e047dd19b78bf6d21efe63236c61bdb06c568d99fcdf4b9970286d2c44","ssdeep":"384:QrWk76pERD6IikaSRPHDMUrPjI9YB8Kf1biFdk2r8qTI:xZp6DFl/QUrXB5N2gFq8","tlshash":"5772c042fb4526409699ee392ff20261df3d91962fc7c39bd093b513ac469f32cd6112","first_seen":"2023-10-31T15:36:33Z","last_seen":"2026-06-03T08:33:36.132253Z","times_seen":109,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/icons/android/android-chrome-192x192.png","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/icons/android/android-chrome-192x192.png HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 13728\r\nKeep-Alive: timeout=5, max=90\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap:5","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Trustpilot","description":"Trustpilot is a Danish consumer review website which provide embed stand-alone applications in your website to show your most recent reviews, TrustScore, and star ratings.","website":"https://business.trustpilot.com","common_platform_enumeration":"","icon":"Trustpilot.svg","categories":["Reviews"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":131749,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1222), with CRLF line terminators","md5":"036fe3f75d0ad4f8f74085e1c79767b4","sha1":"e8f768dd044fe06bd3518118a683f8e093bf4eeb","sha256":"eb1014ef88a7708d5382576c89a4b5fe06098e40ef25cd658be3fed23cf47860","sha512":"8633afefc77079d0679136cf4ad94d64bbdc2073709fcf17de00c44924d00ca5be8db96ca209ade620db3502eec783e44be5919d4b9c5d533252c29209f03135","ssdeep":"1536:kYfkeJr0QQAn4TWu14B0oBjR7BhCpB4a+luRc1:kY5Jr0QQA4TWulUayuy1","tlshash":"5ed3ffb0e0c9126b427391a1bb312b24f5ebd14bcb690f4172ee265f1fa3d518e2795c","first_seen":"2025-12-26T02:09:57.200771Z","last_seen":"2026-04-12T23:00:03.856783Z","times_seen":22,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/stats/TrustboxView?locale=en-US\u0026styleHeight=120px\u0026styleWidth=100%25\u0026theme=dark\u0026url=https%3A%2F%2Fchange-noww.click%2F\u0026referrer=\u0026userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=en-US\u0026platform=Win32\u0026nosettings=1\u0026businessUnitId=59d561c60000ff0005acd2a4\u0026widgetId=53aa8807dec7e10d38f59f32","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"3.164.230.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?businessunitId=59d561c60000ff0005acd2a4\u0026templateId=53aa8807dec7e10d38f59f32#locale=en-US\u0026styleHeight=120px\u0026styleWidth=100%25\u0026theme=dark","date":"2026-02-13T23:00:27.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustpilot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 01 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:AC:04:00:1B:E6:03:65:36:95:67:5E:7F:21:62:B2:19:D0:0A:61","sha256":"C0:F0:3C:56:A6:A5:C3:53:B8:0A:28:8E:01:CC:3D:09:B5:5C:FC:55:FE:7F:8C:10:B8:E1:1F:7F:C6:56:F4:80"}}},"request":{"raw":"GET /stats/TrustboxView?locale=en-US\u0026styleHeight=120px\u0026styleWidth=100%25\u0026theme=dark\u0026url=https%3A%2F%2Fchange-noww.click%2F\u0026referrer=\u0026userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=en-US\u0026platform=Win32\u0026nosettings=1\u0026businessUnitId=59d561c60000ff0005acd2a4\u0026widgetId=53aa8807dec7e10d38f59f32 HTTP/1.1\r\nHost: widget.trustpilot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?businessunitId=59d561c60000ff0005acd2a4\u0026templateId=53aa8807dec7e10d38f59f32\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 13 Feb 2026 23:00:27 GMT\r\nstrict-transport-security: max-age=31536000\r\ncache-control: no-store,no-cache\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 38f2e8dfe4a6e6a8f81d75aed457ec00.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: HoOsB5gm3_pC5prdPxpk2loKyd0YHMqW_lrMO4ATiRXlFn0UqrtvDQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T23:09:45.281132Z","times_seen":16194959,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/5161.bf95d81af5d007aa9519.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/5161.bf95d81af5d007aa9519.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:00 GMT\r\nETag: \"43e6-6450edd01b800-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 5736\r\nKeep-Alive: timeout=5, max=73\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":17382,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17289)","md5":"9f35cd07272d88a17de56d9c237ac52c","sha1":"86582a1eb6918056784f8bc69d678803fc039d07","sha256":"48e026c4d5c1dc7bab8d9f12647b44187640b2f6ddd93039806bbf27f8ca5dc7","sha512":"55dc21c64bf0e78cffcbdcfc772bc38fc63c534bea6a70002c409491725560cd9732fcd0934f3543e45e0cd39c2e56c294f1da6dfa991927e9d301a4b0eb9427","ssdeep":"384:6BchCs1tdhMFI5eXMqL2JPXh5Y4eVrKbfQf2XUQlCyCDt/JA02j2HPpCK5H31V6u:6Bc8s1wMqL2JPuVebof2kQQRDt/Jk2cy","tlshash":"e772c941f86579ed46ae058cf03b8edaf2593d06e13c8da1e5e4ec886026fdd1539b38","first_seen":"2025-12-26T02:09:57.271513Z","last_seen":"2026-04-12T23:00:03.925049Z","times_seen":20,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/4049.675b0ac13e2e87260164.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/4049.675b0ac13e2e87260164.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:12 GMT\r\nETag: \"50d-6450eddb8d300-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 581\r\nKeep-Alive: timeout=5, max=74\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1293,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1293), with no line terminators","md5":"06eda6c98e3fa2201d446d01c8e46c63","sha1":"47deaf87c3ca8e339586a63653b94eab45b0cc23","sha256":"ed29cb90a365ec320cbee46a4fa6ef8c98d68fd3a5b8c62d969ff66d3fefaf07","sha512":"7be2bc988bec538d46c4037787935df12cb82c6c1cf6bb0779de7d7abbda8293feb58b1d17f78b75075b15e0fb7930361a6d2bf3e3e0c76f80b8177db3dd4b41","ssdeep":"","tlshash":"a221dd46bc52f8496e26e580052dcc4aa3bf534164d8d2bcf3e7dce0b938c68a495b38","first_seen":"2025-12-26T02:09:57.125251Z","last_seen":"2026-04-12T23:00:03.849117Z","times_seen":20,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/b3ce68fe78168186beb7.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/b3ce68fe78168186beb7.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/dist/index-page.58d0c8c1c98cc9259e2d.16.5.15.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:12 GMT\r\nETag: \"3cce-6450eddb8d300\"\r\nAccept-Ranges: bytes\r\nContent-Length: 15566\r\nKeep-Alive: timeout=5, max=72\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":15566,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"734616e4f1c497911be4185f9881b5ae","sha1":"59e2b1860b50a7c8d288f56426c461852ba00819","sha256":"640ce81380a9afcc9b399e362de288eb7066ddc347f64277eed19ea0020c4e8e","sha512":"f9ff41e18934d4b78f56d5849d09fa61ebe762f2cd6b191de9b4f9ee306bba3740cd1832201c982c0d6051872184df41f1fcbe5e614aa7b998085d2e1ea1ea5a","ssdeep":"192:ybmhEM5Em5aVWYESm4/pVrwbGsFryLD9PMcy04Z:RKrm5aVWYC4QxT","tlshash":"f762534aa328ad37f48ae3ccdd42c450729d46e37ad0c2a4c2a5af2f5914c965d2f7c7","first_seen":"2024-10-04T11:14:04.394056Z","last_seen":"2026-04-26T00:40:47.197951Z","times_seen":59,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"content-api.changenow.io/uploads/usdtmatic_7f0d789259.svg","fqdn":"content-api.changenow.io","domain":"changenow.io","tld":"io"},"ip":{"addr":"172.66.171.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changenow.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:40:19 GMT","end":"Tue, 21 Apr 2026 09:40:16 GMT"},"fingerprint":{"sha1":"3D:8A:41:5E:00:8A:BB:E0:A7:F9:13:5F:BA:46:03:4A:BE:62:2A:37","sha256":"2D:19:65:5D:1A:E3:04:83:65:79:27:AC:1F:1D:3C:3C:3B:D4:59:18:BB:8A:9F:E2:9C:D6:38:BE:8A:E2:3E:28"}}},"request":{"raw":"GET /uploads/usdtmatic_7f0d789259.svg HTTP/1.1\r\nHost: content-api.changenow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:00:28 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Aug 2023 13:27:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64d4e5d3-1215\"\r\nexpires: Fri, 20 Feb 2026 22:54:01 GMT\r\ncache-control: max-age=31536000\r\nx-frame-options: DENY\r\nx-nxs-id: a6d00bef9be9b3399d0981532ff40de0\r\ncontent-encoding: gzip\r\nage: 386\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9cd7f12c2bef32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4629,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cc58332e6ff148f60638bed80440833b","sha1":"87b67b49875cba033256bf803660a33610fe8252","sha256":"e7b9cfff77f10fe99c41f71d330c2e77366b96fb4ad969e94ff830f5f1a1940b","sha512":"025864a2971cdd6e46166b5894eaa8abaf7efc98cd47be2701e55c13b5ba7ac5ee205781e34c318c54fa39587cf293a50f9b27f498ef85b38eec8650d70ff1c4","ssdeep":"96:fvfPuqwzZwGYS+rLjODOprY6Gx3EfmWUEC:vPupzCGZOjOmNGx0zUEC","tlshash":"6aa124f7a7a062f4e906e7b4d81685b1f2b730b9bb5787488780bbd4372419945ccdc0","first_seen":"2025-07-08T14:16:34.315562Z","last_seen":"2026-04-12T23:00:02.80603Z","times_seen":10,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":83,"dns":0,"connect":1,"send":0,"wait":24,"receive":0,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/7789.44db51d1a2e2277380b9.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/7789.44db51d1a2e2277380b9.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:14 GMT\r\nETag: \"16e3-6450eddd75780-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 2507\r\nKeep-Alive: timeout=5, max=64\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5859,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5859), with no line terminators","md5":"5e6cdb587f4dcba93375c50cc40777e8","sha1":"dbe068d8267d3914019cf2c28e39a8e20224960a","sha256":"29171a6d3036572c3ec0f19393ca57c92bbd3e9b3067a91dc153bd51cb22bba5","sha512":"460dcd1b87810dcea3344c6e16fba37a5b33d98dd757ab5557f144beddd2162b1b4700e6912455898071e83240dd030f3dddee23d9ccc87728aca8bcc2937d74","ssdeep":"96:vw30tltt7vsC7V3t+4Zhq69xucM++zGGpdHS2l25Acpz4v49Cl:40tlv7EQ33ZhEcM96GpRS2lUAcpkv4Yl","tlshash":"f9c1b680b19268be5ae71a90e85f80463190158cdb45cd20f4f3bdda74ebc89b535ff9","first_seen":"2025-12-22T03:32:11.459886Z","last_seen":"2026-04-12T23:00:03.928325Z","times_seen":23,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":102,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/4732.1254664d5cd662022c09.16.5.15.css","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/4732.1254664d5cd662022c09.16.5.15.css HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:12 GMT\r\nETag: \"323-6450eddb8d300-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 353\r\nKeep-Alive: timeout=5, max=68\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":803,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (801)","md5":"578791e889ae9c72b493b9c671290909","sha1":"d3b93997da7494fef0af5c0786f1849acc081164","sha256":"30779e8767d87ec087c673dc3358446ccb6c743bca0368a1799652f4db9e55ea","sha512":"826d8c6870631adf69c7f41f520dd7ab9505ce9155d40b92db670dd5c1c6e8f2679ea8c0c19e47eeb8c4b3df164389353d57a4e47f5e8ccad4a3f503a87bfad0","ssdeep":"","tlshash":"4e018c409fba260c52508bc2f5d0ee96a229c5c66471acce720739c7c3881d8628db63","first_seen":"2025-06-25T05:34:40.929369Z","last_seen":"2026-06-03T08:33:36.215202Z","times_seen":73,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":110,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/header/flags/turkey.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/header/flags/turkey.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:56:28 GMT\r\nETag: \"1ec-6450f17e56700\"\r\nAccept-Ranges: bytes\r\nContent-Length: 492\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":492,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3135fd4028e4846758a192aaae5b6e19","sha1":"de169efcc3067c7efdfcfb8de908eaa9d7c04e0d","sha256":"66b8d031747155ceec7ba2878b8692a6edcef1bca1eb2f6d580b7c83c472ed66","sha512":"4ee6a1c654c1940624bd235d68f99cd49637f7bc2700c62f94c67c236474aec0c8796763d071c3fe518a21abb9245a1bba895982ec0052f0a99b69f18ecf4fba","ssdeep":"","tlshash":"28f005a9205cd5cc5d02438fb7ee9030d33d90c6620501c06086f5047943a5bf980e18","first_seen":"2025-12-22T03:32:11.509852Z","last_seen":"2026-04-12T23:00:03.921953Z","times_seen":26,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/6486.c05de76a1e947421f263.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/6486.c05de76a1e947421f263.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:00 GMT\r\nETag: \"1140b-6450edd01b800-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 24879\r\nKeep-Alive: timeout=5, max=75\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":70667,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65249)","md5":"c14854c4c157f62ff8b86c0837076167","sha1":"ba89ac88762e19f0c0b4a78d90ad76110eacdf7d","sha256":"43a24d898e8da6fae79dc47176024fa3feb4e88a26bd33877cc8f970ef44c99b","sha512":"9c06589a4d6fa5e75f1616956a35edbbdc22b109592caa5c46c9c8ec6cf88f52362d241bd3ec82bbf253413b94a9cc5fb615b01e1f44091aace2ef61136036c9","ssdeep":"768:a2c5dudwclrySf9W/Qf5fhN8emPDyTihoUc5j6vaJ13oLygiQiOViP1yq85o3q:a2c58dwcQSFEQf30OTku5mvqobAOWyqu","tlshash":"9d634fc839d3f016876370b1007f048bf23e6e6568eca648d1a0f0edbdb855ea567e59","first_seen":"2025-12-26T02:09:57.34726Z","last_seen":"2026-04-12T23:00:03.961988Z","times_seen":20,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":27,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"content-api.changenow.io/uploads/usdc_e4bd7ca486.svg","fqdn":"content-api.changenow.io","domain":"changenow.io","tld":"io"},"ip":{"addr":"172.66.171.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changenow.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:40:19 GMT","end":"Tue, 21 Apr 2026 09:40:16 GMT"},"fingerprint":{"sha1":"3D:8A:41:5E:00:8A:BB:E0:A7:F9:13:5F:BA:46:03:4A:BE:62:2A:37","sha256":"2D:19:65:5D:1A:E3:04:83:65:79:27:AC:1F:1D:3C:3C:3B:D4:59:18:BB:8A:9F:E2:9C:D6:38:BE:8A:E2:3E:28"}}},"request":{"raw":"GET /uploads/usdc_e4bd7ca486.svg HTTP/1.1\r\nHost: content-api.changenow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:00:28 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 23 Jun 2021 12:59:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60d3304f-a0e\"\r\nexpires: Fri, 20 Feb 2026 23:00:28 GMT\r\ncache-control: max-age=31536000\r\nx-frame-options: DENY\r\nx-nxs-id: a6d00bef9be9b3399d0981532ff40de0\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9cd7f12c1b9c32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2574,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a8285e0f6ec890f0dc4165d9ab455890","sha1":"d2016cdeb45002abfd1b7bcaf60258a5cf8015f6","sha256":"6ab9fd56f66fa5edda04a8190a5461dce25e6c2b1054e8d13ca50c6d578d24cf","sha512":"99811e173187c7e1210cc3d1fc86031d5b4a8bc79608559cf5ee359dd9c04803a87d0787ed4ec8d77587b38fdac747580264505ba52774b531e6efb691f142f0","ssdeep":"","tlshash":"f45102f7b0f893c4d2431761e822f1b5b43f2db46bf286d451941b5398399ab198ec5c","first_seen":"2025-07-03T16:23:47.812606Z","last_seen":"2026-05-03T12:57:43.862398Z","times_seen":28,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":69,"dns":5,"connect":4,"send":0,"wait":302,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/8368.b1f9855db1f6ab3ada2d.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/8368.b1f9855db1f6ab3ada2d.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:14 GMT\r\nETag: \"f3b3c-6450eddd75780-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=67\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":998204,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"c53aa7b4e755b9b25c523e40e04dc49b","sha1":"af06247d8e7d3314de5963e18ce2494fe5db96f5","sha256":"94196e7fffa2d0f211c3e1f26e08b33d4b94b280a9fa0a2d3fae25ce263fe506","sha512":"cf3e70d3af533bea487190b75285861bd04c6e5c1d5b91df1599a832bee58f4a70b73de721fdc9b95b11d27ea2f5832e9911fcc9698ba6a5fdf4ea78b01cdaaf","ssdeep":"12288:hbJZKc4syEfQjRAHPPPT/mm+tgJv5ujEmxHmrLkLnu0Zy6LZ7Dmdn75O+3kBJoJx:hFcc1Pb/mm+kv+xUMy6LZ7Dc7nKJ/Tiv","tlshash":"cf256c25bd6b7c7e47d7118f789e0c0578ec8026fb08ca49f9e9dd3824e9448826bb5d","first_seen":"2025-12-26T02:09:57.273422Z","last_seen":"2026-04-12T23:00:04.009841Z","times_seen":20,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":31,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/now-products/tracker.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/now-products/tracker.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:22 GMT\r\nETag: \"16cb-6450ede516980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 5835\r\nKeep-Alive: timeout=5, max=83\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5835,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d8df55cde3be0368973f7c0222c6848c","sha1":"18da09fe9fec89695bde2a11e9438d1625bd7e40","sha256":"f8270ce01c0a86d8c3e4ba6397390a22fa6931241dddb3649d1e3fd1ec310e9e","sha512":"f0b1a8a351812867acc06437e281b8f458db6ce3b143cc74a1c17389fec82687728d9305439f1f22bb57f670238812c3081830355868d89160349c03b7f33f89","ssdeep":"96:9csHUo0v+loPun5huMDP/uK/AxKyvkSpiNsw9Y8N67gGV:9csHUo0vXPun5huMDXuK/AxKyDiNswKD","tlshash":"e1c174f819ac92cc989ba27c9b39d8d0671da4b7f235c0907e6f97b4920b185fb47850","first_seen":"2025-06-25T05:34:40.949891Z","last_seen":"2026-05-01T06:59:22.483445Z","times_seen":57,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/5796.ea7efcfe5d5e41637095.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/5796.ea7efcfe5d5e41637095.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:12 GMT\r\nETag: \"3073-6450eddb8d300-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 4058\r\nKeep-Alive: timeout=5, max=77\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12403,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12403), with no line terminators","md5":"2676904fa83317a042f3417bf96bc165","sha1":"2595ac047fdc733e41f563a5427f4fc2c3a4cd16","sha256":"dcac867bfe893e4e12689bc5de524de4163c9082dd149928cfe70f55c352e8e0","sha512":"01e2922ec2d9ed39694e2235b6fa94e4e27860cc45231c7ec4223c6629ed06fe16b1f25ffd3be7201cd030bd2090601c0bb04d750345335f82d17a9bc7afeba0","ssdeep":"192:TCeMK1VI8gbzjesCjQaEVUbwj7msFVrk6JbQrb7uofaqEjiCmzWngT6:Kaw/ZCcaEm+JcDuo1EqOg6","tlshash":"754276cebb86f44a43937078c06f058ee27f69485a4d5424f641f9e02a7a55ef133eb8","first_seen":"2025-06-25T05:34:40.853383Z","last_seen":"2026-04-12T23:00:03.960036Z","times_seen":51,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/7656.b922ee7843a968c3e228.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/7656.b922ee7843a968c3e228.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:00 GMT\r\nETag: \"4aae-6450edd01b800-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 7644\r\nKeep-Alive: timeout=5, max=80\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":19118,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19027)","md5":"0e225346aeeb07c8b235fa09c72d5f0f","sha1":"3360fac25eeaebf50553370ff3bf68c0d1597607","sha256":"2e94a62fad49c29438aeb9d393fdc8cbddec46d7bd080b25f3d56cee1dcc9350","sha512":"af86092c61d860405b64ccc7af214688bba0a81ac7e4759bcc28e7c60be57cbdda710960b6fc4c4ef7d12b2f691ff27e0ef8168e7b2dd56f860772fa9ef6b3a1","ssdeep":"384:gJvngQnH+VjWeQCbiqRP0whHJO8MU1kezPA83H3fkvB:sNPqRP0448MU1ke0iH3fU","tlshash":"ca82eb7ee2c6bb3946bdfe08f239a2047f374934996464b099d0e1857a7d4c30199b73","first_seen":"2025-12-26T02:09:57.27062Z","last_seen":"2026-04-12T23:00:03.983639Z","times_seen":20,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/5571.dd503e22dab37f7c3dbf.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/5571.dd503e22dab37f7c3dbf.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:14 GMT\r\nETag: \"74a0-6450eddd75780-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 7994\r\nKeep-Alive: timeout=5, max=67\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":29856,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29854), with no line terminators","md5":"1432d16bcb9d6223ebb5b318227e0dd4","sha1":"12b5c04b71dc5a7f199cd237e8762ac7ec04e21a","sha256":"7d65ddc637c7790ca3ce924204e1af6d1ef63b03f8079c5814db5c6ddc026e7f","sha512":"4cf8d6e7ffb4b370f776d298c5c6643c0c8541d9971bab5d7f28834d6920648acfc8e1431c7faa8be69235ca6338e55085901585de07e2873d234703aa4793a4","ssdeep":"768:vf+ibSLCBqQNUNm6urfl9btDVYgi+jrXLXEK6xtyhOMrO3GuMJTS7NfPO+EX:OqSLCBqQNU2rfl9btDVYgJK2U6","tlshash":"83d2b53108193db996a70160a9bcb4ce237c0f5bf86345fdb359ced61ae2a81d1b1d36","first_seen":"2025-12-26T02:09:57.250868Z","last_seen":"2026-04-12T23:00:03.944481Z","times_seen":20,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/header-authorization.849378eb8d87c3ea2371.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/header-authorization.849378eb8d87c3ea2371.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sun, 21 Dec 2025 08:51:52 GMT\r\nETag: \"cea25-646726bf99a00-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=91\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":846373,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65429)","md5":"d73f45a28f37035703fbc165815502d5","sha1":"d3fc6f3ca37a3a1a97bf0a04ee3d3567fd555ed2","sha256":"031d18935bf0ced85d9980983b4585b80243b2fe8a9106d436dee034df546e98","sha512":"de156889907b5c9f5e8062f2ade6b04632e2e324379918b979f3a56657461090ed802cbfdbe841d784bba15e96aae0f80a3e5a13cccd799adfeb2b1198870b8b","ssdeep":"12288:Ini5lzL8YLdkLyzxjOna/1etAWeJP8utIbWO+JzYCu:girf8YLdkLCxjOna/1emWep8utIbWOl","tlshash":"ba054ac87195b4a647e311b2407f140bf37a291e680d8860f365ecf5b8b958da23bf79","first_seen":"2025-12-26T02:09:57.208377Z","last_seen":"2026-04-12T23:00:03.835575Z","times_seen":20,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/support/contact-support.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/support/contact-support.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:24 GMT\r\nETag: \"53f-6450ede6fee00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1343\r\nKeep-Alive: timeout=5, max=81\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1343,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a4021b70a077b8298f03b64e179d458a","sha1":"195b28805a58bc79827c8e25ed0e071c7b874764","sha256":"f0072925d482584cd1f3ee81d582e0f37650c51b37953bc869f74f1678bbbc57","sha512":"d133824402346a13526bba83e594ad5663b6b77a3cd4c091309a83c876eff166d50b985e60fbc68818715e4eea5753fb7b4815c31187c8cfd4fcea29f3b9f3d5","ssdeep":"","tlshash":"212153c46294464cce8ea609cf4eecd5242d709f640a02c8317ed7dcb9069deba8cc3c","first_seen":"2025-06-25T05:34:40.875932Z","last_seen":"2026-05-01T06:59:22.586934Z","times_seen":55,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/flags/english-us.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/flags/english-us.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:24 GMT\r\nETag: \"58f-6450ede6fee00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1423\r\nKeep-Alive: timeout=5, max=80\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1423,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dc4e9e8ad1159f704facaa40c9c09034","sha1":"794393b223f9070af5ecadba48146c0a7accd9c0","sha256":"e96d2115a026351521375eafb804870779ad9e56dfce0ef3ee2245786a5edf9a","sha512":"d3504afef10d54767efdfa06d65edec56a2a3a699028a04ece16998d11201dcb5d0a1d403aa33e574912f677b449debb907ec7f6c8ed656677d5ad51b45a7403","ssdeep":"","tlshash":"c521a0c2b197bbeda7060a19eb9254e4c4f2349f2a7be1b8cc6e75685b4c4d5bc31801","first_seen":"2025-06-25T05:34:40.939737Z","last_seen":"2026-05-01T06:59:22.654924Z","times_seen":77,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/3611.b265bf68b1a223391d85.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/3611.b265bf68b1a223391d85.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:00 GMT\r\nETag: \"a57-6450edd01b800-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1142\r\nKeep-Alive: timeout=5, max=74\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2647,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2647), with no line terminators","md5":"4cc70d5c11f6c85693a7072fa0c025c6","sha1":"5063976180495ed6d69c2c53d007f9e8c35b68b4","sha256":"77c7dded2f6affedb7291c143884490c9aea9d38b4b9458f241a58d2617556cf","sha512":"f495e109b9dc75a2c6befb728084e03197f21866a5e7205123134bd19b55ffbef7aa63e65cb1839719e2f0f832784eb1428e82203ed2fd654cb506ec2f402468","ssdeep":"","tlshash":"5e515678f50c7f3d279701b4a2b621483939707f24054871e57bece664bd89b1a15fac","first_seen":"2025-06-25T05:34:40.964115Z","last_seen":"2026-04-12T23:00:03.883511Z","times_seen":50,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/6025.fa3b4dd1ae5118a2d68b.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/6025.fa3b4dd1ae5118a2d68b.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:00 GMT\r\nETag: \"145e5-6450edd01b800-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 20847\r\nKeep-Alive: timeout=5, max=75\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":83429,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65438)","md5":"b3e8e87ddc5edded3420676f2e3e1de0","sha1":"8aab8396a2295177fa9e2fd6102a417ac0c25557","sha256":"1785b31ccdddf6e70eacb194ca2c6bf8a5e8974d677c82282d84879fe32a5c1a","sha512":"9265a2edf2c761f4fa615fc7078005dc09993804b1cc200c872be98c8fc95a39d57198f7e09ae27eb3ebef6d30f22e6d9d2240ab6bd0f89d9a31fe31a7c29c9b","ssdeep":"1536:kSISxrvDcdOcXGJBwtNjqqiFWHazvB2mCTCoCbCnCzC2H7Ikm4EWCzKfNjsQ:mB73km4EWCzKX","tlshash":"a983e940f179a6ef8da640da7c3e8910f1582e0dd57ccda1e2f9ec5874d2e882537a39","first_seen":"2025-12-26T02:09:57.22575Z","last_seen":"2026-04-12T23:00:03.946123Z","times_seen":20,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"content-api.changenow.io/uploads/dai_5315155551.svg","fqdn":"content-api.changenow.io","domain":"changenow.io","tld":"io"},"ip":{"addr":"172.66.171.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changenow.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:40:19 GMT","end":"Tue, 21 Apr 2026 09:40:16 GMT"},"fingerprint":{"sha1":"3D:8A:41:5E:00:8A:BB:E0:A7:F9:13:5F:BA:46:03:4A:BE:62:2A:37","sha256":"2D:19:65:5D:1A:E3:04:83:65:79:27:AC:1F:1D:3C:3C:3B:D4:59:18:BB:8A:9F:E2:9C:D6:38:BE:8A:E2:3E:28"}}},"request":{"raw":"GET /uploads/dai_5315155551.svg HTTP/1.1\r\nHost: content-api.changenow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:00:28 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 14 Dec 2022 18:06:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"639a109d-e46\"\r\nexpires: Fri, 20 Feb 2026 23:00:28 GMT\r\ncache-control: max-age=31536000\r\nx-frame-options: DENY\r\nx-nxs-id: a6d00bef9be9b3399d0981532ff40de0\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9cd7f12bda6e32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3654,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bd0d1a6082f1ff602b8b0b369d357c38","sha1":"37522ca182e5da1c60bf53ed2f5ae305e4425210","sha256":"a8888d27b19ef60908449f8d311cc10d68e08cb6e01d498e9a3f1fd7859a542d","sha512":"82b3921f92ac6e630669da49016e035901c89e5fc6145027a43f755f02675b73847d189cf8a9bbc6c4b31c8ec0a3724411a87ec03eb552fd7dab0aaaa0448923","ssdeep":"","tlshash":"7c7135ea72c832d5870297d1ea2ae4b5642f28fd3f59460f4264ebca57615398d8ccc0","first_seen":"2026-01-26T09:47:59.260088Z","last_seen":"2026-04-12T23:00:04.001272Z","times_seen":6,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/5260.53303feb6d45fb20950d.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/5260.53303feb6d45fb20950d.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:14 GMT\r\nETag: \"1ada6-6450eddd75780-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 29948\r\nKeep-Alive: timeout=5, max=76\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":109990,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65437)","md5":"528526fc1d5902f31cdeffe70cc65e69","sha1":"71a73bd1556264e065ebb13fc764bd00a184d885","sha256":"dd653acc8d1e59ccb72afacff1f4a60be6bb42bb131d8d61a561ef72105fb49f","sha512":"e7af0e9fb4288ca60330a79eb22b2d81fbd916edae92216d1cc8fe54093420c65b08fcee8982c5d1f0216c74511a2e6401730b5e209f6aad01a721d8612ede6c","ssdeep":"3072:qLkujfjfNPDkyOb6AO592Sf2h8WAs9YYm+xuPOKPLwEMcpM0BM2laCZqEXEIq9ld:YjjGOd279YYm+xuKHchM2laCZoI+","tlshash":"f1b318d93298f45142e3d05c80af0906e177ac7c949af494b3eaddd02ba6e6d2137f39","first_seen":"2025-12-26T02:09:57.267818Z","last_seen":"2026-04-12T23:00:03.95432Z","times_seen":20,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/7340.9d19f300a47690e55662.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/7340.9d19f300a47690e55662.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:14 GMT\r\nETag: \"df06-6450eddd75780-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 18144\r\nKeep-Alive: timeout=5, max=74\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":57094,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (57094), with no line terminators","md5":"ea253aa6573a04189f254d94bec962d4","sha1":"8aa8dc07c1e177158a745a88a1cf67aed87440df","sha256":"4b825fb8de063b2883adadbf1efd9046dd2b59acc45e580358c496d37a444f38","sha512":"2079b7c630aaf28628c541661c42678bde4b0330691f9a23cad517e24d41dfc2e0aa7816536da5ed455ee29b40bf865505ebc5e1c956a05d6e0aae01929bb832","ssdeep":"1536:vRRGO+1Azi5kagocLEPc7EOMpuKuqwfuvfKM6FgmYy32OXxHPMTQgkMBmEmlmEOx:ARsxH2lf","tlshash":"ee433b96f1ec6aef0d5a86abbc6e8800f14d2c5dda2dcde1d3f8ccd970019842979d60","first_seen":"2025-12-26T02:09:57.307202Z","last_seen":"2026-04-12T23:00:03.894214Z","times_seen":20,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/currencies/bitcoin-sv.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/currencies/bitcoin-sv.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:22 GMT\r\nETag: \"394-6450ede516980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 916\r\nKeep-Alive: timeout=5, max=83\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":916,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"094bdad67ab7b73d7aaa98d5509ac82e","sha1":"71e3fcc43a4fd1bdbcfeb2be8587a1b2e651ed25","sha256":"809e8d13468563d02e001eac364f46d874f029713966476f58821be433c2cf52","sha512":"b216fa1433c4489622b98fe8613e3ff879a4edcdc2c26f945b52e7bef1a45f3b2f35ab4d76c2de4f8d957e785ae7fa5fdf62d24b7a54bc4c474ef76d85704220","ssdeep":"","tlshash":"791144f85b10675cd559596ceb3f6e8d741eb0e9b12606c466c4c61ca08ac9afa10c18","first_seen":"2024-10-04T11:14:04.53113Z","last_seen":"2026-05-01T06:59:22.637967Z","times_seen":57,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/now-products/loan.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/now-products/loan.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:24 GMT\r\nETag: \"340-6450ede6fee00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 832\r\nKeep-Alive: timeout=5, max=82\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":832,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"287bb840b5895694351c00065aab980e","sha1":"c5a9b623973dd9a9721c2833850aeee5665126aa","sha256":"fad7da28e71228d829218c2fdede83b819fd9326fe4e62f4798fe82422d70728","sha512":"0538685ad1280c23caf30197c542fed8035a6a13e48fe721f1d5cdbdf374cee96b9ae6b7d35c42114987409bb29dcd9b11e4ad9da3ef2ce8146a490dc44ee418","ssdeep":"","tlshash":"8d01cee17a0d42ccca81862e9f1c92a0633f75f974ae44852cce8370900f428eadb814","first_seen":"2024-10-04T11:14:04.308638Z","last_seen":"2026-05-01T06:59:22.754348Z","times_seen":58,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/header/flags/vietnam.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/header/flags/vietnam.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:56:28 GMT\r\nETag: \"116-6450f17e56700\"\r\nAccept-Ranges: bytes\r\nContent-Length: 278\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":278,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"de34980d070bb2a76ad1460acd458bc7","sha1":"2ba864a12c849744ac0312a8b2df1c7510237762","sha256":"d129b6715740ce51cde6dbd8076955f174717ef32f12502fa288dba673535164","sha512":"0069078a2ac687814a853d40c14c28e9697ecc13889ada612a6c47ad43bc7e0f0799f1e2fdacef4c99a5a015d7751f06d24ff598925889302375a2bcb63af44b","ssdeep":"","tlshash":"8dd02b50a34ad718c5408b506b2c96091397709a81d20464f6c12f501a4a8fb5a242fc","first_seen":"2024-12-02T01:40:37.83543Z","last_seen":"2026-06-05T15:34:18.669007Z","times_seen":131,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":177,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/header/flags/iran.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/header/flags/iran.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:56:26 GMT\r\nETag: \"54f-6450f17c6e280\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1359\r\nKeep-Alive: timeout=5, max=90\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1359,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c9c60e028e3e5d7139850c6feaffe318","sha1":"64edb9965b09733e2cc269265335292d52dd0ca3","sha256":"35867acee33d2bf4ac6c6f7c245fa35dfcdeee81d206bb59f161b19566fbeba8","sha512":"9090b67dfe53b16531f7a29f147e5dee7b994b4fa2537efc052946112ac64246a2a6744fa05e531f4a9061b5086aadfa1bba4ca9d962ce57e332d3817cffb572","ssdeep":"","tlshash":"8f2159db5cbc6f8d9c4ecddcaef9d8e4067256661bc4a2b4e848084539303dd4aba4c5","first_seen":"2025-12-22T03:32:11.317653Z","last_seen":"2026-04-12T23:00:03.932037Z","times_seen":26,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":195,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/exchange-calculator.60a836be91ab50db2818.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/exchange-calculator.60a836be91ab50db2818.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sun, 21 Dec 2025 08:49:36 GMT\r\nETag: \"8551b-6467263de6800-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=90\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":546075,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65430)","md5":"9832037796f56a7cac3685bcb3b30710","sha1":"adad4ef0c01cfeb62f332a359e5521939ad39c97","sha256":"66c1cb710dcfb72fe316949112814987f0aee736b872712d8ad5665d1f96537b","sha512":"8d3b05cda40cd7b5d7197e213a799d19c52b7c3f2a94fae652d02a34bdb259b2adae5dfc29acd13d23039e5ae07b31672c70604b16cf4ae22b6b900c96fda12d","ssdeep":"6144:OFbxa/1H9kP/NEAZSeJ3/Doapn90nHbXwCb+lHBoUq9PC68Drh:0ta/1EL3E+lHBoUCPkvh","tlshash":"74c43bc43591f4a60bf311f6807f0407b33e191ab80d8960f2a5ede579b958aa13bf6d","first_seen":"2025-12-26T02:09:57.268762Z","last_seen":"2026-04-12T23:00:03.929464Z","times_seen":20,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":31,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/currencies/tether.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:26.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/currencies/tether.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:26 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:22 GMT\r\nETag: \"28e-6450ede516980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 654\r\nKeep-Alive: timeout=5, max=88\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":654,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d5d93a00684ccdc107f0924118bb416b","sha1":"5a324b1aef9fd2af51799a681f9110a6f8750a00","sha256":"dda3bf36e28f3ebd464e9a8d9b2f5634b80333305c545564b93435ffcb990c99","sha512":"26ea72046478417c2f736c0940c47a26a9796568ddb25f5bcbc1110eb4f28229a0e3c15a093b8fe7394454175add6ea1550e11af98e2ddd4bbc307fa4277b63a","ssdeep":"","tlshash":"7ef0ddde4114e08c95aed47aef3e7ac4120730a9568f5481e3ddfb0ca807de6ba08a64","first_seen":"2024-10-04T11:14:08.753303Z","last_seen":"2026-06-03T08:33:36.265908Z","times_seen":60,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/2027.70a6487b9e758929422d.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/2027.70a6487b9e758929422d.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:12 GMT\r\nETag: \"2154-6450eddb8d300-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1938\r\nKeep-Alive: timeout=5, max=81\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8532,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8532), with no line terminators","md5":"a0720914e88941345476c3aa7ba1e293","sha1":"3ebc95d4fd0719782a8d1dd5b19b59340af3ee40","sha256":"16a0a0d2e523c1051d4c008b399a11c5f6a81c99dc35fb750f52cf7ed9d8e357","sha512":"5bbeb73f9ef3732e00ef58bc31519861b33eff62188ba31461f08d3aeefa9b9514e3d81bcc57753c6dccb8df032baf6eb5d59e87991a7cdb8fd28b2d110e4476","ssdeep":"96:YTJJBhlBRBRd8e3nfXo9fk9YCWXk0BqXK/anAi5q0w+65zRaTotA8TbnRz:YjzfXsM9YHMpnAiH/mwWTvV","tlshash":"bc02635cb55f9f37cadbb46630831040b9ae0ca74c6e0d32faeadc63ad6804095776d8","first_seen":"2025-06-25T05:34:40.842796Z","last_seen":"2026-04-12T23:00:03.956082Z","times_seen":51,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/horizontal-switcher.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/horizontal-switcher.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Thu, 04 Dec 2025 21:52:12 GMT\r\nETag: \"429-64527575cbb00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1065\r\nKeep-Alive: timeout=5, max=71\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1065,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6dd5fb08438a01281ac9228a9132dc08","sha1":"a8b9ed511cfaddb7be3418ff9f42b3866454bbc9","sha256":"e4989267dfd6e9ce55641a620196f75cd42d925d71d97d755b88e0ca3e2d2cb4","sha512":"643a444cdf95904569013ef96532a9e1970b955277c1a917533b305613ce85376a15a6b6e2765f6df9c27ebd35b111e4231b02dabe1195ef9d8d1c5d9192da82","ssdeep":"","tlshash":"9f11e2f3b204b4c3db0adb645c2bfde531472cf77a65826a1389d0417b54cfa1c01824","first_seen":"2025-06-25T05:34:40.893283Z","last_seen":"2026-04-26T00:40:47.212763Z","times_seen":53,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/header/flags/china.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/header/flags/china.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:56:26 GMT\r\nETag: \"279-6450f17c6e280\"\r\nAccept-Ranges: bytes\r\nContent-Length: 633\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":633,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"42b0a0fd8d9a3e774be67af2575b6d9b","sha1":"9c07ec4e4eebc2cfd8173a336303c794519524da","sha256":"b091552f435ed1a5180afd3b86f4e89a7bbd39dacb923c8042282284aae121c0","sha512":"fa8883afd110e6437df63bd3be38d978c366e1affb26d8b8174303878b0bac4be24a4b76281e04d62e201adb19b8f73243cac904ebd470f722940e59f13b1486","ssdeep":"","tlshash":"48f026d6a8c0d6c1c98dc50fcb29b1e0119820dcb83f2889e44f6a481d5fdc3b56a669","first_seen":"2025-12-22T03:32:11.358249Z","last_seen":"2026-04-12T23:00:03.955243Z","times_seen":26,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":201,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/now-products/mobile-exchange.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/now-products/mobile-exchange.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:22 GMT\r\nETag: \"3cd-6450ede516980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 973\r\nKeep-Alive: timeout=5, max=83\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":973,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"42a14218a879b57a14195340ac9f94ed","sha1":"828f7c711b6fbc36defcc5475497f5ea6a2572ac","sha256":"e274936f3703b7c26125af4bdb2dfc157aabdbb742c7a8132c708422bad1b0bb","sha512":"b5337d66f6b6e36d20821abdcb845fad6b0f8cdfae6a87ea5e9b53d3d50566a12439fbc625ee3e48133c02af0bab0df61328b85e422efd9c8f88475620690734","ssdeep":"","tlshash":"3a11abd86b7cd30cb9d6560dcf25f964230f60b9b67691c4088e4385f0844a6fb07e18","first_seen":"2025-06-25T05:34:40.904042Z","last_seen":"2026-06-03T08:33:36.280077Z","times_seen":59,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/main.js","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"3.164.230.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?businessunitId=59d561c60000ff0005acd2a4\u0026templateId=53aa8807dec7e10d38f59f32#locale=en-US\u0026styleHeight=150px\u0026styleWidth=100%25\u0026theme=dark","date":"2026-02-13T23:00:27.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustpilot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 01 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:AC:04:00:1B:E6:03:65:36:95:67:5E:7F:21:62:B2:19:D0:0A:61","sha256":"C0:F0:3C:56:A6:A5:C3:53:B8:0A:28:8E:01:CC:3D:09:B5:5C:FC:55:FE:7F:8C:10:B8:E1:1F:7F:C6:56:F4:80"}}},"request":{"raw":"GET /trustboxes/53aa8807dec7e10d38f59f32/main.js HTTP/1.1\r\nHost: widget.trustpilot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?businessunitId=59d561c60000ff0005acd2a4\u0026templateId=53aa8807dec7e10d38f59f32\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript;charset=utf-8\r\ndate: Fri, 13 Feb 2026 05:07:42 GMT\r\nlast-modified: Thu, 25 Sep 2025 11:44:56 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=86400\r\nx-amz-version-id: null\r\nserver: AmazonS3\r\netag: W/\"c82033c29f8f6d5b781e1feb4e846a20\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 38f2e8dfe4a6e6a8f81d75aed457ec00.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: YgeF0jP-YuDf2jhswuCFKEMjzH__jlIppDKBIFlhypHJNWrcOaeP-w==\r\nage: 64366\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":116319,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (53207)","md5":"c82033c29f8f6d5b781e1feb4e846a20","sha1":"61ea3fceb2c04e32e14b605bb3350d906f82a272","sha256":"b751dc328f23e2a36ca0b5b28e90c29d50bd2e167baf8f646df4c4a21472fc81","sha512":"bbec4ec5e94903d434cb8df8ad395a296d6a33a667ad887e93f65eb37d56bde6dc20877834f07f33f653239079631a274c993439a18e3bd94aa06d8b07efb260","ssdeep":"1536:1jYYoNLcanaQl6er6exeIeKQUjcIQgjdZzQy+y4iTr0a8zQy+y4t:1jYtXOIQSZz","tlshash":"5cb37ca191e85ad29c0f836a3c181710f160f0fcfa4ad4ddbaed4e6d427298eb716d1d","first_seen":"2025-09-25T11:49:43.258815Z","last_seen":"2026-06-06T19:23:04.046299Z","times_seen":3813,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/stats/TrustboxImpression?locale=en-US\u0026styleHeight=150px\u0026styleWidth=100%25\u0026theme=dark\u0026url=https%3A%2F%2Fchange-noww.click%2F\u0026referrer=\u0026userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=en-US\u0026platform=Win32\u0026nosettings=1\u0026businessUnitId=59d561c60000ff0005acd2a4\u0026widgetId=53aa8807dec7e10d38f59f32","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"3.164.230.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?businessunitId=59d561c60000ff0005acd2a4\u0026templateId=53aa8807dec7e10d38f59f32#locale=en-US\u0026styleHeight=150px\u0026styleWidth=100%25\u0026theme=dark","date":"2026-02-13T23:00:27.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustpilot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 01 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:AC:04:00:1B:E6:03:65:36:95:67:5E:7F:21:62:B2:19:D0:0A:61","sha256":"C0:F0:3C:56:A6:A5:C3:53:B8:0A:28:8E:01:CC:3D:09:B5:5C:FC:55:FE:7F:8C:10:B8:E1:1F:7F:C6:56:F4:80"}}},"request":{"raw":"GET /stats/TrustboxImpression?locale=en-US\u0026styleHeight=150px\u0026styleWidth=100%25\u0026theme=dark\u0026url=https%3A%2F%2Fchange-noww.click%2F\u0026referrer=\u0026userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=en-US\u0026platform=Win32\u0026nosettings=1\u0026businessUnitId=59d561c60000ff0005acd2a4\u0026widgetId=53aa8807dec7e10d38f59f32 HTTP/1.1\r\nHost: widget.trustpilot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?businessunitId=59d561c60000ff0005acd2a4\u0026templateId=53aa8807dec7e10d38f59f32\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 13 Feb 2026 23:00:27 GMT\r\nstrict-transport-security: max-age=31536000\r\ncache-control: no-store,no-cache\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 38f2e8dfe4a6e6a8f81d75aed457ec00.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: POHQsLVcEGQ6k-YbBB1PP4C4EsaBGu-Hr0if3LM6Smmlg7eQXCBeIw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T23:09:45.281132Z","times_seen":16194959,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/4770.86bd24c1b33adc0d2f83.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/4770.86bd24c1b33adc0d2f83.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:12 GMT\r\nETag: \"201-6450eddb8d300-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 296\r\nKeep-Alive: timeout=5, max=77\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":513,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (513), with no line terminators","md5":"52ef77e7848bdba9832c102b583d0da3","sha1":"6fd6e2918a48a8882d4f18716a8f85d24b50e0ed","sha256":"ad2902b98c32de857edb35abbafadf237c3268b8c656468741c0c3551129c50c","sha512":"1614e27a6c9702cb8e5b6481e5a8362e5776cb106aa675a8e37e5076d37fb941fc4a450a6ffd61c27f352d43e4786c3b76853e9a870daaee76e9fec7abb4e734","ssdeep":"","tlshash":"f7f081cd5542e4940933895043d7259e913a2031402c54c267101cb41c9d63f8619aec","first_seen":"2025-12-22T03:32:11.55946Z","last_seen":"2026-04-12T23:00:03.953394Z","times_seen":23,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"content-api.changenow.io/uploads/xmr_f7131e8067.svg","fqdn":"content-api.changenow.io","domain":"changenow.io","tld":"io"},"ip":{"addr":"172.66.171.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changenow.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:40:19 GMT","end":"Tue, 21 Apr 2026 09:40:16 GMT"},"fingerprint":{"sha1":"3D:8A:41:5E:00:8A:BB:E0:A7:F9:13:5F:BA:46:03:4A:BE:62:2A:37","sha256":"2D:19:65:5D:1A:E3:04:83:65:79:27:AC:1F:1D:3C:3C:3B:D4:59:18:BB:8A:9F:E2:9C:D6:38:BE:8A:E2:3E:28"}}},"request":{"raw":"GET /uploads/xmr_f7131e8067.svg HTTP/1.1\r\nHost: content-api.changenow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:00:30 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Mar 2022 15:32:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"621e3c89-241\"\r\nexpires: Fri, 20 Feb 2026 22:53:58 GMT\r\ncache-control: max-age=31536000\r\nx-frame-options: DENY\r\nx-nxs-id: a6d00bef9be9b3399d0981532ff40de0\r\ncontent-encoding: gzip\r\nage: 391\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9cd7f12beae832fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":577,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3ad8aedac6fcb0edba46edf55b99cc76","sha1":"8c05f563f6d21ecb18b6eaa3579130a30a5e1f83","sha256":"f829d68c841cd4083ee448a9f0e9a86e74ddebcbfaee2b066a094d7800b5aa0f","sha512":"0db89d8cabdf45d58b47b98ebb835c0b94e89088afe0fddd5ff2344fcd468dee11cd241e564a4f5f3a76818377a77fecd02945afbbb257bc93e8079f2015971e","ssdeep":"","tlshash":"91f08be7635c6404e100b3c59b1f906a636f22f6ebec635833069795e908bab1d8dec4","first_seen":"2025-07-03T16:23:47.823199Z","last_seen":"2026-05-22T16:24:11.643118Z","times_seen":71,"resource_available":false,"data":null}},"time_used":2313,"timings":{"blocked":38,"dns":0,"connect":4,"send":0,"wait":2235,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/9457.0a692258a80455ecb439.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/9457.0a692258a80455ecb439.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:12 GMT\r\nETag: \"5af-6450eddb8d300-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 681\r\nKeep-Alive: timeout=5, max=77\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1455,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1455), with no line terminators","md5":"aee2bb462babdf1b3a635020b110200f","sha1":"ae257d10a0b38ed73d9b4e1a4968f3628bd12d6a","sha256":"50f666e246a192dc5a8c8300bf27ff892660b272112db9b0f84486a0f526bdaa","sha512":"a27319dadae685dc44aad309f237a590f6ccd28112e4fe28a79d31bef750c571b9fab083136533d9157350d7d1f4af2adc477caecd3c3c26eeaf8d46d18cb1dc","ssdeep":"","tlshash":"0b314070718064bc81ea4f8f73f06bd53abaa0c2b40914e1362d8c0d1a96ddb21b87db","first_seen":"2025-12-22T03:32:11.413678Z","last_seen":"2026-04-12T23:00:03.946996Z","times_seen":23,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/index-images/infinite.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/index-images/infinite.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:56:06 GMT\r\nETag: \"16a-6450f1695b580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 362\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":362,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9787dab52446c24fb2f954b41b73240f","sha1":"0656590f2687fc8df41fbe3773520988d360d13c","sha256":"e7b2b1eb555b5d827b0136b1aad702c93967f801fede60335e641f8f362a4966","sha512":"d6dec26793ca918ed1edcebbdc79afcb82d8a1182b109ff9c4201ee411c9ba78abb9d9e697516a60815e14220c0ae9c2a96538c6ad18347a98d6399aa91d428d","ssdeep":"","tlshash":"18e0c0fe234066247feb4d62db28b140c23f307a020c2798e03ed520a0621fe659ba30","first_seen":"2024-10-04T11:14:04.479695Z","last_seen":"2026-04-26T00:40:47.098351Z","times_seen":79,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/inner-navigation/privileges-icon.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/inner-navigation/privileges-icon.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:22 GMT\r\nETag: \"19f-6450ede516980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 415\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":415,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0c63ae8e29aaded3669906f4b338a545","sha1":"f0a5897b2cf7bbe6d772c8822087ecf3023600f2","sha256":"ed56c0a7c9ac76807c539b3040e7713e5e890dfc7fe240d2ef8379c8aaa112cc","sha512":"4d07ef16c6c157c5bdd3e3984993f6c9ae8df6114dd9a1d1598f22eb8af413a18c084f9e51acc364f6f7162744cf9b7fde32ef64e03bef17a997af541e624a8d","ssdeep":"","tlshash":"64e0ab67264814088b422f1efe5c628072db31fd99374046f0416221e592bef94fcedc","first_seen":"2025-06-25T05:34:40.876733Z","last_seen":"2026-04-12T23:00:03.962808Z","times_seen":54,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/6066.9db6126af8d7f2b3e8be.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/6066.9db6126af8d7f2b3e8be.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:00 GMT\r\nETag: \"ef3c-6450edd01b800-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 15521\r\nKeep-Alive: timeout=5, max=78\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":61244,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (61244), with no line terminators","md5":"5a81f131a9ac673ea916e1c78bd64658","sha1":"06b87464412c1c20cf65bbc5748005a76430c198","sha256":"dc6f03aa649ea8bf90b404dfbf876ae566df37100b545caac7edae948fc33620","sha512":"e95c10c8fc31a77389e2a86568d38934b5fb48f968e2bd3a3438772d6ba64aa3ed07656ce1def35ef5cfb43cc9335aa43bd6f712cae656880324d08bfb086d08","ssdeep":"1536:AdD0gUBoDdkAkbkcGhempgMaG/yvMFiyY:zgH32mpgMu","tlshash":"9453eac9b6a1b0b643d32166903f850bf3ba682da40dd054b361d8e57cbc14e636bf79","first_seen":"2025-06-25T05:34:40.898108Z","last_seen":"2026-04-12T23:00:03.920077Z","times_seen":50,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/1082.35506ef9dcb5255ec01e.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/1082.35506ef9dcb5255ec01e.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:12 GMT\r\nETag: \"230-6450eddb8d300-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 359\r\nKeep-Alive: timeout=5, max=72\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":560,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (560), with no line terminators","md5":"de9252d09d09b9cfc5cc586a31274701","sha1":"1b503aa0e20c03e2cd53a156d77014637bc4f9ad","sha256":"3e1fe428e35e96621b50354d404ca25749510093895290f31eee629a747ce02c","sha512":"4b0ee0162bf9eee8f2c6b7b3b4d16a7d9e97de50d4398b86d9cf426780a9065a274cf76018b313511bd43a189e91498d316b4ee77fae3d78ce80eb8eed53b3ed","ssdeep":"","tlshash":"d6f0e19da040a7f52c8b0dc8d4bdebf6a47151343505dc40182c88706160dbb02dbdd1","first_seen":"2025-06-25T05:34:40.916069Z","last_seen":"2026-04-12T23:00:03.995699Z","times_seen":51,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/5452.2c6295addc463f3a589f.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/5452.2c6295addc463f3a589f.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:12 GMT\r\nETag: \"1926-6450eddb8d300-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 2768\r\nKeep-Alive: timeout=5, max=71\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6438,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6337)","md5":"db9ebe6edc7b162ceb782ef44cab205e","sha1":"6dc4545e60cde5264bdc3a826c74ae30a7fe5726","sha256":"cc5f9c2f07521d5444facfe0f29d500382a6a4119c3703262f8fcabe40875847","sha512":"459ea77a4b3236866462f6abfb88e14ffa218d1b59b3bc33e3854e88f36a94f121822d38a392245c38e1d17f2d17a44178dc6ceddf5f280be5bc15f2a3f52a53","ssdeep":"192:oRWew2Y5RVOdPAJ/zAPQ2kcP5eaqfrTPCwzpx:oRWNRRO8VW5ea+XKwb","tlshash":"0ad184d431c2b89816ab60a1423f104bf1bfaa25785de110e602e6e1b934c5b8777f7d","first_seen":"2025-12-26T02:09:57.367398Z","last_seen":"2026-04-12T23:00:03.984963Z","times_seen":20,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"content-api.changenow.io/uploads/btc_1_527dc9ec3c.svg","fqdn":"content-api.changenow.io","domain":"changenow.io","tld":"io"},"ip":{"addr":"172.66.171.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changenow.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:40:19 GMT","end":"Tue, 21 Apr 2026 09:40:16 GMT"},"fingerprint":{"sha1":"3D:8A:41:5E:00:8A:BB:E0:A7:F9:13:5F:BA:46:03:4A:BE:62:2A:37","sha256":"2D:19:65:5D:1A:E3:04:83:65:79:27:AC:1F:1D:3C:3C:3B:D4:59:18:BB:8A:9F:E2:9C:D6:38:BE:8A:E2:3E:28"}}},"request":{"raw":"GET /uploads/btc_1_527dc9ec3c.svg HTTP/1.1\r\nHost: content-api.changenow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:00:28 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 23 Jun 2023 16:48:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6495cce7-ecb\"\r\nexpires: Fri, 20 Feb 2026 16:59:23 GMT\r\ncache-control: max-age=31536000\r\nx-frame-options: DENY\r\nx-nxs-id: a6d00bef9be9b3399d0981532ff40de0\r\ncontent-encoding: gzip\r\nage: 21664\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9cd7f12bda6632fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3787,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"38aea398ca7bdffb6dc31711d03c016b","sha1":"fb78de3d26f219f2c144517dba0a7c7e1131bf78","sha256":"183eb20ee72155355f66255a8ca1fb9b14710ebab3626fae1001983862e35354","sha512":"09f00ac233c1626748750515931d05810371e97905680136dfe0580b54b6af348e7972e2d0803ae9bf591ce5e6669749b78a73fea7e8632e66885cac5438e3c9","ssdeep":"","tlshash":"2f7197fb62c873d0a607e3e0e5376166779f38be3f95db5941409ea8f621069c888cc4","first_seen":"2025-06-07T05:40:10.252294Z","last_seen":"2026-06-03T08:33:36.233935Z","times_seen":95,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":49,"dns":9,"connect":1,"send":0,"wait":36,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/9814.b3fe24198f290d257c70.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/9814.b3fe24198f290d257c70.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:14 GMT\r\nETag: \"47bb2-6450eddd75780-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=70\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":293810,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6e4069f31d7c6191871cf5d5c77e7979","sha1":"03f443d67cdfe84c2d96046c5fa1f79afad58799","sha256":"5a75042945d362e3a608ae4950092e3e76057f9cbb8ef253831006b924f7e9df","sha512":"0f054cd16cf943ff49ec91148031cd13ccd68a50c6fe2bc8f77ba56c2179deff64cec5e5fe1806a7a1477e60d099836e66875ae6a6dd2de5757b30598220440c","ssdeep":"3072:f6235F89hiTSb9icfht6HSmcTshNfMqMG9iGa85HZt7t:fQN9lFTsnMMtt","tlshash":"3b54d7a470d4e8119ad68159887f0444e3e26c2c9595b4acf3fbd8d86bb590c313ffba","first_seen":"2025-06-25T05:34:40.975289Z","last_seen":"2026-04-12T23:00:03.834104Z","times_seen":48,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":31,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/press/investing.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/press/investing.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:54:44 GMT\r\nETag: \"1959-6450f11b27d00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 6489\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":6489,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"df9ea1cbbd963ee4a8ac31e783aa521b","sha1":"8099971c4eb6b2aa0d7dc4743d2a57f5161e2379","sha256":"c3631748ce6daa82b1dd7769d9d7354520a74b4f47bc9139a2f2e6e67b42c3f4","sha512":"6b608db0b04b37bf439582c563e0dd801cb6eb818dee74dfda404b0356a663f8f6bfd0f70d3ffe4618b13d0ab5516f35b4c725fd8f7174f1e7e980f2fceedbbc","ssdeep":"192:iKQusQv172jk7mSZRjS4cQ7CucBpl5EdF7gN:iKftAjkyShnCpBpliFY","tlshash":"c5d1b5d64370e3c4a8cae95edf26aec8260fb0ef99a751c046af874874c7680f705814","first_seen":"2024-10-04T11:14:04.30561Z","last_seen":"2026-04-26T00:40:47.143095Z","times_seen":79,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":94,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/layout-mobile-menu-container.6ea2d1d4afd8cc20bab4.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/layout-mobile-menu-container.6ea2d1d4afd8cc20bab4.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sun, 21 Dec 2025 08:54:34 GMT\r\nETag: \"76d98-6467275a18680-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=87\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":486808,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65395)","md5":"b5e071cc46ec68bdc9411bb2c0b9493d","sha1":"bf2dce0bcf1ddb110e179ce99850a5bd8052ab5a","sha256":"85eb3f3e39e9c59f051a655970adf8f8da345205f969086832de21e4644be73e","sha512":"2ccc3813a19b7e51a2a94f3d25fe81d3421f2fc6e65e75e9d9656579e85c23efb8d8b42f06e4c5a1b88f426c2e904af62a6bf064792e20aad996c30c601c534a","ssdeep":"6144:n4bma/1u9PPXrSeSRnoaTz6X0BEWFjvUUN7dTxcM6KI0+oYXaNH6:4Ca/1s6DdTxcM6t0+A6","tlshash":"0aa44bc875d2f4a61bf315b6407f000bb33e191a680d8960f365ece978b9599a237f2d","first_seen":"2025-12-26T02:09:57.243429Z","last_seen":"2026-04-12T23:00:03.911241Z","times_seen":20,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/runtime.4a5e60c81a6f404ae4ed.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/runtime.4a5e60c81a6f404ae4ed.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Mon, 01 Dec 2025 16:50:56 GMT\r\nETag: \"2e67-644e6c86cbc00-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 6467\r\nKeep-Alive: timeout=5, max=86\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11879,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11879), with no line terminators","md5":"1631150bb90a5d3a41bac35596207c49","sha1":"82d6910ef05651d229092c8de3987e3ec3e4b13e","sha256":"d6d4e176afbfa53ea85948ade18b67f8f42726b8ab0186754b713b40ef442433","sha512":"6a9ec90066a96234bc21c80e377c9cf2586f960e2ef774ce8c8d3aea2f533fa224e29ad46ca737a60695eec443c0b46c30aa69feb7d957cdaa5e8c0e31f5f400","ssdeep":"192:NYhYtbAGF16q0B4+X9c1fFvoy/Ey8EQby/5d8aK1qdLPavovvyfNqwPoqVyphY6l:NYhq316qo4+X+fFtGnyJvdLDClpPoqM1","tlshash":"48325daa634cb4b539b105d1bdb598f970047123201e18e1b2c9fa6d40b5ff9a717ef2","first_seen":"2025-12-26T02:09:57.276417Z","last_seen":"2026-04-12T23:00:03.923699Z","times_seen":20,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/now-products/meme-coins.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/now-products/meme-coins.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:24 GMT\r\nETag: \"85a-6450ede6fee00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 2138\r\nKeep-Alive: timeout=5, max=83\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2138,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23265f67c2c7b2ab092f3e7bee7d22df","sha1":"3b50e7a8d1742d7853b529521a67cfd9fa0afb48","sha256":"1f95546c9eab03c022553dce2be301f077e38a33e019cbd22b7d0517fe8c3cd2","sha512":"129ae0960b0eb243de7a86bde18f3853cfee8c48f1bcde5ea50b2f3374f9695d218c3d1eb858b23365ed4ffd0d77584dc1f9802fe9c1aa0b764389e830d03611","ssdeep":"","tlshash":"5a4175e6a7f0b286cc07cf15cc217980ab42a4f77f9a1b4a8454ae581a631edccccc58","first_seen":"2025-06-25T05:34:40.86385Z","last_seen":"2026-04-12T23:00:03.999016Z","times_seen":53,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/2621.b3969031fca3a7c6edf6.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/2621.b3969031fca3a7c6edf6.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:39:58 GMT\r\nETag: \"b79d-6450edce33380-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 15785\r\nKeep-Alive: timeout=5, max=78\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":47005,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46912)","md5":"dc8b60e196c32e98705afadacab0fbe0","sha1":"97e15617cb4a09f132cc5fa4fe89442f737bd1d7","sha256":"2296086d8f3b32c5497af1fa777fe8c513717dc1c206a45497798364a5ee2a35","sha512":"0ff81577695de3406b1908a5a6f5ed7876521862a8855608d2d8302914392de0e16ee3c54b05c2cdb67fc4d8f3fd3c76b6c3f47d2c257e3f130f70897058254d","ssdeep":"768:2V1Jc2Bz+FX99NaVC6NfQ5WyB5MSllSa7Rou3zLynw/YF0I1SPcIjA+pYVL1T6LN:2nzBzENN24jLSIxA+CEgGtAGgYWB4LzZ","tlshash":"0223299570dab4ec42d7519ad83e0604f2650c3ebe2e49a0e6f4dce9b5749cc3239e78","first_seen":"2025-12-26T02:09:57.170021Z","last_seen":"2026-04-12T23:00:03.89324Z","times_seen":20,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"content-api.changenow.io/uploads/usdcarb_3c8a537dd2.svg","fqdn":"content-api.changenow.io","domain":"changenow.io","tld":"io"},"ip":{"addr":"172.66.171.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changenow.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:40:19 GMT","end":"Tue, 21 Apr 2026 09:40:16 GMT"},"fingerprint":{"sha1":"3D:8A:41:5E:00:8A:BB:E0:A7:F9:13:5F:BA:46:03:4A:BE:62:2A:37","sha256":"2D:19:65:5D:1A:E3:04:83:65:79:27:AC:1F:1D:3C:3C:3B:D4:59:18:BB:8A:9F:E2:9C:D6:38:BE:8A:E2:3E:28"}}},"request":{"raw":"GET /uploads/usdcarb_3c8a537dd2.svg HTTP/1.1\r\nHost: content-api.changenow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:00:28 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 07 Mar 2023 10:49:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"640716c6-1491\"\r\nexpires: Fri, 20 Feb 2026 22:54:01 GMT\r\ncache-control: max-age=31536000\r\nx-frame-options: DENY\r\nx-nxs-id: a6d00bef9be9b3399d0981532ff40de0\r\ncontent-encoding: gzip\r\nage: 386\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9cd7f12bfb1032fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5265,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"afa6a9969bec5a00c48c21e1ad64a735","sha1":"c3a8683ba6dff094316875b99c56a936d39ec181","sha256":"b2d07dcc7e1d16f9582cdcd2d127830fca5d8a70c795653ae2429bf8a852206e","sha512":"fe871f08c6164c96ec99d8c13df56a0a4d3e59ff0c0d0a2bdf7d2d7cc21badcb10f9eb9fdeea9dfde33ead8bee2c807cda60e9e88640fcbeff954416e2469ca6","ssdeep":"96:x2s5QFq9qLM4i0EYtiryelQDkqm76JL4q4q13tfJx5d9dDW6Bi:x35Q8qLxi0EThig7UMkJTd9dy","tlshash":"eab100f7a3dcb3c4d507e3a2e861a065355b2cf97baacfc443606a91653a0d18e4dcd8","first_seen":"2025-07-08T14:16:34.37693Z","last_seen":"2026-04-09T01:30:40.11573Z","times_seen":8,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":60,"dns":12,"connect":8,"send":0,"wait":32,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/4732.014dfdfcc68e62b092d5.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/4732.014dfdfcc68e62b092d5.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sun, 21 Dec 2025 08:48:22 GMT\r\nETag: \"6fb2-646725f754180-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 10607\r\nKeep-Alive: timeout=5, max=66\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":28594,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28501)","md5":"5e903380c58ca726db052429cdd3272a","sha1":"d4d4dfbf5bc429022e5b758c6ee1e084d7d09806","sha256":"553b9f65859eee064a91ce78b07f0d681480110f816667e52cc789b6e40aca04","sha512":"5ffc5191f414f806197e06dd9cfb1c6b8cb659a681fa0261f64ac4461a5d5a6afb55dc87d55cd63b77da9c95d0afd335fb07bad19fd9331b610b8bc6471010e5","ssdeep":"768:EYTWtpUHlw8jKg4BsGcgH0HEQGYPCXEB1Zm9Nft/JcoCRYxcMmChV1uGRXave33u:dT8QH/hCXEB1Zm9p9cj2335QmBi92mnX","tlshash":"24d22a8cf6e6607b0bf39454827f0007b1a52549635c805ea286cee235ba77e52f6f74","first_seen":"2025-12-26T02:09:57.12923Z","last_seen":"2026-04-12T23:00:03.985642Z","times_seen":20,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":127,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T23:00:24.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 48311\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":333490,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"Generic INItialization configuration []","md5":"671848cf5bd1df295a436b832ae46534","sha1":"5be2b08e27a277cfdcc674ad8357242eb2e98702","sha256":"d2d996c6f1d226bc4279c8f96f74bdb2f35f44983d50c15e505d604010ef3fc2","sha512":"c9c2f9d96678c84b88af2b27d8661e732a0137784587f20410531d64e568971773aef328372fb5d2f957ecad1769f5e23ab4ffcb12011551d335ee5f38d5d787","ssdeep":"3072:Z1tR0SyhWv9eEYU//+LNffyCYS+TRQ7wU7CtG3o1WAj79F5SeS1X:bpME53k6TRQStRSeO","tlshash":"e364c371e0c119bb077381b2bb355b58fda6924fd6540a02b3fe668f0fb3d454a23a19","first_seen":"2026-02-13T23:01:05.907312Z","last_seen":"2026-02-13T23:03:22.211489Z","times_seen":3,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":163,"dns":108,"connect":25,"send":0,"wait":34,"receive":43,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/stars-two.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/stars-two.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:56:24 GMT\r\nETag: \"5ba-6450f17a85e00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1466\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1466,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9a8245d738704cafc7aa696bd3a71ff7","sha1":"b30a04c81684289901cda0c883f1f31fc0f8cc2d","sha256":"5bf15097620a25fd4db33be208b5066c6153e1c449c3e50574601e7d579cc2c9","sha512":"ae32be22bbcd3f5c06db2a916f796dc0055bdd8defa4d8269baadf8b363173826543c89b3d32755fdaba982098dbfe8c7528f7553e6f643804865e1f6eb18205","ssdeep":"","tlshash":"653196b767dc52d8c049e341e83e5831756a38f33bc3d6b284905298f1516ffc8498e9","first_seen":"2024-10-04T11:14:04.499716Z","last_seen":"2026-04-26T00:40:47.23676Z","times_seen":78,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/currencies/all.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:26.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/currencies/all.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:22 GMT\r\nETag: \"3cd-6450ede516980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 973\r\nKeep-Alive: timeout=5, max=89\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":973,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"42a14218a879b57a14195340ac9f94ed","sha1":"828f7c711b6fbc36defcc5475497f5ea6a2572ac","sha256":"e274936f3703b7c26125af4bdb2dfc157aabdbb742c7a8132c708422bad1b0bb","sha512":"b5337d66f6b6e36d20821abdcb845fad6b0f8cdfae6a87ea5e9b53d3d50566a12439fbc625ee3e48133c02af0bab0df61328b85e422efd9c8f88475620690734","ssdeep":"","tlshash":"3a11abd86b7cd30cb9d6560dcf25f964230f60b9b67691c4088e4385f0844a6fb07e18","first_seen":"2025-06-25T05:34:40.904042Z","last_seen":"2026-06-03T08:33:36.280077Z","times_seen":59,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/apk-download-new-small.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/apk-download-new-small.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:56:04 GMT\r\nETag: \"34e0-6450f16773100\"\r\nAccept-Ranges: bytes\r\nContent-Length: 13536\r\nKeep-Alive: timeout=5, max=70\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13536,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d6704dabc88ef1dca959ab30fffb3d9b","sha1":"ad9f20e49c4d84daebc1a9a2feb3038b816ef6b4","sha256":"5c64ecdd5f9b29f4943911a06a898ad2ca928e5b6aecd0be565ed5be28591a6b","sha512":"d6260997531f7ac10a73f43359c859ba8f70d8ab0c3ff40b78411d1314ccadbeff21c61447952eb1afffe02177a8f88a6265d67b5386052e07d6c199d50250d4","ssdeep":"192:jTFkCK/UOHjLhqwWrF25XmstuIrfwCUF3bjaCmnfWtI7k6Tx68TAD62uprlPx5b5:j6P/UudWrF2hUIrfwSCk7Fc80Gnxx5b5","tlshash":"295285e9676823f8f005f3f0ca1654783e553df76fe59aa4c351ac4295a306c8caa8c3","first_seen":"2024-10-04T11:14:04.503028Z","last_seen":"2026-04-26T00:40:47.272759Z","times_seen":56,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/9115.e7465a892d39468e5db9.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/9115.e7465a892d39468e5db9.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:12 GMT\r\nETag: \"841-6450eddb8d300-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1090\r\nKeep-Alive: timeout=5, max=72\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2113,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2022)","md5":"c05e4e263823e4cf6ed147e34ff94907","sha1":"c78692fc1131c5069f2951a6b8970892579831bb","sha256":"6d160ed12a9e4acb08aa78b27a29b4d13b6220175d40968ac02173ae6d246f6b","sha512":"b29103156395d8896f7094ef433b8278c27a7e65aff4e860bc56204dc61bbdd3786a2b3eb59580899585f5909f03b38dc2b8ad2f294a7ed15486d237119e0ba7","ssdeep":"","tlshash":"3d41b8edb0c5385402eb1661c63f154bb13512962e9dd1e3e70c94e021b096f4327f9c","first_seen":"2025-12-26T02:09:57.330849Z","last_seen":"2026-04-12T23:00:03.838692Z","times_seen":20,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/722.a902f90c165f54d2575a.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/722.a902f90c165f54d2575a.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:12 GMT\r\nETag: \"a4ab-6450eddb8d300-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 10293\r\nKeep-Alive: timeout=5, max=71\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":42155,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (42133), with no line terminators","md5":"5c5c9b5adf608600e566e891368cff2a","sha1":"b8559655a63f9a85158022e344d09eb91121b00e","sha256":"f3be2f461228b72813bf221a6069640e93017385b9d0c606a2411f626b1dcda7","sha512":"be95437c5a750a5230354cc283a9095070ee9e6fcd0f38ce3a4df37d610b6e84bdca244977c07bf0373b6d9914db7f47fb0228db76d2dddbb27610ad33e8096f","ssdeep":"384:K3SjLJmrXSo1LCW+un+abmvjj78tqNcF2U7wBTyJ+BDJaNOPjMjjRxU71JDpoQtQ:JsiLf8t3F2MwBTyJ+Bda6/p5dco6","tlshash":"5413c7c131c2f05557a39998802f0105f32eee39a88fbd50f3dbda81f95695a613afb1","first_seen":"2025-12-22T03:32:11.516577Z","last_seen":"2026-04-12T23:00:03.934446Z","times_seen":23,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/now-products/pro.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/now-products/pro.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:22 GMT\r\nETag: \"21b-6450ede516980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 539\r\nKeep-Alive: timeout=5, max=84\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":539,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"68a830b6ed693c44fc30d3e8a2b93aff","sha1":"6283fd5528c0b4575ddc655488565cb67a07ae3a","sha256":"9f8c1ae179d7943833db789f591975fcd071c6ea9ead68f1778bd03fb4cbe1f4","sha512":"43621fc7998bc4753fa7f8cbe5c758980700fb78580e3a09de021480af410ad5ca31ce48c32d6fd42febe7785a248d80e3e8825fd57a28136f8840d4e311da2a","ssdeep":"","tlshash":"eff050f051ac8841d4020b71df7c76c3592ff1fc0eb508a750a0dfa475a07ae544de84","first_seen":"2025-06-25T05:34:40.908494Z","last_seen":"2026-06-03T08:33:36.204366Z","times_seen":59,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/stats/TrustboxImpression?locale=en-US\u0026styleHeight=120px\u0026styleWidth=100%25\u0026theme=dark\u0026url=https%3A%2F%2Fchange-noww.click%2F\u0026referrer=\u0026userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=en-US\u0026platform=Win32\u0026nosettings=1\u0026businessUnitId=59d561c60000ff0005acd2a4\u0026widgetId=53aa8807dec7e10d38f59f32","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"3.164.230.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?businessunitId=59d561c60000ff0005acd2a4\u0026templateId=53aa8807dec7e10d38f59f32#locale=en-US\u0026styleHeight=120px\u0026styleWidth=100%25\u0026theme=dark","date":"2026-02-13T23:00:27.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustpilot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 01 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:AC:04:00:1B:E6:03:65:36:95:67:5E:7F:21:62:B2:19:D0:0A:61","sha256":"C0:F0:3C:56:A6:A5:C3:53:B8:0A:28:8E:01:CC:3D:09:B5:5C:FC:55:FE:7F:8C:10:B8:E1:1F:7F:C6:56:F4:80"}}},"request":{"raw":"GET /stats/TrustboxImpression?locale=en-US\u0026styleHeight=120px\u0026styleWidth=100%25\u0026theme=dark\u0026url=https%3A%2F%2Fchange-noww.click%2F\u0026referrer=\u0026userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=en-US\u0026platform=Win32\u0026nosettings=1\u0026businessUnitId=59d561c60000ff0005acd2a4\u0026widgetId=53aa8807dec7e10d38f59f32 HTTP/1.1\r\nHost: widget.trustpilot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?businessunitId=59d561c60000ff0005acd2a4\u0026templateId=53aa8807dec7e10d38f59f32\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 13 Feb 2026 23:00:27 GMT\r\nstrict-transport-security: max-age=31536000\r\ncache-control: no-store,no-cache\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 38f2e8dfe4a6e6a8f81d75aed457ec00.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: IYcD9yML2q-A-s6LhqwZm65qGuimAn9xVaamH8k8JE5TN10PS8fuvg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T23:09:45.281132Z","times_seen":16194959,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/850.34e3830e3080a768e417.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/850.34e3830e3080a768e417.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:12 GMT\r\nETag: \"187-6450eddb8d300-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 282\r\nKeep-Alive: timeout=5, max=78\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":391,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (391), with no line terminators","md5":"a334464212d49b7a1994eda0cc755dac","sha1":"ff4ec2c28666ac599ba6f990d82ef8bb9f58c422","sha256":"e6230e40025d58b80fdfa6db1965ed00d368c74ce8a832b1bc11b1dddabde32a","sha512":"b1d9fec79c75bab65bde2f822823c3f0ebdd2b76fcec306d5874992225e048b7324ed00841461ce3505cb79e7f6477aaff2f7c6b2a9d4497aa885a135b36c071","ssdeep":"","tlshash":"a2e0f114fb6232d356ee5d1c0c392207a437d071010cc0c3b1592c8836e5ebd616bc02","first_seen":"2025-06-25T05:34:40.834944Z","last_seen":"2026-04-12T23:00:03.853344Z","times_seen":51,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/fonts/a12c527ee24dcc6ccb75.woff","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /fonts/a12c527ee24dcc6ccb75.woff HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://change-noww.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Mon, 24 Nov 2025 23:43:48 GMT\r\nETag: \"3fc0-6445fbc0fd500\"\r\nAccept-Ranges: bytes\r\nContent-Length: 16320\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: font/woff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":16320,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 16320, version 1.1","md5":"fcc5eb32902132c483f7689e6003e69a","sha1":"a186b86dea978e76a2b64de4dfa840ef00d2bb50","sha256":"01eb9de178ccb20ee4cefd20c0948c141a0400aee97747833d87865ec1398e99","sha512":"767531dcf901ed41347c49aefcb724234063833726ebe541bd8b843560468d07b1419b9b17f77d070e81a8821c973133f8f92c32be092f11873bb3dc92f5b8a1","ssdeep":"384:gpGl+A+yud1ORtW4mXg6SU0aFJ3YBYNHAJSuYFKMBokOG:gpm+Ldbw6SUfJcVSBMaR","tlshash":"cb72cff0df94e6ea83c41ab49dcfe9e6af8cb7d589025e1e28a21e44f79c1740853c11","first_seen":"2023-10-31T15:36:33Z","last_seen":"2026-06-03T08:33:36.146426Z","times_seen":108,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/index-images/stars-for-title-mobile.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/index-images/stars-for-title-mobile.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:54:24 GMT\r\nETag: \"254-6450f10815000\"\r\nAccept-Ranges: bytes\r\nContent-Length: 596\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":596,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"32509c910aa7cb0206363587b3d8bde0","sha1":"4e9b751ca00ac269a6a56fc517887e76b8c8f594","sha256":"0ae50583092eff90d76c5d56308b150fa8f6b483cc54270b8d6f0c8f25f067ba","sha512":"5b9d3ab045ae485184681bc563e13696fd856d3d00e4f7025ef09ead3aada0844db1c5941bd61269bb7eda672cd89492a977478453b21e78e167f725ea821b86","ssdeep":"","tlshash":"42f0e1c71644c1897d48ef65ef367f22515774b3646a8188b3f46748f183ed7a800c5c","first_seen":"2024-10-04T11:14:04.299247Z","last_seen":"2026-04-26T00:40:47.085579Z","times_seen":60,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":99,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/reviews/review-star.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/reviews/review-star.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:12 GMT\r\nETag: \"127-6450eddb8d300\"\r\nAccept-Ranges: bytes\r\nContent-Length: 295\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":295,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aced37be4bf249276f66809739b0e67e","sha1":"ace5f7ffd801195dda0e8775f99fafa566b7e8e5","sha256":"8d9bc3eec518b5902c09efe450277474b98e5ab8cb14c53399a0d558d3d76717","sha512":"6fc2b071d55d3cb77e745b4d410529608bf4352cb13bee2b355b302e7f343e7c26dc8c56ab51ba2e9ed5881644c597cd7daf3e240df3e4f4db11e56ddc3eff8b","ssdeep":"","tlshash":"2ae02bf3e9acd3a68a16c752ba3928315c5b30f6ac5643f1dd60e14df0219c658005fc","first_seen":"2025-06-25T05:34:40.891942Z","last_seen":"2026-06-03T08:33:36.197958Z","times_seen":78,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":113,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/layout-header-container.0bb293c9873d4e46d3bf.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/layout-header-container.0bb293c9873d4e46d3bf.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sun, 21 Dec 2025 08:54:34 GMT\r\nETag: \"68736-6467275a18680-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=91\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":427830,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65400)","md5":"d98034d9bcd2ad75ae85b31247bdaee2","sha1":"f408583e595510dd3a189db4e4e2ac8e4ff754b9","sha256":"47859954b9bc4667faf56ac84deb22d478ebf25e9c21e20b3fb08f8af953d9d8","sha512":"5de2bdc2604632a7c7711e01225c05a5e6e056fa0e240344879875c874e7c2ac11d7c9728170756cc0495f5e313dcee4063884ea0aa1d3ddf234783b490e802a","ssdeep":"6144:UbU9iP8Sev+bt2GNillvrOplU+mR7NiiiUhCLx+Cc:U+nNiii2CL8","tlshash":"dc942ac4b5d1f4a65bf315b6407f000bb33e191a680dc960f365ece978ba499a227f2d","first_seen":"2025-12-26T02:09:57.164729Z","last_seen":"2026-04-12T23:00:03.91694Z","times_seen":20,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/main.js","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"3.164.230.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?businessunitId=59d561c60000ff0005acd2a4\u0026templateId=53aa8807dec7e10d38f59f32#locale=en-US\u0026styleHeight=120px\u0026styleWidth=100%25\u0026theme=dark","date":"2026-02-13T23:00:27.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustpilot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 01 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:AC:04:00:1B:E6:03:65:36:95:67:5E:7F:21:62:B2:19:D0:0A:61","sha256":"C0:F0:3C:56:A6:A5:C3:53:B8:0A:28:8E:01:CC:3D:09:B5:5C:FC:55:FE:7F:8C:10:B8:E1:1F:7F:C6:56:F4:80"}}},"request":{"raw":"GET /trustboxes/53aa8807dec7e10d38f59f32/main.js HTTP/1.1\r\nHost: widget.trustpilot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?businessunitId=59d561c60000ff0005acd2a4\u0026templateId=53aa8807dec7e10d38f59f32\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript;charset=utf-8\r\ndate: Fri, 13 Feb 2026 05:07:42 GMT\r\nlast-modified: Thu, 25 Sep 2025 11:44:56 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=86400\r\nx-amz-version-id: null\r\nserver: AmazonS3\r\netag: W/\"c82033c29f8f6d5b781e1feb4e846a20\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 38f2e8dfe4a6e6a8f81d75aed457ec00.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: oBwrbiXrPYWz3cnCCM0eEcVggrgo4S8l6XK4EGAFCYTfcIgngxaotA==\r\nage: 64366\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":116319,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (53207)","md5":"c82033c29f8f6d5b781e1feb4e846a20","sha1":"61ea3fceb2c04e32e14b605bb3350d906f82a272","sha256":"b751dc328f23e2a36ca0b5b28e90c29d50bd2e167baf8f646df4c4a21472fc81","sha512":"bbec4ec5e94903d434cb8df8ad395a296d6a33a667ad887e93f65eb37d56bde6dc20877834f07f33f653239079631a274c993439a18e3bd94aa06d8b07efb260","ssdeep":"1536:1jYYoNLcanaQl6er6exeIeKQUjcIQgjdZzQy+y4iTr0a8zQy+y4t:1jYtXOIQSZz","tlshash":"5cb37ca191e85ad29c0f836a3c181710f160f0fcfa4ad4ddbaed4e6d427298eb716d1d","first_seen":"2025-09-25T11:49:43.258815Z","last_seen":"2026-06-06T19:23:04.046299Z","times_seen":3813,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/858.f8c35856f95787f1e09e.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/858.f8c35856f95787f1e09e.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:14 GMT\r\nETag: \"7949d-6450eddd75780-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=69\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":496797,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"331e34445de82b32e8ccc817c482179e","sha1":"ae9d04382c6b951e256c39291f5fee44f03ba04e","sha256":"632b80901b9a402f523537da262333e9dda5177d0ebd32d9c5e4020cfcf26236","sha512":"b422a17314c448b1f6bb320976f0dad748bcc20d9213516d461153f3502a3ea70deb7e670bc9c826541f5c39607c6ed28ef661df6869ebacd74a1ade22fbac7e","ssdeep":"6144:Va33b3QuRrblgUMatfLjlPfMBoLJKPC7jm:Va33TQUrbyUMadLjlPfMBUJKPC7jm","tlshash":"dcb4e960f068dead88aa419f3d6d4a04f1582f4dd6398d52e2f8dd2c7661ec43a3d63c","first_seen":"2025-12-26T02:09:57.256863Z","last_seen":"2026-04-12T23:00:03.894957Z","times_seen":20,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":35,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ekr.zdassets.com/compose/6cd82e6f-a1a1-42f9-ba80-b4d52b98f4ea","fqdn":"ekr.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:38.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:42:26 GMT","end":"Sat, 21 Mar 2026 17:42:07 GMT"},"fingerprint":{"sha1":"CA:10:44:F8:43:F1:77:DA:01:E9:0A:69:D6:42:86:12:A2:62:AD:9C","sha256":"E0:1C:D2:B9:22:9B:A2:3C:F3:C0:06:05:91:BD:B3:F6:51:5E:00:63:41:79:8C:28:50:4B:31:D2:14:4F:B3:10"}}},"request":{"raw":"GET /compose/6cd82e6f-a1a1-42f9-ba80-b4d52b98f4ea HTTP/1.1\r\nHost: ekr.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://change-noww.click/\r\nOrigin: https://change-noww.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:00:39 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncdn-cache-control: max-age=60\r\nvary: Accept,Origin, Accept-Encoding\r\ncache-control: max-age=300, public, stale-while-revalidate=300, stale-if-error=21600\r\netag: W/\"86d8b086af0fc30d06856e218fcfdb6b\"\r\nx-request-id: 9cd481633c18efa1-NRT\r\nx-runtime: 0.011919\r\nx-envoy-upstream-service-time: 14\r\nzendesk-service: embed-key-registry\r\nx-zendesk-zorg: yes\r\ncontent-encoding: br\r\nvia: zorg\r\nx-envoy-decorator-operation: /\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7kgzeXIfKhoVncJNDubwidsSKo7S0B6ch%2BFrv54FCNirwvQVk5xRVW33luh%2BXtd6RT%2FtnhauTrEIqz%2BG9DguRfkTLg55LcR8LzQarEKaVP2%2FyhU8YmV6oc9hYEQZYh%2FUBbs%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=0\r\nserver: cloudflare\r\ncf-ray: 9cd7f16ef90b49c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f87abc43805c946505e9f1f64d04cd21","sha1":"bdf9c86bf11ed97e09538025a004cfe4313643ee","sha256":"86d8b086af0fc30d06856e218fcfdb6b803f91b45f50b1b753d8deac627fc054","sha512":"bb4b521c5e7a02c87ada6fec8d6576d251908104ff0e573a3da25262da93ed25491b743c124fa7e8982bbd5d6178570aac6f6584c4a9acb025a9c7cb246a2ab2","ssdeep":"","tlshash":"096000c0c030030000300030c03000c03c30000000f003300cc030c00330c000fc0c0f","first_seen":"2023-05-07T16:05:00Z","last_seen":"2026-06-06T13:20:19.215068Z","times_seen":1354,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":28,"dns":14,"connect":1,"send":0,"wait":321,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/uploads/btc_1_527dc9ec3c.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /uploads/btc_1_527dc9ec3c.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Thu, 18 Dec 2025 00:54:38 GMT\r\nETag: \"ecb-6462f67bb4f80\"\r\nAccept-Ranges: bytes\r\nContent-Length: 3787\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3787,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"38aea398ca7bdffb6dc31711d03c016b","sha1":"fb78de3d26f219f2c144517dba0a7c7e1131bf78","sha256":"183eb20ee72155355f66255a8ca1fb9b14710ebab3626fae1001983862e35354","sha512":"09f00ac233c1626748750515931d05810371e97905680136dfe0580b54b6af348e7972e2d0803ae9bf591ce5e6669749b78a73fea7e8632e66885cac5438e3c9","ssdeep":"","tlshash":"2f7197fb62c873d0a607e3e0e5376166779f38be3f95db5941409ea8f621069c888cc4","first_seen":"2025-06-07T05:40:10.252294Z","last_seen":"2026-06-03T08:33:36.233935Z","times_seen":95,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/uploads/eth_f4ebb54ec0.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /uploads/eth_f4ebb54ec0.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Thu, 18 Dec 2025 00:54:50 GMT\r\nETag: \"264-6462f68726a80\"\r\nAccept-Ranges: bytes\r\nContent-Length: 612\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":612,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0e3bc233ffeb2d9a90159aad1e2449f4","sha1":"26eeca3ab1b8a0d919ffac9859513b3e9ec6d06a","sha256":"913a4c307b861b3022cfb2291d70e6aa49e19b606d2eff9b23f89ddd9a018780","sha512":"c61411d6994c5588edcf250e3135fec5592d48aba5cdf96e47f8dc8789e4e0b0bb9dad7debf200907db4465d1053400aea13b030c285743f8d38a9453fe646a2","ssdeep":"","tlshash":"b5f028f032a5664644b56b1daa2fb13e302f10ff3582c2c15c103f03bd8856a4e5dbd8","first_seen":"2024-10-04T11:14:08.746707Z","last_seen":"2026-06-03T08:33:36.20999Z","times_seen":95,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/9716.ec4a1fb997c41bdeac03.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/9716.ec4a1fb997c41bdeac03.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:00 GMT\r\nETag: \"28b7-6450edd01b800-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 3111\r\nKeep-Alive: timeout=5, max=79\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":10423,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10332)","md5":"d3ebc899f196dec7186c9dd298ef253e","sha1":"dbe2cb99186c6e0a19167a6ad33e84a20540ac1e","sha256":"07387ffcf4194b8002bb3ea4e23fe9db3537c5a680eca99528e10c0b8048933b","sha512":"1ac3fdf08ab14895438c11cc37d24016c2fd2c72adc9517529cb46723201dfd954e040343ad4553b65df2cd49669a8f7197668650b0c62c511ab0d370867c046","ssdeep":"192:gp8G4uJDm6g8aA/xQW7vftaekfaDnLpzxuAcyAn3hahW:6JTJDm78v/xf7vQekfaDn9xu35n3hWW","tlshash":"f822638972067832579f81faa91f574eb336243c640580bdb0d8d4de2cf1928672bfb9","first_seen":"2025-12-26T02:09:57.152461Z","last_seen":"2026-04-12T23:00:03.930757Z","times_seen":20,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/app-store-new-small.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/app-store-new-small.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:56:02 GMT\r\nETag: \"231f-6450f1658ac80\"\r\nAccept-Ranges: bytes\r\nContent-Length: 8991\r\nKeep-Alive: timeout=5, max=70\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":8991,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cd8d8ed78d91b1b64d4d1c88d927b69c","sha1":"4e3a849f531cf1b8749bc645b96298a27fab97e5","sha256":"eb9d6674609ec6b39eccc50bf6273b70a6869ef8a830e2fb5f632d61d7f0536d","sha512":"499179b5e7d0346460d142024b2c3f3f94fa10180312824c432b4ea85ae43620dec9981d4e65f702585c79e7af3fe19f57e88cdc79d9eee5bcfa3a2d409b1cbb","ssdeep":"192:cWWhjczi4NK1U7u2s7X4Dt364arrQPgWS6XgshF/LMsN:ojczi4p7u2mX4x63AYW3w49LT","tlshash":"3902c9c8a7be53ece046e3f4d608c4313f5a18d5f7968669c7882d4aeb6205c4d6adc3","first_seen":"2025-06-25T05:34:40.910421Z","last_seen":"2026-04-26T00:40:47.268476Z","times_seen":53,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/currencies/all-to-buy.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/currencies/all-to-buy.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:22 GMT\r\nETag: \"17b-6450ede516980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 379\r\nKeep-Alive: timeout=5, max=86\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":379,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7a8e6076a6753a6a4115911875fc7d9e","sha1":"5afa7802e60df2b3dc6895f42ea5a311823e2925","sha256":"5cbda6a3851fa31e2eb39f4f58ecb814d77a078b9b20d7fa606cbeac0107eeda","sha512":"ee7481cfd71c421442024e636bb51e5458e84b47327a2aae6497c19d9db7312e694bdcb63fcb89843cc7c5d9d5b841271343eab65ce6c2e6f1511f6f6a95b090","ssdeep":"","tlshash":"3de0d815534c583ce3224625e75d31f811bb205dd71a22689444323da2581afbcbf6ed","first_seen":"2025-06-25T05:34:40.905367Z","last_seen":"2026-06-03T08:33:36.277962Z","times_seen":59,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/inner-navigation/all-exchange-products-icon.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/inner-navigation/all-exchange-products-icon.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:22 GMT\r\nETag: \"a9a-6450ede516980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 2714\r\nKeep-Alive: timeout=5, max=85\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2714,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"51c9fc6cfcf3cb0e523b4e1cd401965d","sha1":"9a775fe2f4eb074a2ba029a83f9f6e5507af215d","sha256":"1625d374d4c062c96e47045ca1878a30e0cce988376faf489d7407669d54ccce","sha512":"0a8a18015c404097c7072f80d2e4ba1762ae87c46e6444bcc0af217b597f854a2824ae1b4404cd55d5a930ad05034ad0f0038d35afc94f053ac7d3ff0dbd516d","ssdeep":"","tlshash":"c1519fe02b2cd20cba8a9b1e8f31a5a4634f647eb975d1d4595e4375b08785bf343e20","first_seen":"2024-10-04T11:14:04.312965Z","last_seen":"2026-05-01T06:59:22.60497Z","times_seen":57,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/inner-navigation/widget-icon.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/inner-navigation/widget-icon.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:22 GMT\r\nETag: \"517-6450ede516980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1303\r\nKeep-Alive: timeout=5, max=85\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1303,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"525ed65b6b4814998f514cff247b9660","sha1":"22097688b1ebd20d32b3c14f8a935f2986653ea0","sha256":"02f21547cc5f2d36d9b16d01354455fffb9e33d1560653cd930e80eb0376cb6d","sha512":"059a078f12deff23a6e23014386accec5aab61dfd73ebde1b83e8691b0e90b272b40b1b2ba3565448c67304cdc0bd6b5b0d552ab65aff62abdbb4309641077f4","ssdeep":"","tlshash":"5921dddf5364538c5ccdad2b8f4cedd0171e22adb2268680cdcf979816887d1e48b88c","first_seen":"2024-10-04T11:14:04.508598Z","last_seen":"2026-05-01T06:59:22.707102Z","times_seen":58,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/trustbox-data/53aa8807dec7e10d38f59f32?businessUnitId=59d561c60000ff0005acd2a4\u0026locale=en-US","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"3.164.230.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?businessunitId=59d561c60000ff0005acd2a4\u0026templateId=53aa8807dec7e10d38f59f32#locale=en-US\u0026styleHeight=150px\u0026styleWidth=100%25\u0026theme=dark","date":"2026-02-13T23:00:27.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustpilot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 01 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:AC:04:00:1B:E6:03:65:36:95:67:5E:7F:21:62:B2:19:D0:0A:61","sha256":"C0:F0:3C:56:A6:A5:C3:53:B8:0A:28:8E:01:CC:3D:09:B5:5C:FC:55:FE:7F:8C:10:B8:E1:1F:7F:C6:56:F4:80"}}},"request":{"raw":"GET /trustbox-data/53aa8807dec7e10d38f59f32?businessUnitId=59d561c60000ff0005acd2a4\u0026locale=en-US HTTP/1.1\r\nHost: widget.trustpilot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?businessunitId=59d561c60000ff0005acd2a4\u0026templateId=53aa8807dec7e10d38f59f32\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nserver: Kestrel\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ndate: Fri, 13 Feb 2026 22:49:14 GMT\r\ncache-control: public,max-age=1800\r\netag: \"f1e4cb6d0b2ab772d609f013abf04f3c\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 38f2e8dfe4a6e6a8f81d75aed457ec00.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: Hv_nOjL63BLtayf2rJmxw9GoBhiizrV0cq91luV_tTaREpRncwvhvA==\r\nage: 676\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1040,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0e96220d68f4c7e09db76faac4e06eb8","sha1":"e9263656d8d68e20bddd8e5d17799b5c2a1a0503","sha256":"abbfe4465548927dd46e4a607940af40fb0eb3f5c2860bfb6e34efef78ff1009","sha512":"768c4ef84b370723b413ca7c06ef4ffc9a64f1063807c479ce5e92d4df2fb1f088485be099b2b8c58b79f1d3016d1333849b4925f59fe331434637480bd0b5ef","ssdeep":"","tlshash":"45110ee5041813b65fcbdec5bc0263f6821fc6e6a892695fba0d9cbcc263a48304c604","first_seen":"2026-02-13T13:14:37.801538Z","last_seen":"2026-02-14T08:45:07.041036Z","times_seen":8,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/8357.30fad5438bc154b2b6de.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/8357.30fad5438bc154b2b6de.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:14 GMT\r\nETag: \"34be-6450eddd75780-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 4045\r\nKeep-Alive: timeout=5, max=68\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13502,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13502), with no line terminators","md5":"518af939c254fb99f8167537d201c02f","sha1":"a3d9ef2f2531edd986cfd3c4f90523abdae22b78","sha256":"ef7c84db08eab3f3022d6e8aaafe7769aee20d30bbfac1626c198de973907437","sha512":"fc46cacde759e00851aa5c562230255d33c8316a9f3ee2af91dd284b72ff99029b4dc3d7075386f75ec530ca8e9e096e390d6780b1ee67d46eb7b5918fa62d12","ssdeep":"192:WxbPEuezYMb7sc1bgGRP+nAzbDPuP4F9SWy0yqm0U0NDfMZtNN0aqc6E2:WBEueKc1bgG0WbDvsqm0DNQDT0aqcy","tlshash":"7852b53472d4e42045c3c10d996f5604a2b16c2ccb59b49cf3bbaccd6beaa6d3116fb9","first_seen":"2025-08-26T12:17:26.892123Z","last_seen":"2026-04-12T23:00:03.935166Z","times_seen":43,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/fonts/02f08a63db46edcb42d1.woff","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /fonts/02f08a63db46edcb42d1.woff HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://change-noww.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Mon, 24 Nov 2025 23:42:44 GMT\r\nETag: \"3fe8-6445fb83f4500\"\r\nAccept-Ranges: bytes\r\nContent-Length: 16360\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: font/woff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16360,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 16360, version 1.1","md5":"e91eb79be9c4514e9055319e645ac177","sha1":"cb8b8b0820c5739391564e0140fcd6e355999d97","sha256":"f96d504a44ebe06ffdf1e28213f9330872c2c2c72b2905381f835f15b8086152","sha512":"f2b94793080040880d4ebabb5b1a6db9e6b889af455adb01c9f714a792112de4c4c634a81501ef37bbc66153a0a712c21adcc137201d1b638b04ad6a0591bd92","ssdeep":"384:ItWN8TJGEvk6oAJJzfB9gpMsDG1kl6k/rAfPeAamV47HqeJSuYFxuyXi:lUJlvk6TJZfHgXGzk+y647HqmSBW","tlshash":"0072c06e3724e662d7ce0d369f5fb3c2ebecb902bc06f58150d4b80336de1266950a14","first_seen":"2023-10-31T15:36:33Z","last_seen":"2026-06-03T08:33:36.157615Z","times_seen":109,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Mon, 24 Nov 2025 23:35:56 GMT\r\nETag: \"302c-6445f9fedaf00-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 3887\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-06T22:53:23.522542Z","times_seen":112443,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/2621.069fa00715f26506edc6.16.5.15.css","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/2621.069fa00715f26506edc6.16.5.15.css HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:39:58 GMT\r\nETag: \"214b-6450edce33380-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1657\r\nKeep-Alive: timeout=5, max=78\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8523,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2932)","md5":"b8fd39c4052d6ec1720190f04febb63f","sha1":"56c8ab15e1d2804bf77d019f0b4d08048b3870cf","sha256":"bfbebbe59baefc169dd2aa9c3fea4d1e3bc4e02853cfe16157bad00533f3bedd","sha512":"9daaea7fe79509ce3fd39e9d9eee3aef386e910ec4f19297c7775293f5951545bd9e42b4eb4c7ce82a0bfa5a3f002820a54f86ad8751b7a9d7d71902db47bc3c","ssdeep":"192:QEmA459bHVzRXyiCXiOgGN59bHVzRXyiCXjIWY59bHVzRXyiCXxkzP:Z07XyifO317XyiAIWA7XyiAEP","tlshash":"bc024175f9f92737fab7eccfa840ee0e9c11891a851b7bd1b8a235dc84b46410254a1f","first_seen":"2025-06-25T05:34:40.854039Z","last_seen":"2026-04-12T23:00:03.981656Z","times_seen":49,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/5951.520b43691b51e5622d55.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/5951.520b43691b51e5622d55.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sun, 21 Dec 2025 08:48:40 GMT\r\nETag: \"3ed2-646726087ea00-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 6625\r\nKeep-Alive: timeout=5, max=76\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":16082,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15895)","md5":"ca764e44acada7765eb6990ae5e2967e","sha1":"2333ac5521bd4b6b397210d0d378f138b68f9bf7","sha256":"d9f24a17aea45c956276a3d8b3fb4c8e04553b95b2846abcaa5908dcb500e310","sha512":"a6be8d6591ea53b52f6511fd4fa0c58b9add0da89d67046d2c052583f852698a31db20d9cd19ed9a9b33ef793044192222de248144b87e3d9af625f9da5d9d2d","ssdeep":"384:4Ghiw+HpEtpUHlKJY/jKg4BsGcgH0daQGIMVB7RVL1l5W3Ifoyv4aWYCgQFRyD:dUFWtpUHlw8jKg4BsGcgH0daQGIMzbLl","tlshash":"8f72944ceaf540bf1ff6a46907be1607b1d12648576c840f52c78e6a323f7b152e2a78","first_seen":"2025-12-26T02:09:57.272457Z","last_seen":"2026-04-12T23:00:03.982338Z","times_seen":20,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/7688.4e8d88156be76566dcd9.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/7688.4e8d88156be76566dcd9.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:14 GMT\r\nETag: \"b11c-6450eddd75780-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 11579\r\nKeep-Alive: timeout=5, max=74\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":45340,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (45340), with no line terminators","md5":"9d34061fab4b5b664b59c0883c87f419","sha1":"512a0e6d3d36790e91a841224dd8d3c9de0971ef","sha256":"0d9f47499e7a0d3238f291289437ac9097f61c182ba37008e4c2f4b22bc6d43e","sha512":"36ab56b35f47111880815b5e0c86c445067fb9ae0c9047c4006bc2f54b4f40b49118202150ec1e81676fa7e3266e6e28092f74fd140beb13aa28ec0178150523","ssdeep":"768:F1ljiRnjqnjcYjfSccjwjHZ7BD44lalwt1QShsfJE+MMmC+MsATXTpYAW3DGPEDN:FLUkX+cckFB9u5X3zyx3G43bns05hDX7","tlshash":"6e130b05318ffdef5aa284ab14cf6495a54c2d8ef60f0d56e3aaef43a045485b83e7c1","first_seen":"2025-12-26T02:09:57.299165Z","last_seen":"2026-04-12T23:00:03.927326Z","times_seen":20,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/ekr/snippet.js?key=6cd82e6f-a1a1-42f9-ba80-b4d52b98f4ea","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.53.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:38.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 16:42:26 GMT","end":"Sat, 21 Mar 2026 17:42:07 GMT"},"fingerprint":{"sha1":"CA:10:44:F8:43:F1:77:DA:01:E9:0A:69:D6:42:86:12:A2:62:AD:9C","sha256":"E0:1C:D2:B9:22:9B:A2:3C:F3:C0:06:05:91:BD:B3:F6:51:5E:00:63:41:79:8C:28:50:4B:31:D2:14:4F:B3:10"}}},"request":{"raw":"GET /ekr/snippet.js?key=6cd82e6f-a1a1-42f9-ba80-b4d52b98f4ea HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:00:38 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: yXDyJYXJZZeJ41DTI65hArmqW4XthTWMVyiBabJUCb8u70B/jZ0D6ijnHyWhpFIeDfBn129gnRaBaakaMAWhRpaSaAkd5SOg\r\nx-amz-request-id: 9J03TJMBDBK7QD1J\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Tue, 27 Jan 2026 13:59:43 GMT\r\netag: W/\"d096b5b24105931fc508ee2125de32fb\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=3600, s-maxage=60\r\nx-amz-version-id: sJOHiVTmvqPe81rnWXV8bHAzulK7y_pz\r\nage: 27\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=10Cb8apxdVphn5bOI6tKmn5sX8BwEo4INgyutlisf7TkxUfL2RG5RruHWFlRATX5nXwyo0JzCYwnPdiWJR4DC7labkb7k%2BJFZ3A9XbvXjGho6YpDO5Iqv5MS5IudqFwPr%2Fa5u1E%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\nserver: cloudflare\r\ncf-ray: 9cd7f16e4ddb3181-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10134,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10134), with no line terminators","md5":"d096b5b24105931fc508ee2125de32fb","sha1":"b62784207151c8d09cde540c933b23f84d178880","sha256":"e56446afa17adbd22ed46a81655739f51874733e396ea3942c508d80136f4264","sha512":"21f20c9ca97db17b89fed8d2613ebc39a1af2e3aeaa94b9390c87e9a4cff25e267a4cfa4e7c41544ca75879db5fd9341478145c39a130630181c294f1607ba96","ssdeep":"192:ITFnkRRORrDkD6B1c4QSZBxtjKkF2P5lQBbUMamqif8Ty1hynl8klCtsiVcHC:kFnk/ORHk+u4QSZYkIPnpcC+0nl8kot1","tlshash":"7a220ac6b1b2e47203a600e1603e8690f765191a360dc478f97cecd6fd66dd1863beb8","first_seen":"2026-01-27T14:28:45.604965Z","last_seen":"2026-03-09T15:17:18.21333Z","times_seen":2384,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":43,"dns":22,"connect":1,"send":0,"wait":22,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/inner-navigation/referral-program-icon.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/inner-navigation/referral-program-icon.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:22 GMT\r\nETag: \"5f4-6450ede516980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1524\r\nKeep-Alive: timeout=5, max=87\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1524,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6d96ce9b9b37009f40abe017d0f3bdf1","sha1":"ec0df6766e33f3e94abaada34e16b4dab94e1600","sha256":"4d413329115c92ac4e43c10d1710d729109f7ef75e67ef166e12bb06f82a58ea","sha512":"963842bccb244d61ae17b5afbb31df4156fcd4e4e1f8c7dc380f73d155cd556fdfe2ab8e4ce5b026ce42babe73a0e7e2e12d2e8b968939800b614e28c4313940","ssdeep":"","tlshash":"3a311ce213a8a18cd5c9d25daf29c6d4032fb4bdbda141cd5a8e87a8840fc55fe0b920","first_seen":"2025-06-25T05:34:40.875221Z","last_seen":"2026-05-01T06:59:22.681153Z","times_seen":57,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/now-products/defi-coins.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/now-products/defi-coins.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:24 GMT\r\nETag: \"19ab-6450ede6fee00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 6571\r\nKeep-Alive: timeout=5, max=82\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":6571,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"44626cd60dfcb1ab24e1a554b0b3f833","sha1":"2c3b351687b5c6be72e0cae7cb63042739c5cce2","sha256":"da51b103feb36fef3bec7d3643c8ac2250b6b8e2babc0b48ce1911d3a95bae47","sha512":"ada1ed09ae926f9175c05f9a95f908ff68b8f65b74bd8dfb1e94c8bf64d5faa2a4f14f6974cc956bc863b2b68f8a19299d1a83be06b5481a9694c2c18afe92c7","ssdeep":"96:aoXj1tfohhlRaXfsjs7l8uuhKSGLblek9e39QrS7PrZqs+YczDQw2dk3V:51tAhhlRSjZ+/G3Quu9eS7TZqs+Ycvl","tlshash":"76d188f5218855f0f407cf08e9374464ab7a7cf92fc4e7d50229aefa52244e59c9dd88","first_seen":"2025-06-25T05:34:40.909104Z","last_seen":"2026-04-12T23:00:03.904999Z","times_seen":53,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/now-products/telegram.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/now-products/telegram.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:24 GMT\r\nETag: \"243-6450ede6fee00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 579\r\nKeep-Alive: timeout=5, max=79\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":579,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"edbc56a3d35bb60106d3a16778390bac","sha1":"1e251030b8557622b7f407fa9618b33b834e3914","sha256":"12b86bb66e5d0e3c334335fed1ab3542b8781d94d0794917f001d088f41103cb","sha512":"461bac1e6d47a6aeaba8bd2eafb838999cc26b122a44d2f378390029026e11d856236857d6caea2f5975cfe3748320db87388a26131e9f28589e3369550c79f3","ssdeep":"","tlshash":"d5f0e1d362f8964d9ac94641871e754d5b94a1fec209a1c87208064cff4e6476acb9b4","first_seen":"2025-06-25T05:34:40.971265Z","last_seen":"2026-06-03T08:33:36.205241Z","times_seen":57,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/header/flags/portugal.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/header/flags/portugal.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:56:28 GMT\r\nETag: \"219-6450f17e56700\"\r\nAccept-Ranges: bytes\r\nContent-Length: 537\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":537,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"380b8444239d2a00fe07b57227576328","sha1":"90d6b61c76a09b59d6990e4a3a8d36d7c7e4b10f","sha256":"c19c1232116c469eaf8ad89f3b031406ffe450162fea19b5a7d8226b5e26e00c","sha512":"9b9aac4a5503dd0f5270a81a7279f19ba2de1d2c562c85798ed5656016493422a1c5b457814b88d16a06fc8362881ea47bde6aa2ac715a08ba67ce3647ebd0e8","ssdeep":"","tlshash":"8bf081957018605c5b0382635fac74fe8a21c0dd628905d4a085b614f6d1bdb7c61db4","first_seen":"2025-12-22T03:32:11.519652Z","last_seen":"2026-04-12T23:00:03.84527Z","times_seen":26,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":176,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/header/flags/saudi-arabia.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/header/flags/saudi-arabia.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:56:24 GMT\r\nETag: \"33d-6450f17a85e00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 829\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":829,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b7c9bf91bb898b65a96f2188268101ad","sha1":"2707459f73b5d9c58328d07c535085d6682cb149","sha256":"28dc54d5bb27f2221e9bf09281173f58a8559b451865b773374e23d05abf5160","sha512":"13bffb52c402061a18cf22b10fd1d12fccde5b50739cdb497c1f5ec655c2f1a51435487edb796b1ed1e2a5a284d11d13a20ebdde915aaa8b1599c20f012e4d54","ssdeep":"","tlshash":"a201c0d973ec57e58c12411b5ebc94f2735910ced1d954cadd9a1348364aef6ebc02c0","first_seen":"2025-12-22T03:32:11.501115Z","last_seen":"2026-04-12T23:00:03.858948Z","times_seen":26,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":174,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/footer/expand-plus.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/footer/expand-plus.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:55:22 GMT\r\nETag: \"13a-6450f13f65280\"\r\nAccept-Ranges: bytes\r\nContent-Length: 314\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":314,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e9f438610c420806b055110c9acd68df","sha1":"5d407fc5973f97218d14a5775d3b5cec42253151","sha256":"4cc71767e906d665f09544aea7ea636cdfbb143570a5a577bc53c76ea5b9aaa5","sha512":"d9bb7c303f16c25d642d7fef647cb11eb2304fb826d9e10c23d57c3bd464584e6a39d999c31603ee877348e6b403574a88492f74766438a4524dacc3d77a50db","ssdeep":"","tlshash":"b0e08cf72384cb2590018fdce62f3019309250ff5e4f10c48140e6e6a14ab656c2e59f","first_seen":"2025-12-22T03:32:11.497391Z","last_seen":"2026-05-01T06:59:22.679083Z","times_seen":30,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":113,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/inner-navigation/api-icon.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/inner-navigation/api-icon.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:22 GMT\r\nETag: \"178-6450ede516980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 376\r\nKeep-Alive: timeout=5, max=88\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":376,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"342a8d7afe6220634a18a954f2d21087","sha1":"6c8455e6a6b1f6396a8ac7db3efe2eb529d75f19","sha256":"471f79e0591b4f6eb2c02286b9974081bc6cf68770454a568f143996ae01cc23","sha512":"5ee53a48acab30bd47e7723d4f89b93098bb4e11a66c345d2f6ea424da4f1163626170b93ddbac9c0f8ec10ed03dbc9f609f44f53d846a3857d4b6c64c8b1a60","ssdeep":"","tlshash":"05e0685092693c0ceb114e06d36caa5052ae25be8319511ae009b9119274aab3b6f92d","first_seen":"2024-10-04T11:14:04.53423Z","last_seen":"2026-06-03T08:33:36.270163Z","times_seen":60,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?businessunitId=59d561c60000ff0005acd2a4\u0026templateId=53aa8807dec7e10d38f59f32#locale=en-US\u0026styleHeight=150px\u0026styleWidth=100%25\u0026theme=dark","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"3.164.230.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustpilot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 01 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:AC:04:00:1B:E6:03:65:36:95:67:5E:7F:21:62:B2:19:D0:0A:61","sha256":"C0:F0:3C:56:A6:A5:C3:53:B8:0A:28:8E:01:CC:3D:09:B5:5C:FC:55:FE:7F:8C:10:B8:E1:1F:7F:C6:56:F4:80"}}},"request":{"raw":"GET /trustboxes/53aa8807dec7e10d38f59f32/index.html?businessunitId=59d561c60000ff0005acd2a4\u0026templateId=53aa8807dec7e10d38f59f32 HTTP/1.1\r\nHost: widget.trustpilot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nserver: AmazonS3\r\nlast-modified: Thu, 25 Sep 2025 11:44:51 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\ndate: Fri, 13 Feb 2026 04:29:03 GMT\r\ncache-control: max-age=86400\r\netag: W/\"097ce19589dedb482faf5e7bd737a7d4\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 38f2e8dfe4a6e6a8f81d75aed457ec00.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: NTujI9RO-6n9DqeO4HwrJKsmNVoIqlCFuhbfHOX5YTm5gBMNy2XeyQ==\r\nage: 66684\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":13436,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (11805)","md5":"097ce19589dedb482faf5e7bd737a7d4","sha1":"15c29c1308edcde564fc8b647dd96e4bc812d05b","sha256":"5f315f89af9e70fbae6e80ea8781dfae8f0c76ee24906688e8d5b12b3572606a","sha512":"95b640fa6c00baf929b5e1cc0b6600d909fb6c4b5dfc875a2e863f063d322012405f1fc750d1dd68ba1fb30cab2e4e3ac218f221342be9caa995aeae8beeffa0","ssdeep":"192:Ab6Xe7VmC+UQZq3xMW8D1R7zo1UFu29RhP6J4X3N6828lmgikx6GJRecnQCwRcZQ:3MXO7zo1UFu29RhP33N67Vgbx6GJRBlQ","tlshash":"d9529602fa4ce7b90d13cd7a9ec17389dd27716bb5500a87abb691e8c3df006d99621c","first_seen":"2025-09-25T11:49:43.308779Z","last_seen":"2026-06-06T19:23:04.011924Z","times_seen":3814,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/fonts/285509d0eb9b5f31386c.woff","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /fonts/285509d0eb9b5f31386c.woff HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://change-noww.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Mon, 24 Nov 2025 23:39:18 GMT\r\nETag: \"40ac-6445fabf7f580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 16556\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: font/woff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16556,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 16556, version 1.1","md5":"7cdd05aee3e82500e7f413ccbea310f1","sha1":"d68b4a98ff2e32b5c8948327256d76e872238ab6","sha256":"49ef7420b801f22f81bd332e5e996edf7ba81fac3fb04205aa2f83629e7e8f86","sha512":"857a95518cc28868a2cd279a62e04d585f27aa561fa1f157667b450672c9612bf5f74662ac056f60d8994dbb238946f7dbde6056d3c5cff94c9d46bb44705685","ssdeep":"384:I5FRfoOukAm6lZRu2LzmHmR755+NZCYezpoFIf1biFvQNQQ7iO:oDfoOukAm6puqJQ7WzplN2V4L","tlshash":"0f72e05aa9c7d02ac3b07770fbc62f5a5b3b14e7f668129bb351e465ae09c154c00712","first_seen":"2024-10-04T11:14:04.680104Z","last_seen":"2026-06-03T08:33:36.166679Z","times_seen":93,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/header/flags/indonesia.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/header/flags/indonesia.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:56:28 GMT\r\nETag: \"a7-6450f17e56700\"\r\nAccept-Ranges: bytes\r\nContent-Length: 167\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":167,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0c0e88ead303d7569a78758cd003331f","sha1":"a638894be4cbd45fb1a19d110128b1069e64c905","sha256":"d64fe58a5d399f0365eaaba6b7b89e5f8a7f62cbee2bbce7ccb5b00e00c14b29","sha512":"96a26726aeb76c7d094eb87f22943362026fc42be9ec2ca22b1d7ef3f5fa3c341b3fd5a4cfaf534c672d9ab1dc5b483d0c5164d54ac632abdb96f98de9abaf61","ssdeep":"","tlshash":"04c08ce8b0cd8e408c0c83b15aecb13b617381db228c15c8b8802224b690bef2ca1e5c","first_seen":"2025-12-22T03:32:11.5297Z","last_seen":"2026-04-12T23:00:03.957653Z","times_seen":26,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":177,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/index-images/arrow-right-icon.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/index-images/arrow-right-icon.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:54:22 GMT\r\nETag: \"1a4-6450f1062cb80\"\r\nAccept-Ranges: bytes\r\nContent-Length: 420\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":420,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c0654f3921e987f119ddbc71142737e1","sha1":"d3cd354297f21dc5238d9ea501c9eec3af4773be","sha256":"d5d1d9389884e64714316c4eb8907b9a02d49f4f9ca0bcf26fd7198b456f1299","sha512":"bb43d4fc3343398abfc76343204e7711611186f6ee2cc84130ca6131172c46a5380a33f9284f2223dd1cd6084f03736b57527a492c00e15fca61f279bb3ac4ac","ssdeep":"","tlshash":"76e065f2575c94de8087c139db7f55d55329e4cd313804e4615ca534a442277d907a95","first_seen":"2025-06-25T05:34:40.907853Z","last_seen":"2026-06-03T08:33:36.258259Z","times_seen":81,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/index-images/double-check-icon.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/index-images/double-check-icon.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:54:22 GMT\r\nETag: \"27a-6450f1062cb80\"\r\nAccept-Ranges: bytes\r\nContent-Length: 634\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":634,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e81895627b9bf6e0947d2525ad0d45b4","sha1":"cf0f228da84f1155e68f4dda635c4f43d1bf17fb","sha256":"ae19d8d2171764a5dd5e5eeae70036e6cdc3748ef97cbd8fc4496ee3c62b8460","sha512":"3a864bf3a7c22f22ec1a9a09aedb69e4858bf301df1938e999b859143683c8db8837227428eb7a7f2b24e3ed6cb8dd30797c5609117c366b20a9a9f62e669983","ssdeep":"","tlshash":"d2f0a4f212b9cd8c684f42be9f2810bd433998e9740d0070ad4dad2bd6c2196a85bd94","first_seen":"2025-06-25T05:34:40.914865Z","last_seen":"2026-06-03T08:33:36.19701Z","times_seen":81,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/press/invezz.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/press/invezz.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:54:44 GMT\r\nETag: \"14dc-6450f11b27d00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 5340\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5340,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"af120a36e788250f73b74ba1620a0032","sha1":"7ba762d175ed0ce977eeaba1f98ff669730d93bc","sha256":"dba3c0c7e3de40bb1250b483bf4c587f7c9e7cc7fc2989cea8f5cd60a634be9d","sha512":"1715ba08d6f57bab71f368c0d54cf4cd9195b07332674ea12ca6f70d84087426ddd5552d1e59e81e69177e51c500b624cf121705dfe54e428512f2c29c2127c1","ssdeep":"96:6PAv37vIX9Uxa3s6WM697NQcrI66okwMxd1IncKt0pOEA63eGNIG:6PAv3S3WM6976WXyd1ImAKrN3","tlshash":"e6b164d65370e78c598adc9eaf26adc5131fb4bb3472b8c8455f8e88a48bdc4f606c14","first_seen":"2024-10-04T11:14:08.745533Z","last_seen":"2026-04-26T00:40:47.270404Z","times_seen":77,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":93,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?businessunitId=59d561c60000ff0005acd2a4\u0026templateId=53aa8807dec7e10d38f59f32#locale=en-US\u0026styleHeight=150px\u0026styleWidth=100%25\u0026theme=dark","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"3.164.230.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustpilot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 01 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:AC:04:00:1B:E6:03:65:36:95:67:5E:7F:21:62:B2:19:D0:0A:61","sha256":"C0:F0:3C:56:A6:A5:C3:53:B8:0A:28:8E:01:CC:3D:09:B5:5C:FC:55:FE:7F:8C:10:B8:E1:1F:7F:C6:56:F4:80"}}},"request":{"raw":"GET /trustboxes/53aa8807dec7e10d38f59f32/index.html?businessunitId=59d561c60000ff0005acd2a4\u0026templateId=53aa8807dec7e10d38f59f32 HTTP/1.1\r\nHost: widget.trustpilot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nserver: AmazonS3\r\nlast-modified: Thu, 25 Sep 2025 11:44:51 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\ndate: Fri, 13 Feb 2026 04:29:03 GMT\r\ncache-control: max-age=86400\r\netag: W/\"097ce19589dedb482faf5e7bd737a7d4\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 38f2e8dfe4a6e6a8f81d75aed457ec00.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: PmjxajtEzBB7m-t9kODHhFvK2q4YXQ05x9m8fegSHWZ3DEkGIf4hBQ==\r\nage: 66684\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":13436,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (11805)","md5":"097ce19589dedb482faf5e7bd737a7d4","sha1":"15c29c1308edcde564fc8b647dd96e4bc812d05b","sha256":"5f315f89af9e70fbae6e80ea8781dfae8f0c76ee24906688e8d5b12b3572606a","sha512":"95b640fa6c00baf929b5e1cc0b6600d909fb6c4b5dfc875a2e863f063d322012405f1fc750d1dd68ba1fb30cab2e4e3ac218f221342be9caa995aeae8beeffa0","ssdeep":"192:Ab6Xe7VmC+UQZq3xMW8D1R7zo1UFu29RhP6J4X3N6828lmgikx6GJRecnQCwRcZQ:3MXO7zo1UFu29RhP33N67Vgbx6GJRBlQ","tlshash":"d9529602fa4ce7b90d13cd7a9ec17389dd27716bb5500a87abb691e8c3df006d99621c","first_seen":"2025-09-25T11:49:43.308779Z","last_seen":"2026-06-06T19:23:04.011924Z","times_seen":3814,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/data/currencies/new/optimized","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /data/currencies/new/optimized HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://change-noww.click/\r\nContent-Type: application/json\r\nsentry-trace: 4c7b2a59036444ca8576d1c73287e8c5-b77ad7bbf3d515e9-0\r\nbaggage: sentry-environment=production,sentry-public_key=caf1b4c4d55fac9fb827b0fc4c20f664,sentry-trace_id=4c7b2a59036444ca8576d1c73287e8c5,sentry-sampled=false,sentry-sample_rand=0.7974678075204517,sentry-sample_rate=0\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Length: 7110\r\nKeep-Alive: timeout=5, max=76\r\nConnection: Keep-Alive\r\nContent-Type: application/json; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7110,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"cb3a9bec20dc5a55816c33c0fbe4219d","sha1":"8d9071b74be5b57cf7572d68f83cd2961ccd7d5b","sha256":"63de67ddfc67e99c5739556e91beb4de2a3935dceecdbc8bdc99c2380c0ec3d7","sha512":"ef7ead2dab3c3ad7e912db82501cbfa15be1aaa10c3dff9e43c2db1d281d7523a0e3fc1c5c0a7696186e9f5ce6f2f98cf734992a7a98512f6c93afdf078237f7","ssdeep":"96:ITC6BP6amQSwA4T72hyHYtFztoilPf9rJKHfCffbIErb/aQHRXXiP9w/b/tUfgul:KqHhy2F8at+y1of","tlshash":"bbe13643c5051ca8716c86789cbe55860248b2170e6f3d1a776c368d6f2ea0f36f6dbe","first_seen":"2026-02-13T23:01:05.940135Z","last_seen":"2026-02-13T23:03:22.205936Z","times_seen":3,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/trustbox-data/53aa8807dec7e10d38f59f32?businessUnitId=59d561c60000ff0005acd2a4\u0026locale=en-US","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"3.164.230.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?businessunitId=59d561c60000ff0005acd2a4\u0026templateId=53aa8807dec7e10d38f59f32#locale=en-US\u0026styleHeight=120px\u0026styleWidth=100%25\u0026theme=dark","date":"2026-02-13T23:00:27.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustpilot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 01 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:AC:04:00:1B:E6:03:65:36:95:67:5E:7F:21:62:B2:19:D0:0A:61","sha256":"C0:F0:3C:56:A6:A5:C3:53:B8:0A:28:8E:01:CC:3D:09:B5:5C:FC:55:FE:7F:8C:10:B8:E1:1F:7F:C6:56:F4:80"}}},"request":{"raw":"GET /trustbox-data/53aa8807dec7e10d38f59f32?businessUnitId=59d561c60000ff0005acd2a4\u0026locale=en-US HTTP/1.1\r\nHost: widget.trustpilot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?businessunitId=59d561c60000ff0005acd2a4\u0026templateId=53aa8807dec7e10d38f59f32\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nserver: Kestrel\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ndate: Fri, 13 Feb 2026 22:49:14 GMT\r\ncache-control: public,max-age=1800\r\netag: \"f1e4cb6d0b2ab772d609f013abf04f3c\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 38f2e8dfe4a6e6a8f81d75aed457ec00.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: V8zLTyuR6OjMBPRkJNZlLdWqgR0aVecyQmQN_Ugu2qniJdjEUGWPsg==\r\nage: 676\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1040,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0e96220d68f4c7e09db76faac4e06eb8","sha1":"e9263656d8d68e20bddd8e5d17799b5c2a1a0503","sha256":"abbfe4465548927dd46e4a607940af40fb0eb3f5c2860bfb6e34efef78ff1009","sha512":"768c4ef84b370723b413ca7c06ef4ffc9a64f1063807c479ce5e92d4df2fb1f088485be099b2b8c58b79f1d3016d1333849b4925f59fe331434637480bd0b5ef","ssdeep":"","tlshash":"45110ee5041813b65fcbdec5bc0263f6821fc6e6a892695fba0d9cbcc263a48304c604","first_seen":"2026-02-13T13:14:37.801538Z","last_seen":"2026-02-14T08:45:07.041036Z","times_seen":8,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/support/how-it-works.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/support/how-it-works.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:24 GMT\r\nETag: \"2a4-6450ede6fee00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 676\r\nKeep-Alive: timeout=5, max=82\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":676,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"43451781aea68ae354a1a7c7dabc6f3f","sha1":"1522327cbe0f205d447b0ac61452e669b6e39946","sha256":"0d4c4bd32233510d7a4bd0e9957fe9baa0af66f925c9fcb0e6d1e3d7e0dea963","sha512":"2b2570f0dbd0b1727aa84100afca1b25a2b54f562709e0a0f1ba4ed396cdf62a51f54ebdedc993880c2b19054f55a51a911ca7438c78a85febbbcf7be3894084","ssdeep":"","tlshash":"57019ee0d35ca40cc361ae539a2c7880d3a6b2fc6f74c044d40d6504118efae9c87986","first_seen":"2025-06-25T05:34:40.888626Z","last_seen":"2026-06-03T08:33:36.135739Z","times_seen":57,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/data/currencies/gainers/optimized","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /data/currencies/gainers/optimized HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://change-noww.click/\r\nContent-Type: application/json\r\nsentry-trace: 4c7b2a59036444ca8576d1c73287e8c5-827564c8765bbc19-0\r\nbaggage: sentry-environment=production,sentry-public_key=caf1b4c4d55fac9fb827b0fc4c20f664,sentry-trace_id=4c7b2a59036444ca8576d1c73287e8c5,sentry-sampled=false,sentry-sample_rand=0.7974678075204517,sentry-sample_rate=0\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Length: 5670\r\nKeep-Alive: timeout=5, max=82\r\nConnection: Keep-Alive\r\nContent-Type: application/json; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5670,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0f7b8cfa1163c2d539a9fc704ab84904","sha1":"39e23bcdf5d22f498e2446e31bdb7cf457cc947c","sha256":"8760639f25134e7291fa66207405f2ea5fbc5a38f863c35783f61a4978ecf3a4","sha512":"bc33595c6bed4af35ba1e80e878370abf948f42acf263cb9aedc20e34c0d5c4267a295a2094e697aa30d87676f48ffdc68c162477ab01f4895399cee625e2519","ssdeep":"96:7MlOSwcFTwXkE8PCauzEMjBTF5f86PLsh+0zK74R:7D4y506PLjwR","tlshash":"5ac14a53d6010ca8b52cc5748dbda14a178c720b4d6b3d1ab36c294c5f6e60f25f6dee","first_seen":"2026-02-13T23:01:05.941544Z","last_seen":"2026-02-13T23:03:22.194175Z","times_seen":3,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/8579.d457a608d1bfa2ff2db4.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/8579.d457a608d1bfa2ff2db4.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:00 GMT\r\nETag: \"1519-6450edd01b800-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 2257\r\nKeep-Alive: timeout=5, max=74\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5401,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5399), with no line terminators","md5":"3bd996e7585ace5577e7b605fd42d2de","sha1":"cde84c8e08b96e3ff71554ad0f6518a08a59c4b2","sha256":"21a92e132f6cd6bb8b25f6b0c4a1dc4c3ad48451760a291946bccc82ca5de289","sha512":"732b7bdd08de453dd2ef4a85200d8ae92d84165153cbdb58bae0a454b30463c4d14d3e31113167d8eb3879c130ebdecfcc70d3db4959ea6d307037f42fe94049","ssdeep":"96:rgJek+ZuYRGs/OSKNNksCrlaZ+dUBIcJ8tHwPP8C00G0VIsqQ2zPFVOzdMRWL1Ww:8JR+IYMs/OXNSsCJaZ+dUBIJHgkCkFPy","tlshash":"9fb19641fca064ea09ee389e743a0999b65d3e15f228cd41b129fc4a2077f967271f38","first_seen":"2025-12-22T03:32:11.423911Z","last_seen":"2026-04-12T23:00:03.863622Z","times_seen":23,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"content-api.changenow.io/uploads/sol_3b3f795997.svg","fqdn":"content-api.changenow.io","domain":"changenow.io","tld":"io"},"ip":{"addr":"172.66.171.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changenow.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:40:19 GMT","end":"Tue, 21 Apr 2026 09:40:16 GMT"},"fingerprint":{"sha1":"3D:8A:41:5E:00:8A:BB:E0:A7:F9:13:5F:BA:46:03:4A:BE:62:2A:37","sha256":"2D:19:65:5D:1A:E3:04:83:65:79:27:AC:1F:1D:3C:3C:3B:D4:59:18:BB:8A:9F:E2:9C:D6:38:BE:8A:E2:3E:28"}}},"request":{"raw":"GET /uploads/sol_3b3f795997.svg HTTP/1.1\r\nHost: content-api.changenow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:00:28 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Apr 2022 14:14:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"626bf2a9-6e8\"\r\nexpires: Fri, 20 Feb 2026 16:59:23 GMT\r\ncache-control: max-age=31536000\r\nx-frame-options: DENY\r\nx-nxs-id: a6d00bef9be9b3399d0981532ff40de0\r\ncontent-encoding: gzip\r\nage: 21664\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9cd7f12beade32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1768,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"860d9e83b2ac2686824a101806e473f5","sha1":"c92e6c9fb7b5b103bebacb3a54ed054da2383f3f","sha256":"8fc6516bf7b65387e72dd515f8409d09763e3c34e25f49c5d8c67d82a8a05111","sha512":"f1fd70fd53f78cc46f44f943db883c05809f1350075697580a8d7c60105cda5078e9edab37b21fd2d14dfba7f9ced66dca43ef2de8e494b0c6f787625ab34547","ssdeep":"","tlshash":"e231f1fbf355b456e34ac39dd6544538255e10b97a45819ec2c8fb1bd914cd2090dfc0","first_seen":"2025-07-03T16:23:47.799427Z","last_seen":"2026-05-03T12:57:43.893428Z","times_seen":46,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/5353.f0bb87be921b050d7d3e.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/5353.f0bb87be921b050d7d3e.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:12 GMT\r\nETag: \"8c0-6450eddb8d300-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1148\r\nKeep-Alive: timeout=5, max=69\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2240,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2149)","md5":"2741bb488284f6b0321ee14f79ea3f02","sha1":"dd8f3a3ee2fe9ef486e2ff0ced2683fdf1e3fd41","sha256":"91e318a0baf3dba2c10063f37e497b82b3d8832a68887214d64449ede3679285","sha512":"cc247e51a06972cceadef747d065b32324028423fe20545bc2fd6161dffc186ee4fbedc5a00a284a8da8cdbbe1e0441d6a8a3e6fe7112c695602013bb0739324","ssdeep":"","tlshash":"8841d7edb089744d06db4b60823f124bb37b93b55c8ce6a6a71491f0317016b43a7fad","first_seen":"2025-12-26T02:09:57.248385Z","last_seen":"2026-04-12T23:00:03.926148Z","times_seen":20,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/3489.658116b508e6a2bbafe8.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/3489.658116b508e6a2bbafe8.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:14 GMT\r\nETag: \"9689-6450eddd75780-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 12193\r\nKeep-Alive: timeout=5, max=72\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":38537,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38444)","md5":"ad0dca19497c095943fa18fed3175a70","sha1":"9949b4a5dca3303c6be416fac95665c7f62c165f","sha256":"5c82f0f9d733948e115f49a3415388a72f474b2045c61f95daec51c85915717d","sha512":"a51c4c84fc1152b4e205fc119fd5eb4d032df9480dc75fe7aac9b538ea69a175d028a126af66117d9063a9bef8e2e3d682984c08c9df57a969ff01a9c411c3b2","ssdeep":"768:+fDQQq9OLsYDAaDt/J2itRy9pcjmXQlUM6CR3P14BaI5QG5QvUdiCJtoF58DxoO:G99w6QaI5QG54UUCJqmb","tlshash":"ab03f98ef655b4a943e79475c13f010af33a390eb50984b4b665ece16971a8d223bf3c","first_seen":"2025-12-26T02:09:57.285087Z","last_seen":"2026-04-12T23:00:03.927862Z","times_seen":20,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/fonts/1755b8cf47b3e6787be6.woff2","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /fonts/1755b8cf47b3e6787be6.woff2 HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://change-noww.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Mon, 24 Nov 2025 23:44:28 GMT\r\nETag: \"143c-6445fbe722f00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 5180\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5180,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5180, version 1.0","md5":"9db66ed78440181a5ca02e6fe0a932a6","sha1":"6b7f27b26c9c34097027fc9715dc053fa5a2394e","sha256":"08716a255c7df8f7d62c44b01ecf0bb4876886f0f8870fa9850fc391735972ea","sha512":"eb421e0b6c3cb5cdd405e6f92474d621cc635f9e75c232672d83a641b35fb7fb8fa56164f8b3493e1d8677362c2094539accfa19a95bf5f8235e24aa519b1e87","ssdeep":"96:gJvtuk+FjfQxf33i/rt3lvQs71OrqZDwch3XBapkmEH:2jCIh3axJQIa4w2BgkR","tlshash":"2ab19e72048a17c5fc2f783ef3e9b564354204ce1c3a42fbad3046a772b30a4a9b2881","first_seen":"2025-07-06T10:19:05.985486Z","last_seen":"2026-05-01T06:59:22.582011Z","times_seen":37,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":30,"dns":1,"connect":27,"send":0,"wait":27,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/header/foreign_link.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/header/foreign_link.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:53:36 GMT\r\nETag: \"45b-6450f0da4e400\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1115\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1115,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04b6d5900d67d5a19bb8816a32f5e91d","sha1":"089e67be54c7670c461d3edb9bca3da08bb90fa1","sha256":"7d9dc6317c7320dd15c44c4d37175cb95c8c1f9afc887b5d94e91301ce70c9aa","sha512":"b1abf477db1c750ac7edd5be3535bc35db62be9e9c432361f983d49a90098abf76e69ead52ca276cdac9edbc616c0effb17eb0c5b5226f19c66dc5fd72bfdfb1","ssdeep":"","tlshash":"f121f3d9a26cc25cc54befb8dd72749481b174b62d94a140a541dffd70213e1d89cc38","first_seen":"2025-08-26T12:56:04.874513Z","last_seen":"2026-05-01T06:59:22.434745Z","times_seen":31,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":156,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/header/flags/japan.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/header/flags/japan.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:56:26 GMT\r\nETag: \"106-6450f17c6e280\"\r\nAccept-Ranges: bytes\r\nContent-Length: 262\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":262,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"577c1f5394fb9e7ab8008506c5b0334e","sha1":"c5f30c5d4eaca414c4a4e0810ab1bf7169525e58","sha256":"42eb9e253413afcb3730ce0e6320d9b93de4fc5d5a2ef974f658ecdfdfc0f27d","sha512":"d357ccf014a4c600bd1236a21944f19bbbca54effa2ceed541ad0591d222e9db767d6e186c01ffa76a6fbf30ad96e9aba2c560c637d1869bb8e3a97348ec04fb","ssdeep":"","tlshash":"77d0c2b4b64c5680e81f46119eac647a14b360ca534808dcf0005925a540adbbd90d18","first_seen":"2025-12-22T03:32:11.372533Z","last_seen":"2026-04-12T23:00:03.948628Z","times_seen":26,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/index-images/three-number-icon.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/index-images/three-number-icon.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:54:22 GMT\r\nETag: \"43f-6450f1062cb80\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1087\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1087,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"006dee124e69669f65fe82f870b45c52","sha1":"5e7d53bc1dc5b4bc2b584d5646c48ba3ea060d7f","sha256":"16eb667158a0c672aa6f50ad48fbf7162bf4b2c4e9080ecfbe138237bcca6010","sha512":"8bf4fd213e9fd3cf778a0d0f0085a90f81c41c99e86bbd0f112b07f20af7a833bc6da91345c0046fd59941744cebcc1866875df4aa05292719eec7cf1f57b27b","ssdeep":"","tlshash":"c8110325c30872fde401d7a09633906171ba59fe4742c516829cda54705d1ac8fdb6ab","first_seen":"2025-06-25T05:34:40.843442Z","last_seen":"2026-06-03T08:33:36.132879Z","times_seen":78,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/logo-now-wallet-second.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/logo-now-wallet-second.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:56:30 GMT\r\nETag: \"1444-6450f1803eb80\"\r\nAccept-Ranges: bytes\r\nContent-Length: 5188\r\nKeep-Alive: timeout=5, max=88\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5188,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"206ffa2fe9aa1c79ed58b28decb3d83c","sha1":"71a6f7b9d231a8419f9fc45ddfc1490869567c31","sha256":"4f2008fad230ddcfca834e8c637439b850d871f3c98d22e84618fb970c40d0c8","sha512":"35d41a95fec1eb27968040b8d9d03b0f421355c62668d3a3e4f0e9dedcf75452e4acda40894bf5730eaf743a7c2d0a5293576a56fd591afee6d8a98ead47a8c2","ssdeep":"96:Qg5Hexgr7acqPwb17Es573pm5pHX+nxQXlhFLJDQ18BIX:QKHeIa7IJ79573pm5p33hFdAB","tlshash":"23b173f0b3eca1e0e402d7a4d52a98b53b7b30fa7f61cb4171bead945b1505c890ec90","first_seen":"2024-10-04T11:14:04.492838Z","last_seen":"2026-04-26T00:40:47.286339Z","times_seen":78,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/icons/favicon-16x16.png","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/icons/favicon-16x16.png HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 13728\r\nKeep-Alive: timeout=5, max=89\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Trustpilot","description":"Trustpilot is a Danish consumer review website which provide embed stand-alone applications in your website to show your most recent reviews, TrustScore, and star ratings.","website":"https://business.trustpilot.com","common_platform_enumeration":"","icon":"Trustpilot.svg","categories":["Reviews"]},{"name":"Bootstrap:5","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":131749,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1222), with CRLF line terminators","md5":"036fe3f75d0ad4f8f74085e1c79767b4","sha1":"e8f768dd044fe06bd3518118a683f8e093bf4eeb","sha256":"eb1014ef88a7708d5382576c89a4b5fe06098e40ef25cd658be3fed23cf47860","sha512":"8633afefc77079d0679136cf4ad94d64bbdc2073709fcf17de00c44924d00ca5be8db96ca209ade620db3502eec783e44be5919d4b9c5d533252c29209f03135","ssdeep":"1536:kYfkeJr0QQAn4TWu14B0oBjR7BhCpB4a+luRc1:kY5Jr0QQA4TWulUayuy1","tlshash":"5ed3ffb0e0c9126b427391a1bb312b24f5ebd14bcb690f4172ee265f1fa3d518e2795c","first_seen":"2025-12-26T02:09:57.200771Z","last_seen":"2026-04-12T23:00:03.856783Z","times_seen":22,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/stats/TrustboxView?locale=en-US\u0026styleHeight=150px\u0026styleWidth=100%25\u0026theme=dark\u0026url=https%3A%2F%2Fchange-noww.click%2F\u0026referrer=\u0026userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=en-US\u0026platform=Win32\u0026nosettings=1\u0026businessUnitId=59d561c60000ff0005acd2a4\u0026widgetId=53aa8807dec7e10d38f59f32","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"3.164.230.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?businessunitId=59d561c60000ff0005acd2a4\u0026templateId=53aa8807dec7e10d38f59f32#locale=en-US\u0026styleHeight=150px\u0026styleWidth=100%25\u0026theme=dark","date":"2026-02-13T23:00:27.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustpilot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 01 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:AC:04:00:1B:E6:03:65:36:95:67:5E:7F:21:62:B2:19:D0:0A:61","sha256":"C0:F0:3C:56:A6:A5:C3:53:B8:0A:28:8E:01:CC:3D:09:B5:5C:FC:55:FE:7F:8C:10:B8:E1:1F:7F:C6:56:F4:80"}}},"request":{"raw":"GET /stats/TrustboxView?locale=en-US\u0026styleHeight=150px\u0026styleWidth=100%25\u0026theme=dark\u0026url=https%3A%2F%2Fchange-noww.click%2F\u0026referrer=\u0026userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=en-US\u0026platform=Win32\u0026nosettings=1\u0026businessUnitId=59d561c60000ff0005acd2a4\u0026widgetId=53aa8807dec7e10d38f59f32 HTTP/1.1\r\nHost: widget.trustpilot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?businessunitId=59d561c60000ff0005acd2a4\u0026templateId=53aa8807dec7e10d38f59f32\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 13 Feb 2026 23:00:27 GMT\r\nstrict-transport-security: max-age=31536000\r\ncache-control: no-store,no-cache\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 38f2e8dfe4a6e6a8f81d75aed457ec00.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: 5sDlYNcN0brP6MkmmMwoezbgbckSEZ-x-ukPFlukIaK3c_wp23pxnw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T23:09:45.281132Z","times_seen":16194959,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/_icons/visa.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /_icons/visa.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:39:58 GMT\r\nETag: \"4e2-6450edce33380\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1250\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1250,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8e9eb1b531387d572db95bf070c093fe","sha1":"55c153f2dd2a60acb9235bc8291973e31c893f21","sha256":"1cc006098d387ad6b15c9044d6597f076e67aba621eb44fc137564ca9d840bdb","sha512":"1c18d66112c419544da97a5b67ef54f023fd83ef1bb1abab07d35c4c78da0e21b24a755af91e4a27dc8478129334fbddc012e109b3f44ea24229316c545128bc","ssdeep":"","tlshash":"d52151f4b3a4d5ddb00d8bf8de22e069a8a722f8fc5c83d2c3e12604f4111a84875dd6","first_seen":"2025-06-25T05:34:40.895973Z","last_seen":"2026-04-26T00:40:47.108848Z","times_seen":54,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"3.164.230.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:26.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustpilot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 01 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:AC:04:00:1B:E6:03:65:36:95:67:5E:7F:21:62:B2:19:D0:0A:61","sha256":"C0:F0:3C:56:A6:A5:C3:53:B8:0A:28:8E:01:CC:3D:09:B5:5C:FC:55:FE:7F:8C:10:B8:E1:1F:7F:C6:56:F4:80"}}},"request":{"raw":"GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1\r\nHost: widget.trustpilot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\ncontent-length: 7758\r\nlast-modified: Thu, 27 Nov 2025 10:42:18 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 13 Feb 2026 04:06:03 GMT\r\ncache-control: max-age=86400\r\netag: \"4f7dac1e6d2da032a88fd4af02513c39\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 38f2e8dfe4a6e6a8f81d75aed457ec00.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: W1-IbvzD7UqA8lFgoyeVN7GZqcDip3swZiC4je9etJmPM8JnXxInXQ==\r\nage: 68063\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":24641,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24554)","md5":"0c190c4793c7891eb3538396946c7d37","sha1":"d1ebdb69058db9d979266ee3d3379925d20ee33e","sha256":"752d46d087667198e30f6bfda196f35d670de0dcb6526a00733a715aac4d366f","sha512":"5b1f9f62c8bdbf72eb01693106016d76d1312e69ae2f088c018911f965795fd0ce7d3addb248335bd5d82ecb43c2dd708d0da95a32bca8fecc1223813a69cce1","ssdeep":"768:Bn/Nw7duwqU3o+bz3y2uxtFqmDJvQ6iYB:R/Ncg+bz3lAtFqofiM","tlshash":"14b2e6e431a1f47642cb6169543f620ab2b278687985d488b53cc8f26fa0d9e3137f7d","first_seen":"2025-11-27T10:58:44.640925Z","last_seen":"2026-05-28T16:18:40.901985Z","times_seen":11765,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":36,"dns":12,"connect":8,"send":0,"wait":8,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/inner-navigation/permanent-swap-address-icon.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/inner-navigation/permanent-swap-address-icon.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:22 GMT\r\nETag: \"a80-6450ede516980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 2688\r\nKeep-Alive: timeout=5, max=84\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2688,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"829e6872fa0acf4dfa5920d9f4bc3d32","sha1":"48c721b470504b8e45f71b12c4047edd134b35df","sha256":"0423b94535686b18ddb6990510c02059d7e494960003dcdb4a0e4971a94e945b","sha512":"0b913e7db994a484f05bcbd16deb3894fce0494966914cfe262fca8aee3171e08f823ea46ad94c5384a1f410b0663b4d113dbcc6968b9d14501e6180abb3b39c","ssdeep":"","tlshash":"25519ef68a4c77e01d129badc85b85d8fe7a707fa7a10fcc56d8e7a19354ea44cc1808","first_seen":"2025-06-25T05:34:40.886959Z","last_seen":"2026-05-01T06:59:22.788885Z","times_seen":55,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/now-products/now-token.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/now-products/now-token.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:24 GMT\r\nETag: \"5b0-6450ede6fee00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1456\r\nKeep-Alive: timeout=5, max=80\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1456,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b938546c182974e677841e644be9183b","sha1":"331c3c03ab606dd9347a0ef8843afcf44f77f05a","sha256":"13f143c9f03fb0c266a3bbe629d3bcb7a76841a4b1617a8a0a86ea1a48625e26","sha512":"78b472290685dcac1987039f74f931d099aff5d279eacf26fffe02cd482b00ef61a0fd9d680eb03580692c47f3e7acb899322e353a69169fc0108fec537fee05","ssdeep":"","tlshash":"a03112d19814884ec71a82beef58b5d6512e24bd64464288325caf6f74027ab6e4fa01","first_seen":"2025-06-25T05:34:40.899559Z","last_seen":"2026-05-01T06:59:22.76691Z","times_seen":57,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-qr/qr-mini.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-qr/qr-mini.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:56:04 GMT\r\nETag: \"2052-6450f16773100\"\r\nAccept-Ranges: bytes\r\nContent-Length: 8274\r\nKeep-Alive: timeout=5, max=80\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8274,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9f80ba5c4d2e93b95bb821e904ce127a","sha1":"ee942d19a332420090bbf01dd5538ef67a693d69","sha256":"e4c02e093ec7f2f7df606aa7c0d8a65137ab613a4eb2a82d3cb9512e7d5c46e6","sha512":"3f49d346c3e6fc24895b952c1266daef8e6853fcb099563c594c4812e34311ed8a5d3c5021f89cfddd802cc8870a5d47306ca4200d4982bc0daa4760b3a240b1","ssdeep":"192:UdUxDQcOALTLBlcyrf8CSPLkxMzoMOcdc9He3J/0ZfoTBs4N47X:WMcctTLBWU4sUodC+He3B0posKUX","tlshash":"140256f6a3e5a1e0f807dbf0d927a4257a6b38fa2f76c67c07a25c90e56304c854dc85","first_seen":"2025-06-25T05:34:40.865326Z","last_seen":"2026-04-12T23:00:03.952464Z","times_seen":52,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/main.js","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"3.164.230.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?businessunitId=59d561c60000ff0005acd2a4\u0026templateId=53aa8807dec7e10d38f59f32#locale=en-US\u0026styleHeight=150px\u0026styleWidth=100%25\u0026theme=dark","date":"2026-02-13T23:00:27.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustpilot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 01 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:AC:04:00:1B:E6:03:65:36:95:67:5E:7F:21:62:B2:19:D0:0A:61","sha256":"C0:F0:3C:56:A6:A5:C3:53:B8:0A:28:8E:01:CC:3D:09:B5:5C:FC:55:FE:7F:8C:10:B8:E1:1F:7F:C6:56:F4:80"}}},"request":{"raw":"GET /trustboxes/53aa8807dec7e10d38f59f32/main.js HTTP/1.1\r\nHost: widget.trustpilot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?businessunitId=59d561c60000ff0005acd2a4\u0026templateId=53aa8807dec7e10d38f59f32\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript;charset=utf-8\r\ndate: Fri, 13 Feb 2026 05:07:42 GMT\r\nlast-modified: Thu, 25 Sep 2025 11:44:56 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=86400\r\nx-amz-version-id: null\r\nserver: AmazonS3\r\netag: W/\"c82033c29f8f6d5b781e1feb4e846a20\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 38f2e8dfe4a6e6a8f81d75aed457ec00.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: Gx5QrrkQhzNbUT8ZC4jQmMSffTJW8cciEoTbW28I4BMIVbRIpp-GmQ==\r\nage: 64366\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":116319,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (53207)","md5":"c82033c29f8f6d5b781e1feb4e846a20","sha1":"61ea3fceb2c04e32e14b605bb3350d906f82a272","sha256":"b751dc328f23e2a36ca0b5b28e90c29d50bd2e167baf8f646df4c4a21472fc81","sha512":"bbec4ec5e94903d434cb8df8ad395a296d6a33a667ad887e93f65eb37d56bde6dc20877834f07f33f653239079631a274c993439a18e3bd94aa06d8b07efb260","ssdeep":"1536:1jYYoNLcanaQl6er6exeIeKQUjcIQgjdZzQy+y4iTr0a8zQy+y4t:1jYtXOIQSZz","tlshash":"5cb37ca191e85ad29c0f836a3c181710f160f0fcfa4ad4ddbaed4e6d427298eb716d1d","first_seen":"2025-09-25T11:49:43.258815Z","last_seen":"2026-06-06T19:23:04.046299Z","times_seen":3813,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/data/currencies/networks","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /data/currencies/networks HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://change-noww.click/\r\nContent-Type: application/json\r\nsentry-trace: 4c7b2a59036444ca8576d1c73287e8c5-8a98f18fc7774afa-0\r\nbaggage: sentry-environment=production,sentry-public_key=caf1b4c4d55fac9fb827b0fc4c20f664,sentry-trace_id=4c7b2a59036444ca8576d1c73287e8c5,sentry-sampled=false,sentry-sample_rand=0.7974678075204517,sentry-sample_rate=0\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: application/json; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":9465,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b9ede94c698c7e20ce8d49646f56e9a0","sha1":"99741d5e9a1e474ff81b903d7ef5afb49bd1d853","sha256":"f4f79b37022d7759d220c50b8104c936b055e783c4278ac64c641a0043bc737d","sha512":"412dcc733ad30624778271bf2a0fe811258fe3f17080d9690cff07b6bdf97742965673147eabb40ec3df90c1cc5fe9251b252815578168854735d5d79c818b4b","ssdeep":"48:DHmB9knz0LeABzsdlLjttqXNZJF5dh//+X71Yi9hom+2GWNXn:bmB9aYLsH+Pq7om+sX","tlshash":"cc12f672cc246c1b068a50ed1cb447d725a492834e1d7c593e88edcc5f8c6bf9a7236b","first_seen":"2026-02-10T11:51:29.85897Z","last_seen":"2026-02-14T08:45:07.140295Z","times_seen":9,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/header/flags/germany.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/header/flags/germany.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:56:26 GMT\r\nETag: \"db-6450f17c6e280\"\r\nAccept-Ranges: bytes\r\nContent-Length: 219\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":219,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"de660e5df159bffe83740e4ec1b58fd4","sha1":"2597e46ff38a1eb258ca0caaaca308ba13ac4616","sha256":"46bd843e756f9d53d5d0075e970c32d13c1672ef0cf585f7f2ee9dfb282d3889","sha512":"77e03dd6e6410ae11a69ac1511fc40c22342d5703b20cda65b590818327fa65c5d314e720a11f39626674a1d67887d60cd51d957a4960c80b3945699e03292b9","ssdeep":"","tlshash":"0dd0a7d4608d5b404c0e437195fc7477a17160e8128c0ac8f58011247e84fef2c51e9d","first_seen":"2025-12-22T03:32:11.53854Z","last_seen":"2026-04-12T23:00:03.947838Z","times_seen":26,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":197,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/index-page.5b600bbff18706340382.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/index-page.5b600bbff18706340382.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Mon, 01 Dec 2025 16:51:28 GMT\r\nETag: \"23fb-644e6ca550400-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 3445\r\nKeep-Alive: timeout=5, max=90\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":9211,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9114)","md5":"1bb36fd61f140eb23543ad768157e6ec","sha1":"43c3947d08dfa6bc4edd6313af0c8d7bd9ceb5f6","sha256":"606f2cbd98ad6034e53cc7fae27553795c780e4db6f6113a832a89a56ad72ced","sha512":"292854897c6cab2d86f5167da880837234e6c7213d84e9a0921d5637ca47eb3cefa865e68b35a8bc685ee077c64049e9faa5cf723f779fca76121ea950fb3a01","ssdeep":"192:3+QCd5ciK6Bemd3jy8cm/xm2+m6GEpP2qnsqMjLYbsuqc44HZHqk:3+QCd5VK6QQom5FspukQLYV/xHv","tlshash":"7312a4ce72c6f46943936760d01f100bf22a5869e1098194e729dce2bcb484ea267ffc","first_seen":"2025-12-26T02:09:57.282064Z","last_seen":"2026-04-12T23:00:03.913121Z","times_seen":20,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/currencies/binance.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:26.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/currencies/binance.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:26 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:22 GMT\r\nETag: \"20e-6450ede516980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 526\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":526,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bdaf91471e59a3627f03623eac6833f9","sha1":"32085125b862a2620d00dde78fdffbe432a7bee4","sha256":"2c56b6b334840b94eb873316bb888106af274b73e97164964e3b3c2557bb8df0","sha512":"842994bd1963296ab8abe39e1312f82d744b6024061182628cf29ae9a89fb6478eb98a745c527e1b82a6e2221fdd469d80a575f87312a1cd00df3bca3ed0469d","ssdeep":"","tlshash":"21f0c9c2a120dc2c282376b47f2432f347eae0a884b204ccf084ae4ce0c8cd3483ce68","first_seen":"2025-06-25T05:34:40.896772Z","last_seen":"2026-06-03T08:33:36.241292Z","times_seen":59,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/now-products/wallet.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/now-products/wallet.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:22 GMT\r\nETag: \"17e0-6450ede516980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 6112\r\nKeep-Alive: timeout=5, max=86\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":6112,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"125e20937daa58367d39fe01dc70e63a","sha1":"9bb17e6e76046d50335cc4944ccf075628a55792","sha256":"40d0086c8d2fbf1e7dea7c71a8411b249049a98afdb6e9b8c34f81258828eeae","sha512":"1652cb859902ec750279ec32e577eb32598892509745a4f5adb60fe11f221f1ca604823f505c5f940ead03b404c20cfd4b42e89a37826d78588f8330c2704a94","ssdeep":"96:ilIC1bfqYYhGW7on7jrmra/rZaOrty3a/rZaOrty38/JYJX:KIaPYhGWs7nmrKrFIKrFIb","tlshash":"abc174e99ba8826cd08b922ddf2ae894771d10eb7565c3406d2fcb6d960f5c4fe0bc50","first_seen":"2025-06-25T05:34:40.879292Z","last_seen":"2026-05-01T06:59:22.720757Z","times_seen":57,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"content-api.changenow.io/uploads/xlm_8ef7a0cde8.svg","fqdn":"content-api.changenow.io","domain":"changenow.io","tld":"io"},"ip":{"addr":"172.66.171.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changenow.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:40:19 GMT","end":"Tue, 21 Apr 2026 09:40:16 GMT"},"fingerprint":{"sha1":"3D:8A:41:5E:00:8A:BB:E0:A7:F9:13:5F:BA:46:03:4A:BE:62:2A:37","sha256":"2D:19:65:5D:1A:E3:04:83:65:79:27:AC:1F:1D:3C:3C:3B:D4:59:18:BB:8A:9F:E2:9C:D6:38:BE:8A:E2:3E:28"}}},"request":{"raw":"GET /uploads/xlm_8ef7a0cde8.svg HTTP/1.1\r\nHost: content-api.changenow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:00:28 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 23 Jun 2021 12:59:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60d3304f-61e\"\r\nexpires: Fri, 20 Feb 2026 16:59:23 GMT\r\ncache-control: max-age=31536000\r\nx-frame-options: DENY\r\nx-nxs-id: a6d00bef9be9b3399d0981532ff40de0\r\ncontent-encoding: gzip\r\nage: 21664\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9cd7f12bdad332fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1566,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"331b3936fb17482abc18b24c1f84afe5","sha1":"1668c9dd13c6a633bc0220034ff79695d5fcbb15","sha256":"ef74d2c6f023b4e83d66c4194e209c23b8034213fc550f284969d73c2ae2fc7c","sha512":"5502208a8dd4ade07c2c54310108fd52784a8cb60b9d347f7f69d837197bb6f6c1d7055c1d5b5667bbc0140eff7ced0c43c6da30cbc8b2cfd4ca9e584b7cc701","ssdeep":"","tlshash":"e731bff25269f1f495438721cd26a4b1a5cf34fb6b58dba842c0ad84f9150d9dccdde0","first_seen":"2025-07-08T14:16:34.345395Z","last_seen":"2026-02-13T23:03:22.165983Z","times_seen":11,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/inner-navigation/affiliate-program-icon.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/inner-navigation/affiliate-program-icon.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:22 GMT\r\nETag: \"2ca-6450ede516980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 714\r\nKeep-Alive: timeout=5, max=84\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":714,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9c353f9e97a48a783a0f1520a8b4bec0","sha1":"64d26d4949c2e1dfe79ab169ccc4be5fdc08bb38","sha256":"00d8e629bcad7de99f25e6cf31990e957123d88731d1f1780e79a49a96a85922","sha512":"b0df3bfad687638a5c5a5cc03e2c6e31e1890b4bad6b4ccf7288284b23e8478d868c9a7d631ef682da06816ea49eeb98b2558e0ada965cdd677d00f2db34e704","ssdeep":"","tlshash":"e2014cc4080842ced3919aafab29c542131fa3f1f3e34010de4e63b9600e596fb1762d","first_seen":"2025-06-25T05:34:40.933629Z","last_seen":"2026-05-01T06:59:22.584707Z","times_seen":57,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/support/exchange-status.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/support/exchange-status.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:24 GMT\r\nETag: \"730-6450ede6fee00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1840\r\nKeep-Alive: timeout=5, max=81\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1840,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7addad6d1b4061458550b4ad53ef988e","sha1":"ed505645c41b6ae6e225e6e48c3cbd0fc97943aa","sha256":"c702aacb61c593851a8c377e53ccd3ea0bd7a15533cde9a23ce34c206d98fe42","sha512":"ad53688d16e92a2c95042cd222854a18922c31de4f8d3e4b3ecb198453c1e9d9c051c0cc759210a49c5e560eb2fe3aa7cbb8486a5ee4cb4fe0d1a69996f191b0","ssdeep":"","tlshash":"e431cce42b6cd70cbddb5a1ecf32b864234e1079ba7692d8585d0371b04246af747e14","first_seen":"2025-06-25T05:34:40.897376Z","last_seen":"2026-06-03T08:33:36.234974Z","times_seen":57,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/header/flags/russia.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/header/flags/russia.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:56:28 GMT\r\nETag: \"108-6450f17e56700\"\r\nAccept-Ranges: bytes\r\nContent-Length: 264\r\nKeep-Alive: timeout=5, max=91\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":264,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3cb2496a3dedd253d405b2c44a8899fb","sha1":"6d734055d8294fc7e9e049e518ffc95026b249ba","sha256":"43e879435b47acc4102ec2c3215b410dfae50964ef43c9d4539f408ea5eb3cf2","sha512":"b445c5758a6e06cad0211ae40953487bf7d5eefaa9719ac76802f51c74fc42b62e6d2f9125e2111635ce89ff8adab9e8f7475461f26740d3bad88c481ba81165","ssdeep":"","tlshash":"eed05ee5708d6a508d0a43b195fc757b617290eb32cc1ac8b5402628bb84fef7ce1e99","first_seen":"2025-12-22T03:32:11.415987Z","last_seen":"2026-04-12T23:00:03.938753Z","times_seen":26,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":176,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/header/flags/italy.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/header/flags/italy.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:56:24 GMT\r\nETag: \"e6-6450f17a85e00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 230\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":230,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"19873d0e9ccafcc21c68410ffdcedaff","sha1":"25273d3843a848ee0123e815b4a226e46d262c54","sha256":"abc594aa799aac2b5ba0198171ee7313454c2f75b6704a0c8b2b81313a952ba2","sha512":"fc5d3a6d7118a2511ec3d3caa70d4d290b6a4b0d830df9ece445d7c321b5cbed62d2c118f76571a5835735d7aea0f63c9453db7195f60538849af2be12688db9","ssdeep":"","tlshash":"c3d09794304d1a118c0243b316ec7836043350cd92cc1cccb0802208b580bdf2cb0a8c","first_seen":"2025-12-22T03:32:11.377185Z","last_seen":"2026-04-12T23:00:03.992751Z","times_seen":26,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/header/flags/south-korea.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/header/flags/south-korea.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:56:30 GMT\r\nETag: \"4f0-6450f1803eb80\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1264\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1264,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"28624b7295e5aba9934e3a5ec679caf5","sha1":"18e4691ae0fdf1d8093690949fa81ae8391c490f","sha256":"9fcfa6522e7decc790dcaf2ddadb1d7cdca3b026579ddaca29f78498f419ee0f","sha512":"e5d3c57a5d7a329c7e78337342d7259d73bb0012138e0a47bc12a629ac0d69aa50e7bb223b28691212773970bc5f64f8d3c99794b25900e7daa9a8b04c92c279","ssdeep":"","tlshash":"322147aa23d87082c049cecdbc16e3017607a4ef39fb0b84b55c510e609d961de6e778","first_seen":"2025-12-22T03:32:11.402382Z","last_seen":"2026-04-12T23:00:03.997027Z","times_seen":26,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/currencies/bitcoin.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:26.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/currencies/bitcoin.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:26 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:22 GMT\r\nETag: \"89b-6450ede516980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 2203\r\nKeep-Alive: timeout=5, max=89\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2203,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e6b5a89ce1ef0888e4c7023926de5bd4","sha1":"1923334ffae920b4783a0718be11068b248bd734","sha256":"2fe8e0f1ab8940205ab3183224228e10adacbb870408ed096ec7fc5b9e326681","sha512":"fe45f4d50ee94d1ef5f09a552a05a958b48e47f025c2ffb5ef8fa799a33ea6a2a36d23e0124596ebc99502c0d285a162672678a0fd54f174bdfbe517ad9cf151","ssdeep":"","tlshash":"ea4165d5a1a4c39d9ecfc14def35eae8524e20fba67348c1594f476c814f5c5f60a884","first_seen":"2025-06-25T05:34:40.881306Z","last_seen":"2026-06-03T08:33:36.161661Z","times_seen":59,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?businessunitId=59d561c60000ff0005acd2a4\u0026templateId=53aa8807dec7e10d38f59f32#locale=en-US\u0026styleHeight=120px\u0026styleWidth=100%25\u0026theme=dark","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"3.164.230.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustpilot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 01 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:AC:04:00:1B:E6:03:65:36:95:67:5E:7F:21:62:B2:19:D0:0A:61","sha256":"C0:F0:3C:56:A6:A5:C3:53:B8:0A:28:8E:01:CC:3D:09:B5:5C:FC:55:FE:7F:8C:10:B8:E1:1F:7F:C6:56:F4:80"}}},"request":{"raw":"GET /trustboxes/53aa8807dec7e10d38f59f32/index.html?businessunitId=59d561c60000ff0005acd2a4\u0026templateId=53aa8807dec7e10d38f59f32 HTTP/1.1\r\nHost: widget.trustpilot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nserver: AmazonS3\r\nlast-modified: Thu, 25 Sep 2025 11:44:51 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\ndate: Fri, 13 Feb 2026 04:29:03 GMT\r\ncache-control: max-age=86400\r\netag: W/\"097ce19589dedb482faf5e7bd737a7d4\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 38f2e8dfe4a6e6a8f81d75aed457ec00.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: HgpF73ct1EiwLy7GGFOb9FdIpQalRSxw0i6rOOk6PbIPKO4R3CQ9Yw==\r\nage: 66684\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":13436,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (11805)","md5":"097ce19589dedb482faf5e7bd737a7d4","sha1":"15c29c1308edcde564fc8b647dd96e4bc812d05b","sha256":"5f315f89af9e70fbae6e80ea8781dfae8f0c76ee24906688e8d5b12b3572606a","sha512":"95b640fa6c00baf929b5e1cc0b6600d909fb6c4b5dfc875a2e863f063d322012405f1fc750d1dd68ba1fb30cab2e4e3ac218f221342be9caa995aeae8beeffa0","ssdeep":"192:Ab6Xe7VmC+UQZq3xMW8D1R7zo1UFu29RhP6J4X3N6828lmgikx6GJRecnQCwRcZQ:3MXO7zo1UFu29RhP33N67Vgbx6GJRBlQ","tlshash":"d9529602fa4ce7b90d13cd7a9ec17389dd27716bb5500a87abb691e8c3df006d99621c","first_seen":"2025-09-25T11:49:43.308779Z","last_seen":"2026-06-06T19:23:04.011924Z","times_seen":3814,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/6337.936f364142edf10d8824.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/6337.936f364142edf10d8824.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:39:58 GMT\r\nETag: \"2380-6450edce33380-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 3113\r\nKeep-Alive: timeout=5, max=76\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":9088,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9088), with no line terminators","md5":"54b7cddccc3e46b4fcb2eeb7b10ab45e","sha1":"0b2fe654d96daab5ce9e72007829177d39cd2c6c","sha256":"0a334ed9c1712b98cac6919bfdace03fd1757d381e3bfaf4b87177a5ebc17593","sha512":"3a3f5bd6ea88835817a844ffb0fdd4136d957e63063565a11fdfefeeb6ffebb88b5d52db92f4693478cdd87413d531598d34e7d3b943c5565505e713a2c8592e","ssdeep":"192:5TNqh91jdUoXOB/lihxDSPJ+JlZmWBOEHTZFiGpJYhaaC6Y7:HIdgB/lkDKgJTBOmTCY7","tlshash":"b6126504f616783b83632133223b410f27360458354a5559bab8e8ee6dfed4a5e27b7f","first_seen":"2025-06-25T05:34:40.844939Z","last_seen":"2026-04-12T23:00:03.882729Z","times_seen":50,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/header/flags/spain.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/header/flags/spain.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:56:24 GMT\r\nETag: \"c3-6450f17a85e00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 195\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":195,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d3be2ce170560720334ab0136e3ff050","sha1":"e9126868e8c060bdc600a501d8cde3d5480f64ac","sha256":"0ca32ddee3822c7355d5845b498ec01e26b1e7894777142b0c64b21ff88718bb","sha512":"8d948ed88300a22204559518c435fa009e36abd1ab9ba3d603f4b85cf3493a5ccbe9b61c050c4581887f35364a9ed71b72ea7801ab3906695ef6c5f75419c8ac","ssdeep":"","tlshash":"0fd012e5a08d5e509c0e436195fcb8aba57150ea17cc09d8f5841225be88fdf3c51e9d","first_seen":"2025-12-22T03:32:11.404425Z","last_seen":"2026-04-12T23:00:03.905698Z","times_seen":26,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":156,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/currencies/ripple.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:26.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/currencies/ripple.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:26 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:22 GMT\r\nETag: \"302-6450ede516980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 770\r\nKeep-Alive: timeout=5, max=84\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":770,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2cb490c412b2c1c3b84ae35b93a30d11","sha1":"0a9a86f97d2288a1ee7e568dd3b7b6bc0a06a3fb","sha256":"3ef401c87b8af4fe7109fd409cf4c477a90e7d5c0927396f8d504899119bf169","sha512":"c7e8c44d4d64b370da46190cfa624305480140c5b2e0b21ac64f4ddbeeed24d439801b840bdef39374dd11e4266e94b0316bbea81e1d23218bf5273e456be0da","ssdeep":"","tlshash":"3a0120cf0690984880cbc8ccbe3e2ac8214ff0bcde888290eac85a59e24b0a2b005954","first_seen":"2025-06-25T05:34:40.867482Z","last_seen":"2026-06-03T08:33:36.263048Z","times_seen":59,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/currencies/litecoin.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/currencies/litecoin.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:22 GMT\r\nETag: \"220-6450ede516980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 544\r\nKeep-Alive: timeout=5, max=86\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":544,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"42f7ad54694f15c2bcef2a23bfe980b9","sha1":"e32d0a61643c220009abc553afafed48ed8c5170","sha256":"36ad98de5c02720307c3afc4572d48040fc5633c9f39da5e6cac24939e31f1ca","sha512":"ff6ae9cea67f3f92ee92011876014fe0afb45d7779d89843fb9429427660f3e31664ddba09785a503c8cd3583c397a12bcbd9d53e56330d18cc696040da3791f","ssdeep":"","tlshash":"3df08b949a7c173c8989e2d4ff1c20d8ae3f71fa737588d150491a2460d486340c9e04","first_seen":"2025-06-25T05:34:40.967166Z","last_seen":"2026-06-03T08:33:36.258839Z","times_seen":59,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/data/currencies/fiat/optimized","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /data/currencies/fiat/optimized HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://change-noww.click/\r\nContent-Type: application/json\r\nsentry-trace: 4c7b2a59036444ca8576d1c73287e8c5-a876cc55bdbdbb81-0\r\nbaggage: sentry-environment=production,sentry-public_key=caf1b4c4d55fac9fb827b0fc4c20f664,sentry-trace_id=4c7b2a59036444ca8576d1c73287e8c5,sentry-sampled=false,sentry-sample_rand=0.7974678075204517,sentry-sample_rate=0\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nKeep-Alive: timeout=5, max=79\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: application/json; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11039,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7b06be32b01a60bd242564e268f5ab2a","sha1":"985384cb9551c4fd7a269c117e3d7a15987cab19","sha256":"8f4c14a0a3c3d2e06ad2b8bccffff1572f9da05a92b2c76dc67f6f34bab56c91","sha512":"cc497462b530207a1440ebfc8a46b32b2e84ae1839d063c38014a6830d0b846bcfd8a86ae4c95c51955c9fddd93b13e46da06fe4f9a5efadd882205fd9b51af6","ssdeep":"192:ag3La9npHg3Zgx30qNa+bst/yA2QHoZQgRW+QmmX:Xa9npgUNfWZoQm8","tlshash":"61327d53cc190ca4625c89b899ea408a1a4ca2070f1a3d377b2d194d1f6fb5f36b779e","first_seen":"2025-12-22T03:32:11.454786Z","last_seen":"2026-02-14T08:45:07.075036Z","times_seen":18,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"content-api.changenow.io/uploads/sui_6d4e2efb11.svg","fqdn":"content-api.changenow.io","domain":"changenow.io","tld":"io"},"ip":{"addr":"172.66.171.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changenow.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:40:19 GMT","end":"Tue, 21 Apr 2026 09:40:16 GMT"},"fingerprint":{"sha1":"3D:8A:41:5E:00:8A:BB:E0:A7:F9:13:5F:BA:46:03:4A:BE:62:2A:37","sha256":"2D:19:65:5D:1A:E3:04:83:65:79:27:AC:1F:1D:3C:3C:3B:D4:59:18:BB:8A:9F:E2:9C:D6:38:BE:8A:E2:3E:28"}}},"request":{"raw":"GET /uploads/sui_6d4e2efb11.svg HTTP/1.1\r\nHost: content-api.changenow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:00:28 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 03 May 2023 15:14:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64527a6c-636\"\r\nexpires: Fri, 20 Feb 2026 23:00:28 GMT\r\ncache-control: max-age=31536000\r\nx-frame-options: DENY\r\nx-nxs-id: a6d00bef9be9b3399d0981532ff40de0\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9cd7f12bfb3232fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1590,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a670ac029b110a1beda026135c0a8c8a","sha1":"0c5075d68d18c4678f3e54616cc9b7c8f0f870df","sha256":"a3c05884581d3ddda9f23ffa57bb45a5469ad3fd58e4455a7a316192da3cb5ff","sha512":"ed9aac71edf92470a0f908a096312b41aab5ecc2f3ecc3e2282eaa5a73d376cbe6149fcde056e817274a0e0e56a61067377a604c062674832ac4373242de41ec","ssdeep":"","tlshash":"513141e9a3e8c384a806d3b1e12a15986a5e75f8638e468d57c067a06f841668a4cdd4","first_seen":"2025-07-08T14:16:34.325752Z","last_seen":"2026-02-14T08:45:07.131677Z","times_seen":28,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":56,"dns":6,"connect":4,"send":0,"wait":233,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content-api.changenow.io/uploads/ton_e0f171f660.svg","fqdn":"content-api.changenow.io","domain":"changenow.io","tld":"io"},"ip":{"addr":"172.66.171.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changenow.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:40:19 GMT","end":"Tue, 21 Apr 2026 09:40:16 GMT"},"fingerprint":{"sha1":"3D:8A:41:5E:00:8A:BB:E0:A7:F9:13:5F:BA:46:03:4A:BE:62:2A:37","sha256":"2D:19:65:5D:1A:E3:04:83:65:79:27:AC:1F:1D:3C:3C:3B:D4:59:18:BB:8A:9F:E2:9C:D6:38:BE:8A:E2:3E:28"}}},"request":{"raw":"GET /uploads/ton_e0f171f660.svg HTTP/1.1\r\nHost: content-api.changenow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:00:30 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 12 Oct 2022 13:10:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6346bcb2-605\"\r\nexpires: Fri, 20 Feb 2026 16:59:23 GMT\r\ncache-control: max-age=31536000\r\nx-frame-options: DENY\r\nx-nxs-id: a6d00bef9be9b3399d0981532ff40de0\r\ncontent-encoding: gzip\r\nage: 21666\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9cd7f12bda9532fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1541,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"94f10519cbe2e47b6cd34e28f0633daa","sha1":"c1620f6a82be33f35f6cb3809eb274680df3c81d","sha256":"6369244f7f5cf7fdcc109b4034acac9313acd8a779e7683ec12edaadbb704501","sha512":"1e923e42e2954f843bb9a89f4c6667d2354536fb309f9d5e76a2663cf55b1094b88bb9a7231be71482806ef5e6e44b9ba043f6d7de9d73a53ebb267ea7edde81","ssdeep":"","tlshash":"ee3115f4258dd5e97006ef88d7381a95847d2cbcafdcc0ca97d587a093154ea4d19fc8","first_seen":"2025-06-25T05:34:40.943685Z","last_seen":"2026-04-26T00:40:47.088537Z","times_seen":27,"resource_available":false,"data":null}},"time_used":2106,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":2078,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/2221.0abd4a5031b03df3734f.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/2221.0abd4a5031b03df3734f.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:14 GMT\r\nETag: \"787e-6450eddd75780-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 10023\r\nKeep-Alive: timeout=5, max=75\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":30846,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30840), with no line terminators","md5":"688e15177e0920cdea5ad1b0453f90b2","sha1":"03981b8877f471efd8ffd064f998b1a1f2da4f40","sha256":"fa4eceaa7d23dbd5284f2412ebdb14b6273df0094ad7d55fe931a4d9b7d00f64","sha512":"8829ca598915cc4c2e78103e4c85e2715cfe4143a33baf053fa2558acbec62d917698d0274e588f6b128709cde2266c76bc876a10c24fc76a0c52bcaf8888f16","ssdeep":"768:1ygFPvFoFPD9Ur2DLmA/VqkbpVWf8YRw5GI8ToEOUdnFnAXpBpE1h82LFv4Y6P3T:1HRv69DmSDXlYRfTRIq63qo","tlshash":"fed20a52b069b8bb55f6024b74dd100cb5ad2adce21d4ca2f3bcdcdaf399980225dc5a","first_seen":"2025-12-26T02:09:57.261966Z","last_seen":"2026-04-12T23:00:03.9401Z","times_seen":20,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/press/benzinga_white.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/press/benzinga_white.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:54:44 GMT\r\nETag: \"6cb-6450f11b27d00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1739\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1739,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cc97f0588d2968e4108b2e91083eab97","sha1":"e7c6a153f9dc078d8b6a46dfb3ab841eea4753c2","sha256":"9e1d0c465706458497f686b31c255ec7288e478cbf4587c8e7d0edc82279ff36","sha512":"07555cdfbcc9773b8c6a13a416919dffd668d1250ff79fa338e5f46eec20dc5edbf9b3fb998b2c0043bbad06bf283313d5e62ee6a0370fb80b04f24c632c1f94","ssdeep":"","tlshash":"813154dbf1c4a6d8d00acb66fa0a0122696f48fefb5017cdca9c1f5af756070c845da4","first_seen":"2024-10-04T11:14:04.300387Z","last_seen":"2026-04-26T00:40:47.278569Z","times_seen":78,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":94,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/cookie-warning.0ce7be0e5c9813549028.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/cookie-warning.0ce7be0e5c9813549028.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Mon, 01 Dec 2025 16:50:02 GMT\r\nETag: \"207cc-644e6c534c280-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 42250\r\nKeep-Alive: timeout=5, max=88\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":133068,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65435)","md5":"4ce1914922e9f6a3f7134ca6f69fd4a0","sha1":"eb2f1e5266ae5fa03b169b9d59b5e81e37871658","sha256":"22b0c725891eedd07eedde2c790bdda36230bcb11a82860f09b76cbae904ba32","sha512":"3334092895c75f789c4cffd51161afb97de01214ae3b3b44f1b4f6a2af93e4754854372beb3f094cdb099aa5615512af88e49138413a8f30e109e32ed2665a18","ssdeep":"1536:avMhL/x6o38PLMioXfHfHuJc5rhb60g+gH3iH5YbDVkD6D9s:aUhL/orsuJyrng+gSebDVkD6G","tlshash":"03d3f7d93952f5615bf311b710af1803733d162b280c8960a212fddab5fd45ea12bf9e","first_seen":"2025-12-26T02:09:57.310948Z","last_seen":"2026-04-12T23:00:03.93264Z","times_seen":20,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":32,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/currencies/monero.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:26.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/currencies/monero.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:26 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:22 GMT\r\nETag: \"1ea-6450ede516980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 490\r\nKeep-Alive: timeout=5, max=85\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":490,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"239db67f917ab0a3ef2c516a6e34c6ca","sha1":"adcfe833530ee73ccbb85c731474d1c4621e1f9f","sha256":"761d546ea64dbc1390cc7280e1a2b28966db974c790da98e3080bd3058d903d1","sha512":"f30cee9b84693cef9f8a6aca085c8edc71e7097f9595d5ab9e201ec38edbe486ba55e4962c42bdb82420b227307f63041101f2afb1a32a8739d7eb6c589fa8e5","ssdeep":"","tlshash":"6ff00ec1851c040cc841834c2e5df1ca326eb6d866c803e830081d2ce2006aedecefa4","first_seen":"2025-06-25T05:34:40.918595Z","last_seen":"2026-06-03T08:33:36.273908Z","times_seen":59,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/6077.ec381a3ae544b21e8ff9.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/6077.ec381a3ae544b21e8ff9.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:14 GMT\r\nETag: \"f2ff-6450eddd75780-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 20969\r\nKeep-Alive: timeout=5, max=75\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":62207,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62009), with no line terminators","md5":"0ab8073418fd537b1e5627d87db24247","sha1":"0173ee7d974d87d96889f7089581fb0e113639f6","sha256":"05f4f127225c308b929ec835e30fe025d49dd2679e1c88a8e1d0197e8a180139","sha512":"de07a0e824ef5267900d43a263b5fdcba65920159ef2349e22c97c81c46188dee321109fe9fcd12859e453be9dc61317dcc9c95e16522a30cc68a32e9ed6164c","ssdeep":"1536:eSdybHq8qTcNqH24FHezRqSjyvoO5KUhMb57gLYEYbobOMbs:exq/Tck24FHsjygyKUA","tlshash":"ee532bc0b2d7f069876a20e1503a4006f36b9f7d345ec4d8f3685cd738a5a49a1abf79","first_seen":"2025-06-25T05:34:40.877477Z","last_seen":"2026-04-12T23:00:03.956822Z","times_seen":51,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/currencies/tron.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:26.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/currencies/tron.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:26 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:22 GMT\r\nETag: \"23a-6450ede516980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 570\r\nKeep-Alive: timeout=5, max=87\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":570,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3d86e3652fd26dee2d5549dfd313cd81","sha1":"ef1a93b9fd246b5df51e34ae6d483e4028a7fec0","sha256":"d4b91a56e984b20c28cb8174c6054221ef23309757e543bf70b7e727b7e93d87","sha512":"61cc2c26a00d077c5e2a63506a559a3d247aa86633b4f8f325e8e794c52e75fd39aa032715e060eef32a177b7d7a0e2dc64b50a42eda16bd939e512bf2c6186a","ssdeep":"","tlshash":"85f0acfa9f7c694d41930724ce1a61c163adb5d4234d81d721485d10b59eada514b8e8","first_seen":"2024-10-04T11:14:04.342716Z","last_seen":"2026-06-03T08:33:36.248785Z","times_seen":61,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/currencies/ethereum.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:26.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/currencies/ethereum.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:26 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:22 GMT\r\nETag: \"20f-6450ede516980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 527\r\nKeep-Alive: timeout=5, max=90\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":527,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d9de9631ae61d9fbfd0e11ed4bdc50d","sha1":"59e92c12ec15c1a24fa7dbe6e4b128d38e838465","sha256":"b559e4b751eddf50d57591cd691691ed6e462cff0218ab96fe65282421141e9b","sha512":"7e3f06a021ecd8978d5bb5e536647c73806144e9e499af3fe52fce96de6a8b8a4ccac2a0a159c4454ea4d4a20ac33667a5314c6ba79e633eb23dae7fbc3c6587","ssdeep":"","tlshash":"0bf02ee5d29c28d5dca52386df7c6cc3750ef0fd26600ad160002675e638bbb5c4ba84","first_seen":"2025-06-25T05:34:40.87452Z","last_seen":"2026-06-03T08:33:36.18642Z","times_seen":59,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/currencies/usd-coin.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:26.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/currencies/usd-coin.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:26 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:22 GMT\r\nETag: \"607-6450ede516980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1543\r\nKeep-Alive: timeout=5, max=87\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1543,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3a9972d8487992dd44eb9f57ba26751f","sha1":"2484fda62137548180efcd8a8ebe30f2a58d7ec0","sha256":"e698d75f7d6033be4874a8ea19547441845ad2e615da8cbea03f0de1a7e87b90","sha512":"3f4a2874bb0c8086a5b5d3751a870a8370ba6654fdc1fbb2c1ee2397af98cb31d195b7d439ee9028c163fe8833bc263027821216f8b10391f332d3ea7c0ddbe9","ssdeep":"","tlshash":"4e31f191733013ccabcb9705dfbca4d1720868b6226688d8d97f175ca04ae8dbb25924","first_seen":"2025-06-25T05:34:40.921946Z","last_seen":"2026-06-03T08:33:36.188003Z","times_seen":59,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/support/help-center.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/support/help-center.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:24 GMT\r\nETag: \"3f5-6450ede6fee00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1013\r\nKeep-Alive: timeout=5, max=84\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1013,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"acbad038f70ac2eda9053d0173386f6b","sha1":"66f1df1794537bacabbaedd3ddd2ed86f93c1ce4","sha256":"177789f15ef2c941c15d2a514f4b455f22a56fd485bb2f530dbf65c7b2eff7f0","sha512":"3fc719c800e0b8afd792e0652d39e5d9a2da9428ea4655c73a554ffe0659bda009bef460920fcf898187d82fad99594f090539c06cb96c1e2511adb61c47ac10","ssdeep":"","tlshash":"8f1159e1526c03bce5d2978887382055779eb07e39a204f15aed4b2c60464a9f6a7e5c","first_seen":"2025-06-25T05:34:40.909745Z","last_seen":"2026-05-01T06:59:22.793554Z","times_seen":55,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/fonts/02f08a63db46edcb42d1.woff","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /fonts/02f08a63db46edcb42d1.woff HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/dist/index-page.58d0c8c1c98cc9259e2d.16.5.15.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Mon, 24 Nov 2025 23:42:44 GMT\r\nETag: \"3fe8-6445fb83f4500\"\r\nAccept-Ranges: bytes\r\nContent-Length: 16360\r\nKeep-Alive: timeout=5, max=80\r\nConnection: Keep-Alive\r\nContent-Type: font/woff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":16360,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 16360, version 1.1","md5":"e91eb79be9c4514e9055319e645ac177","sha1":"cb8b8b0820c5739391564e0140fcd6e355999d97","sha256":"f96d504a44ebe06ffdf1e28213f9330872c2c2c72b2905381f835f15b8086152","sha512":"f2b94793080040880d4ebabb5b1a6db9e6b889af455adb01c9f714a792112de4c4c634a81501ef37bbc66153a0a712c21adcc137201d1b638b04ad6a0591bd92","ssdeep":"384:ItWN8TJGEvk6oAJJzfB9gpMsDG1kl6k/rAfPeAamV47HqeJSuYFxuyXi:lUJlvk6TJZfHgXGzk+y647HqmSBW","tlshash":"0072c06e3724e662d7ce0d369f5fb3c2ebecb902bc06f58150d4b80336de1266950a14","first_seen":"2023-10-31T15:36:33Z","last_seen":"2026-06-03T08:33:36.157615Z","times_seen":109,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/data/currencies/losers/optimized","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /data/currencies/losers/optimized HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://change-noww.click/\r\nContent-Type: application/json\r\nsentry-trace: 4c7b2a59036444ca8576d1c73287e8c5-8bb0d5bdc366bf4c-0\r\nbaggage: sentry-environment=production,sentry-public_key=caf1b4c4d55fac9fb827b0fc4c20f664,sentry-trace_id=4c7b2a59036444ca8576d1c73287e8c5,sentry-sampled=false,sentry-sample_rand=0.7974678075204517,sentry-sample_rate=0\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Length: 5735\r\nKeep-Alive: timeout=5, max=79\r\nConnection: Keep-Alive\r\nContent-Type: application/json; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5735,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c17e49cd2ab537afd1ce10c75f051654","sha1":"2e7bb48ccfc79ba5d601498a65cef29f7c0d6250","sha256":"a1fba040fc73a0694d04f7e596dc2800b17d1a615c324bd8bcea738422321240","sha512":"252f423893a3e6cf239c94268545e278e191b4a7814c6e6ec7dedaac4a18c2756f96946600bcc22ec90687a618727ec2e5cb92a6f34a56a1075364083782a5c2","ssdeep":"96:4yTsy465MwvyQnebMZD0oPJo29To2pCoilPfAPje98eP8pQKdkSBHL:7tlKY0aTtTpIqLizPyTki","tlshash":"6dc12557d6040cf4f05c8a799dbea1461688b1070d9b3d4673ac24cc9f2da0f26f6eae","first_seen":"2026-02-13T23:01:05.989825Z","last_seen":"2026-02-13T23:03:22.234076Z","times_seen":3,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/trustbox-data/53aa8807dec7e10d38f59f32?businessUnitId=59d561c60000ff0005acd2a4\u0026locale=en-US","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"3.164.230.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?businessunitId=59d561c60000ff0005acd2a4\u0026templateId=53aa8807dec7e10d38f59f32#locale=en-US\u0026styleHeight=150px\u0026styleWidth=100%25\u0026theme=dark","date":"2026-02-13T23:00:27.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustpilot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 01 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:AC:04:00:1B:E6:03:65:36:95:67:5E:7F:21:62:B2:19:D0:0A:61","sha256":"C0:F0:3C:56:A6:A5:C3:53:B8:0A:28:8E:01:CC:3D:09:B5:5C:FC:55:FE:7F:8C:10:B8:E1:1F:7F:C6:56:F4:80"}}},"request":{"raw":"GET /trustbox-data/53aa8807dec7e10d38f59f32?businessUnitId=59d561c60000ff0005acd2a4\u0026locale=en-US HTTP/1.1\r\nHost: widget.trustpilot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?businessunitId=59d561c60000ff0005acd2a4\u0026templateId=53aa8807dec7e10d38f59f32\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nserver: Kestrel\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ndate: Fri, 13 Feb 2026 22:49:14 GMT\r\ncache-control: public,max-age=1800\r\netag: \"f1e4cb6d0b2ab772d609f013abf04f3c\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 38f2e8dfe4a6e6a8f81d75aed457ec00.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: QmN0UVZxxEwTgv27fU8X8tpqmt12lOo_x1XhJXt4UeIYwUCXFpYXVQ==\r\nage: 676\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1040,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0e96220d68f4c7e09db76faac4e06eb8","sha1":"e9263656d8d68e20bddd8e5d17799b5c2a1a0503","sha256":"abbfe4465548927dd46e4a607940af40fb0eb3f5c2860bfb6e34efef78ff1009","sha512":"768c4ef84b370723b413ca7c06ef4ffc9a64f1063807c479ce5e92d4df2fb1f088485be099b2b8c58b79f1d3016d1333849b4925f59fe331434637480bd0b5ef","ssdeep":"","tlshash":"45110ee5041813b65fcbdec5bc0263f6821fc6e6a892695fba0d9cbcc263a48304c604","first_seen":"2026-02-13T13:14:37.801538Z","last_seen":"2026-02-14T08:45:07.041036Z","times_seen":8,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/3132.3d187f27d108aefc5d3c.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/3132.3d187f27d108aefc5d3c.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:14 GMT\r\nETag: \"174dc-6450eddd75780-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 27968\r\nKeep-Alive: timeout=5, max=66\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":95452,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65522), with no line terminators","md5":"eb6f5748754bff437592c73b34a32251","sha1":"8d3c787161176e625614424b75be0d44ea4db94e","sha256":"94ac16b9bbfd30071238a6a53bdab916dbf57a0b3365dab04c4837387e42d472","sha512":"de67fe9076fb68149c4aafc692651741a3f5d3d7e7e03e7130cb8be4e303ceab07a82b25249c3663d6e7e0c1f386a569d88db9683878afd9a171ddcfd8f07bcb","ssdeep":"1536:/whneNODEItBOUHp3Px+c3rN6D8u/qg4SWEERdtfzKKpFCPthCaAW+E8LNCbk162:WHDLtZTnxtfHpBB36tbw","tlshash":"db933b21b058dfce85aa425fb8bd4904f1983e5ce63a4ee0f2f4dc6db640a443d3d6a5","first_seen":"2025-12-26T02:09:57.38008Z","last_seen":"2026-04-12T23:00:03.915077Z","times_seen":20,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/7703217b4504c9366d6a.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/7703217b4504c9366d6a.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/dist/index-page.58d0c8c1c98cc9259e2d.16.5.15.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 25 Nov 2025 02:06:58 GMT\r\nETag: \"1c05e-64461bc10d480\"\r\nAccept-Ranges: bytes\r\nContent-Length: 114782\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":114782,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d8e7e91affdc54b7116d2a7d2c18bcab","sha1":"1bfe645a0edbe08d984193653b5f82c2cf0508e0","sha256":"030bbc465d2ec1f7913338e73da04be29a0502471110d8c9d75414d431fa874c","sha512":"70e94c8151ab88eecd7256eb194c9dcc7f867bef46af0c05e31298d8e360cf156a224edf1ce74cbf7b32ad4f5c1ce96ec77ca1d86b7b974df8c3daa11dad2d27","ssdeep":"1536:wesqVowIB7djceyWZcuMEh5ZmH8Wmmd/3RWvr6MV8nWmK1UijZYti7n1dSUfgnLa:NdLP+c2mRsWwum","tlshash":"cab3e6c65720e2dcd5ced85eef2699a4611fa0eab5f786c086dfcb09944b8c6fd04c50","first_seen":"2025-06-25T05:34:40.89265Z","last_seen":"2026-06-03T08:33:36.153439Z","times_seen":60,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":26,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/mobile-qr.74be0e3ab5c10e1c8605.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/mobile-qr.74be0e3ab5c10e1c8605.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:39:58 GMT\r\nETag: \"2c499-6450edce33380-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=91\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":181401,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65440)","md5":"13d407fdb4dd9012ba8e5861cd0154fc","sha1":"d812bacb733a662e4d1f22771746cedf5cc53621","sha256":"f44010d28a56b0a8d75b120e0e1da428ac1b45f8c61c46c56bd2609eff601c39","sha512":"6a8dc5575f88f636d278b413abdb0073462a2d3e4c6a6727446160e4a6f504e42e52a9ce71f4038c013955fece82a23b10d05823bfe5e2069da9277ecc292640","ssdeep":"3072:Y6wbho4v44rcN1tM1/a1/v1/lkP3L4j0XpaWWvltN810A:Y6wm4v4C+1tM1/a1/v1/+wz/N89","tlshash":"bd043ad83991f5626bf311b7106f1407b33d161b280c8550b212eddab8f959ea13bfae","first_seen":"2025-12-26T02:09:57.241251Z","last_seen":"2026-04-12T23:00:03.847597Z","times_seen":20,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":35,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/fonts/a12c527ee24dcc6ccb75.woff","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /fonts/a12c527ee24dcc6ccb75.woff HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/dist/index-page.58d0c8c1c98cc9259e2d.16.5.15.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Mon, 24 Nov 2025 23:43:48 GMT\r\nETag: \"3fc0-6445fbc0fd500\"\r\nAccept-Ranges: bytes\r\nContent-Length: 16320\r\nKeep-Alive: timeout=5, max=77\r\nConnection: Keep-Alive\r\nContent-Type: font/woff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":16320,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 16320, version 1.1","md5":"fcc5eb32902132c483f7689e6003e69a","sha1":"a186b86dea978e76a2b64de4dfa840ef00d2bb50","sha256":"01eb9de178ccb20ee4cefd20c0948c141a0400aee97747833d87865ec1398e99","sha512":"767531dcf901ed41347c49aefcb724234063833726ebe541bd8b843560468d07b1419b9b17f77d070e81a8821c973133f8f92c32be092f11873bb3dc92f5b8a1","ssdeep":"384:gpGl+A+yud1ORtW4mXg6SU0aFJ3YBYNHAJSuYFKMBokOG:gpm+Ldbw6SUfJcVSBMaR","tlshash":"cb72cff0df94e6ea83c41ab49dcfe9e6af8cb7d589025e1e28a21e44f79c1740853c11","first_seen":"2023-10-31T15:36:33Z","last_seen":"2026-06-03T08:33:36.146426Z","times_seen":108,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/7834.d555269c34a834c2d313.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/7834.d555269c34a834c2d313.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:12 GMT\r\nETag: \"1966-6450eddb8d300-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 2798\r\nKeep-Alive: timeout=5, max=69\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6502,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6401)","md5":"00c24622c65fbf79ce584d35d587f9f5","sha1":"ab0f3b23e069168a05406453e5d4f7090299a6d9","sha256":"cf28077da1025ad1faf85de4a91ac453396f14f519fed589f6f99a97653118a8","sha512":"a911ae496cfd003325fbbd38f498b047063ecb9b69e982bf35fe910d8900b4ac877dd1cceb2602ca643ccb93a0575cde5bd695da44913ad59052da1a719e291d","ssdeep":"192:ZqRIMFUQhktvVBAL/ZAPQ45VH5qAEPvvp9:sRIcHMkMH5TE3L","tlshash":"fbd1b3c431c6b89946ab60a2423f104af1bf9a246c4da150e612e5e1bc38c6bc373f7d","first_seen":"2025-12-26T02:09:57.265994Z","last_seen":"2026-04-12T23:00:03.933837Z","times_seen":20,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/7281.b975b959852e0e6e79a8.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/7281.b975b959852e0e6e79a8.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:12 GMT\r\nETag: \"1245b-6450eddb8d300-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 21076\r\nKeep-Alive: timeout=5, max=68\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":74843,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65445)","md5":"0126f0cd876a991fb1fbb6565c0ff3b0","sha1":"26f2d46b2ca3e84c27f478e239b98b41e1ded90e","sha256":"b85372925b2435e5efd284a115f6eeeae9b8ef5a9eca4209607a38ac8b1b3b20","sha512":"2679e05e83c027286ad11c90031005c40e887cbd6fd9aee1b86c95864830d70792666bd1d7be4f930dfb4cdb3dc90013bcbeb0b9bee139b1b888cbf689b104d9","ssdeep":"1536:TgVQ6i+NYeRsAZzVpLOHR4vo40hbx6IT56SmtT:UVQtUYeRsqQF5A","tlshash":"6f73d7c9f6d3b01a5393a2f9447f240bb33e6818981d4424fb69e9d5ac7940d923bf78","first_seen":"2025-12-26T02:09:57.31304Z","last_seen":"2026-04-12T23:00:03.926738Z","times_seen":20,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/6495.6499a58e3c23950d8614.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/6495.6499a58e3c23950d8614.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:14 GMT\r\nETag: \"3a9e-6450eddd75780-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 5823\r\nKeep-Alive: timeout=5, max=63\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":15006,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14913)","md5":"582b41459099393392cccc4a389319f1","sha1":"2d338b5d9d95ea69e3e1f63bf4d63be6827ad3f6","sha256":"f2bdbd2267131bc97954bd14113973bfae9c26e8b726fdf496dfef712ac5880e","sha512":"e6c3d294436d4fae30234703e18bb7fa9e2604d1d78e3b4f97834f04d3667d811b94436dcf3ff3583039addecce15ca6f9f4c18072714c6208da0bee0fbab0f7","ssdeep":"384:SbG38FJscRpiRgCqDwtIRYM/ruCNVNprP6zx/x3n:SbG38FJscjsgCqDwtIRfzuCjNJyzx/xX","tlshash":"cf62facdb0d2f4e403e765a5c43f0506f23a681eb6098490e764ece1b8b594e623af7d","first_seen":"2025-12-26T02:09:57.156428Z","last_seen":"2026-04-12T23:00:03.938011Z","times_seen":20,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":129,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/_icons/mastercard.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /_icons/mastercard.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:39:58 GMT\r\nETag: \"31f-6450edce33380\"\r\nAccept-Ranges: bytes\r\nContent-Length: 799\r\nKeep-Alive: timeout=5, max=91\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":799,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7e5c083c6e1719bf24ce88acacdbec50","sha1":"2077b3189ee23739fd7886784dde04446d5f70e5","sha256":"bb1ab88f18d9a646efe4f098816532f459dcb57c8a1151d8eb21d935cf01119b","sha512":"6904b8adcb562e23a2c6b8bdfd6681b4347fb9a0c1983ec6413ad1954686f454e42b28142cf587f43eb0a35171151b2494d38dd1837e148c5e7913970e0b87cf","ssdeep":"","tlshash":"2901f198f02de100d612cff0128fb2a561af28f257548ede36d53d453d61e5f483c494","first_seen":"2025-06-25T05:34:40.887544Z","last_seen":"2026-04-26T00:40:47.230419Z","times_seen":54,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/currencies/trump.png","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:26.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/currencies/trump.png HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:22 GMT\r\nETag: \"b4e-6450ede516980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 2894\r\nKeep-Alive: timeout=5, max=86\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2894,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 60, 8-bit colormap, non-interlaced","md5":"f048d092280fea2b01a602b32e17e8e2","sha1":"161c729e43621243e99a52510344c720525a22ee","sha256":"cc1201fb47106358aafbccc0c67b15512b1a53790afaf83ddcad8dbcb2312084","sha512":"749b844fbc70489699bd9ea73ee03b5c7f54965dda0846fbb520c95ef1006a796ac0e3399481268da7d17d2e4424a4b6b85f57db92ac8c0528197be60d383324","ssdeep":"","tlshash":"56517d838992cea4b0740d40f14e625388e078ce9b077f1694eacd966e138507b1de01","first_seen":"2025-12-26T02:09:57.269708Z","last_seen":"2026-04-12T23:00:03.935773Z","times_seen":20,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/currencies/pulse.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/currencies/pulse.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:22 GMT\r\nETag: \"a5d-6450ede516980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 2653\r\nKeep-Alive: timeout=5, max=87\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2653,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"066fde613123a2feb81390bc6b2fd1ea","sha1":"bc678081d1b29388dc7ee499a3487766b0e4123f","sha256":"f6034e231f2a68c0c215bab076273da81ab96fe4b72cb42f3911c6d120bbd242","sha512":"07fd70813104382770bb50ee7519eeaf980cca5a5ffdf77a30f99c7afe75b5a12f36e3ed355766cad82b92d48e4eea6d2944d9e6ddcf8d57ba71d459a777ba0f","ssdeep":"","tlshash":"f15193db4610678adcc9c06cef5edc80811a60ae9c52e2c08caf974e345f6c2fe097a0","first_seen":"2025-06-25T05:34:40.904671Z","last_seen":"2026-06-03T08:33:36.157051Z","times_seen":57,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/support/status-page.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/support/status-page.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:24 GMT\r\nETag: \"556-6450ede6fee00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1366\r\nKeep-Alive: timeout=5, max=78\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1366,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"adbc89b6b90b4f67a944a9780bc70903","sha1":"fd66079177cd5ff952545eebfcdfc86ebf077a54","sha256":"633eccad81c8825ca912ea6cadd6eafed5e1f5877b076cf8e90b693ceff4ac15","sha512":"b56d1a28a6eb16b3108265b22b4c7d7a052c753b876981584d804ce5987bbb6ecf194d3ae2887961da9a23b780401eb3e2d0dd5277c6a22cc76e1b4fb7672410","ssdeep":"","tlshash":"43219bc53b9c82ad5a52528ac72598a0730c5478b77b90d17ecffb6c1009c41fb67c34","first_seen":"2025-06-25T05:34:40.88042Z","last_seen":"2026-05-01T06:59:22.652691Z","times_seen":55,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/fonts/285509d0eb9b5f31386c.woff","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /fonts/285509d0eb9b5f31386c.woff HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/dist/index-page.58d0c8c1c98cc9259e2d.16.5.15.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Mon, 24 Nov 2025 23:39:18 GMT\r\nETag: \"40ac-6445fabf7f580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 16556\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: font/woff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":16556,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 16556, version 1.1","md5":"7cdd05aee3e82500e7f413ccbea310f1","sha1":"d68b4a98ff2e32b5c8948327256d76e872238ab6","sha256":"49ef7420b801f22f81bd332e5e996edf7ba81fac3fb04205aa2f83629e7e8f86","sha512":"857a95518cc28868a2cd279a62e04d585f27aa561fa1f157667b450672c9612bf5f74662ac056f60d8994dbb238946f7dbde6056d3c5cff94c9d46bb44705685","ssdeep":"384:I5FRfoOukAm6lZRu2LzmHmR755+NZCYezpoFIf1biFvQNQQ7iO:oDfoOukAm6puqJQ7WzplN2V4L","tlshash":"0f72e05aa9c7d02ac3b07770fbc62f5a5b3b14e7f668129bb351e465ae09c154c00712","first_seen":"2024-10-04T11:14:04.680104Z","last_seen":"2026-06-03T08:33:36.166679Z","times_seen":93,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/stats/TrustboxImpression?locale=en-US\u0026styleHeight=150px\u0026styleWidth=100%25\u0026theme=dark\u0026url=https%3A%2F%2Fchange-noww.click%2F\u0026referrer=\u0026userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=en-US\u0026platform=Win32\u0026nosettings=1\u0026businessUnitId=59d561c60000ff0005acd2a4\u0026widgetId=53aa8807dec7e10d38f59f32","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"3.164.230.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?businessunitId=59d561c60000ff0005acd2a4\u0026templateId=53aa8807dec7e10d38f59f32#locale=en-US\u0026styleHeight=150px\u0026styleWidth=100%25\u0026theme=dark","date":"2026-02-13T23:00:27.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustpilot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 01 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:AC:04:00:1B:E6:03:65:36:95:67:5E:7F:21:62:B2:19:D0:0A:61","sha256":"C0:F0:3C:56:A6:A5:C3:53:B8:0A:28:8E:01:CC:3D:09:B5:5C:FC:55:FE:7F:8C:10:B8:E1:1F:7F:C6:56:F4:80"}}},"request":{"raw":"GET /stats/TrustboxImpression?locale=en-US\u0026styleHeight=150px\u0026styleWidth=100%25\u0026theme=dark\u0026url=https%3A%2F%2Fchange-noww.click%2F\u0026referrer=\u0026userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=en-US\u0026platform=Win32\u0026nosettings=1\u0026businessUnitId=59d561c60000ff0005acd2a4\u0026widgetId=53aa8807dec7e10d38f59f32 HTTP/1.1\r\nHost: widget.trustpilot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.trustpilot.com/trustboxes/53aa8807dec7e10d38f59f32/index.html?businessunitId=59d561c60000ff0005acd2a4\u0026templateId=53aa8807dec7e10d38f59f32\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 13 Feb 2026 23:00:27 GMT\r\nstrict-transport-security: max-age=31536000\r\ncache-control: no-store,no-cache\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 38f2e8dfe4a6e6a8f81d75aed457ec00.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: 7WsrdbYBdTo9aiKQFU6piG5uO-lFdmr4bznma41c-euFkTccJlHi1Q==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T23:09:45.281132Z","times_seen":16194959,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/5664.3bb7836d75e4fb33eb51.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/5664.3bb7836d75e4fb33eb51.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:12 GMT\r\nETag: \"63fb8-6450eddb8d300-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=75\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":409528,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6c8534c13bea20f9378963127b51a19c","sha1":"130baafb8c1e9ac981d7ef75a0a44351613bcd98","sha256":"e32575e2dbaab6bbd2d2911a38b0199d86fb093ff498efc19a62c9bd1a7522fb","sha512":"738bde89ac92f1db132e7fd12e76bba9a80f1b59b6a5621872a4a658bf01aa7f24d4a67550d3199a1b0323954abdbd87807e51b51bbd0c95430c2f63863b8d89","ssdeep":"6144:JGFYYl1iq3uIbzu+B79Rcf/QZgZR3PEh3PX2nCU0qD:JGFYYlMWjbDcf/6gZRfEh3PGnX3","tlshash":"0c94d6cdb6d6b46143e320b5403fa00bf33b6968a41d9020f665d9e6bc7954ea237f2d","first_seen":"2025-12-22T03:32:11.440727Z","last_seen":"2026-04-12T23:00:03.832989Z","times_seen":23,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/7664.f508ef8e2fc2909b0bad.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/7664.f508ef8e2fc2909b0bad.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:39:58 GMT\r\nETag: \"9fb-6450edce33380-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 940\r\nKeep-Alive: timeout=5, max=76\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2555,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2555), with no line terminators","md5":"04a7ce9df44018065f7f2033a2443261","sha1":"e98bffc267e206953f76107ae590843dfb95d79c","sha256":"810bf47d7f87ea27ea701f44ddfadc499e22f83089eca7ed4f2c3ee19dd4d52e","sha512":"373256dd243d2135a136cf842b27cb70be20f85afc5f37340dff97fd56bd3bd214c3c5d6ee2341f4e80749665dd30934396914f7d9d105fc4aea4d1c1df03a58","ssdeep":"","tlshash":"0f5145c5128a20d544b149d4ab776fea052060b0289a47d29138cfa32e639d177fb8fd","first_seen":"2025-12-26T02:09:57.238254Z","last_seen":"2026-04-12T23:00:04.00063Z","times_seen":20,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/f8f35b771d96ff153613.png","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/f8f35b771d96ff153613.png HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/dist/index-page.58d0c8c1c98cc9259e2d.16.5.15.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 25 Nov 2025 02:06:56 GMT\r\nETag: \"471c-64461bbf25000\"\r\nAccept-Ranges: bytes\r\nContent-Length: 18204\r\nKeep-Alive: timeout=5, max=89\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":18204,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1255 x 626, 8-bit colormap, non-interlaced","md5":"f3f9a673f22339add8a1376c0502715f","sha1":"4994cab6efb50a988d2802c4d54e537cf6aaaa3a","sha256":"f9bdb39ece72e25423c18a04f153812e1e8a96dae0460783cd611cf53980be3e","sha512":"54a64daaaa56a1c6b4a8d24b352567ffd056d342c8db420a1c4b88bac618beb173dae149408fea05a367afd19b6fe7dfc7d25d14fcd9238d5ac897672dc36a86","ssdeep":"384:02JhCwQ0066sC7/++BgQlG4r96iLdPDCiB+U/o/uQTCrBd:02bCwxJe72+blG4BFZnAU/o/uQT+Bd","tlshash":"c182bf23796fd8c6dc0f27b654cd02924b6f76d4c431a7e03760b0adb9489422bf186b","first_seen":"2025-07-08T14:16:34.298371Z","last_seen":"2026-04-12T23:00:03.949404Z","times_seen":23,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/data/currencies/all/optimized","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /data/currencies/all/optimized HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://change-noww.click/\r\nContent-Type: application/json\r\nsentry-trace: 4c7b2a59036444ca8576d1c73287e8c5-9213ac177302933c-0\r\nbaggage: sentry-environment=production,sentry-public_key=caf1b4c4d55fac9fb827b0fc4c20f664,sentry-trace_id=4c7b2a59036444ca8576d1c73287e8c5,sentry-sampled=false,sentry-sample_rand=0.7974678075204517,sentry-sample_rate=0\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nKeep-Alive: timeout=5, max=79\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: application/json; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":386866,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bdfa81d179b2d6d919261ee2bc7033f3","sha1":"2560199ae69f31a6545410af8ae30f678de4a0d5","sha256":"eb11dfe7bd3bc2dd3ea8e94e63995ce0e7daf56af396d812b6f2942b9f75ba51","sha512":"b2c04232b2b93d0b900966a81399dca5c8e5b5ac37705fe97569c34e4aa515f357520d0dd6e819fcfed9b34049bad153651a224a53f7389faa941e495353b526","ssdeep":"3072:jzKYjA0UkJIgu9rvIyJ5oTtGogPBpuarx3weH4c7mzWcspL62ien5:u0UkJIgu9rvIyJ5oTtGogPBpuarx3wq","tlshash":"5c845b53c5050ca8b12c89789cbe6246134cb1174d9b3d1ab36c358d6f2ea1f36f6e9e","first_seen":"2026-02-13T23:01:06.000853Z","last_seen":"2026-02-13T23:03:22.259999Z","times_seen":3,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/7244.d0959743a75bec9d86e4.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/7244.d0959743a75bec9d86e4.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:12 GMT\r\nETag: \"14da-6450eddb8d300-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 2601\r\nKeep-Alive: timeout=5, max=73\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5338,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5336), with no line terminators","md5":"d6aa1f1d004929abd39dc4cd50f6ddcb","sha1":"b910bb9a7c8ef00831e7ebd61d541157d27aebf1","sha256":"9024ff840268b9cdb189f7d3a56a4abafae9a9e1f45a6e2be9642315d0ddd241","sha512":"ad58f0c584a4b4ff2adf590f2e32f8f05dab0d5f19bc1303113076e58279554e9bbf156b9a61ac392d2c674b54842c7f27ee1ef5ea2ff2d8f09f8207cd6b7aa2","ssdeep":"96:HOsIVnyFJF+0AbvcXUYu5XtV/a655+rAgHLywBmtsGCtEu6qjIf:uLUi0ycXUn5Xv/p55MAgHmwBFGCFIf","tlshash":"06b1a5d771d1bc594372b4a0951ff48ab3ef6900249cc968ff47e89838b8808d175a6d","first_seen":"2025-12-26T02:09:57.314399Z","last_seen":"2026-04-12T23:00:03.914124Z","times_seen":20,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/4762.e4c4068712bdee34ca53.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/4762.e4c4068712bdee34ca53.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:12 GMT\r\nETag: \"ba48-6450eddb8d300-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 16157\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":47688,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (47674), with no line terminators","md5":"dbc97dd872a5736b7ed436fa7a2a9545","sha1":"e108a668992847eff9397514e055dabece5e47ce","sha256":"0356266281518207fd40eaf8dbcb614a7a46ada062d62453c862e801b27426e3","sha512":"d43e1d1b7353da2ddf1417fb87ad8280e2e0ae150991452b93af0913e19acb92d24d60c22c2c9e331708265e21e9084c2f927615fb287a378ffbd72fd6716a5d","ssdeep":"768:/CtUIE1dCql4F5SDUx7xgZ4Rc5lb57XVSY2pq:cUb1dCqoi4Rc5lb57XVSY2pq","tlshash":"04233b4832967b1942a134d3dcfe1249d0bf9e28544df92dfa50d1f3bc6460aa1dbbb8","first_seen":"2025-06-25T05:34:40.96777Z","last_seen":"2026-04-12T23:00:03.967122Z","times_seen":50,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/7300.60bcec3c006554d04db9.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/7300.60bcec3c006554d04db9.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:14 GMT\r\nETag: \"5bf5-6450eddd75780-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 7493\r\nKeep-Alive: timeout=5, max=65\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":23541,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (23541), with no line terminators","md5":"9d3ce9d25f6980355df032136bd1c32d","sha1":"6fe16785836199df4ff34424ab823e0e2b3794a6","sha256":"e7533bf84711639759ed6067b57921470686558018d5a5a6eae2bcbf7fe2fb0d","sha512":"1f1b85c1e45f2377b5c0067a15eaa854bcaf2de23a2fdeed03fb3d8ea899aea7840c797fc9ec96005cf823a11c9569851440b3077b70381844f05e271027eaf5","ssdeep":"384:AnTgSAc8Zv1wM+HeZXoNP0QQkeRGIyfFMB2Azxuelj+gqtwN71olnWcmEJ3EKW5e:AnTgS/VHeZXomQQkeRGIUSB2Azxueljq","tlshash":"e6b207006168a6ec9bee51a7785c1c06f2d43f5cda394d65b2f8dc3d73c498861b837a","first_seen":"2025-12-26T02:09:57.300617Z","last_seen":"2026-04-12T23:00:03.931403Z","times_seen":20,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/3336.1dce8c85df4bba6178b4.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/3336.1dce8c85df4bba6178b4.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nCookie: landing_page=https://change-noww.click/; hide-language-adviser=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:22 GMT\r\nETag: \"d9d-6450ede516980-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1829\r\nKeep-Alive: timeout=5, max=61\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3485,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3485), with no line terminators","md5":"21a26d39e3dee032bced4273ee556b80","sha1":"76fe0a30c20f6cb6c3421908312c4be25a3d2609","sha256":"f88f69fe1259597daad4fcb73117aa1a40a424ef815c73f02e37e101fe4bfdb1","sha512":"cdde0cf6cd8c7e3a5bd3e2471a400ae43eaec540cab26d0720018df26c522003d19d5aec339448cfced4eba7a02ff8683098c373ee3a63aa7bdbdca655cca496","ssdeep":"","tlshash":"5771c651920471b48bab44e27cbb33e973b94e19790dc144be6c0c592c75ecf210e9bb","first_seen":"2025-12-26T02:09:57.15985Z","last_seen":"2026-04-12T23:00:03.990208Z","times_seen":20,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/fonts/9ceaa06cbe56757d8069.woff","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /fonts/9ceaa06cbe56757d8069.woff HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://change-noww.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Mon, 24 Nov 2025 23:41:38 GMT\r\nETag: \"3f80-6445fb4503080\"\r\nAccept-Ranges: bytes\r\nContent-Length: 16256\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: font/woff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16256,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 16256, version 1.1","md5":"04d1dcb5a48c3e8ce1c6e0714c486ed8","sha1":"5090f00729719c3f1382e7a5016381b3f051561e","sha256":"6ab5bd9c0b02853d78d9a0df6b30e29da4859bb42ec19b906c5f210d7dbe166a","sha512":"40c379b90a4076c20ccf934f42f3e1b434b7644a363c87ab22014de1e5fb41cbb3d481e047dd19b78bf6d21efe63236c61bdb06c568d99fcdf4b9970286d2c44","ssdeep":"384:QrWk76pERD6IikaSRPHDMUrPjI9YB8Kf1biFdk2r8qTI:xZp6DFl/QUrXB5N2gFq8","tlshash":"5772c042fb4526409699ee392ff20261df3d91962fc7c39bd093b513ac469f32cd6112","first_seen":"2023-10-31T15:36:33Z","last_seen":"2026-06-03T08:33:36.132253Z","times_seen":109,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":31,"dns":1,"connect":25,"send":0,"wait":26,"receive":25,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/index-page.58d0c8c1c98cc9259e2d.16.5.15.css","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/index-page.58d0c8c1c98cc9259e2d.16.5.15.css HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 17:02:42 GMT\r\nETag: \"4c34d-6450f2e303080-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 49723\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":312141,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20135)","md5":"e8cf4d8e99f47b9c5854e8f28db94ea6","sha1":"b254a4586e0f10293a89d274cfd1e5f2a65dd1b5","sha256":"a37949ec504865771b11a7c84f5f8533061e1dfc8dbff170dc3c4632a331b685","sha512":"174864ab88eefba539455bf46777055a8e57d526ceaa71007153809ae89185d5405ab77b46a5f28dd41550e36a8ce64d2a40d6e75b09c21bc74e2b2e63c7f6b1","ssdeep":"6144:ReICbm6KbW/5/abr2KuZ9VtKh03QclM6rCX28hhCnM:Re1zKbW/5/abr2KuZ9VNW","tlshash":"4164d8219614303af427d626fdd0ba897124c643e6234b7af7d5ba2ac6c71830767f8d","first_seen":"2025-12-26T02:09:57.229918Z","last_seen":"2026-04-12T23:00:03.986344Z","times_seen":22,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":32,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/inner-navigation/white-label-exchange-icon.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/inner-navigation/white-label-exchange-icon.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:22 GMT\r\nETag: \"858-6450ede516980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 2136\r\nKeep-Alive: timeout=5, max=82\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2136,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"06f4ccd8b7d3ab31b6c5d85294e5d613","sha1":"dbb5b14368361c584a035cc8ebc416f61a130faa","sha256":"bc62311aea363725ab18f1d79928a555a362503b16c38a750a8ff449351e3b3d","sha512":"28616965d9b36a37d69595be30a79336471a6a1e943fb81bd45ddbd6c5d3a1dbc5fdf4f0f74e166fa99e818c91f3b08f4d86db01fbf192f513776a5492baaf66","ssdeep":"","tlshash":"1c4133e86228d28cddc6951edf7cffd4670f60eeb47255c40aaf4758608bad1fa0a424","first_seen":"2025-06-25T05:34:40.882071Z","last_seen":"2026-05-01T06:59:22.821521Z","times_seen":57,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/4052.b15423e016d766c2a7c0.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/4052.b15423e016d766c2a7c0.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:12 GMT\r\nETag: \"8160-6450eddb8d300-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 9274\r\nKeep-Alive: timeout=5, max=77\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":33120,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (33120), with no line terminators, with escape sequences","md5":"2b7f17d0b7917dce084813990c5ba2d8","sha1":"2a9eac9a78dd3d2e04c4bc97da3d5437679a0eda","sha256":"2895cd65234dbbf0790a157eab08dae1a31384e919ba8738199576ea133c473f","sha512":"62d0372fba0b7c9065c43bebb3171001cc3b9be826ac500ebd833928236e43763c0f3363f620b60d16a677f0b67a1e02cecb5cdc18e0e6672946827c5bef84fc","ssdeep":"384:5TxPvzxPvv+7RwV6T71u5oQM7xPvuoYMwOw8gbRFH346JtA1MgAs:5/lW1dHw1jzPBo","tlshash":"6fe28689b991f07297a221e4412f040bf13d097994dda0e0e7a4ddf16cfa84f967af1e","first_seen":"2025-12-22T03:32:11.406664Z","last_seen":"2026-04-12T23:00:03.831673Z","times_seen":23,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/fonts/9ca831153ca66ca187ac.woff","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /fonts/9ca831153ca66ca187ac.woff HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://change-noww.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Mon, 24 Nov 2025 23:43:18 GMT\r\nETag: \"2578-6445fba461180\"\r\nAccept-Ranges: bytes\r\nContent-Length: 9592\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: font/woff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":9592,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 9592, version 1.1","md5":"85878dbd1629ea2d5a3745e49f7f7925","sha1":"397ba63ca786ad047b549e34f798564669bbc68a","sha256":"b90bdc3ab783f95cce69d5973d8b8ffcf2e6701bd8ba33d0042affd4058294e2","sha512":"d50ac7bbdcccc5fa284608803ef240186417c3308afcde7312bd6c09746409d7b14cabf38d68657c5db7abb2a9513d1437d1fc8090c03af805a6d157c15a798f","ssdeep":"192:BgLp6b6ae2EkSgMhaPxjOmKjUgULaUcrMKWMV003VmZNN:BgL3a/ogtOmgUmxOEs","tlshash":"d512bee30500d263c984acbac7e7d40e973cd8de8c1e30495b440860e9e1289deaf4af","first_seen":"2025-12-22T03:32:11.468115Z","last_seen":"2026-05-01T06:59:22.728428Z","times_seen":36,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":29,"dns":1,"connect":28,"send":0,"wait":25,"receive":1,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/index/mobile-app-for-android.webp","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/index/mobile-app-for-android.webp HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Thu, 18 Dec 2025 00:44:44 GMT\r\nETag: \"1ecc-6462f44539700\"\r\nAccept-Ranges: bytes\r\nContent-Length: 7884\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":7884,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9e67ffe14d6352ca22af3c5caa02c0d9","sha1":"3a850c730856afeab2d16a73f0058f2261d2a7c7","sha256":"ce21341b85d3cb43368c156c3aed7f080395018c432b9c5b2a2cc96dd3185bc5","sha512":"7d30b0844add11c4b10a9c500adae4cb49f6f1c5f6c904845c2b47ccfd273bad3f9f6fb04804fe22504438cf0282baba40d051efaa2d89a448110415f87a73eb","ssdeep":"192:5vjcKwSscC7dSFYHaiYD4cuqB/sN+uFF9Oub+8K3lLO:JjteYSqB/WDFXMl6","tlshash":"b1f1bf201b6afd861d5c7afce357f459d228543ac22e09d9d4cac814c0728cd6b92758","first_seen":"2024-10-04T11:14:04.290835Z","last_seen":"2026-04-26T00:40:47.33255Z","times_seen":57,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Mon, 24 Nov 2025 23:35:12 GMT\r\nETag: \"4d7-6445f9d4e4c00-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 656\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-06T23:07:52.10878Z","times_seen":362464,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/now-products/address.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/now-products/address.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:24 GMT\r\nETag: \"5d1-6450ede6fee00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1489\r\nKeep-Alive: timeout=5, max=85\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1489,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c12c312e27b78c1947f2f98727a89b7d","sha1":"569cbb354f0f814a5815dad1ea3ee1d22fd03485","sha256":"8a33515d5fe87e9b63849661c5898974fe7161b391e5f6ff1a26194b7cae26b5","sha512":"bcd99e7bfb22aaeeddc9d063b1dc19ca725a6da1d7b2ba68432156d3c44c5f3a74969b2bb37410bdca40c82f5a0dd60fdb21a9093ce7cc660f6a011aa3617b24","ssdeep":"","tlshash":"4a31a26b530cd66e8d679277a7ab948ed33ab9c0f429899091bd7d7030c3802f047804","first_seen":"2025-06-25T05:34:40.950583Z","last_seen":"2026-05-01T06:59:22.791059Z","times_seen":57,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/9191.7bde93af8c7ba310e06b.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/9191.7bde93af8c7ba310e06b.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:00 GMT\r\nETag: \"3525-6450edd01b800-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 4529\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":13605,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13603), with no line terminators","md5":"5966a2671700975ed71fd87f3b96ad00","sha1":"720c0bb4236294db786dd46d4d00fdc2f618c0a9","sha256":"4ad4428c5bbc23485e67245c7c04eb331f511c6e2d13e00f28ab2c753f1969d1","sha512":"0884d610a8b977083dff0664ced045bef5fd715419c752b8514bff2c22e50c0d965e6ff39d264053524f9bf4bdb65e88fa2c097ccfef63100dae4e7cbe593d94","ssdeep":"384:zoGv13wzagoYeogAxj5Dv/E3PjgUqbjWBFx7btf8C+dCrwZQnf7LjchqpeEacdBH:zoGv13wzagoYeojxj5Dv/E3PjgUqbjQZ","tlshash":"a552a844f479ddad066b488bac78ca44f254361cf73e88e0e2f0ed6e60778853d356a9","first_seen":"2025-12-26T02:09:57.317087Z","last_seen":"2026-04-12T23:00:03.984263Z","times_seen":20,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/93fa698222a0b551915d.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/93fa698222a0b551915d.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/dist/index-page.58d0c8c1c98cc9259e2d.16.5.15.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:39:58 GMT\r\nETag: \"107-6450edce33380\"\r\nAccept-Ranges: bytes\r\nContent-Length: 263\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":263,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"20e67bb40dad0ec9cbd639d8e252f2c3","sha1":"4461c5fccee566c1ce5d02c598d6b7ab62890d6f","sha256":"133172665f7c8768401014358a7ed364081bc326f780c013ee9173bfa86ae885","sha512":"d4a5530a9f3b5dbab7b42d7509afcd628937a65420665ae0f31a97bc4981a33ef09418fd5a3ca2950a9595c524975d4299aa3debdb476a4e218a5832c5e6fb86","ssdeep":"","tlshash":"b8d097d9f4cc404c8c10039ae63c8822170d80bb320b44d4fd4e2381f0c8ecae95f234","first_seen":"2025-06-25T05:34:40.957801Z","last_seen":"2026-06-03T08:33:36.279469Z","times_seen":61,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/sentry.34abc69f53c1df497569.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/sentry.34abc69f53c1df497569.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Mon, 01 Dec 2025 16:57:36 GMT\r\nETag: \"3f5b8-644e6e0444000-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":259512,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65443)","md5":"c57eb26f4a5b8021a246ca66c414aa9a","sha1":"74af004d5f54b0250d319f74365541c1d9f3c804","sha256":"b82691eb4c38f20ecaa6266e6bbd7c0060ceaba4324eb2c876f7f6c7d77c78a5","sha512":"53822324ef10676b4866ccaae4eeb14c726dab130555978f3a85d2687ebe851ef26bf5a7f1e66f7b8da7e2e2bec9ffe798c58dc27107c855e70d087f1fc60013","ssdeep":"3072:zSTpKc5jOE0L5mdIcyNEi1KZa2l0EuQVfGRY7ND8HY8f8NE32sOLRhPRDyJlKW3j:zPDFm9+P1KZYjoNR5LHPRDyJQikG","tlshash":"794407d971a2707253e705a5807b0202f7395a95300a81e4f67cedee2d7944bb2b6f3e","first_seen":"2025-12-26T02:09:57.289531Z","last_seen":"2026-04-12T23:00:03.836606Z","times_seen":20,"resource_available":true,"data":null}},"time_used":371,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":110,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/inner-navigation/telegram-bot-icon.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/inner-navigation/telegram-bot-icon.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:22 GMT\r\nETag: \"37e-6450ede516980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 894\r\nKeep-Alive: timeout=5, max=85\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":894,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2a855a23f74227f32295896734f7d84a","sha1":"3b3fda7994e916dc531dbf41926d7194d5bd1392","sha256":"99ba5212adf7ca25638f0e2fcd417253c2f0ed8c369c54bc4045476486e77359","sha512":"e56634f7d8eb06aedb2bfad8d6ebb2ee2b0769ccb961549d1356749fb2ff605be743d21fe50aec52bf5e9d6c5963b2e226b5957549d72e948cdfda6edb16d703","ssdeep":"","tlshash":"14117ad81538008cdbeb6b5b3f2551c4875e52b871bac981a94e8610c0a7d69ecc7285","first_seen":"2025-06-25T05:34:40.964792Z","last_seen":"2026-05-01T06:59:22.524441Z","times_seen":57,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/inner-navigation/all-products-icon.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/inner-navigation/all-products-icon.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:22 GMT\r\nETag: \"2f8-6450ede516980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 760\r\nKeep-Alive: timeout=5, max=81\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":760,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ee64ae75e1b3e1e9961d45fac8e39091","sha1":"76ed7d77183556338ec89f6ba8450a3fe866644c","sha256":"ba340ab1820856f9484b6444d57ceb597e8877d3f74d6c905ead1658137963c4","sha512":"96a6ac3e45948ca432d9bdd5f324326b02b79acbcef21ea5cf904709cd33d0870f376617f32ec7e9d52b53392ef545267982244636f7295b559c8dfd2e56f7ae","ssdeep":"","tlshash":"02019ca47218e5dc471b8a5d4f2c94e0034d81a9f7f90185abcc01793c429aff46b936","first_seen":"2025-06-25T05:34:40.919317Z","last_seen":"2026-06-03T08:33:36.250566Z","times_seen":57,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/google-play-new-small.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/google-play-new-small.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:56:02 GMT\r\nETag: \"2bc8-6450f1658ac80\"\r\nAccept-Ranges: bytes\r\nContent-Length: 11208\r\nKeep-Alive: timeout=5, max=73\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":11208,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"96c669635054882bd4a60bcb143872c0","sha1":"4630298441a2c2a2014600b61a492ffadb25d978","sha256":"cfde4b5ea41a702a4ca234e54c35fd6bf19c7cc3f88efb36ba5a6a97bc522aeb","sha512":"35c642fb3e30f70212623cf83e73362b43e70aebf2bb38eac80d1443b50e4ae76a088925dde9cd42edf3a1bd98b67e98a675e57b8850d4022e403ca8bb3b9bf4","ssdeep":"192:d3R06rhxWS7u2stRwjAFNfI6O6v13HWQeiWiepyZVWoRNOL6SLpYyo:d3RPrhxWS7u2+vv13WQejiep2WYNO2S2","tlshash":"5e32a69967ada2fdd504e3f9d600d070795a18eab2c0c259f39c9e4beba114d0e4adc3","first_seen":"2024-10-04T11:14:04.759264Z","last_seen":"2026-04-26T00:40:47.153463Z","times_seen":56,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/5807.30a5535d1d5e08fdb732.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/5807.30a5535d1d5e08fdb732.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:14 GMT\r\nETag: \"6de3-6450eddd75780-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 9193\r\nKeep-Alive: timeout=5, max=73\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":28131,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (28131), with no line terminators","md5":"3ded7a2e71829bbdc7f6676450315ef2","sha1":"c41b5d0c6a6b2d5444e1cf70465c39dc6163d881","sha256":"a0ab870a47da597f5d8982f415011bf0d11fa7d9ce54575fba7d0644ed36ba70","sha512":"aa0070236ab9bf934cea8e9a525152707a7ca38509b839f69ae5d3321c7ca29d20e76963b1e76c19da132746641f0f24485fd22a0c05e76b3df4bb9ddadcefdb","ssdeep":"768:oXkC4EQ1AvYM7maSOP0uSI2bk3kQNcRic7QHmgEKAQhO+5EeC:o0DAdO9","tlshash":"45c20a82a0b0a9bd45bd13df58d96818b1682f9cd5160cf0f2b8fecc71a59c894bde19","first_seen":"2025-12-26T02:09:57.308539Z","last_seen":"2026-04-12T23:00:03.916046Z","times_seen":20,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://change-noww.click/\r\nsentry-trace: 4c7b2a59036444ca8576d1c73287e8c5-ba8fd05c91e5b309-0\r\nbaggage: sentry-environment=production,sentry-public_key=caf1b4c4d55fac9fb827b0fc4c20f664,sentry-trace_id=4c7b2a59036444ca8576d1c73287e8c5,sentry-sampled=false,sentry-sample_rand=0.7974678075204517,sentry-sample_rate=0\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: landing_page=https://change-noww.click/; hide-language-adviser=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nKeep-Alive: timeout=5, max=62\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T23:09:45.281132Z","times_seen":16194959,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/mobile-menu/support/faq.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:27.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/mobile-menu/support/faq.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:27 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:24 GMT\r\nETag: \"3b5-6450ede6fee00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 949\r\nKeep-Alive: timeout=5, max=81\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":949,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d723ca250255131baf42be6a83211569","sha1":"0e45b2b61ec563fda54d2c35086cc0dc77eae240","sha256":"bf9ba27786165f8e84e0d2ad96580c90ffcca7e10a1577a1b28aaeafe28d2d82","sha512":"c9988b9d244d9d13e3b7f00bf0c3514014950fa3cc06d1b6cd553237a2372e4f10700d7cf68bc540dc80069d82f610175fab4510e24ace5f9b80d8427d04b40e","ssdeep":"","tlshash":"ce11dcf89a9c660c9a139a5e9f1d2259134ed0b8baf288e1588f8b30b10b085db87c14","first_seen":"2025-06-25T05:34:40.920021Z","last_seen":"2026-06-03T08:33:36.206892Z","times_seen":57,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/banners/referral-links-banner-v2.webp","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/banners/referral-links-banner-v2.webp HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 13728\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Trustpilot","description":"Trustpilot is a Danish consumer review website which provide embed stand-alone applications in your website to show your most recent reviews, TrustScore, and star ratings.","website":"https://business.trustpilot.com","common_platform_enumeration":"","icon":"Trustpilot.svg","categories":["Reviews"]},{"name":"Bootstrap:5","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":131749,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1222), with CRLF line terminators","md5":"036fe3f75d0ad4f8f74085e1c79767b4","sha1":"e8f768dd044fe06bd3518118a683f8e093bf4eeb","sha256":"eb1014ef88a7708d5382576c89a4b5fe06098e40ef25cd658be3fed23cf47860","sha512":"8633afefc77079d0679136cf4ad94d64bbdc2073709fcf17de00c44924d00ca5be8db96ca209ade620db3502eec783e44be5919d4b9c5d533252c29209f03135","ssdeep":"1536:kYfkeJr0QQAn4TWu14B0oBjR7BhCpB4a+luRc1:kY5Jr0QQA4TWulUayuy1","tlshash":"5ed3ffb0e0c9126b427391a1bb312b24f5ebd14bcb690f4172ee265f1fa3d518e2795c","first_seen":"2025-12-26T02:09:57.200771Z","last_seen":"2026-04-12T23:00:03.856783Z","times_seen":22,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":215,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/index/mobile-app-for-android_2x.webp","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/index/mobile-app-for-android_2x.webp HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Thu, 18 Dec 2025 00:45:00 GMT\r\nETag: \"427c-6462f4547bb00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 17020\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":17020,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b0a8864df63848d6a830b3f2c7f9aa68","sha1":"49789a7b54cc30448554a024b6d7690e182fa2ae","sha256":"0b44180046e13c438748c368a43bbe92906394d03763b69a36ee996bef52074d","sha512":"dda19820c0c0887afc8e72b704d372b31a2f023c0a080ed262bf41765d493a453b440952c151a55246c4cd91dae52e532d29c233ad633487810dca09f741902e","ssdeep":"384:i7WRzf8FCTfgNUUGD/kSGLB8sf5kwTrimKPQ2SV6Q3ZvF:xRLEakK/yuwTh6Q3RF","tlshash":"3772d0e7dde735ce2a22bc59641d4a771434037f286286fb63ce6e381ccc18e84241b9","first_seen":"2024-10-04T11:14:04.289435Z","last_seen":"2026-06-03T08:33:36.260731Z","times_seen":58,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":214,"dns":0,"connect":0,"send":0,"wait":30,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/header/flags/france.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/header/flags/france.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:56:30 GMT\r\nETag: \"dd-6450f1803eb80\"\r\nAccept-Ranges: bytes\r\nContent-Length: 221\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":221,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5d8fb75170f05b65c282efc1ead01094","sha1":"6754ddf2301acadfa1f9d1dd788992ba7d97c588","sha256":"acfbec7958234eebf6eafce852cd7535b547b5f04217dbffed7fd898e6a254c9","sha512":"010f66a8ff7d60dbeb05214939a82ecb6006b814b4bb19365b1dc861a5bed32ab9bc722ec995a8b8aa111e0b5621cea04ebfaa38bbd22fa87abdb6628b0003b3","ssdeep":"","tlshash":"c4d0a7a5704d5a404c0543b255ec7532203390de628d15d8754022147a40bdf7ca1edc","first_seen":"2025-12-22T03:32:11.518669Z","last_seen":"2026-04-12T23:00:03.909272Z","times_seen":26,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":167,"dns":1,"connect":103,"send":0,"wait":104,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/8064.3fa0ef151db5d9c04619.16.5.15.js","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:28.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/8064.3fa0ef151db5d9c04619.16.5.15.js HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:28 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:40:14 GMT\r\nETag: \"94a8-6450eddd75780-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 12301\r\nKeep-Alive: timeout=5, max=73\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":38056,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38054), with no line terminators","md5":"4ce44ef3f694237b60f60ff994e01ad1","sha1":"b985118d17c963c59e1a81301e097e95f4eb6fe2","sha256":"c25f02c3a2f158a03319678be28d216c123c0fa293e0a0e3fb69e94e4bd663f8","sha512":"1860244a0eedfdd89599a9362c9b31730db77cc8e0240f455fec8bf62f8af922eefa7fa2aeb879b1d82bcb3ffdc92572b7849b6cb831738fa18998037f5d76d7","ssdeep":"768:TssM7NAaUsth+Y9Kw37fi9H9IRyHIAJbQhQOt1dpqIAj2QYxWyC29795JjbKjpBb:T3SeYir35ugFy2LRp/w5nw","tlshash":"7603f980f0b5daad45de04c728bc5948f25c0e8ef93a8da5e2f4cc4d7629ec86539b64","first_seen":"2025-12-26T02:09:57.283868Z","last_seen":"2026-04-12T23:00:03.903354Z","times_seen":20,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":96,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/fonts/3044fd8e8933d7f91242.woff","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /fonts/3044fd8e8933d7f91242.woff HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://change-noww.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Mon, 24 Nov 2025 23:43:34 GMT\r\nETag: \"2c58-6445fbb3a3580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 11352\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: font/woff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11352,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 11352, version 1.1","md5":"14e05a085044bdf0f50ea7c4cb0b7037","sha1":"399f1d100b1f0bb53b04b06bb20310cedf9faeb2","sha256":"758113b07050b31a7b5519c397e06fb50d3987d3e70e270612d2a38b3cfb2ea6","sha512":"583b795d7dd7e57f6a65e30cb231a7e796f4f13e0ac255b8587172a806a0f0e7c9dba2cd98e73f35eb5cbb2bc5c261eea45715efc858171cadf54ffb62a66030","ssdeep":"192:qfT9txAA5KQi/kEJLwWnncZkDOQq/0mMdSKD1tQkBS8T9f0QwkYnJ1zm6wG48:qfLyAsQ097ntCBMbUKJtpBHT9fAJlma","tlshash":"7532af581f21885ec7dee87ee9f5db170e67b0423127975e280de300aeb7a4c478496b","first_seen":"2025-12-22T03:32:11.429387Z","last_seen":"2026-05-01T06:59:22.5361Z","times_seen":36,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":30,"dns":1,"connect":27,"send":0,"wait":30,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/cn-ui-kit/header/flags/english-us.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/cn-ui-kit/header/flags/english-us.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:56:24 GMT\r\nETag: \"58f-6450f17a85e00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1423\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1423,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dc4e9e8ad1159f704facaa40c9c09034","sha1":"794393b223f9070af5ecadba48146c0a7accd9c0","sha256":"e96d2115a026351521375eafb804870779ad9e56dfce0ef3ee2245786a5edf9a","sha512":"d3504afef10d54767efdfa06d65edec56a2a3a699028a04ece16998d11201dcb5d0a1d403aa33e574912f677b449debb907ec7f6c8ed656677d5ad51b45a7403","ssdeep":"","tlshash":"c521a0c2b197bbeda7060a19eb9254e4c4f2349f2a7be1b8cc6e75685b4c4d5bc31801","first_seen":"2025-06-25T05:34:40.939737Z","last_seen":"2026-05-01T06:59:22.654924Z","times_seen":77,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":156,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/index-images/one-number-icon.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/index-images/one-number-icon.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:54:22 GMT\r\nETag: \"41d-6450f1062cb80\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1053\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1053,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"59d77987721e8145bb18e07ea6ce6b23","sha1":"f38a78a417b95722a70a0b70651d91a5486900cc","sha256":"6d4d3b4de5f486d19b369d82f4074dd10a6a6577fedf5bf319e514c1a9e674fb","sha512":"9390cab0808fdb73a27e3e05a3f1e871448efa9cf74c152def13acfa9846d4fa513b3c910a57fd1748665e96457ffec5c4119c9feec350a95e297ccbb13b1a28","ssdeep":"","tlshash":"7b11ccca475560acf084b92ecf36ed64762f2074762d81980d9ec224718ba42fb6a554","first_seen":"2024-10-04T11:14:04.502679Z","last_seen":"2026-06-03T08:33:36.209479Z","times_seen":81,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/images/index-images/two-number-icon.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /images/index-images/two-number-icon.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:54:22 GMT\r\nETag: \"384-6450f1062cb80\"\r\nAccept-Ranges: bytes\r\nContent-Length: 900\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":900,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8785f7b1ce94b5a1a63d2e930d529b00","sha1":"a568530c6b39a0d4b5c9e96872bca2ed8170f895","sha256":"48b1c8838e31f586a4fef0bea415753b4bbb2d69939d17eb0d96d937f90064e7","sha512":"d32a406242a1c4ed833084e648158da4b3f37c6a2e2837b2b18b64184333d52684830ec01e798cef62f5b4d85b2ecb91a97128b70395a6337c81299c283a9386","ssdeep":"","tlshash":"f11140dc4bb42684b1c1ee08cf2aec69164af4ab372686898195da3c2b03184b00543c","first_seen":"2024-10-04T11:14:04.298384Z","last_seen":"2026-06-03T08:33:36.152828Z","times_seen":81,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"change-noww.click/dist/42f6d9306c7f3a82eede.svg","fqdn":"change-noww.click","domain":"change-noww.click","tld":"click"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://change-noww.click/","date":"2026-02-13T23:00:25.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"change-noww.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 15:55:47 GMT","end":"Sat, 09 May 2026 15:55:46 GMT"},"fingerprint":{"sha1":"4B:52:79:0B:8B:F6:8A:C5:6C:83:23:19:72:58:67:EA:21:D6:8E:A7","sha256":"AE:24:8B:DE:B4:E4:BA:03:AE:F4:8C:64:74:77:67:B9:63:E7:29:DA:6C:E6:79:A1:01:B7:F4:9A:A3:DE:C6:E8"}}},"request":{"raw":"GET /dist/42f6d9306c7f3a82eede.svg HTTP/1.1\r\nHost: change-noww.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://change-noww.click/dist/index-page.58d0c8c1c98cc9259e2d.16.5.15.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:00:25 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Wed, 03 Dec 2025 16:39:58 GMT\r\nETag: \"fd-6450edce33380\"\r\nAccept-Ranges: bytes\r\nContent-Length: 253\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":253,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"14b921e1bdb41ca4500039479b462878","sha1":"e699490ce10b7cf521765f429944b0667a87f7d0","sha256":"92fed1767ad9515b424b1fa6a665f8d120cfe484cdd74dca08a4c41edb5efc54","sha512":"3943470d0b4fca315acf35bf1f4fe2585d2178f1e637ecd2997c5ba73dd404debc79b6bf409f407685122cf51fcaf31ab0ac9773dfa4533fbe1a8fe8aea7863a","ssdeep":"","tlshash":"04d0a7d5e3d9e807c944476130bd7e61745bc8a60189cefff2d927417001eff58141a6","first_seen":"2025-06-25T05:34:40.960054Z","last_seen":"2026-04-26T00:40:47.340453Z","times_seen":57,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"change-noww.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"change-noww.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}