{"report_id":"ba728682-513a-404e-a91b-295a5c76961d","version":0,"status":"done","tags":[],"date":"2026-07-17T09:08:13Z","url":{"schema":"http","addr":"nova-mp.live","fqdn":"nova-mp.live","domain":"nova-mp.live","tld":"live"},"ip":{"addr":"172.67.174.173","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"nova-mp.live/","fqdn":"nova-mp.live","domain":"nova-mp.live","tld":"live"},"title":"Маркетплейс нового поколения","dom":{"size":12196,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"67a9e233f513fd0f3bfbb81d60209de0","sha1":"ccdcccc8e2ffafaa4ed8693c30c75bc03acc0071","sha256":"9d6891a4c06e9bb5d0054cd746de99ef70f1bc8e8e2099f71a1819f218eaadbf","sha512":"e06831baeec5871046da02e4ac0c1dc7dbc0009066d3e23725b56d365dd235603fd2a7d00754c59b5eec348ce00dc78a7e6701053f9b2d0b959d6f02a45ff4b1","ssdeep":"192:GT6+2pvttBttVttTl07RL1tc3lmfmnZArtIeeCEu5MNlP+MRQ:aKtttBttVttTl07RL1tc3lmfqZYt6CE8","tlshash":"4f42313644f65076028ac6c1937aba1fecd2891fbc4ba509f4fc0b966fd2d92d84719c","dom_hash":"domhash934317f8b7455b144c24835a6ab5b7fd","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nova-mp.live","fqdn":"nova-mp.live","domain":"nova-mp.live","tld":"live"},"ip":{"addr":"172.67.174.173","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-21T09:08:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"nova-mp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"firebaseinstallations.googleapis.com","ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3774,"first_seen":"2019-04-15T04:11:07Z","last_seen":"2026-07-15T22:21:58.094451Z","alert_count":0,"request_count":2,"received_data":1641,"sent_data":1587,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-12T22:22:25.184057Z","alert_count":0,"request_count":1,"received_data":15726,"sent_data":521,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-12T22:19:35.511658Z","alert_count":0,"request_count":4,"received_data":152288,"sent_data":2250,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-07-12T22:30:28.701059Z","alert_count":0,"request_count":1,"received_data":489350,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"nova-mp.live","ip":{"addr":"104.21.31.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-16T16:09:05.671924Z","last_seen":"2026-07-16T16:09:05.671924Z","alert_count":13,"request_count":13,"received_data":1097064,"sent_data":6107,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-07-12T22:56:27.755137Z","alert_count":0,"request_count":2,"received_data":133142,"sent_data":950,"comment":"","tags":null,"fingerprints":null},{"fqdn":"firebase.googleapis.com","ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":21765,"first_seen":"2018-10-19T09:09:59Z","last_seen":"2026-07-17T06:19:03.739616Z","alert_count":0,"request_count":2,"received_data":1250,"sent_data":1226,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nova-mp.live/","fqdn":"nova-mp.live","domain":"nova-mp.live","tld":"live"},"ip":{"addr":"104.21.31.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d09e285379272790ccf0132bd03ed9a","sha1":"d663659574a801822b6a105872cc0c6118796601","sha256":"4ec2cdbf6137cd97455b5f35a2294465484ed83cd6091fd611b6184232b7315f","sha512":"a46903676b90fb496f8e6c1ff3f1520670cc1887b4636c32ff42c86ef399aec26be77dfd90f893f085726ef01bee8ecc1e6877ec854863887da327f1fc4491f3","ssdeep":"","tlshash":"fd31f00915ba1174c867f89347cfc50930b0205b062aed09fd0edbd29fc1d66b6e39a8","size":1741,"data":"","first_seen":"2026-07-16T16:09:11.612549Z","last_seen":"2026-07-17T09:08:17.788957Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/10.11.1/firebase-analytics.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"e58a9054e50fd0d968818b03cdbf753b","sha1":"57b4ebb233831bc11a80a67e4c026d92e90bede8","sha256":"c75b37a48bfd99927dd587d1216f540bbe0d37d4bfe8d5cc31da7cdad720bd7f","sha512":"318b741d3bac5ae86895b82453aee352e0865ca87c601aebd9e90c169a34b3897459e592781afe66240126c2a3b05b75c9558f501aa7313c2c52af492a8b3c24","ssdeep":"768:jvhweocBQZuPn7+BUWCPQe6G0y2ftP9fCqExzPMaAhYwsT4jUeL7ZNQZI8b:l4WnoUWCQ9ffCjF34jUI+b","tlshash":"89d209da73f7f533469355ae813b0011f73a8648780d9020b25ce9e63c6688aa777f9d","size":29721,"data":"","first_seen":"2024-05-15T20:22:48Z","last_seen":"2026-07-17T09:08:17.778366Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?l=dataLayer\u0026id=G-F9DJ16B5RQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4bd182f2a4d0ab41ba5aa7c278ab857f","sha1":"261da7afa4768aa298bf7e5a73ada9486d8ad164","sha256":"e8220b454ba8014a77eeb38457983622c074c3a3ace92906db427ee3df561af8","sha512":"18908cd7af289bfda51d55c0085687ee6e1437e1a32e98cd827e5512f84f0b1d3a873848c321ac791ac1b592f1862aada316da0367e819f4b1bad92281a6646a","ssdeep":"6144:qDourSWJxdsAvg/1vkBNcijVGTZk3TloDVwStc+Iq94N:uoeJDaBZwn+Iac","tlshash":"e3a4f8cdb3d674265396f478903f018ba57b29a2b44cc899f189cce02e7469a8177f7c","size":488746,"data":"","first_seen":"2026-07-17T09:08:17.736523Z","last_seen":"2026-07-17T09:08:17.736523Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nova-mp.live/assets/js/plugins/plugins.js","fqdn":"nova-mp.live","domain":"nova-mp.live","tld":"live"},"ip":{"addr":"104.21.31.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bf787eb9bde1f78e87fb4ef87a71b75","sha1":"73062c932a8e168d3e0b22824715fcd441908839","sha256":"d234c2f967c168baa02a41dd4b6a3820a672db4b0f6c14b78c8d27f38e9a765e","sha512":"ebcffe434a6d9fd97324cf45a9bd32917eaa632afdf7db4822c5418d099f375483db4daca11c6dae1d6d88cab4f7c8e112d104aa1262f195181ad3848e144e29","ssdeep":"3072:v4J+OlfOhBppCW6G9a98HrjY0G6gWKc5c+k8:nOFUqG9a98HrjQWt5c8","tlshash":"31242989b259706247b720f4b07f420fb23a596ab446c468f0a6d5d8bd78d4e213bf7c","size":229022,"data":"","first_seen":"2026-02-13T10:01:53.079963Z","last_seen":"2026-07-17T09:08:17.786581Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nova-mp.live/config.js","fqdn":"nova-mp.live","domain":"nova-mp.live","tld":"live"},"ip":{"addr":"104.21.31.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba7dbb06b2a37db00080504cdd7f8117","sha1":"4b544847073e599c4e53582c60a96a39443ccad8","sha256":"44567f4d7071b94678f5ad54e1c59cc2c0028a2c18f4986c0f8e9c9fb50206d3","sha512":"cee203c8640f8a767d9e0aebe27eef7f2b5bee3ad8d5c00ecd1ffcd9efeaecbfab5a53860f45ccc514031d23c821e3fa005c4a761e0462b265362c693a867362","ssdeep":"192:MwCEmcBpuiHkLtDRV+uP7PjahKD19xRZHad6fEUFUgZdL:Msikub+he19xRZHad6fEqvZdL","tlshash":"a642b9057f5d4c0f7087a8a624a641d4727e5239800e4acd376afebc4ecc788997f6a3","size":12209,"data":"","first_seen":"2026-02-13T10:01:53.063367Z","last_seen":"2026-07-17T09:08:17.755458Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nova-mp.live/assets/js/scripts.js","fqdn":"nova-mp.live","domain":"nova-mp.live","tld":"live"},"ip":{"addr":"104.21.31.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6d3d2a9b363160251dcdf1a26636a43","sha1":"df3ff0a1bb8009e49e78612963cb7f029b0ce18e","sha256":"839ff345ee67aa4a27c0d6f450dc052d21b76adcb24bfa6676deb11d794dc7dc","sha512":"1a233a936fe0836f6ef44b3af432981b1113fe03bfff7d8210fa9f889678f87bffae4034a59dd79d579a24f39413c9a41e7105dbd85387c39908e47dc5f7e17b","ssdeep":"192:ANnOSDXzopMat0BqBL2I1nRQeBG1Rd2n6SyfSJX1ZNlfDm8qNFHL/wm8N13HDuNI:Axb8FX3NlDgg3HZTObqHiXuJ","tlshash":"c8526304ffad7c95c077613928ab20c8657c2a33d0104d95bc7db4a44fedaa8661be6f","size":13693,"data":"","first_seen":"2026-02-13T10:01:53.072964Z","last_seen":"2026-07-17T09:08:17.746342Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nova-mp.live/assets/js/hero.js","fqdn":"nova-mp.live","domain":"nova-mp.live","tld":"live"},"ip":{"addr":"104.21.31.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e18e22d7742e6091fc72ca63a65f748a","sha1":"6c2dbe409d81d307850a74f3d937b274b9f1d935","sha256":"9bef1659a9471763bc97d061e2d69db28970b643702c31fa91d26b2f36a22487","sha512":"55c264802277901a5d7e55bb3de889599a1948086650f33dc7d8355df8c8505d0e208315cb242acd994832a0d01e2d18cc972cb1c5d83c972ae0799bdaafd411","ssdeep":"768:bQ7CYpSlkf8d2pPpxInezz9ZfcmaaZvLPf2ZPtt3G9U3hI0ZcEOcy1c+A0:s7CXlkf8d2dpxB1B2V3hlCEZt+A0","tlshash":"ec237348d79d1d1ba16731294e2e66c8623c817299058dbfbd3cb1a80fdc81e427feb5","size":48324,"data":"","first_seen":"2026-02-13T10:01:53.043328Z","last_seen":"2026-07-17T09:08:17.77742Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/10.11.1/firebase-app.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"c4b79631041e9f362e3d5390ff3212c4","sha1":"6d245a0dff07cc4fc9d7c0ac948345c083d73da3","sha256":"0724e976e9d544c811e7f452831d0d0660e8fb8a249ef5a50927d30e691fc35f","sha512":"74103a73ad6ad8f5d2875cc95bdc36df90ccf1a57b5742d4dcf119e68967c3382229d12ebb141a3c53220ff4036ca8e60413d1db7fa388f57eb4b3215ab1b5ac","ssdeep":"3072:BCtvM4TKYy7CCxw5DoYIt+LN/7VazEt2/O/JKslSR:BCtE4TKYy7Two+LN/7VazEt2/O/YslSR","tlshash":"13a3a76d3bd5513306b253b8af17a446f72e922b260692d47cac83e40f7246942f6ff4","size":101645,"data":"","first_seen":"2024-04-29T06:32:34Z","last_seen":"2026-07-17T09:08:17.750615Z","times_seen":217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nova-mp.live/","date":"2026-07-17T09:07:44.719Z","timestamp":1784279264719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nova-mp.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Jul 2026 23:01:09 GMT\r\nexpires: Wed, 14 Jul 2027 23:01:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 209195\r\nlast-modified: Mon, 15 Sep 2025 16:30:52 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":26588,"size_decoded":27401,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26588, version 1.0","md5":"0b3ff9e42ed8f3d4aa72ecaf5f58712c","sha1":"5d5fa3b85a1745e867e44a8c6dd3877e651491fd","sha256":"2809606237a64bd9c1461e727f369ddfd77a350e4900fffe64e8bfe16a2b3454","sha512":"d52db55e34a037109cbce299aa0bf2771075c5c6374d4f07c694eba8baa3f754ba44c61bc606843b35ce5185b868639bea806a58b7c03eb334a3e3c9ce0de746","ssdeep":"768:BCn6FX/v/3NEpCoX1GmFP2LbalbkV0Fu3m6JQ:B1H/NEtX1GA3G0I3FJQ","tlshash":"9bc2e171e3572970f96da8b119f6600146c07204f71e8376e4466b29b7b3dbc7dae820","first_seen":"2025-05-29T18:22:03.145431Z","last_seen":"2026-07-18T11:52:52.581076Z","times_seen":12046,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":34,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?l=dataLayer\u0026id=G-F9DJ16B5RQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nova-mp.live/","date":"2026-07-17T09:07:45.348Z","timestamp":1784279265348,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:33 GMT","end":"Mon, 21 Sep 2026 08:37:32 GMT"},"fingerprint":{"sha1":"85:82:80:E9:F0:BC:08:B5:D8:5D:91:B4:E5:D3:DB:B1:A7:2F:E3:F3","sha256":"E3:94:E9:DA:2C:F1:36:09:33:63:D3:69:08:E7:E6:91:8D:F3:61:7F:0F:D0:5F:8E:B6:E9:D7:F3:DD:10:3C:DC"}}},"request":{"raw":"GET /gtag/js?l=dataLayer\u0026id=G-F9DJ16B5RQ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nova-mp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Fri, 17 Jul 2026 09:07:45 GMT\r\nexpires: Fri, 17 Jul 2026 09:07:45 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 166336\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":488746,"size_decoded":166940,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"4bd182f2a4d0ab41ba5aa7c278ab857f","sha1":"261da7afa4768aa298bf7e5a73ada9486d8ad164","sha256":"e8220b454ba8014a77eeb38457983622c074c3a3ace92906db427ee3df561af8","sha512":"18908cd7af289bfda51d55c0085687ee6e1437e1a32e98cd827e5512f84f0b1d3a873848c321ac791ac1b592f1862aada316da0367e819f4b1bad92281a6646a","ssdeep":"6144:qDourSWJxdsAvg/1vkBNcijVGTZk3TloDVwStc+Iq94N:uoeJDaBZwn+Iac","tlshash":"e3a4f8cdb3d674265396f478903f018ba57b29a2b44cc899f189cce02e7469a8177f7c","first_seen":"2026-07-17T09:08:17.736523Z","last_seen":"2026-07-17T09:08:17.736523Z","times_seen":1,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":2,"connect":15,"send":0,"wait":40,"receive":68,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nova-mp.live/assets/css/style.css","fqdn":"nova-mp.live","domain":"nova-mp.live","tld":"live"},"ip":{"addr":"104.21.31.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nova-mp.live/","date":"2026-07-17T09:07:44.516Z","timestamp":1784279264516,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nova-mp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 06:27:40 GMT","end":"Wed, 14 Oct 2026 07:26:33 GMT"},"fingerprint":{"sha1":"D2:24:44:E0:52:6C:DE:FB:78:F4:4F:A7:B2:19:A6:5F:DA:2C:07:07","sha256":"19:0C:7B:BB:7A:3A:98:D8:69:5F:CF:7C:7C:92:8F:E0:4A:3D:C0:E2:80:A3:45:3A:05:06:F0:27:F0:A0:61:49"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: nova-mp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nova-mp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:07:44 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\netag: \"th6tiwor2\"\r\nlast-modified: Thu, 25 Jun 2026 12:32:56 GMT\r\nvary: Accept-Encoding\r\nx-robots-tag: nofollow, nosnippet, noarchive\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VSTyXACaom9clkWtOSOIoDLuNfaHKvX8T0VWezkg5S04V0PfsWNvCxS0EbHhAfAF57NBGSNVUhr7VQmqRM2qCwQhyovmUiNChxVLVykizIDaNxd4rmZBf%2Ft1ImadbIY%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a1c8191b3ea3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32078,"size_decoded":5795,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0bacb6a61795c5c22bf96af4b6b4020d","sha1":"4f95cf9d80c6767e8d6cad524f160b014559b5e0","sha256":"951dc29839d89005d09b32e5192cebf12d632b3b4122b5713966ea43fede4c3d","sha512":"c381909bf66db038c286afe64f9c1702ac86b41bdbf612bc43867ec7f693c6f3d8b3f9af58d824fadbd1f8233200d81e89db4423623b8e624af627f76ff1399e","ssdeep":"192:Pxkq8TSygV/iT5sBbsBcFhIZiarV7uydh0yPd8QJVfhpEB1y+BVog8rR9LRA96bO:Pxp+amtuydVXn96qSODJze","tlshash":"18e201569ea30e457206c17827df9aec33186117c25acc6d7b8e72488fcc1ec59b6b8d","first_seen":"2026-02-13T10:01:53.078823Z","last_seen":"2026-07-17T09:08:17.742621Z","times_seen":9,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"nova-mp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nova-mp.live/assets/css/custom.css","fqdn":"nova-mp.live","domain":"nova-mp.live","tld":"live"},"ip":{"addr":"104.21.31.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nova-mp.live/","date":"2026-07-17T09:07:44.520Z","timestamp":1784279264520,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nova-mp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 06:27:40 GMT","end":"Wed, 14 Oct 2026 07:26:33 GMT"},"fingerprint":{"sha1":"D2:24:44:E0:52:6C:DE:FB:78:F4:4F:A7:B2:19:A6:5F:DA:2C:07:07","sha256":"19:0C:7B:BB:7A:3A:98:D8:69:5F:CF:7C:7C:92:8F:E0:4A:3D:C0:E2:80:A3:45:3A:05:06:F0:27:F0:A0:61:49"}}},"request":{"raw":"GET /assets/css/custom.css HTTP/1.1\r\nHost: nova-mp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nova-mp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:07:44 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver-timing: cfExtPri\r\ncontent-encoding: gzip\r\netag: \"th6tiw377\"\r\nlast-modified: Thu, 25 Jun 2026 12:32:56 GMT\r\nvary: Accept-Encoding\r\nx-robots-tag: nofollow, nosnippet, noarchive\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wb2JoPiQTHCjOToR06Svj5xh6GOtnX64wOoloSGHHDyD8E%2BF%2FZiBpCKeQ%2BaC6EBQ3DEQUAqkvWteDGUsU7cyBHwax9tajy%2B25lsxz5NDevgqOFEBZSY5RTlTrzYHTIg%3D\"}]}\r\ncf-ray: a1c8191b4ea7b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1071\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4147,"size_decoded":1870,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7f3ad1bf78eb1f09f42f381688d6aba7","sha1":"4d4114f0eb59e85d6a42b332f19e7e84282aa9fb","sha256":"ca02d3479d23f6f1b05c149bce73e3ec3a739c6f284e82dd1eb8a81dcc9c11cc","sha512":"1001f30521adc4021edf89df0ecbe4dcd52843d443fcf25701390a310e270c456a1541db560064df0381445433c2addad4c0140f373c9afe808c73595c8086f6","ssdeep":"96:C8k+D4w3IX5+4ipcfWdl8Kv0GuG3ls1JlJ6JIJeJDJhvJDJDJZhJPJUJMJeUJ+o2:5k84kIX5+xcfaeKPuG3Cr76C+trtt5Ra","tlshash":"3281cc9316e32604b9ef842e1fff620a22599547f20ed998becc614cdfc4191a4e1bcd","first_seen":"2026-02-13T07:34:01.845047Z","last_seen":"2026-07-17T09:08:17.743902Z","times_seen":6,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"nova-mp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nova-mp.live/assets/js/scripts.js","fqdn":"nova-mp.live","domain":"nova-mp.live","tld":"live"},"ip":{"addr":"104.21.31.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nova-mp.live/","date":"2026-07-17T09:07:44.527Z","timestamp":1784279264527,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nova-mp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 06:27:40 GMT","end":"Wed, 14 Oct 2026 07:26:33 GMT"},"fingerprint":{"sha1":"D2:24:44:E0:52:6C:DE:FB:78:F4:4F:A7:B2:19:A6:5F:DA:2C:07:07","sha256":"19:0C:7B:BB:7A:3A:98:D8:69:5F:CF:7C:7C:92:8F:E0:4A:3D:C0:E2:80:A3:45:3A:05:06:F0:27:F0:A0:61:49"}}},"request":{"raw":"GET /assets/js/scripts.js HTTP/1.1\r\nHost: nova-mp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nova-mp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:07:44 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\netag: \"th6tiwakd\"\r\nlast-modified: Thu, 25 Jun 2026 12:32:56 GMT\r\nvary: Accept-Encoding\r\nx-robots-tag: nofollow, nosnippet, noarchive\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ynky%2F%2B4csCjaPBhECGDeJ0EDlYc4YUKPO4slWrfXB3HpbbSDRJXtPUCgDN82h7tqGTxtMQvelWPwySboQUmP9UE%2Bqx%2Buf7nlTAaXxdGu3VrcJYzRqmGcTu2d8QewiCk%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1c8191b4eacb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13693,"size_decoded":4278,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"f6d3d2a9b363160251dcdf1a26636a43","sha1":"df3ff0a1bb8009e49e78612963cb7f029b0ce18e","sha256":"839ff345ee67aa4a27c0d6f450dc052d21b76adcb24bfa6676deb11d794dc7dc","sha512":"1a233a936fe0836f6ef44b3af432981b1113fe03bfff7d8210fa9f889678f87bffae4034a59dd79d579a24f39413c9a41e7105dbd85387c39908e47dc5f7e17b","ssdeep":"192:ANnOSDXzopMat0BqBL2I1nRQeBG1Rd2n6SyfSJX1ZNlfDm8qNFHL/wm8N13HDuNI:Axb8FX3NlDgg3HZTObqHiXuJ","tlshash":"c8526304ffad7c95c077613928ab20c8657c2a33d0104d95bc7db4a44fedaa8661be6f","first_seen":"2026-02-13T10:01:53.072964Z","last_seen":"2026-07-17T09:08:17.746342Z","times_seen":9,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"nova-mp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nova-mp.live/","date":"2026-07-17T09:07:44.717Z","timestamp":1784279264717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nova-mp.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 10 Jul 2026 18:12:11 GMT\r\nexpires: Sat, 10 Jul 2027 18:12:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 572133\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-07-18T11:43:13.952907Z","times_seen":309629,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":18,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/10.11.1/firebase-app.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nova-mp.live/","date":"2026-07-17T09:07:44.831Z","timestamp":1784279264831,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /firebasejs/10.11.1/firebase-app.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://nova-mp.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nova-mp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"firebase-js\"\r\nreport-to: {\"group\":\"firebase-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/firebase-js\"}]}\r\ncontent-length: 22509\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 11:26:31 GMT\r\nexpires: Mon, 12 Jul 2027 11:26:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 423673\r\nlast-modified: Thu, 25 Apr 2024 15:11:27 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":101645,"size_decoded":23398,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with CRLF, LF line terminators","md5":"c4b79631041e9f362e3d5390ff3212c4","sha1":"6d245a0dff07cc4fc9d7c0ac948345c083d73da3","sha256":"0724e976e9d544c811e7f452831d0d0660e8fb8a249ef5a50927d30e691fc35f","sha512":"74103a73ad6ad8f5d2875cc95bdc36df90ccf1a57b5742d4dcf119e68967c3382229d12ebb141a3c53220ff4036ca8e60413d1db7fa388f57eb4b3215ab1b5ac","ssdeep":"3072:BCtvM4TKYy7CCxw5DoYIt+LN/7VazEt2/O/JKslSR:BCtE4TKYy7Two+LN/7VazEt2/O/YslSR","tlshash":"13a3a76d3bd5513306b253b8af17a446f72e922b260692d47cac83e40f7246942f6ff4","first_seen":"2024-04-29T06:32:34Z","last_seen":"2026-07-17T09:08:17.750615Z","times_seen":217,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":4,"connect":18,"send":0,"wait":16,"receive":5,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firebase.googleapis.com/v1alpha/projects/-/apps/1:21956194603:web:417ab3d008243c1b93d56e/webConfig","fqdn":"firebase.googleapis.com","domain":"firebase.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nova-mp.live/","date":"2026-07-17T09:07:45.181Z","timestamp":1784279265181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:20 GMT","end":"Mon, 21 Sep 2026 08:39:19 GMT"},"fingerprint":{"sha1":"2A:E6:04:0E:76:A4:02:27:67:28:31:4D:E5:61:19:26:CA:0E:32:84","sha256":"D4:ED:C4:F8:DB:31:8A:2D:35:15:01:14:C0:49:CB:47:FF:5B:CC:17:14:82:63:9B:A8:6F:61:4D:AA:E5:96:94"}}},"request":{"raw":"GET /v1alpha/projects/-/apps/1:21956194603:web:417ab3d008243c1b93d56e/webConfig HTTP/1.1\r\nHost: firebase.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nova-mp.live/\r\nx-goog-api-key: AIzaSyDex9IS5RQ3q08xJyY0fMyOzZAeZ_sJs4U\r\nOrigin: https://nova-mp.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Fri, 17 Jul 2026 09:07:45 GMT\r\nserver: ESF\r\ncontent-length: 187\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://nova-mp.live\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":259,"size_decoded":679,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e3219dbf2ecc6125f394b81d2402bf74","sha1":"c630baca97b1e883a726f17eae70a47d09eaadfd","sha256":"1b37a7710e8380e9b55f886ebc3ec8a9f30b297426aefec05476a985029eaf3a","sha512":"88bc88bad59079a58e1e6ac1723256b10ce89a460ca0b9650fd452df0ff72f375c0f81bbd71ba3ebd3cec5c943be240454faca667f5dd03466444e6787eb5804","ssdeep":"","tlshash":"b0d02e818c01ba630af4005d26402c06b2239c1e03c4a0fceba76b2ad28e22230753ac","first_seen":"2026-02-13T10:01:53.065991Z","last_seen":"2026-07-17T09:08:17.752922Z","times_seen":9,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nova-mp.live/assets/css/plugins.css","fqdn":"nova-mp.live","domain":"nova-mp.live","tld":"live"},"ip":{"addr":"104.21.31.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nova-mp.live/","date":"2026-07-17T09:07:44.514Z","timestamp":1784279264514,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nova-mp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 06:27:40 GMT","end":"Wed, 14 Oct 2026 07:26:33 GMT"},"fingerprint":{"sha1":"D2:24:44:E0:52:6C:DE:FB:78:F4:4F:A7:B2:19:A6:5F:DA:2C:07:07","sha256":"19:0C:7B:BB:7A:3A:98:D8:69:5F:CF:7C:7C:92:8F:E0:4A:3D:C0:E2:80:A3:45:3A:05:06:F0:27:F0:A0:61:49"}}},"request":{"raw":"GET /assets/css/plugins.css HTTP/1.1\r\nHost: nova-mp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nova-mp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:07:44 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\netag: \"th6tiw3rla\"\r\nlast-modified: Thu, 25 Jun 2026 12:32:56 GMT\r\nvary: Accept-Encoding\r\nx-robots-tag: nofollow, nosnippet, noarchive\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FhkIq3GRUbCLL5hPKLjFjTG5tcOdwA3h8xyh8SA5SbdH9GYjtFFmFu1vHajES523YY%2Feyi1ZZipo4iJGzjRo6aD3%2FPoPP8Q5xjUMu3lZKPwRzWSi7LOtfq7UsqB4WoY%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a1c8191b3ea1b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":175726,"size_decoded":33171,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65371)","md5":"f9c9a82cea08df6399c857e3fe55d8d6","sha1":"377c7e7e1178cb539a85181c32dc630303057baf","sha256":"72d60a554282099e44f6ece5fe25546305fbf64427845026d864fb31717fcbb3","sha512":"cc26bbaec07979d06a69ebc874afde46a54d2534b066b097e01f244fc34245b5e8377009348ad7cd2c1f14ead765c2d6653a570a54519a0b7d7422b45873ff57","ssdeep":"1536:nw/a1fIuiHlq5mN8lDbNmPbHzwlrniSUf2l7f9vO/PidWAut6wl5:J1iTHzwFiS22l7pk","tlshash":"770474f0e10821da7333c54bb7d0fb5921a9f262d5560dbaf11f295c4ec168a12e2f6e","first_seen":"2026-02-13T10:01:53.077446Z","last_seen":"2026-07-17T09:08:17.754288Z","times_seen":9,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"nova-mp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nova-mp.live/config.js","fqdn":"nova-mp.live","domain":"nova-mp.live","tld":"live"},"ip":{"addr":"104.21.31.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nova-mp.live/","date":"2026-07-17T09:07:44.524Z","timestamp":1784279264524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nova-mp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 06:27:40 GMT","end":"Wed, 14 Oct 2026 07:26:33 GMT"},"fingerprint":{"sha1":"D2:24:44:E0:52:6C:DE:FB:78:F4:4F:A7:B2:19:A6:5F:DA:2C:07:07","sha256":"19:0C:7B:BB:7A:3A:98:D8:69:5F:CF:7C:7C:92:8F:E0:4A:3D:C0:E2:80:A3:45:3A:05:06:F0:27:F0:A0:61:49"}}},"request":{"raw":"GET /config.js HTTP/1.1\r\nHost: nova-mp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nova-mp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:07:44 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\netag: \"th6tiw9f5\"\r\nlast-modified: Thu, 25 Jun 2026 12:32:56 GMT\r\nvary: Accept-Encoding\r\nx-robots-tag: nofollow, nosnippet, noarchive\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OigY49GbM43NtQGIWlXcIRAYSoqyo5%2BQC27uWOrLhA6gN5rcKat%2FPKOJ2ZVMhE05a%2BgoExaxNNJuKGz%2F5doLRlmOxk4sFGP%2BSvYbxhOqpGuXGqkB2K%2BQL7tfxwACchQ%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1c8191b4eaab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12209,"size_decoded":3521,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"ba7dbb06b2a37db00080504cdd7f8117","sha1":"4b544847073e599c4e53582c60a96a39443ccad8","sha256":"44567f4d7071b94678f5ad54e1c59cc2c0028a2c18f4986c0f8e9c9fb50206d3","sha512":"cee203c8640f8a767d9e0aebe27eef7f2b5bee3ad8d5c00ecd1ffcd9efeaecbfab5a53860f45ccc514031d23c821e3fa005c4a761e0462b265362c693a867362","ssdeep":"192:MwCEmcBpuiHkLtDRV+uP7PjahKD19xRZHad6fEUFUgZdL:Msikub+he19xRZHad6fEqvZdL","tlshash":"a642b9057f5d4c0f7087a8a624a641d4727e5239800e4acd376afebc4ecc788997f6a3","first_seen":"2026-02-13T10:01:53.063367Z","last_seen":"2026-07-17T09:08:17.755458Z","times_seen":9,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"nova-mp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nova-mp.live/assets/images/logo.png","fqdn":"nova-mp.live","domain":"nova-mp.live","tld":"live"},"ip":{"addr":"104.21.31.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nova-mp.live/","date":"2026-07-17T09:07:44.535Z","timestamp":1784279264535,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nova-mp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 06:27:40 GMT","end":"Wed, 14 Oct 2026 07:26:33 GMT"},"fingerprint":{"sha1":"D2:24:44:E0:52:6C:DE:FB:78:F4:4F:A7:B2:19:A6:5F:DA:2C:07:07","sha256":"19:0C:7B:BB:7A:3A:98:D8:69:5F:CF:7C:7C:92:8F:E0:4A:3D:C0:E2:80:A3:45:3A:05:06:F0:27:F0:A0:61:49"}}},"request":{"raw":"GET /assets/images/logo.png HTTP/1.1\r\nHost: nova-mp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nova-mp.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:07:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\netag: \"th6tiw42sy\"\r\nlast-modified: Thu, 25 Jun 2026 12:32:56 GMT\r\nx-robots-tag: nofollow, nosnippet, noarchive\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d7eu5haS3NbefoixPqTA0MkKr4RuMBxF8byq%2B%2BTZchOIJSgUtqcwmgo1Yxjg0Bb7%2BGyF18mnlzGt%2FFEzITAlLqJSSX1HSESNoZoP6IHKaSDKaKGZHQKWVoj9WVtFUko%3D\"}]}\r\ncf-ray: a1c8191b5eaeb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 190258\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":190258,"size_decoded":190996,"mime_type":"image/png","magic":"PNG image data, 2254 x 910, 8-bit/color RGBA, non-interlaced","md5":"299d55df2fc8c695e221528b71e82407","sha1":"2930eaa9710d1476b03b2f59a314d60bf2e66cf9","sha256":"9e559d09260afc045852a49f01833a129845e1b0b6f84bd132dfefa10a3927dd","sha512":"dea877a46aaa1661e56892dd24632164e170a693e59cde827a45c06c5071128b9b9191f4794326c90cca7487597cebd798a31943c1f69efe25638085332d6d42","ssdeep":"3072:TrzWADUt5ON1s6mL6eHdhOdMe7O9q4cpD8gW4usnCdIHMsxN0zc5xF:KADD/sTL6e9hOjEFAo4xnDHxNV5xF","tlshash":"430412988df9e164cca80ff9ec8923141f7a793a17a04a46c7b5322575d1fd096307bb","first_seen":"2026-02-13T07:34:01.846019Z","last_seen":"2026-07-17T09:08:17.756566Z","times_seen":10,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"nova-mp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nova-mp.live/assets/images/background.jpg","fqdn":"nova-mp.live","domain":"nova-mp.live","tld":"live"},"ip":{"addr":"104.21.31.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nova-mp.live/","date":"2026-07-17T09:07:44.708Z","timestamp":1784279264708,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nova-mp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 06:27:40 GMT","end":"Wed, 14 Oct 2026 07:26:33 GMT"},"fingerprint":{"sha1":"D2:24:44:E0:52:6C:DE:FB:78:F4:4F:A7:B2:19:A6:5F:DA:2C:07:07","sha256":"19:0C:7B:BB:7A:3A:98:D8:69:5F:CF:7C:7C:92:8F:E0:4A:3D:C0:E2:80:A3:45:3A:05:06:F0:27:F0:A0:61:49"}}},"request":{"raw":"GET /assets/images/background.jpg HTTP/1.1\r\nHost: nova-mp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nova-mp.live/assets/css/custom.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:07:44 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\netag: \"th6tiw7alm\"\r\nlast-modified: Thu, 25 Jun 2026 12:32:56 GMT\r\nx-robots-tag: nofollow, nosnippet, noarchive\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eNAZH56pgMPSyeUTx%2Ff2hgLIDNHSFMCVONIju%2BTBTh2ZNGiJqmOHCqwXyXCKOdRgpdlSlPK39%2Bzs3HIqzzf6bhS%2BzGYcdFVGcxmsAaqhImawHCjRmH54ms%2FWFBHJAkc%3D\"}]}\r\ncf-ray: a1c8191c6ee6b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 340330\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":340330,"size_decoded":341071,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1920x1080, components 3","md5":"1b303fa2d244867eb8e47aba38e71f64","sha1":"94792a58d5255d483a8ed63d9f6e50ec7db5efbd","sha256":"79c3c6ea328abd0021d97bb37a3550899e8611a08692f5c49549aab51b57f89c","sha512":"df26f999a4057c10cc783cebfc68cfe5946b170d45ff37328d60c2d8b86ab64d208d6329069d6f72d5962539d0eafbbd1d623e402454bfdf91fb77ea159f2f5b","ssdeep":"6144:NvwMK7z5nTdujcM9NYCbYtq5P8faMn3ZIEztIDuYzVFKf/GoeGoqQhp:qnlT8jJPbFFDw7IDxVFgjeYQX","tlshash":"937423d167eb36b9f7a2cc7e01137e07f5dca734867aacbc600989c47291989e134a53","first_seen":"2026-02-13T10:01:53.074331Z","last_seen":"2026-07-17T09:08:17.767525Z","times_seen":9,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"nova-mp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nova-mp.live/","date":"2026-07-17T09:07:44.713Z","timestamp":1784279264713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nova-mp.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 10:14:35 GMT\r\nexpires: Mon, 12 Jul 2027 10:14:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 427989\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48264,"size_decoded":49077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-07-18T11:40:24.277081Z","times_seen":59955,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":3,"connect":29,"send":0,"wait":28,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nova-mp.live/assets/favicon.png","fqdn":"nova-mp.live","domain":"nova-mp.live","tld":"live"},"ip":{"addr":"104.21.31.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nova-mp.live/","date":"2026-07-17T09:07:45.154Z","timestamp":1784279265154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nova-mp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 06:27:40 GMT","end":"Wed, 14 Oct 2026 07:26:33 GMT"},"fingerprint":{"sha1":"D2:24:44:E0:52:6C:DE:FB:78:F4:4F:A7:B2:19:A6:5F:DA:2C:07:07","sha256":"19:0C:7B:BB:7A:3A:98:D8:69:5F:CF:7C:7C:92:8F:E0:4A:3D:C0:E2:80:A3:45:3A:05:06:F0:27:F0:A0:61:49"}}},"request":{"raw":"GET /assets/favicon.png HTTP/1.1\r\nHost: nova-mp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nova-mp.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:07:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\netag: \"th6tiw2d6\"\r\nlast-modified: Thu, 25 Jun 2026 12:32:56 GMT\r\nx-robots-tag: nofollow, nosnippet, noarchive\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BlsM3JLiaavV115l1mjQ4cJadZ5A0Ltnt2cqPS0N0k3rdXldLa1ahLuwXXUxpwFQARG7rGLrnySk95rI5sPaSSNVgTY6gRyLXx428vMcyWAA50u3GS51LGbeDHnxlCg%3D\"}]}\r\ncf-ray: a1c8191f3f5cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3066\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3066,"size_decoded":3796,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"57c9defde5bd3293c51400f08fdbe5f8","sha1":"58f273ff68a5b73256ecd3f80b8b874b87656cbc","sha256":"a19f973faac5efe46e38bc523994b7dde00a4a75db3f65d6b51ca5394d23d4a1","sha512":"501ea78348ff02b95e83f7d42815fc74fc9fcfafb6180a74fec3ff7e5ee563cc21aa13d3e07365e3a5cc798f78613a4497835e3517ddcd51ccec7d2803db80f4","ssdeep":"","tlshash":"55513c1df042ca4549e3510d28f7403b7d164509c4f1e095b6ce89776bb51f948bafcb","first_seen":"2026-02-13T07:34:01.842784Z","last_seen":"2026-07-17T09:08:17.771029Z","times_seen":10,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"nova-mp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firebase.googleapis.com/v1alpha/projects/-/apps/1:21956194603:web:417ab3d008243c1b93d56e/webConfig","fqdn":"firebase.googleapis.com","domain":"firebase.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nova-mp.live/","date":"2026-07-17T09:07:45.191Z","timestamp":1784279265191,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:20 GMT","end":"Mon, 21 Sep 2026 08:39:19 GMT"},"fingerprint":{"sha1":"2A:E6:04:0E:76:A4:02:27:67:28:31:4D:E5:61:19:26:CA:0E:32:84","sha256":"D4:ED:C4:F8:DB:31:8A:2D:35:15:01:14:C0:49:CB:47:FF:5B:CC:17:14:82:63:9B:A8:6F:61:4D:AA:E5:96:94"}}},"request":{"raw":"OPTIONS /v1alpha/projects/-/apps/1:21956194603:web:417ab3d008243c1b93d56e/webConfig HTTP/1.1\r\nHost: firebase.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-goog-api-key\r\nReferer: https://nova-mp.live/\r\nOrigin: https://nova-mp.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: https://nova-mp.live\r\nvary: origin, referer, x-origin\r\naccess-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT\r\naccess-control-allow-headers: x-goog-api-key\r\naccess-control-max-age: 3600\r\ndate: Fri, 17 Jul 2026 09:07:45 GMT\r\ncontent-type: text/html\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":499,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T11:43:13.894338Z","times_seen":17337012,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":49,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firebaseinstallations.googleapis.com/v1/projects/nova-7640c/installations","fqdn":"firebaseinstallations.googleapis.com","domain":"firebaseinstallations.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nova-mp.live/","date":"2026-07-17T09:07:45.255Z","timestamp":1784279265255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:20 GMT","end":"Mon, 21 Sep 2026 08:39:19 GMT"},"fingerprint":{"sha1":"2A:E6:04:0E:76:A4:02:27:67:28:31:4D:E5:61:19:26:CA:0E:32:84","sha256":"D4:ED:C4:F8:DB:31:8A:2D:35:15:01:14:C0:49:CB:47:FF:5B:CC:17:14:82:63:9B:A8:6F:61:4D:AA:E5:96:94"}}},"request":{"raw":"OPTIONS /v1/projects/nova-7640c/installations HTTP/1.1\r\nHost: firebaseinstallations.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-firebase-client,x-goog-api-key\r\nReferer: https://nova-mp.live/\r\nOrigin: https://nova-mp.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: https://nova-mp.live\r\nvary: origin, referer, x-origin\r\naccess-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT\r\naccess-control-allow-headers: content-type,x-firebase-client,x-goog-api-key\r\naccess-control-max-age: 3600\r\ndate: Fri, 17 Jul 2026 09:07:45 GMT\r\ncontent-type: text/html\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":530,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T11:43:13.894338Z","times_seen":17337012,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":9,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nova-mp.live/assets/js/hero.js","fqdn":"nova-mp.live","domain":"nova-mp.live","tld":"live"},"ip":{"addr":"104.21.31.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nova-mp.live/","date":"2026-07-17T09:07:44.528Z","timestamp":1784279264528,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nova-mp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 06:27:40 GMT","end":"Wed, 14 Oct 2026 07:26:33 GMT"},"fingerprint":{"sha1":"D2:24:44:E0:52:6C:DE:FB:78:F4:4F:A7:B2:19:A6:5F:DA:2C:07:07","sha256":"19:0C:7B:BB:7A:3A:98:D8:69:5F:CF:7C:7C:92:8F:E0:4A:3D:C0:E2:80:A3:45:3A:05:06:F0:27:F0:A0:61:49"}}},"request":{"raw":"GET /assets/js/hero.js HTTP/1.1\r\nHost: nova-mp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nova-mp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:07:44 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\netag: \"th6tiw11ac\"\r\nlast-modified: Thu, 25 Jun 2026 12:32:56 GMT\r\nvary: Accept-Encoding\r\nx-robots-tag: nofollow, nosnippet, noarchive\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dSpcQVIFKOmvnsaS8hTb6uc2mAWs4B0p9K1RkN7njBOV72C99uezElBjcl7pP%2Fph%2FL0Yt14MPojWkXutkDC15nvjzwGgMjVSNeW2M32%2BQVkPrMzrvqwHkugMPq2v8y4%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1c8191b4eadb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48324,"size_decoded":13293,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (367)","md5":"e18e22d7742e6091fc72ca63a65f748a","sha1":"6c2dbe409d81d307850a74f3d937b274b9f1d935","sha256":"9bef1659a9471763bc97d061e2d69db28970b643702c31fa91d26b2f36a22487","sha512":"55c264802277901a5d7e55bb3de889599a1948086650f33dc7d8355df8c8505d0e208315cb242acd994832a0d01e2d18cc972cb1c5d83c972ae0799bdaafd411","ssdeep":"768:bQ7CYpSlkf8d2pPpxInezz9ZfcmaaZvLPf2ZPtt3G9U3hI0ZcEOcy1c+A0:s7CXlkf8d2dpxB1B2V3hlCEZt+A0","tlshash":"ec237348d79d1d1ba16731294e2e66c8623c817299058dbfbd3cb1a80fdc81e427feb5","first_seen":"2026-02-13T10:01:53.043328Z","last_seen":"2026-07-17T09:08:17.77742Z","times_seen":9,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"nova-mp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/10.11.1/firebase-analytics.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nova-mp.live/","date":"2026-07-17T09:07:44.832Z","timestamp":1784279264832,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /firebasejs/10.11.1/firebase-analytics.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://nova-mp.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nova-mp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"firebase-js\"\r\nreport-to: {\"group\":\"firebase-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/firebase-js\"}]}\r\ncontent-length: 9402\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 08:25:13 GMT\r\nexpires: Fri, 16 Jul 2027 08:25:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 88952\r\nlast-modified: Thu, 25 Apr 2024 15:11:52 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":29721,"size_decoded":10289,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (29672)","md5":"e58a9054e50fd0d968818b03cdbf753b","sha1":"57b4ebb233831bc11a80a67e4c026d92e90bede8","sha256":"c75b37a48bfd99927dd587d1216f540bbe0d37d4bfe8d5cc31da7cdad720bd7f","sha512":"318b741d3bac5ae86895b82453aee352e0865ca87c601aebd9e90c169a34b3897459e592781afe66240126c2a3b05b75c9558f501aa7313c2c52af492a8b3c24","ssdeep":"768:jvhweocBQZuPn7+BUWCPQe6G0y2ftP9fCqExzPMaAhYwsT4jUeL7ZNQZI8b:l4WnoUWCQ9ffCjF34jUI+b","tlshash":"89d209da73f7f533469355ae813b0011f73a8648780d9020b25ce9e63c6688aa777f9d","first_seen":"2024-05-15T20:22:48Z","last_seen":"2026-07-17T09:08:17.778366Z","times_seen":108,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":3,"connect":19,"send":0,"wait":16,"receive":2,"ssl":268},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firebaseinstallations.googleapis.com/v1/projects/nova-7640c/installations","fqdn":"firebaseinstallations.googleapis.com","domain":"firebaseinstallations.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nova-mp.live/","date":"2026-07-17T09:07:45.252Z","timestamp":1784279265252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:20 GMT","end":"Mon, 21 Sep 2026 08:39:19 GMT"},"fingerprint":{"sha1":"2A:E6:04:0E:76:A4:02:27:67:28:31:4D:E5:61:19:26:CA:0E:32:84","sha256":"D4:ED:C4:F8:DB:31:8A:2D:35:15:01:14:C0:49:CB:47:FF:5B:CC:17:14:82:63:9B:A8:6F:61:4D:AA:E5:96:94"}}},"request":{"raw":"POST /v1/projects/nova-7640c/installations HTTP/1.1\r\nHost: firebaseinstallations.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nova-mp.live/\r\ncontent-type: application/json\r\nx-firebase-client: eyJ2ZXJzaW9uIjoyLCJoZWFydGJlYXRzIjpbeyJhZ2VudCI6ImZpcmUtY29yZS8wLjEwLjIgZmlyZS1jb3JlLWVzbTIwMTcvMC4xMC4yIGZpcmUtanMvIGZpcmUtanMtYWxsLWNkbi8xMC4xMS4xIGZpcmUtaWlkLzAuNi42IGZpcmUtaWlkLWVzbTIwMTcvMC42LjYgZmlyZS1hbmFseXRpY3MvMC4xMC4yIGZpcmUtYW5hbHl0aWNzLWVzbTIwMTcvMC4xMC4yIiwiZGF0ZXMiOlsiMjAyNi0wNy0xNyJdfV19\r\nx-goog-api-key: AIzaSyDex9IS5RQ3q08xJyY0fMyOzZAeZ_sJs4U\r\nContent-Length: 129\r\nOrigin: https://nova-mp.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":129,"data":"{\"fid\":\"fYkU5EAotycQKdCKSvPc35\",\"authVersion\":\"FIS_v2\",\"appId\":\"1:21956194603:web:417ab3d008243c1b93d56e\",\"sdkVersion\":\"w:0.6.6\"}"}},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Fri, 17 Jul 2026 09:07:45 GMT\r\nserver: ESF\r\ncontent-length: 491\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://nova-mp.live\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":619,"size_decoded":983,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f9f536918e4ad5bd0984a0e811c20dae","sha1":"47b849d5aefe664e06f8561cce8186fb18de337d","sha256":"a2a33238d535cbe2e8538695455e4f753a346f2e954e47ed56d361690b00d0dd","sha512":"9b1edd36c42b2510010f4ebc49fd945d3a8a673767471f0edaf58f19767baa85c1eaea740a9dea077d3ea3c2337f779a5ca191c6b150cd3b60f0bf2b39a7db95","ssdeep":"","tlshash":"1df068b853b44915e1c2160e338156826c238fa7140d75607fd356ec2b4142359272c5","first_seen":"2026-07-17T09:08:17.780422Z","last_seen":"2026-07-17T09:08:17.780422Z","times_seen":1,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nova-mp.live/","fqdn":"nova-mp.live","domain":"nova-mp.live","tld":"live"},"ip":{"addr":"104.21.31.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T09:07:43.808Z","timestamp":1784279263808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nova-mp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 06:27:40 GMT","end":"Wed, 14 Oct 2026 07:26:33 GMT"},"fingerprint":{"sha1":"D2:24:44:E0:52:6C:DE:FB:78:F4:4F:A7:B2:19:A6:5F:DA:2C:07:07","sha256":"19:0C:7B:BB:7A:3A:98:D8:69:5F:CF:7C:7C:92:8F:E0:4A:3D:C0:E2:80:A3:45:3A:05:06:F0:27:F0:A0:61:49"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nova-mp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:07:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, must-revalidate\r\nexpires: -1\r\npragma: no-cache\r\nx-robots-tag: nofollow, nosnippet, noarchive\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7hwLPZr7a7r7RLoNZX5Uq6DsdfGAMgUutiN310x%2Fq522Nq41tfwV8pYoVzo6dqqBQepYHe1HULGKVehmhi9ZkGyXbxlKq%2B1PzfUnV6Tak%2BpoxYIewWdVj83rxts2XWQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\ncf-ray: a1c819176e1cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11995,"size_decoded":4048,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0a6985f082d0f9458d22c5a74d294174","sha1":"04d9e0f0c33c511cde74bdea91bb1388b5260234","sha256":"4fd3947b17ff58391da597ed4781404f733b44befd27d6301fc5175ca4574fd0","sha512":"8c471b65c5ada52b70cf17f6c868c78b4e80554f7ba4e88560c8526ce203319b9f6b8695c9416c39069989d34c6379a9ce41821c77e5ed8f2e394f7655106d82","ssdeep":"192:Uf6P2pvttBttMttTl07RL1tc3lmfmnZArtIeeCEu5MNlP+MRQ:CJtttBttMttTl07RL1tc3lmfqZYt6CE8","tlshash":"5632303644f76076028ac6c1937aba1fec92491fbc4ba509f4fd0b956fd2d92c84719c","first_seen":"2026-07-17T09:08:17.782587Z","last_seen":"2026-07-17T09:08:17.782587Z","times_seen":1,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":74,"connect":17,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"nova-mp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:300,600|Raleway:300,400","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nova-mp.live/","date":"2026-07-17T09:07:44.511Z","timestamp":1784279264511,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css?family=Open+Sans:300,600|Raleway:300,400 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nova-mp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 17 Jul 2026 09:07:44 GMT\r\ndate: Fri, 17 Jul 2026 09:07:44 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15042,"size_decoded":2460,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1444fc9039aecbdc1b68f0ba8decd65d","sha1":"af79b4e9231696813da3fc1f15a6b483ffe7d868","sha256":"52f94cfd94642fe95944aac17cdc3e5067f35a1f8b4dda55525882fbcd002e30","sha512":"f7b5489f11c5e9e3741a9ff263a23809f655e591089244be3a217bdcf1d92bedd2a34c709c24f618a64d0607ff35bf8364fe2e22a33b9871e2e16d410001af3e","ssdeep":"192:NCddw24WrqKnbqGIwV4Mrz7bCuuH2PlrqxnbqGIwV478zMeiHT+H1Dl0iaTzH0DC:0AYqY47hhqY4hzwNYrt","tlshash":"e0623da004175850a7431dd623ce3e34ee0fa2657044d03a6bfd8baaeedad7623b435d","first_seen":"2026-02-13T07:34:01.840951Z","last_seen":"2026-07-17T09:08:17.784305Z","times_seen":12,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":34,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nova-mp.live/assets/css/hero.css","fqdn":"nova-mp.live","domain":"nova-mp.live","tld":"live"},"ip":{"addr":"104.21.31.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nova-mp.live/","date":"2026-07-17T09:07:44.518Z","timestamp":1784279264518,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nova-mp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 06:27:40 GMT","end":"Wed, 14 Oct 2026 07:26:33 GMT"},"fingerprint":{"sha1":"D2:24:44:E0:52:6C:DE:FB:78:F4:4F:A7:B2:19:A6:5F:DA:2C:07:07","sha256":"19:0C:7B:BB:7A:3A:98:D8:69:5F:CF:7C:7C:92:8F:E0:4A:3D:C0:E2:80:A3:45:3A:05:06:F0:27:F0:A0:61:49"}}},"request":{"raw":"GET /assets/css/hero.css HTTP/1.1\r\nHost: nova-mp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nova-mp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:07:44 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\netag: \"th6tiwch3\"\r\nlast-modified: Thu, 25 Jun 2026 12:32:56 GMT\r\nvary: Accept-Encoding\r\nx-robots-tag: nofollow, nosnippet, noarchive\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EajMK3XAUSBVWP0kIwGZ2yNfuDI32tzd29mYAHPKSIk%2BhzK5QlB2OTTex%2Fwhk7m2ILxtoxou3d5GUuYZWKiJGJUmW4svIeBCSM9Bg6QQSY8XPBR35ERatDvTUtMN980%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a1c8191b3ea4b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16167,"size_decoded":3283,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f4eefba599a02ad7ff05166620c7fe77","sha1":"9ad5c4b03bcb9985adc777e17aeb7d2a1816277a","sha256":"058ba22b92c44455e759f37724b1203cb197b6d0c133620e1a3c0cd2dad683a7","sha512":"52e1e0b086a3b715e7a3743bc17197f501b4c17cd540ec73f23ca7e4a0393b9121c4235e02d09175c388887893d6ebbb3ceeef32c1eb65fce72f9c928974bd5e","ssdeep":"192:jFkhlKB84ygxjc4DCZEU2o0cogUJdfTmhcmHWudwuVi5kgsQJl5/jBM6rhUWFpHg:j8wmT6Drjq232f","tlshash":"e472c07b6a921c04a56b8c141bdb3bfc123ca013961998edbb8e334d5fccb8945e5f49","first_seen":"2026-02-13T07:34:01.841925Z","last_seen":"2026-07-17T09:08:17.785787Z","times_seen":10,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"nova-mp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nova-mp.live/assets/js/plugins/plugins.js","fqdn":"nova-mp.live","domain":"nova-mp.live","tld":"live"},"ip":{"addr":"104.21.31.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nova-mp.live/","date":"2026-07-17T09:07:44.523Z","timestamp":1784279264523,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nova-mp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 06:27:40 GMT","end":"Wed, 14 Oct 2026 07:26:33 GMT"},"fingerprint":{"sha1":"D2:24:44:E0:52:6C:DE:FB:78:F4:4F:A7:B2:19:A6:5F:DA:2C:07:07","sha256":"19:0C:7B:BB:7A:3A:98:D8:69:5F:CF:7C:7C:92:8F:E0:4A:3D:C0:E2:80:A3:45:3A:05:06:F0:27:F0:A0:61:49"}}},"request":{"raw":"GET /assets/js/plugins/plugins.js HTTP/1.1\r\nHost: nova-mp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nova-mp.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:07:44 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\netag: \"th6tiw4wpq\"\r\nlast-modified: Thu, 25 Jun 2026 12:32:56 GMT\r\nvary: Accept-Encoding\r\nx-robots-tag: nofollow, nosnippet, noarchive\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bq7DIIT%2F8L5mdLKDec7OSPZ03SpvhgshP3t8JOGOABkp5UalHANahBIgE09l7YdlAvQRexf1agsrvQELNvxGD1hHiJOaN35eqY1KcnmAkHj1Io56KfWzxRo8F2welts%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1c8191b4ea9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":229022,"size_decoded":70019,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"8bf787eb9bde1f78e87fb4ef87a71b75","sha1":"73062c932a8e168d3e0b22824715fcd441908839","sha256":"d234c2f967c168baa02a41dd4b6a3820a672db4b0f6c14b78c8d27f38e9a765e","sha512":"ebcffe434a6d9fd97324cf45a9bd32917eaa632afdf7db4822c5418d099f375483db4daca11c6dae1d6d88cab4f7c8e112d104aa1262f195181ad3848e144e29","ssdeep":"3072:v4J+OlfOhBppCW6G9a98HrjY0G6gWKc5c+k8:nOFUqG9a98HrjQWt5c8","tlshash":"31242989b259706247b720f4b07f420fb23a596ab446c468f0a6d5d8bd78d4e213bf7c","first_seen":"2026-02-13T10:01:53.079963Z","last_seen":"2026-07-17T09:08:17.786581Z","times_seen":9,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"nova-mp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nova-mp.live/assets/images/apk-button.svg","fqdn":"nova-mp.live","domain":"nova-mp.live","tld":"live"},"ip":{"addr":"104.21.31.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nova-mp.live/","date":"2026-07-17T09:07:44.537Z","timestamp":1784279264537,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nova-mp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 06:27:40 GMT","end":"Wed, 14 Oct 2026 07:26:33 GMT"},"fingerprint":{"sha1":"D2:24:44:E0:52:6C:DE:FB:78:F4:4F:A7:B2:19:A6:5F:DA:2C:07:07","sha256":"19:0C:7B:BB:7A:3A:98:D8:69:5F:CF:7C:7C:92:8F:E0:4A:3D:C0:E2:80:A3:45:3A:05:06:F0:27:F0:A0:61:49"}}},"request":{"raw":"GET /assets/images/apk-button.svg HTTP/1.1\r\nHost: nova-mp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nova-mp.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:07:44 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\netag: \"th6tiw7xb\"\r\nlast-modified: Thu, 25 Jun 2026 12:32:56 GMT\r\nvary: Accept-Encoding\r\nx-robots-tag: nofollow, nosnippet, noarchive\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nNIVsmKgz429LRVhfNZYJQyoUsqqoLMo6dkdxwEE%2BgdOMZ2Fs%2BkRHao1UdQe0us%2FeVFCmzM9nEV%2Bc3RpaCSuJ9Hz81E8x%2FbQvkFB6nqdU7KRGrgDeW9l0BQPmafT0to%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8191b5eafb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10271,"size_decoded":4902,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b4f008901fe1b6c74e0dfbdb544f25e","sha1":"fd4b2e599143ab5e7e9bdaa27f173013ccb45e67","sha256":"8f2f235d106d4b3f10a38695d77e8a915d3b68054cdca6c97a80c16b5335af6a","sha512":"e801fab120889d801ecf995b539f368e4f571f7d0b6d07c2cbbd6f6638c80346b17a213a83279de306e04bcbb3cbdc4caa94f7c27b3d08d567f90417b2d42fca","ssdeep":"192:OtLKiNMwwKSPL3HGWIN24oA41iJ+X2Xg0VOVOCvRLv5Xa4Kvs3WvG:Ot+5wwpPLX6N24ojwg0t65qlE3WO","tlshash":"f82293ad13a18bb490a0e3ea5e2169f93d0e50fddca9b778c1a3cb7074524ec9c859c5","first_seen":"2026-02-13T07:34:01.847212Z","last_seen":"2026-07-17T09:08:17.787458Z","times_seen":10,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"nova-mp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyCkIT5lu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nova-mp.live/","date":"2026-07-17T09:07:44.715Z","timestamp":1784279264715,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyCkIT5lu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nova-mp.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25864\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 05:09:52 GMT\r\nexpires: Fri, 16 Jul 2027 05:09:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 100672\r\nlast-modified: Tue, 09 Sep 2025 19:02:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":25864,"size_decoded":26677,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25864, version 1.0","md5":"7d930c3ad34795a762739aa13fca14c7","sha1":"e0e0ffa753785e486825363286d85286eca13dd4","sha256":"ac99ad1c437b60ef445a7c13c958d4d574ef98050de2ccf182ba6ccdb3bfbdfd","sha512":"32343b9e36101cb0b21a9f3eeb07f1ec190dc82ae9fdd092d4d305cd533308a0456126c34d0f76687f0483192ff10fcf6a9b2a10652eb22ea71918b86c3e23f8","ssdeep":"384:GIZmFjEbDcnw4TNhneUV5NUdgBtHET46ReIatMtrbkhZ4weW8FSET78gXOxRnBKz:XlXe5xfbUdg7eQIatqnKyCITAnBi88Zp","tlshash":"c0c2e1eaa6090f9b5a3c8271b71cb3a0ea57e11fb5b40e228d95d1fdb1d7115030e6b3","first_seen":"2025-09-12T04:50:20.840249Z","last_seen":"2026-07-18T07:09:19.705496Z","times_seen":1183,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":43,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}