{"report_id":"c811a1e4-5780-465a-b911-55e90291b3e9","version":0,"status":"done","tags":[],"date":"2026-09-25T12:34:48Z","url":{"schema":"https","addr":"gg-drop.gg/en/","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":0,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"gg-drop.gg/en/","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"title":"CS2 cases and items — GG DROP catalog","dom":{"size":44655,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (40547)","md5":"c8218e3ff0483ea71b93a1e7fe90d22c","sha1":"8eb1c897b8a8b7d094e3e3c63e954ddbf9cfd801","sha256":"d3f612fa31b5d58896e08a0bc2a0b4d65014656a5e593dcf2e8349abb82a89a3","sha512":"a34d2446ba2e5dad3e478b417280d70509e90e087dad9f23415a334751506c31f0b31414460c39e9df80f7003d14c610f6e5b3586e6ff32b921711b96be6018b","ssdeep":"768:ffgx91DE74iTzMAbze4oU5ha6lB4ajUjB2m6YEz/qaFHhWLHyylbk2km2vU15e1E:3gx914zM8ze4oU9mwTYzwzLDOYjPmxHB","tlshash":"741385b18a24d6bf51279dd8b937ab8d31ca825deaa70e549efccb6457c3c80f913404","dom_hash":"domhash90861d17f772579808c6a8495447f935","first_seen":"2026-09-25T12:32:02.829401Z","last_seen":"2026-09-25T12:34:55.083744Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"gg-drop.gg/en/","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":0,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-30T12:34:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"gg-drop.gg","ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-06-10","domain_rank":0,"first_seen":"2026-09-25T12:34:51.369961Z","last_seen":"2026-09-25T12:34:51.369961Z","alert_count":0,"request_count":37,"received_data":3996141,"sent_data":19663,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-20T22:44:48.5379Z","alert_count":0,"request_count":1,"received_data":526605,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gg-drop.gg/en/","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"c1bdfe8e96b4caf96aa982c859451d00","sha1":"8432c40358d24f9fd143f7b1f2cafc7e80ff9cec","sha256":"e2204481379491e5e1c0a29420a222f3b02717261010db1044f4bbaded2943c8","sha512":"140783f57cf76d79e963784efc310ed6e203996831d7d48100505c88e3d4acddf66d7180533b8cbf56a5166e90341f0986fd3582b8a3c7b8a53a8c24149156f6","ssdeep":"","tlshash":"a2c02bcc260b5cb091e72f014f7fb304b0053202d4d09e31180b33844f20d03e754c18","size":155,"data":"","first_seen":"2026-09-25T12:32:02.914641Z","last_seen":"2026-09-25T12:34:55.134418Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/en/","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed7ce6a8bdd79814cecbdcfa42af3f69","sha1":"c42c6cf103e28164c13ad1b506c2c56f85538871","sha256":"55ee6e0358cf61b2075b7022b20e9a2089d70f43ed4fe25b2696c8c89a950110","sha512":"5e00b3a67df7c60ffc4a4055652798db900b384648c1edc98fac48e849dab0e8ca730ed906fdd15064241818e0c31fc71a600fda1e04d4d91ace0909e3f5c153","ssdeep":"","tlshash":"7af0ace73c8a5129c7a712a53b73924d3039292b744eac92b50d18562f94e6514b791c","size":615,"data":"","first_seen":"2026-09-25T12:32:02.917633Z","last_seen":"2026-09-25T12:34:55.135323Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-3QGCLDE5MK","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"565ca22e6f281333755b764903147994","sha1":"2f99cc5af034a7cfbe02d73ffcce61fc7ed0fe20","sha256":"685be163b114ef1bfabcb6e21f6156957b94e249180a6e947a050ec71bd75a19","sha512":"0a8ed3f31499b21da3d133a75a702c6c94427061b2e49e04c429639fb55ce0a27b50ca03f0015b974f792c3f607974cc605626fd0ff7d0553241f4d5d4595298","ssdeep":"6144:czcM4RorG7+/t5M5Z+5cKnIu9FcjvgbsED/3C9HJDLavOo9jxHR4Qsg:Xp7+//0hBP9LRo11","tlshash":"b2b4f7ce73c674229396f178903f01cba57b29a2b45cc89af289dce42d3465a5163f7c","size":526001,"data":"","first_seen":"2026-09-25T12:32:02.90376Z","last_seen":"2026-09-25T12:34:55.091953Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/_astro/LanguageSelector.astro_astro_type_script_index_0_lang.DEuX9PX9.js","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d28993185634d91c6c037731a07bf63","sha1":"5bc2563c7b7ae890de956f5c8af8975cf94c7df8","sha256":"88b9cd6318f7ed2956dab328662bb7a6f6649f99a7e069e2d271a60f7b3d881c","sha512":"22dea33cc569a58b56d259916a8a59c84385d4a9afaa8f0bfbdd48bc7442e5a7188308888381b830528d6cc852e3d80cce4e7751171536a15d9adfce8b5c995a","ssdeep":"","tlshash":"d5011b71b39a107701dad5ca88493b402186a1aaa00e083c881f0c2a63b9b9f20f2b36","size":665,"data":"","first_seen":"2026-09-25T12:32:02.845316Z","last_seen":"2026-09-25T12:34:55.096213Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/_astro/AuthModal.astro_astro_type_script_index_0_lang.CUQar6DM.js","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"91ee60f6602f2d8b420571155f91a4c2","sha1":"f3acf1ccc1826d6e50c8025f7fcafbe01152c3ef","sha256":"7e8fe520ca8d430c994b47facfd0b1d320f1a0d18d29d567d135adbe6cb09815","sha512":"dac3fa2644f07c17a776fd35d672d5ef60b69b40f6aab63d986d03db9172cded27f4c1a9cc239f3bb4130a12c714483910d47da2c6c4eb5723ce3a98a05bf2cd","ssdeep":"","tlshash":"b05143b1f37e76b509ef17d7a0baed91376978c7504e0024a12a4e1a112eec170d1bb6","size":2931,"data":"","first_seen":"2026-09-25T12:32:02.857652Z","last_seen":"2026-09-25T12:34:55.114015Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"gg-drop.gg/static/media/usp-s.71916fd207cd07405831.png","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.239Z","timestamp":1790339657239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/media/usp-s.71916fd207cd07405831.png HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 175328\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\netag: \"12ce7bd0-2ace0\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":175328,"size_decoded":177975,"mime_type":"image/png","magic":"PNG image data, 686 x 686, 8-bit colormap, non-interlaced","md5":"0eaf9730c3617f09eb6a8fa30673d8d2","sha1":"aaf6c834a8c9ab28f3e9bece76ff7ebe83dc9c91","sha256":"66fff54707c02b35ae35ee71ce303a63608300ee8db353bfe4dd6f388341ddc1","sha512":"c09aa57b6ce8d2ed197be19ab6ea8f8dff8bc7e8c40a469fdce055febb1fbf60e4071827a3ad969c4abc752992b8f58ffd4ca6f9c5ea4cbab6460b56c9bc7772","ssdeep":"3072:YKHTehJ6OXKmh2G/cX1G6IN7doKxYXlQX3k7Ly+IWZd:NHTeFl2HX1jIrVxY1QXay+3H","tlshash":"7804135a9bdb4467aca411b4a46b72746e32ed92331d39040fe7f2c9cb351acd83345b","first_seen":"2026-07-07T07:45:26.698554Z","last_seen":"2026-09-25T12:34:55.085391Z","times_seen":4,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/static/media/bearbrick.73172ccd9cde1aa4fd8f.png","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.249Z","timestamp":1790339657249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/media/bearbrick.73172ccd9cde1aa4fd8f.png HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 169694\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\netag: \"12ce7bd0-296de\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":169694,"size_decoded":172341,"mime_type":"image/png","magic":"PNG image data, 686 x 686, 8-bit colormap, non-interlaced","md5":"ffb1e523210b568ae0f0901996676436","sha1":"33e6834f57a4759f52b3c775423ff16d00fadfe7","sha256":"04b2f40c6feaf569c608c5af8b18f998f206c2faaa7c8eb384bb2eb52b288edc","sha512":"0fc3aa19394512eb2901df6392f973240c53bad64253f9b0a72941801af8166643bc8fd38c51028e3dbe4d0bd1f8ee267850dd3ff74fc549f529d969033a69a0","ssdeep":"3072:i8wiHatlBvD+kR6mYMOGmxOsh3uQbx10mak7sy2RhFhd7pmq9I:i8wv4ovYvv01CMFhRpmq+","tlshash":"16f323d1e5fe943af6d4ab071c5a59382b7e782aa901b049c14e70d7b63b9c46e3301f","first_seen":"2026-07-07T07:45:26.749784Z","last_seen":"2026-09-25T12:34:55.086113Z","times_seen":4,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/static/media/Gotham-Light_Web.52135bfaf7203be6f7a8.woff2","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.593Z","timestamp":1790339657593,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/media/Gotham-Light_Web.52135bfaf7203be6f7a8.woff2 HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://gg-drop.gg/static/css/main.5d3c385f.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 40280\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\netag: \"12ce7bd0-9d58\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40280,"size_decoded":42940,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 40280, version 3.19726","md5":"7624ae091962735719fb82bf900c22b7","sha1":"393477ccdcd62b914d90dd379dd7d677d761e416","sha256":"e266d1f2bcf1da0faff6964637fdcd9a4e47c50a7a56be74424f409f30c83c5e","sha512":"bf8a412558c1bc5067673d31339f58e63bc6e161385938ada2894eff7f8b6569e7e7897578506633b75eecf869b7c0d68e2e4395efe6bfc1550cb5ef921acf29","ssdeep":"768:Fpqe5KnZDijwD15J5MOcMWEG8byqCb5RptAXmLbF9TnsglH6sCGYJ:FAeMA8jJ55cnZxtV7TskMGYJ","tlshash":"0e03f2ffe6796343cef468f28fe448c567d58200db436a46bb61eb18c97502d781c066","first_seen":"2023-05-11T22:53:36Z","last_seen":"2026-10-10T19:02:26.7291Z","times_seen":395,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/_astro/global.DHqOqOFS.css","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.223Z","timestamp":1790339657223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /_astro/global.DHqOqOFS.css HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"12ce7bd0-f08\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3848,"size_decoded":3978,"mime_type":"text/css","magic":"ASCII text, with very long lines (3847)","md5":"ac356fde471bb0df6b638290c9636a4c","sha1":"5e1f1968a209547ce809d507cef0a078e4556ed1","sha256":"882acae1a87515602715c4c52c267405fa2d48569f1cd2bebcd9a0b6faa18ffe","sha512":"7873c0f50a57ebece158442c1cf6b96736ce649cccec543d48119ab4c3bf5f50f1223924de48f679cf38b04b7cf76525e6d172c872a454d16ac964c64e887da0","ssdeep":"","tlshash":"0b8122254bae2839f66fd266b4814ecd2014c2c2f6336ebace74d63dcccd4b21539548","first_seen":"2026-09-25T12:32:02.901429Z","last_seen":"2026-09-25T12:34:55.087685Z","times_seen":2,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/_astro/_..ALt3o4UF.css","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.225Z","timestamp":1790339657225,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /_astro/_..ALt3o4UF.css HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"12ce7bd0-2db4\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":11700,"size_decoded":3544,"mime_type":"text/css","magic":"ASCII text, with very long lines (11699)","md5":"45b22445828ca8bf411499fbd4a9938c","sha1":"bcd83ae42853fce56521e33c21452f5a552f4ec2","sha256":"644031e2af3945def7290b82c04cb70ba09a706fd3dbaf017b05d365c9620807","sha512":"bb01d9859c2c285841c442add54928ba2c461f1f5aec80076b99487aa012b08d1ec0328f3784324cfbb7cb6494121f1d2d80dea360ad6cd265733a7337642073","ssdeep":"192:N2lR0JeZ9mPM07Tl7A7X34cvkTdjovqkNTvmAXcKzYfWz482RZgZvZGG/fHvqZbB:pG58t","tlshash":"fc320c63b28510e673a10311265237bfae3fab6537c58cb69b04e7bd06c46eb34258d3","first_seen":"2026-09-25T12:32:02.854218Z","last_seen":"2026-09-25T12:34:55.089857Z","times_seen":2,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/static/media/logo.4e5d48a8618edb5cd4ae.png","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.574Z","timestamp":1790339657574,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/media/logo.4e5d48a8618edb5cd4ae.png HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/static/css/309.813e4ad0.chunk.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 287066\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\netag: \"12ce7bd0-4615a\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":287066,"size_decoded":289713,"mime_type":"image/png","magic":"PNG image data, 836 x 736, 8-bit colormap, non-interlaced","md5":"4766636426ee29d93805e7474b97b9bd","sha1":"b1f97c008637404da9fe34533474949b940dc52f","sha256":"6ea530f69773d0a0037fb19921b13d12bbfa572d92e17ae478bfa0bb2f7f801d","sha512":"f748fd5925a016e379975944d7bd7e8646ac018dd0e5be91936d41132935c15be0efd5013ed84025b545a67b2b6aa7bf15d408dd45c7318ef999ac1571338f43","ssdeep":"6144:jRcCQGxUucKfpdBmKfAULhO6yF7yBBWbKCQKdEXXGXBf+ZO:jRZQ3KfpXe6VyW4d2XGRGZO","tlshash":"935422f3b291c2e049d63fbd02bc89e3496784f3ca7f02564c7681e95578ee48a56c4d","first_seen":"2026-06-02T18:43:16.914708Z","last_seen":"2026-09-25T12:34:55.090846Z","times_seen":6,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-3QGCLDE5MK","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.226Z","timestamp":1790339657226,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:00 GMT","end":"Thu, 03 Dec 2026 19:21:59 GMT"},"fingerprint":{"sha1":"B5:A9:73:B1:2A:AF:94:D5:A0:C0:EA:89:DD:CE:A1:FA:42:73:60:6A","sha256":"E1:A3:36:34:1F:D9:00:D3:1E:44:B3:36:C7:25:67:04:1A:16:2E:AA:54:82:D9:66:4C:D3:1A:BA:FD:0F:9A:C2"}}},"request":{"raw":"GET /gtag/js?id=G-3QGCLDE5MK HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\nexpires: Fri, 25 Sep 2026 12:34:17 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 176288\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":526001,"size_decoded":176892,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"565ca22e6f281333755b764903147994","sha1":"2f99cc5af034a7cfbe02d73ffcce61fc7ed0fe20","sha256":"685be163b114ef1bfabcb6e21f6156957b94e249180a6e947a050ec71bd75a19","sha512":"0a8ed3f31499b21da3d133a75a702c6c94427061b2e49e04c429639fb55ce0a27b50ca03f0015b974f792c3f607974cc605626fd0ff7d0553241f4d5d4595298","ssdeep":"6144:czcM4RorG7+/t5M5Z+5cKnIu9FcjvgbsED/3C9HJDLavOo9jxHR4Qsg:Xp7+//0hBP9LRo11","tlshash":"b2b4f7ce73c674229396f178903f01cba57b29a2b45cc89af289dce42d3465a5163f7c","first_seen":"2026-09-25T12:32:02.90376Z","last_seen":"2026-09-25T12:34:55.091953Z","times_seen":2,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":2,"connect":27,"send":0,"wait":51,"receive":82,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/static/media/twins.6834d4bef7b55385cffd.png","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.244Z","timestamp":1790339657244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/media/twins.6834d4bef7b55385cffd.png HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 143488\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\netag: \"12ce7bd0-23080\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":143488,"size_decoded":146135,"mime_type":"image/png","magic":"PNG image data, 686 x 686, 8-bit colormap, non-interlaced","md5":"e11bfbb96136b82a6de20c50bcff4138","sha1":"b510b49e24e65fa0ca1ea002920164d667f6f277","sha256":"5717818e81042ff096258b5d643a9a328fde1fe8cfdffd5ddc0746d4ac98f6ca","sha512":"76cbfa0421932054e792bf8e7f0331321c36cf19cf55df62d7ad5a4905090b62c1aa9afaa64d2b7fce7754a5fd9e6cbefe120e5b1609f11671fb973214e3e933","ssdeep":"3072:zPeEWggwnMHacz8+x2PfI/KwunWMaPola+mRISUGS:4wnM6czb2PfIL2bmb8","tlshash":"dde312da0283e81b88d82460f3f57cd23ccd7c7be9498a561be77a54cc192680d56e6f","first_seen":"2026-07-07T07:45:26.761034Z","last_seen":"2026-09-27T18:44:32.033818Z","times_seen":5,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/static/media/p-250.674155bbabae9544fd2b.png","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.246Z","timestamp":1790339657246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/media/p-250.674155bbabae9544fd2b.png HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 113398\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\netag: \"12ce7bd0-1baf6\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":113398,"size_decoded":116045,"mime_type":"image/png","magic":"PNG image data, 686 x 686, 8-bit colormap, non-interlaced","md5":"b338c29508f41ff4288a2c55a3672d7d","sha1":"e82184dbf2055be77e4178441047a007f38c35aa","sha256":"bb9a91083e905e34fee211d79e78011ed2df30b1526503a997f3608e4be66952","sha512":"769b0acd5932d001d976e8fce1747b6f09b028cbf974467742381f9e7a779f306f58f76411323710b76c13501bb18fa3b69a663973f71431d3cd2f57f081018d","ssdeep":"3072:WkiGV13FXb0QbtcZg1GEos03XI3ZqbGQxl:WkiGl0DZidhwXIwl","tlshash":"37b312c14aa49721dca169fca0521490e7d78eaf3a2ee93b4717fcd34938d7b8790107","first_seen":"2026-07-07T07:45:26.692974Z","last_seen":"2026-09-27T18:44:32.122352Z","times_seen":5,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/static/media/close.18270851a37b5ec5763f.svg","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.252Z","timestamp":1790339657252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/media/close.18270851a37b5ec5763f.svg HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 359\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\netag: \"12ce7bd0-167\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":359,"size_decoded":3005,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"166b0217ed39b5dd8a280001e3c5fa1c","sha1":"30d745f6e0f0ee47b0a556ea32ca37854c03fd14","sha256":"64a22180ddc41ac5f67e9ad72fc31682db770c1e6ef938cc22a8198a80daa32a","sha512":"6d8181de6d3af6f84622ff5a46aacc35bebd1191a2d405c32da63d1eedd959ac408a23572f2b3cd9c33b450dbe278e0e29eab0f20306b0181320a4ba1d50955f","ssdeep":"","tlshash":"71e08695c81cf65c34df4373e9387fc13d1532ba184804b891dc893215d5699e387155","first_seen":"2026-09-25T12:32:02.83775Z","last_seen":"2026-09-25T12:34:55.093987Z","times_seen":2,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/static/media/logo-min.e831959903138193764e.svg","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.570Z","timestamp":1790339657570,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/media/logo-min.e831959903138193764e.svg HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/static/css/309.813e4ad0.chunk.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"12ce7bd0-6bf\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1727,"size_decoded":3553,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cac93250b9c4f0afcbadfd56c3235314","sha1":"5a0a4659ed2c7312f9b88d8b0850c61ef2850c33","sha256":"580353029f9875c9ab160e51fd6f5cdb0747cabe3111840d42fe89407625720e","sha512":"cae19f8a92fde1f1c6aa4250ec2a85d9ab1332ba60ae4d742940b33f659ad8939e0bf6a1a60cac41faa5cbfd2c36ad51ff0149393ba7004f55812bdfba49f1ba","ssdeep":"","tlshash":"183194a77b7197ec4a4acbc48d0398f9897e74f1be678ad446fca73098335a42d008c0","first_seen":"2025-06-15T18:43:53.947831Z","last_seen":"2026-09-27T18:44:32.036834Z","times_seen":52,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/en/","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-25T12:34:16.624Z","timestamp":1790339656624,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /en/ HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:16 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 06 Sep 2026 18:03:07 GMT\r\netag: W/\"6a9daadb-ae0e\"\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":44558,"size_decoded":15002,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40517)","md5":"aa23282bede9f9b919309e8720099fd0","sha1":"c853da785d37b7c2ff2c3d476c10064fbe0aef50","sha256":"85492dab74f1de191a9bacdb3f70815c797182c05f1d53c5a0afc235d07b8701","sha512":"8c30a4f4d73715109bbb22b82bb51564eb89cffb9959ba663c01870cbad2c52ef8f63ab16667bcbe3417e1189763425fe6f07d65b0141baea41d62174453f446","ssdeep":"768:WNgx91DE74iTzMAbze4oU5ha6lB4ajUjB2m6YEz/qaFHhWLHyylbk2km2vU15e1i:agx914zM8ze4oU9mwTYzwzLDOYjPmxHn","tlshash":"e21386b18a24d6bf51279dd8b937ab8d71ca825deaa70e549efccb6417c3c80f913404","first_seen":"2026-09-25T12:32:02.832246Z","last_seen":"2026-09-25T12:34:55.095443Z","times_seen":2,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":6,"connect":16,"send":0,"wait":194,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/_astro/LanguageSelector.astro_astro_type_script_index_0_lang.DEuX9PX9.js","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.231Z","timestamp":1790339657231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /_astro/LanguageSelector.astro_astro_type_script_index_0_lang.DEuX9PX9.js HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 665\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\netag: \"12ce7bd0-299\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":665,"size_decoded":3320,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (665), with no line terminators","md5":"1d28993185634d91c6c037731a07bf63","sha1":"5bc2563c7b7ae890de956f5c8af8975cf94c7df8","sha256":"88b9cd6318f7ed2956dab328662bb7a6f6649f99a7e069e2d271a60f7b3d881c","sha512":"22dea33cc569a58b56d259916a8a59c84385d4a9afaa8f0bfbdd48bc7442e5a7188308888381b830528d6cc852e3d80cce4e7751171536a15d9adfce8b5c995a","ssdeep":"","tlshash":"d5011b71b39a107701dad5ca88493b402186a1aaa00e083c881f0c2a63b9b9f20f2b36","first_seen":"2026-09-25T12:32:02.845316Z","last_seen":"2026-09-25T12:34:55.096213Z","times_seen":2,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/static/media/golden-knife.d8f9e556886d6b49d4e8.png","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.243Z","timestamp":1790339657243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/media/golden-knife.d8f9e556886d6b49d4e8.png HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 163790\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\netag: \"12ce7bd0-27fce\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":163790,"size_decoded":166437,"mime_type":"image/png","magic":"PNG image data, 686 x 686, 8-bit colormap, non-interlaced","md5":"97c59fa99e9c5a86da6970e4faca9279","sha1":"3970ff77529930c929089ff4209634948dae89f0","sha256":"226a627705f2b0d1f6472cc56682ca9f9e68d90b6e4675fa699526302d815e4a","sha512":"10a5b884aee7f67ac9328734511d9fed9a640b37c175dc55189b421a3ccc0a46fb235fe03f2381c59cbff3c6c53a6654c2431b342383b87eeb86b1a3b6a995b6","ssdeep":"3072:OmcLAv3i1C8h+E9Fw8wQlj5JaPK4f+s2k8fMCNDavZZ/jS:OmJv3i1CM+Ee8V9QPK4x8ZYT/W","tlshash":"93f3120b965bf311bffd8db91f4b291b42442c79c34f3a6559a5192e1e223e2c900dbb","first_seen":"2026-09-25T12:32:02.83097Z","last_seen":"2026-09-25T12:34:55.096864Z","times_seen":2,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/static/media/desert-eagle.bf3a81fe2187efcf13d4.png","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.247Z","timestamp":1790339657247,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/media/desert-eagle.bf3a81fe2187efcf13d4.png HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 181698\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\netag: \"12ce7bd0-2c5c2\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":181698,"size_decoded":184345,"mime_type":"image/png","magic":"PNG image data, 686 x 686, 8-bit colormap, non-interlaced","md5":"a59eac61c824c2d437c90e3c07be278f","sha1":"9bf2e2c24d00684ade3716e54d432f34f41999d6","sha256":"84082224d80f0c6fd9405edb9a612f186770086e36fb26cf2c63a96a44b8e0e5","sha512":"414974ce3d639d519f68aed1dbbfe09583bb8cd11c4dfc898e7bbf71f387c4757684e95543e44ce3caa7728fe876a50af0eb242d67ec19d2d7b1fee151981b44","ssdeep":"3072:wBMTa8L/SEPDgAivL0nOSWQXpkM+6Hh/YeJn5opqMsUJjKm/U44AVYoT6uvdoM4z:cMviT0OSlXpK0h/YVPeyUwL+h9f+4Zj","tlshash":"a0042305ea1ad894f3cd66f2b0f1d31921fa0cd96cd1d5580e6ab0f235ba2159cc2aec","first_seen":"2026-07-07T07:45:26.674529Z","last_seen":"2026-09-25T12:34:55.099339Z","times_seen":4,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/static/media/logo-grey.5311b3efc232ad255b2e8befab92e41a.svg","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.250Z","timestamp":1790339657250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/media/logo-grey.5311b3efc232ad255b2e8befab92e41a.svg HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"12ce7bd0-76f\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1903,"size_decoded":3687,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"33faff8ac61b052a3b7a4db8f135c766","sha1":"d2dfba49e1e4ffbf86e4ec919cf4d97b172e5ecd","sha256":"40793f14fdca53c99ade6674eb8a7d8d420a5f9a6ac51f7e9860f733e512fffd","sha512":"b86c5cebcdf206dfc3243cec9137d584aec2b98a2803f9d548a445fa4921d869f0da31694f9b6a3afff2bb03b13c4a1c65d0ebe5ea671832f5b3117ed4ed5974","ssdeep":"","tlshash":"f541a4e743a0c1a8994ecbe5ed21d928230f60fb1d8203c41df8df64610aef45a491b8","first_seen":"2025-06-15T18:43:54.019331Z","last_seen":"2026-09-27T18:44:32.081182Z","times_seen":51,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/static/media/steam.3800c3a1e0f08b0f59a5.svg","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.252Z","timestamp":1790339657252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/media/steam.3800c3a1e0f08b0f59a5.svg HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 969\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\netag: \"12ce7bd0-3c9\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":969,"size_decoded":3615,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"10b67267b3a5ca7a8f1bc184f89514b0","sha1":"3828fee69a08a156d1662283cec426e0cedfab00","sha256":"45523798815b3c9a7bd0351fbf20faddd5080168d4e22c7c131945cce8073975","sha512":"475004fa83c166e42fb9e1116e6f75c8a3d7b8a426105d99e756a421477bf7772d12c3c947f55acc98496ba7992bca6eb19f60d17fdac639ef05eded74543ed8","ssdeep":"","tlshash":"e61178d5e725c65c788aaeb97f75a89b430d91792d800adec96ddd999003a8cfa0b200","first_seen":"2026-09-25T12:32:02.870311Z","last_seen":"2026-09-25T12:34:55.100958Z","times_seen":2,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/static/media/inner-logo.b3381f74a0b3112e4de5.svg","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.568Z","timestamp":1790339657568,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/media/inner-logo.b3381f74a0b3112e4de5.svg HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/static/css/main.5d3c385f.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"12ce7bd0-713\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1811,"size_decoded":3584,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6bc42fbab031f3928d71d60b312fd03f","sha1":"f9771f177a17f41a60c47a7d8566e266782c4fa8","sha256":"d4925780fba9f690ac697ef023ccf4f84d28a5daa9f99932128d469dd3b1a0f2","sha512":"8ce73af81cc329682f43bfd44aebb69e0e6aa93c67d064b7077c4be3a60cfbbe3692489cdbe42c6f4be2effc7bea4f4feef84546e892981f91afeb27108b2c6b","ssdeep":"","tlshash":"663165d72358b6c8c94fd322fe367cb86a5c78f899f492c586a05f10f9715d4a5094b0","first_seen":"2025-06-15T18:43:53.95844Z","last_seen":"2026-09-27T18:44:32.019404Z","times_seen":51,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/static/css/main.5d3c385f.css","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.221Z","timestamp":1790339657221,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/css/main.5d3c385f.css HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"12ce7bd0-5df36\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":384822,"size_decoded":74267,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"fad8ce6d083c91970202c79166d410c1","sha1":"5668a5c7d328f2160155712b83ee1dc97b2885ab","sha256":"85150cc9052668f6a199254ff1c6c86c1d8f77477b25f2285c829b69a97ea8d6","sha512":"b3b0ed95ddd9ea3ab5ae628faaef292da6435b70f495d58149d30b439403a7d23dd97cb333f647b4601f4a3d3bfe694ce36982c256497849393537544cd2d534","ssdeep":"6144:ROd6aVSsY8XQlyZ2LFtpyi8CQP7QFLY+CWqTRlGZeWY0dWmVHXboT20:ROd6aVSsY8XQlyZ2LFtpyi8nALY+CWq5","tlshash":"7684c6235555203cb06bda66e0c1adac722c9407fb7b1ffeea64346dc1ca6c61233e49","first_seen":"2026-09-25T12:32:02.881728Z","last_seen":"2026-09-25T12:34:55.102458Z","times_seen":2,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/static/css/309.813e4ad0.chunk.css","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.222Z","timestamp":1790339657222,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/css/309.813e4ad0.chunk.css HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: text/css\r\ncontent-length: 27849\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\netag: \"12ce7bd0-6cc9\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27849,"size_decoded":30408,"mime_type":"text/css","magic":"ASCII text, with very long lines (27849), with no line terminators","md5":"773c148dbe03d1e6a1d3112c45d6185f","sha1":"083b720fca05e5976ff0520c4de90b3040c18578","sha256":"b90f16050c69617ce461c64e98736d02bd0021c7dfdeb9399d39c31a97f04fa2","sha512":"92f26103976b9b4586ffff723c0d34cdbfda545d7575163d266bffcf8945ffbb652917d24c01d14c3c658ed8c3f28215097e0727304da963bdbf624906a5177a","ssdeep":"768:n1gvplmCX8QxxfKqfi8zMjL8lIUDkrGYZ:n1gvDXMQr5a8AjL8lu","tlshash":"02c2b8272915703cb07bca19a4d27d9c326c6807ff5b0ffada54656c91ce6d20637e88","first_seen":"2026-08-29T16:24:55.772314Z","last_seen":"2026-09-25T12:34:55.104963Z","times_seen":3,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/static/media/glock.a5e4f84e0b6db65868a9.png","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.238Z","timestamp":1790339657238,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/media/glock.a5e4f84e0b6db65868a9.png HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 153444\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\netag: \"12ce7bd0-25764\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":153444,"size_decoded":156091,"mime_type":"image/png","magic":"PNG image data, 686 x 686, 8-bit colormap, non-interlaced","md5":"5e7029bd2e83e2a3779a17858f0be086","sha1":"655fd830e3169018ddc68ffe073f9955fe84d0de","sha256":"998cfc328a7333856172feba54ed14c9c92317cbc10816d762d0e0fb426dde52","sha512":"9aa3b45ef55fad47b69eae2501ddeb8290e1fc70433ef41723e651902d964b7624950b571bec1d9cd97cfac21dd00439580d7934e61263788661ee962573e270","ssdeep":"3072:TdCHSS/vO54tBXOF82nPmQJXOqE7ZX/n3mMNFRmVRlkpgT:T6/vO54bOiQJXOtZX/2NkA","tlshash":"3ee312840b5d7788d21a5a39ad9f9d15a30c4f7cc89e3db487642eef1471bc89068f8e","first_seen":"2026-07-07T07:45:26.772403Z","last_seen":"2026-09-25T12:34:55.105538Z","times_seen":4,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/static/media/tec-9.d50109f3a5acd92e63ef.png","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.240Z","timestamp":1790339657240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/media/tec-9.d50109f3a5acd92e63ef.png HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 149454\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\netag: \"12ce7bd0-247ce\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":149454,"size_decoded":152101,"mime_type":"image/png","magic":"PNG image data, 686 x 686, 8-bit colormap, non-interlaced","md5":"b703b6829dfe73b6178fb1e34ef1c096","sha1":"f4469b169654832715486606afe1be1c9d4a04ef","sha256":"953b6aef558b112474fea7892902d258bea5b6424ace6ee91d7c9d8f9eb9c6dd","sha512":"00ddf8dfbb81b09d4ac07e68f820f6babcada8ef6420ebd4f25d085a31a022bdf10932e4e4aa9fbd803295cda0b35ec7d96d1b540741499e982a84d618cb55c5","ssdeep":"3072:Z0m5AHqLfDCbO4JGNX484IlJjBs1VW6/Ky+Y2A/Eeh6TzUp/EF:Zd5ztJLDMW6iHY//bhWgpsF","tlshash":"71e3234dfd1a4013d848dbb63fe758182b7666d17360f0b009c97a121aba1c76abfc57","first_seen":"2026-07-07T07:45:26.747558Z","last_seen":"2026-09-27T18:44:32.050221Z","times_seen":5,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/static/media/gun.58d3e2c79efba20f0e48.png","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.241Z","timestamp":1790339657241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/media/gun.58d3e2c79efba20f0e48.png HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 27988\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\netag: \"12ce7bd0-6d54\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27988,"size_decoded":30633,"mime_type":"image/png","magic":"PNG image data, 574 x 292, 8-bit colormap, non-interlaced","md5":"9177f720f1bc47cab186ec9e9a8f41fa","sha1":"a99a40f29f48d683b27d2a1b6397a0f5eb0eb5d9","sha256":"ac30efb6315614ec268116cbd7a976633ca2e351a79e90618945b9eee062a692","sha512":"a83f4d90868464bb64a57257b671ad023f61c431adf8198a57eeec10312b70beacbec83fa547d8ec9ad548946ce5760651c53362c316e10f057e0766a942c220","ssdeep":"384:IaLH/y4H9qcTLByazzMoRB91GkTjU5OCO9+JwTUIw/FeTx87Zt754UR5+uVMvcub:VpH9XTtyCTRxTjNN99TGXFb4aotvd","tlshash":"7cc2f15eed842cf111a697b0e84a46602462c5682d0372fc72efffa96fdbcc31595611","first_seen":"2026-09-25T12:32:02.850739Z","last_seen":"2026-09-25T12:34:55.106763Z","times_seen":2,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/static/media/bg.11f41738d9d53a3bff64.png","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.251Z","timestamp":1790339657251,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/media/bg.11f41738d9d53a3bff64.png HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 112207\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\netag: \"12ce7bd0-1b64f\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":112207,"size_decoded":114854,"mime_type":"image/png","magic":"PNG image data, 638 x 814, 8-bit colormap, non-interlaced","md5":"3b6dcb0eed02ca52e815b4931bae0f0e","sha1":"09ee4bdb6780e37aa85d22fa02270c156916dc3e","sha256":"6d9e2dadf5c1ebd1ec5fa61ce1efed85431150b10ba4cd7a9d93bb74701c603c","sha512":"b4147d961f7d3f7abd92aa0e24907a6da19007588cda92901365d9554ac26e5cb4293f1808237b2282b80964f5b37648e18a4a0ab83f6dee002b697aceb1fc03","ssdeep":"3072:UKIOOWi283jRGTTqXoYJ9LNbcJZLXjeRs:KOOx2ejRG2oYX5ElXKRs","tlshash":"a0b312f61e3d837cc34d1630b2272c83f198148fa681e98949ee8e75d61a02c67c59de","first_seen":"2026-09-25T12:32:02.842707Z","last_seen":"2026-09-25T12:34:55.108903Z","times_seen":2,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/static/media/small-background.cc2728cdca4a13c669fc.png","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.572Z","timestamp":1790339657572,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/media/small-background.cc2728cdca4a13c669fc.png HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/static/css/main.5d3c385f.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 316487\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\netag: \"12ce7bd0-4d447\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":316487,"size_decoded":319134,"mime_type":"image/png","magic":"PNG image data, 2169 x 582, 8-bit/color RGBA, non-interlaced","md5":"490ca3f4b5074d955331ccdfa09878f3","sha1":"caf27012d911db9f50a425bc1e147d37d1d4d2a2","sha256":"36d77aac0a6ee260f8ca9d1d0a9c7ef88e1d9d3663a853d71dea664f36ec1f8e","sha512":"0992f7a3e8c6b0e95d6f3a6a74fe53614ecd8448072706159053462675d45428f55ed88516dff655a0e27d0ecf097c5ec44c94dc08e5f2bdafe7a24003990440","ssdeep":"6144:C5d8qgc+tic/kvmTk6kuL7C6eEmaSpiTWJpvEb/Y12jyPkVZRl:C4I+wN6D7CWm1pvEb/YEOPsZf","tlshash":"056423d3ed3fbd51c3aea970119a52190d773686953ba432b001a8eda7b15f382124fe","first_seen":"2025-03-08T17:29:15.833739Z","last_seen":"2026-09-27T18:44:32.046295Z","times_seen":56,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":193,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/static/media/email.e606795b2f4dbbdfec19.svg","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.579Z","timestamp":1790339657579,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/media/email.e606795b2f4dbbdfec19.svg HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/static/css/309.813e4ad0.chunk.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 426\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\netag: \"12ce7bd0-1aa\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":426,"size_decoded":3072,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f3f584e0c6fa989ce6480f91edf9a4d8","sha1":"3d22daa589849ee0af0c7a1a3d450ef1adc4065d","sha256":"9ff14b95df3a26b343fea293f32d5b7490122993175fa41437078f9aa0071081","sha512":"28d20f119a50ddcb99ae50d721d320a7e77f6c84bd9dbe99af530da4ba7742bb394c13210853cec49fd03a7f3ec1a9fa049881c345e3b4210a1aac3f9cfdc99f","ssdeep":"","tlshash":"86e0a35f435ee54815dbad58df38f431a10d50d375aa019896d3c223b2044d6a409538","first_seen":"2025-06-15T18:43:54.024842Z","last_seen":"2026-09-27T18:44:32.092439Z","times_seen":51,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/static/media/gglogo.f112631a8a9f8b4b45d1.woff2","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.597Z","timestamp":1790339657597,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/media/gglogo.f112631a8a9f8b4b45d1.woff2 HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://gg-drop.gg/static/css/main.5d3c385f.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 2796\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\netag: \"12ce7bd0-aec\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2796,"size_decoded":5454,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 2796, version 1.0","md5":"6386da235222742f8e6b56e06d3dcf83","sha1":"c6cc3a66f75e34cc07fa54100ec7146d43d09045","sha256":"d37cbc366f77b829820bae14aa602328cc49999d5f015574f1a4cd34ca30e382","sha512":"669058a6608bf28e170eb4f9eb9bb2a880d547941f0fa7171cb9db276e9d0807a719243070513a8c6988283ffcc630afedfde89e8abf87432cfcb9871fffc1f3","ssdeep":"","tlshash":"3e515c84a5a13647f610b33241f314a48f2dc19dd2f8323ca04ea9df26e1144a58df9b","first_seen":"2026-07-07T07:45:26.740139Z","last_seen":"2026-09-27T18:44:32.111322Z","times_seen":5,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/_astro/AuthModal.astro_astro_type_script_index_0_lang.CUQar6DM.js","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.230Z","timestamp":1790339657230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /_astro/AuthModal.astro_astro_type_script_index_0_lang.CUQar6DM.js HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"12ce7bd0-b73\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2931,"size_decoded":3794,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2931), with no line terminators","md5":"91ee60f6602f2d8b420571155f91a4c2","sha1":"f3acf1ccc1826d6e50c8025f7fcafbe01152c3ef","sha256":"7e8fe520ca8d430c994b47facfd0b1d320f1a0d18d29d567d135adbe6cb09815","sha512":"dac3fa2644f07c17a776fd35d672d5ef60b69b40f6aab63d986d03db9172cded27f4c1a9cc239f3bb4130a12c714483910d47da2c6c4eb5723ce3a98a05bf2cd","ssdeep":"","tlshash":"b05143b1f37e76b509ef17d7a0baed91376978c7504e0024a12a4e1a112eec170d1bb6","first_seen":"2026-09-25T12:32:02.857652Z","last_seen":"2026-09-25T12:34:55.114015Z","times_seen":2,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/static/media/starship-troopers.4bcc79f68574b2d7c377.png","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.245Z","timestamp":1790339657245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/media/starship-troopers.4bcc79f68574b2d7c377.png HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 197508\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\netag: \"12ce7bd0-30384\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":197508,"size_decoded":200155,"mime_type":"image/png","magic":"PNG image data, 686 x 686, 8-bit colormap, non-interlaced","md5":"f8f6a30c8ef002cc2d2a79cd2ef21f1b","sha1":"50b37f4c1ace755534f3a8891837b7f142975ee9","sha256":"e601ea7b0bd821b372a659c9563998abd0bcfda99962b423701461def8a04cc1","sha512":"07beb5bfce4478353132a7ec5ca300b16c3827805ebb9d1cc922066915c8154f957da490a5115be5ac7f88717d4e56ff63c143fb1f7d3d49a2a31c4a3951776c","ssdeep":"6144:Sa3UGke5NM74MOegK1xzmd13P/Kb8nB94hS:StUMJdts1PeS","tlshash":"571423b3586faabe36f59b39fd3a54c474c35814f935ac307f3269b260a0c185d817a2","first_seen":"2026-07-07T07:45:26.770584Z","last_seen":"2026-09-27T18:44:32.041428Z","times_seen":5,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/static/media/charm.c7fadd962592e0bb11de.png","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.246Z","timestamp":1790339657246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/media/charm.c7fadd962592e0bb11de.png HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 144396\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\netag: \"12ce7bd0-2340c\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":144396,"size_decoded":147043,"mime_type":"image/png","magic":"PNG image data, 686 x 686, 8-bit colormap, non-interlaced","md5":"2ec9774a0d49ef96cb96f7eae8bee444","sha1":"1301f01f7ab51aab068e32559a9f64fe1b8f2ff4","sha256":"05b3718bf2f3a6ef99a24b850de066267cc6c9521e1831e459ec11442648239d","sha512":"cbb25695964e9f65274df1ee11ffe31b03c235026c9d923df2496acb6dc222fc1ce966251d74c0f24aa373e6135a02276ffb540b0ddaf46f0f1fb6150259f69d","ssdeep":"3072:+1aTB/EY2ott5Jby0OnlJdME4QxTOkHp7uMQ/ASE6mj:aIB1D75NonjSyxXpiMQ/ASu","tlshash":"1ae312a8e111fa991e41f2bb177748e0cf2db504eeae166f60d77d540a3dbe8b0d4502","first_seen":"2026-07-07T07:45:26.774232Z","last_seen":"2026-09-27T18:44:32.04213Z","times_seen":5,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/static/media/background.6ea26a06df241220b561.jpg","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.573Z","timestamp":1790339657573,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/media/background.6ea26a06df241220b561.jpg HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/static/css/309.813e4ad0.chunk.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 535368\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\netag: \"12ce7bd0-82b48\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":535368,"size_decoded":538016,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 4096x1916, components 3","md5":"214534c70815f48b1d345c40225daf10","sha1":"59c614037d3d0850ddff7ad4a5f2d9cde693d01d","sha256":"cb62cff731fa0fd6c70af6b344df3056321a532963d8fc3d3c5f86308026e699","sha512":"00a26eca2c584549c039fc6593af853f8f98d47cf5e0dea80b915021d069db7605f9a034e76fa097c921566aed65b8c01e597e24970dbe8827058223378e5fa7","ssdeep":"12288:6kqSgtYvHVM5VJKBnTjIzgC3D8jwWzZ1Gxuq3tr37e:5q7tEM5VolIBAjvzZ1GL3e","tlshash":"35b42302e950057be046173eb1cb07f9977728542d461757bf8e9c1e92b3368bea2f22","first_seen":"2026-06-02T18:43:16.958312Z","last_seen":"2026-09-25T12:34:55.119488Z","times_seen":6,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/static/media/Gotham-Bold_Web.d23d96aefe768329255e.woff2","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.592Z","timestamp":1790339657592,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/media/Gotham-Bold_Web.d23d96aefe768329255e.woff2 HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://gg-drop.gg/static/css/main.5d3c385f.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 39264\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\netag: \"12ce7bd0-9960\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39264,"size_decoded":41924,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 39264, version 3.19726","md5":"003e90cf8cb3f8b4bef30d6764da18ed","sha1":"512e44f40b54d0e5e081dda9fd5ea8a4429a508c","sha256":"319881caca6f5f0d1e8e24040579d93386008e39dee1045965124b86303143e1","sha512":"cfc48f671555841551e36445bb1e5fa3cd0232c853b24da0a7dafe5c251981a6ec4cb29ff4adf3ed612988249d8ba74246859683eb9302f7056bd92c88b85fa0","ssdeep":"768:PV7oXjYFCWB07dZORB0aJ8UqAZp+ZNhoagVgvCqYNvfSVLRo3nd:PBocFxq7f0x8UfZp+ZNCDmxYNvqVFo3d","tlshash":"1b03f12fd482a371c9cfcea5e9759506cb9079d1b02eb8374bd419cd7e25c8e91822b4","first_seen":"2023-04-06T18:48:56Z","last_seen":"2026-10-10T19:02:26.672692Z","times_seen":1136,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/static/media/Gotham-Black_Web.a772a67ee3b66f93716a.woff2","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.596Z","timestamp":1790339657596,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/media/Gotham-Black_Web.a772a67ee3b66f93716a.woff2 HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://gg-drop.gg/static/css/main.5d3c385f.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 41988\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\netag: \"12ce7bd0-a404\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41988,"size_decoded":44648,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 41988, version 3.19726","md5":"9588e53a15b71ad9ce86d778ac1826ef","sha1":"f4b5eb0dc2ad716a38cd8a5bd35493dcba042618","sha256":"a99144051ae16129c4b4d7205db3efa1caab9a403f75a4e5ae32e445d50ce373","sha512":"82ae08faffcb04ef4ea1be7f700b619ae38146254da1b55cf7664769273d952e80eff1f9cec7e3b6932660d242fef54289288856b5e9a1fc523389057f32c732","ssdeep":"768:wjJ9j95Y3qiu4YSuQgljriSzn/clUNfeNiAo8cmOxG34Vhv5gkc9x:wjJ9j9SZAp/7clUNfr3mrQv5gk8","tlshash":"1c13f1803bef13aa267934e04cd839115bb966635bca5190cbc06ccfd5c7547f8939b9","first_seen":"2023-05-09T16:35:28Z","last_seen":"2026-10-06T02:29:00.054287Z","times_seen":207,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/favicon.ico","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:18.048Z","timestamp":1790339658048,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_3QGCLDE5MK=GS2.1.s1790339657$o1$g0$t1790339657$j60$l0$h0; _ga=GA1.1.1487889484.1790339658\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:18 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 3468\r\nlast-modified: Thu, 03 Sep 2026 10:33:10 GMT\r\netag: \"6a994ce6-d8c\"\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3468,"size_decoded":6029,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16 with PNG image data, 16 x 16, 8-bit colormap, non-interlaced, 32 bits/pixel, 32x32 with \n- PNG image data, 32 x 32, 8-bit colormap, non-interlaced, 32 bits/pixel","md5":"5771e81dd33b844ecd67cdce2abbfd7a","sha1":"e1711fbaf82b18258deb955e51c68337beac0b85","sha256":"33fe0542272bb73334ee88473d994469606095a38041d3f52ab86a850b4e85ca","sha512":"ba944ff1a2a75c2eb8eabec6248265dfd3bdafd2191323bf7a3a60aeeb2180b137f6c13036a7e2a2c4f198739ab6f413bfcd418d9cd8f38961ee7b3d50af4793","ssdeep":"","tlshash":"ab612bcb6f359a27de3b10298b84ce35e964c82d7a51e27f9e42dc0f5a11304f85470b","first_seen":"2026-09-25T12:32:02.880181Z","last_seen":"2026-09-25T12:34:55.12418Z","times_seen":2,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/static/media/classified.b1244f11c1af5ddbb6d2.png","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.248Z","timestamp":1790339657248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/media/classified.b1244f11c1af5ddbb6d2.png HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/en/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 163651\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\netag: \"12ce7bd0-27f43\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":163651,"size_decoded":166298,"mime_type":"image/png","magic":"PNG image data, 686 x 686, 8-bit colormap, non-interlaced","md5":"c3475938fff493601409cfd2cf9ab5e4","sha1":"7926634a93080512d44e90ea81935c37e5f83f7b","sha256":"9ef1f1576f837b8129f2988535d435d0f41e721cdf945126e5e476cb2dcea703","sha512":"3e39efce0f2c41d231181a54cc53fbb22ff49c34a24ee41d18c9c7a76051073773e8a3576153e127a252fce38da7411caa039fc34105b13fb81859e661578017","ssdeep":"3072:MYNbNBARuXrfu4x1b0JHe5wNTSCZim3WJJkLLG7rRvWeV6PVqD:M+5muq4x1qH7eCZa5LEVqD","tlshash":"b5f3229d29788139cec308bbc3b444897e4b4aea9879653dcf246417bdedb55b0601f3","first_seen":"2026-07-07T07:45:26.661901Z","last_seen":"2026-09-25T12:34:55.129441Z","times_seen":4,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/static/media/lang-arrow.bd057616be30d595bc19.svg","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.571Z","timestamp":1790339657571,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/media/lang-arrow.bd057616be30d595bc19.svg HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/static/css/main.5d3c385f.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 221\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\netag: \"12ce7bd0-dd\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":221,"size_decoded":2866,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0c0e0306327cf11fb1665166d87ed8e0","sha1":"cccbfe3afda04037c875c35a4148e29059cbfb2a","sha256":"cadc399ef97ab7f3308275daab44051d1e82ba1b7b93a45d77cc8e41ef388ca0","sha512":"ba43aa49599a44c8a6f86cd8dde06ef691aa682c85535fde172ac6f02106ef006fc22bbb66ae531191d8c60edc1270fce80047064b9227203708a23b765a0d7a","ssdeep":"","tlshash":"15d023d96054dcc17d254d70d63ca1f618b7106b2dcc04dce2d1ba1471503e735042a1","first_seen":"2025-06-15T18:43:53.963616Z","last_seen":"2026-09-27T18:44:32.060001Z","times_seen":51,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/static/media/character-landing.625a338685aa8d02ec28.png","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.577Z","timestamp":1790339657577,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/media/character-landing.625a338685aa8d02ec28.png HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gg-drop.gg/static/css/309.813e4ad0.chunk.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 210107\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\netag: \"12ce7bd0-334bb\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":210107,"size_decoded":212754,"mime_type":"image/png","magic":"PNG image data, 1176 x 1218, 8-bit colormap, non-interlaced","md5":"dd611c310c330bbc3d382e5f1584836c","sha1":"c4b4756d62690a1d2a5ab243db4f7cf1abd1005b","sha256":"68cdf180ff8a49bf0dc33627502bfb0e891f0d9f943601402d563344595b5dda","sha512":"9f155f91c41166c93ae299716e9facdcf60f0b2d9cfe8b49f78dd2f5765cad80cfa867d8a2c3c171aaf98ee30ab3a6c7524d3a96683f3fe956102e187d02b146","ssdeep":"3072:Gi38dwxQaQD2smWdDEkMhd5/81tVe2IylJqdq5DplQFeaz7yHGMZpJsZzKx:RMixQVD2sXfE/SqsJqdK8AazoZpyNE","tlshash":"5624133e4d7394057f81a749e08e593d20a9fb948705ea97182e4009fbb7e3f91be097","first_seen":"2026-07-07T07:45:26.658549Z","last_seen":"2026-09-27T18:44:32.065708Z","times_seen":5,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg-drop.gg/static/media/Gotham-Book_Web.7fa96aa06775160ee646.woff2","fqdn":"gg-drop.gg","domain":"gg-drop.gg","tld":"gg"},"ip":{"addr":"185.82.202.140","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gg-drop.gg/en/","date":"2026-09-25T12:34:17.589Z","timestamp":1790339657589,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg-drop.gg","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:20:10 GMT","end":"Wed, 18 Nov 2026 17:20:09 GMT"},"fingerprint":{"sha1":"D9:BD:C9:3F:A8:31:07:E8:AB:70:2F:90:D2:79:E7:9F:A7:01:DA:11","sha256":"B9:75:4D:F6:2A:71:0A:58:9F:7D:DB:BC:92:4C:57:04:6D:0E:CD:57:17:DE:A5:75:21:DA:C6:8B:55:5A:45:67"}}},"request":{"raw":"GET /static/media/Gotham-Book_Web.7fa96aa06775160ee646.woff2 HTTP/1.1\r\nHost: gg-drop.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://gg-drop.gg/static/css/main.5d3c385f.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 25 Sep 2026 12:34:17 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 41728\r\nlast-modified: Mon, 31 Dec 1979 21:00:00 GMT\r\netag: \"12ce7bd0-a300\"\r\nexpires: Sat, 25 Sep 2027 12:34:17 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8yNtLOB5z5k6tAO8d09M/CW0Rdf4xm6vOPRlHIZ/AA8=' 'sha256-HcLfpp3VIa0Ym6NsEouPDBjPT412By6eOM58Wp8nUwY=' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self'; media-src 'self'; connect-src 'self' https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com; form-action 'self'; manifest-src 'self'; worker-src 'none'; frame-src blob: https://mc.yandex.ru; upgrade-insecure-requests\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(self), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":41728,"size_decoded":44388,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 41728, version 3.19726","md5":"d838b98f75e3cb9574f9b8b796eb1e8f","sha1":"fcdf131af872ce9ecda9a437cdf67d23c5940d97","sha256":"3f51250e2d3ef478f59bc89cb67681b5ed423f8f8dc22062fb49e101e5032a2e","sha512":"b9a5cb0b79a3cc3d36cb024499b50fbc9832052108bf68952939cb752c7419a5db73d9dc57642d4a01c5c3b576e8c9f2e4010674208ec577ab809f9ee371a5dc","ssdeep":"768:Xa5GO9xigWhvCgoEhnnTNsLRd/ToK+gIDJJaRYq4vWmTet+C:XxOKVaQhnRW3oK+gIlJaRYqSWmPC","tlshash":"a813f1220c6cef5d9a4d22a9b7597ac6d55f7e3d08aac1c122e2a09f913307bd00b57d","first_seen":"2023-04-06T18:48:56Z","last_seen":"2026-10-10T19:02:26.753083Z","times_seen":1087,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}