{"report_id":"cb336df5-847f-4b0d-89db-12c17d0ad3f5","version":0,"status":"done","tags":[],"date":"2026-09-09T19:27:21Z","url":{"schema":"http","addr":"gg9.live/","fqdn":"gg9.live","domain":"gg9.live","tld":"live"},"ip":{"addr":"91.218.49.176","port":0,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"final":{"url":{"schema":"https","addr":"gg9.live/","fqdn":"gg9.live","domain":"gg9.live","tld":"live"},"title":"Dashboard • Premium Rewards","dom":{"size":18823,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (515)","md5":"e98d2067e1c7379317d830daac7f5fc3","sha1":"b48e3856696eaf759aeaa3e42711a0c890d179e1","sha256":"caa6964f069986a5fa21850c0d8f04b83b6f131ddba78979447119eb14c1c5d1","sha512":"3b6bd3bde4873b23091c48ce95a2e782578a3f7516a82b8a99b4f451148ace44d02d445f7d98a9e717aaf73abf4547a01d8449c0417c792e4177be9b1ac56308","ssdeep":"192:TOaaCY5WNK3Cf+SCOCNNC11JwlCNfTCHUCQCbIhYIQ9GJI00jT8:Try5sPpJwpvI4T8","tlshash":"3582542096e3592b1123d1c5e7e15f0f26b98307d9070d94b3fd29b28fcfca54957299","dom_hash":"domhash4b2830f2297fe8afac56be74c35951c2","first_seen":"2026-09-09T19:27:26.990746Z","last_seen":"2026-09-09T19:27:26.990746Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"gg9.live/","fqdn":"gg9.live","domain":"gg9.live","tld":"live"},"ip":{"addr":"91.218.49.176","port":0,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-14T19:27:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gg9.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":3,"received_data":98763,"sent_data":1656,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gg9.live","ip":{"addr":"91.218.49.176","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-09T19:27:21.914276Z","last_seen":"2026-09-09T19:27:21.914277Z","alert_count":6,"request_count":6,"received_data":255328,"sent_data":2883,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"img.icons8.com","ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2011-10-04","domain_rank":218854,"first_seen":"2017-05-26T09:10:54Z","last_seen":"2026-09-06T13:45:58.93447Z","alert_count":0,"request_count":6,"received_data":25485,"sent_data":3269,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn2.iconfinder.com","ip":{"addr":"172.66.149.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-02-23","domain_rank":593566,"first_seen":"2012-06-03T18:50:45Z","last_seen":"2026-09-06T02:11:01.461329Z","alert_count":0,"request_count":1,"received_data":11258,"sent_data":581,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":3225,"sent_data":521,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-06T23:07:00.048542Z","alert_count":0,"request_count":1,"received_data":9797,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"images.unsplash.com","ip":{"addr":"151.101.194.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-05-29","domain_rank":86676,"first_seen":"2015-08-06T06:03:25Z","last_seen":"2026-09-02T20:51:56.297327Z","alert_count":0,"request_count":1,"received_data":102073,"sent_data":588,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gg9.live/","fqdn":"gg9.live","domain":"gg9.live","tld":"live"},"ip":{"addr":"91.218.49.176","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"8248577ea9a3ea5cf6b673e17bc12295","sha1":"2f6e8570df38f0d05c55cfa24da42cfa804c768a","sha256":"bf1136ee27ae677444bb108bb41830f6e5d6280976b973d566738f38a5cf790f","sha512":"b47bd55a4db64934170002231d4e0fde54a12681cd349fca1af09505547feb095c6def1d0bf5f1aab991c92daa8050f83fd78b7d49e156ba88c592759beb82fb","ssdeep":"","tlshash":"37310f2a9bab2c350bf7d55227cb63193b2600432149fa04bdde93a04fc0f67c8b82d5","size":1589,"data":"","first_seen":"2026-09-09T19:27:27.021165Z","last_seen":"2026-09-09T19:27:27.021165Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vanilla-tilt/1.8.0/vanilla-tilt.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ced3e3eb507e10488ab33071e1485e4","sha1":"595e15c3875d48b0e08bfe345d3a49fbe93e6b26","sha256":"2f5cd6777fad1cf114030be3341d16177ac5bd99c216d4dfd52c57f4aba18710","sha512":"457fce16e82dfdb920c11420e01db629813bf5d421c1a3e9d8865a03f63253718ca3fa98ec6ad79221ba0efbf09ddb3afc379f09fc0f4e00979da0ba9c081563","ssdeep":"192:KTUXr5ZiULXx5ORyxLDgVT0SGkb9XQPKUFdTRet:KMXXORyxLDgOfuCdTQt","tlshash":"bc020f0436269d3e14edc39be82693453336a1462961706c797cccef5a21ccd727dbb9","size":8784,"data":"","first_seen":"2023-09-20T05:29:55Z","last_seen":"2026-09-09T19:27:27.005616Z","times_seen":1792,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg9.live/js/main.js","fqdn":"gg9.live","domain":"gg9.live","tld":"live"},"ip":{"addr":"91.218.49.176","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"b93a7c43b9a2037602c48ae03d2f6b89","sha1":"ec1b8a8a0cda24d27df08db3e5054f2b05e12174","sha256":"b5a7f2799b56a3ae40d4bb98729ba77d8247b830d10a9e6186488428ded3da6b","sha512":"e58dd19676c493bad0357d073779c6fdec71a13a657127b68c8f9e46f741f1284b1d381d700ea4a2c9b3bb967dd17835c30d7c8d374df30868050900dc118acb","ssdeep":"","tlshash":"e88122ace23750a2167332b91b3771011575539b6e8acb697fed83002f8eb54f0a56ec","size":4086,"data":"","first_seen":"2026-05-03T05:58:46.024384Z","last_seen":"2026-09-09T19:27:27.014976Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"Aurora Hub Premium Initialized.","filename":"https://gg9.live/js/main.js","line_number":92,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gg9.live/","date":"2026-09-09T19:26:48.784Z","timestamp":1788982008784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://gg9.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 10:19:45 GMT\r\nexpires: Sat, 04 Sep 2027 10:19:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nage: 464823\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":32921,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-09-10T21:21:05.9709Z","times_seen":31238,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":21,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg9.live/styles/main.css?v=5","fqdn":"gg9.live","domain":"gg9.live","tld":"live"},"ip":{"addr":"91.218.49.176","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gg9.live/","date":"2026-09-09T19:26:48.631Z","timestamp":1788982008631,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg9.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:51:03 GMT","end":"Tue, 08 Dec 2026 07:51:02 GMT"},"fingerprint":{"sha1":"F6:96:AC:AE:5B:A7:39:24:20:AF:CC:C6:44:C5:05:00:B3:2A:6F:E5","sha256":"0E:F2:10:01:A5:5B:E3:F0:28:D2:50:89:0B:7C:BE:C9:F8:17:39:55:78:37:8C:75:B6:6E:DF:CB:27:BB:9D:24"}}},"request":{"raw":"GET /styles/main.css?v=5 HTTP/1.1\r\nHost: gg9.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gg9.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 19:26:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 27 Aug 2026 00:12:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3278\r\ndate: Wed, 09 Sep 2026 19:26:48 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13554,"size_decoded":3607,"mime_type":"text/css","magic":"ASCII text","md5":"6b80e0e8b0822fa090806e8e2a47c728","sha1":"105cdbd703af561ab4868878741ba49dc759bc97","sha256":"888136db23476e560e3c11519db6af6b9995ec40d6030f01d9fec31d3a0de593","sha512":"427c1565abf07297d92e40b369ada01e60bb9b80727fec25cd40d2d2d6cf293f6e31986467d381f24466a130e4569e791e78dd1581b75b04cc6d2c1e8756495d","ssdeep":"192:XRge61McaT/zNyrxuUtRNP5EfqGVweML/cC/hBHhSzN2XGlF2zR1QwDF0wmu4ztM:XRgt3TJhSzPFGF5bKUGY","tlshash":"ac529556aa931685b41bd5897fe7c78973ac9003c10bcd7e3bda2158cf8d1e8a1d1b88","first_seen":"2026-09-09T19:27:26.995815Z","last_seen":"2026-09-09T19:27:26.995815Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gg9.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.icons8.com/color/144/brawl-stars.png","fqdn":"img.icons8.com","domain":"icons8.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg9.live/","date":"2026-09-09T19:26:48.652Z","timestamp":1788982008652,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1004834818.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 18:45:53 GMT","end":"Mon, 02 Nov 2026 18:45:52 GMT"},"fingerprint":{"sha1":"83:74:26:8D:0F:24:02:69:9F:17:C7:78:5B:64:C0:B3:44:07:1B:84","sha256":"94:4F:E8:BC:02:99:EC:70:E5:D4:2A:D5:E7:B0:97:30:78:D9:E2:10:8F:F3:71:BD:68:2D:69:AD:D4:E2:47:3F"}}},"request":{"raw":"GET /color/144/brawl-stars.png HTTP/1.1\r\nHost: img.icons8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gg9.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 09 Sep 2026 19:26:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 5935\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: icon-id, icon-size, icon-format\r\nicon-id: 1idlFBciqruX\r\nicon-size: 144\r\nicon-format: png\r\nlast-modified: Fri, 28 Aug 2026 09:19:05\r\nversion: 0.0.29\r\nfrom-mongo-cache: true\r\nfrom-redis-cache: false\r\nnot-found-platform: false\r\ncache-control: public, max-age=302400\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-77-nzt: k8EcuCz54xIKaK7VnD3fnWm066oKzHJdLMpl0DRRA3olvisgm8xWDQL8EyyYHlR0Sg\r\nx-77-nzt-ray: e2f75420d18a4e4f21b3a16aa1842b10\r\nage: 879\r\nx-77-cache: HIT\r\nx-77-age: 4739\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5935,"size_decoded":6680,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"99c90f41218b859f333c6fb7aa73dd6f","sha1":"65c2c0eb10a5c58168be964d056809dcf3473037","sha256":"96d91a0caf0b02772b87e2bc2a26c296f203d20f06a3817c8d0df9dd6caa517b","sha512":"997cf52efa3041e34c06e01f62968e79c70dbfeafb44ff53e957a3a1fdc6461c1171b28d471e2887730576f51092e7ead3a165ac8c9fa4dde04861343d7bf5b5","ssdeep":"96:MSgsd45XD7207KLkbCsxY8TuQ9Wk8KyLTuZFVuoNv1LWPq68kzEfezT+pPWlssMB:MSgsd45v2HQe18TuOTpZK41LWyzPfe+B","tlshash":"4fc17dfb356375b812805f9ca9320b2a751f489aa8e4140f1d837d35956e973c514c7b","first_seen":"2026-05-03T05:58:46.029196Z","last_seen":"2026-09-09T19:27:26.997861Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3619,"timings":{"blocked":57,"dns":1,"connect":10,"send":0,"wait":17,"receive":0,"ssl":3528},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gg9.live/","date":"2026-09-09T19:26:48.785Z","timestamp":1788982008785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://gg9.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 10:19:45 GMT\r\nexpires: Sat, 04 Sep 2027 10:19:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nage: 464823\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":32921,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-09-10T21:21:05.9709Z","times_seen":31238,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":27,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.iconfinder.com/data/icons/popular-games-1/50/fortnite_squircle-512.png","fqdn":"cdn2.iconfinder.com","domain":"iconfinder.com","tld":"com"},"ip":{"addr":"172.66.149.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg9.live/","date":"2026-09-09T19:26:48.648Z","timestamp":1788982008648,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconfinder.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 10:00:54 GMT","end":"Wed, 02 Dec 2026 10:58:27 GMT"},"fingerprint":{"sha1":"9A:11:A4:EC:D5:4B:F7:80:C4:49:83:8B:75:C9:BE:9C:5E:F7:52:5E","sha256":"40:E3:3B:3A:C9:40:BA:22:68:8D:18:C1:ED:59:39:45:6B:C6:F7:78:CB:B3:D7:4D:7B:D5:64:93:F2:53:B5:A7"}}},"request":{"raw":"GET /data/icons/popular-games-1/50/fortnite_squircle-512.png HTTP/1.1\r\nHost: cdn2.iconfinder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gg9.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"5209842.png\"\r\ncontent-security-policy: script-src 'none'\r\ncontent-type: image/png\r\ndate: Wed, 09 Sep 2026 19:26:48 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=AudmDm6Tx4MUDpGPSJpIAFsh2b2q6lPc1dtz9Ykwl8k%3D\\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\\u0026ts=1787990283\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=AudmDm6Tx4MUDpGPSJpIAFsh2b2q6lPc1dtz9Ykwl8k%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1787990283\"\r\nserver: cloudflare\r\nvia: 2.0 heroku-router\r\nx-request-id: 374485fe-f488-15f5-6d4b-ee989b7993a4\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 991724\r\nlast-modified: Fri, 04 Sep 2026 12:35:06 GMT\r\nexpires: Thu, 09 Sep 2027 19:26:48 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a3889632a8e756af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10030\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10030,"size_decoded":11258,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"71c70aa1d46f01f7ab511e9d0a653f2a","sha1":"c072ab05a9ab2adaff8a2d8cea2e4486d63b7779","sha256":"ca48d150b746f73749c4e75b53bd00ac29a47b6bbaafebbfcd4f7f10a0b30454","sha512":"5d21104f256f157c398f4de558e029ad1e2f4e0f3c11ca1a04a90f5750c995c2ad802d5be1ab539e19efa6a56c75e59ff8a3000014b765c56f84f1d11403c9c5","ssdeep":"192:nS8WRIQTvexJ1BAup9IAnrzvRlfhdNx4pJKYtCD22vwRTK/iyJt1:S8WRe+upe6JRhdNx4pJKGC6dTK/ft1","tlshash":"5f229e93f924d6edf8373238d0835b1e3a1754647aa3c2036b1249bf1b9c4c72a26bc0","first_seen":"2026-05-03T05:58:46.018744Z","last_seen":"2026-09-09T19:27:27.000438Z","times_seen":2,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":58,"dns":0,"connect":13,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.icons8.com/color/144/roblox.png","fqdn":"img.icons8.com","domain":"icons8.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg9.live/","date":"2026-09-09T19:26:48.650Z","timestamp":1788982008650,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1004834818.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 18:45:53 GMT","end":"Mon, 02 Nov 2026 18:45:52 GMT"},"fingerprint":{"sha1":"83:74:26:8D:0F:24:02:69:9F:17:C7:78:5B:64:C0:B3:44:07:1B:84","sha256":"94:4F:E8:BC:02:99:EC:70:E5:D4:2A:D5:E7:B0:97:30:78:D9:E2:10:8F:F3:71:BD:68:2D:69:AD:D4:E2:47:3F"}}},"request":{"raw":"GET /color/144/roblox.png HTTP/1.1\r\nHost: img.icons8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gg9.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 09 Sep 2026 19:26:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 2370\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: icon-id, icon-size, icon-format\r\nicon-id: 111924\r\nicon-size: 144\r\nicon-format: png\r\nlast-modified: Sun, 06 Sep 2026 09:20:01\r\nversion: 0.0.29\r\nfrom-mongo-cache: true\r\nfrom-redis-cache: false\r\nnot-found-platform: false\r\ncache-control: public, max-age=302400\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-77-nzt: kwUkJe26+alqJGp4QKFS4wCcCjeryz9EtUtfZC3F0KKj+NHede0rPxA1ad6nPaEvjAGrn9I\r\nx-77-nzt-ray: e2f75420d18a4e4f21b3a16ae0263410\r\nage: 418\r\nx-77-cache: HIT\r\nx-77-age: 183950\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":2370,"size_decoded":3116,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"e8fa04914be17439582b5c5a811c4b44","sha1":"fa3b2391316388a30ce7ac89a27d8f2f9091afbe","sha256":"92eb5c2f6f1f14212b65fd52f4f444793d5af04011789ca5bd77307a66b9624b","sha512":"42f22f2698c184b298f80487af6ebe7a7481ab9d5ab0e5a2be46addc80a0361bde290e51af75ca400ee941ba7180faf1661dfab30b1518465f50ca0123e41730","ssdeep":"","tlshash":"95411ac759f91c43a0d910f81d39fa1bca8e676c48b68eb46a0248be017374552502ce","first_seen":"2026-05-03T05:58:46.017221Z","last_seen":"2026-09-09T19:27:27.002455Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3620,"timings":{"blocked":58,"dns":1,"connect":10,"send":0,"wait":17,"receive":0,"ssl":3529},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg9.live/Fortnite_-_Main_Menu_Justin_Caruso_Remix_(mp3.pm).mp3","fqdn":"gg9.live","domain":"gg9.live","tld":"live"},"ip":{"addr":"91.218.49.176","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://gg9.live/","date":"2026-09-09T19:26:48.667Z","timestamp":1788982008667,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg9.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:51:03 GMT","end":"Tue, 08 Dec 2026 07:51:02 GMT"},"fingerprint":{"sha1":"F6:96:AC:AE:5B:A7:39:24:20:AF:CC:C6:44:C5:05:00:B3:2A:6F:E5","sha256":"0E:F2:10:01:A5:5B:E3:F0:28:D2:50:89:0B:7C:BE:C9:F8:17:39:55:78:37:8C:75:B6:6E:DF:CB:27:BB:9D:24"}}},"request":{"raw":"GET /Fortnite_-_Main_Menu_Justin_Caruso_Remix_(mp3.pm).mp3 HTTP/1.1\r\nHost: gg9.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gg9.live/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ncontent-type: audio/mpeg\r\nlast-modified: Thu, 27 Aug 2026 03:01:32 GMT\r\ncontent-range: bytes 0-10059275/10059276\r\ncontent-length: 10059276\r\ndate: Wed, 09 Sep 2026 19:26:48 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"audio/mpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T00:24:32.905497Z","times_seen":18392308,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gg9.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gg9.live/","date":"2026-09-09T19:26:48.752Z","timestamp":1788982008752,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://gg9.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 10:19:45 GMT\r\nexpires: Sat, 04 Sep 2027 10:19:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nage: 464823\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":32921,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-09-10T21:21:05.9709Z","times_seen":31238,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":33,"send":0,"wait":18,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Outfit:wght@400;600;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gg9.live/","date":"2026-09-09T19:26:48.633Z","timestamp":1788982008633,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Outfit:wght@400;600;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gg9.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 09 Sep 2026 19:26:48 GMT\r\ndate: Wed, 09 Sep 2026 19:26:48 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2541,"size_decoded":1108,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ed364e9975777c5f72d8987dbe8cdc82","sha1":"dcfcadba8b85396df705f89156c810ea1c9108d6","sha256":"ff5adcab5e0c9b9af948bab3eb39d240fd62fbb67d6725be6fa70967da3cf15d","sha512":"33cda3fa2039ba6ab89d01b0632e0aefc2e5d5933c3ee09500d326b8c933275cb8196743f52628b20b1e1fcaf563bf622da0e90054d0c99146fe41c2eef63f5e","ssdeep":"","tlshash":"7451dca1082ba144df970cc222ce7e33ef1f62516444d934affe1899ac6bd5a835770d","first_seen":"2025-09-05T14:58:58.372164Z","last_seen":"2026-09-09T19:27:27.004962Z","times_seen":75,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":35,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vanilla-tilt/1.8.0/vanilla-tilt.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gg9.live/","date":"2026-09-09T19:26:48.637Z","timestamp":1788982008637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/vanilla-tilt/1.8.0/vanilla-tilt.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gg9.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 09 Sep 2026 19:26:48 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2207\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 736741\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Tue, 13 Dec 2022 04:33:48 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o9wSKrHmT5utXumgot1ieAzzn339YOUBOGtc1YOTEuSPwnGVJNlJ%2BwHl0ldrVrQTdcaxqPzW3ArBodzcMNRBYZgns9lml4jzUMi4M6ZRiidkElL381VWioHNrPmEUFoPJSn0qEqM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a38896321e5356af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8784,"size_decoded":3220,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8784), with no line terminators","md5":"1ced3e3eb507e10488ab33071e1485e4","sha1":"595e15c3875d48b0e08bfe345d3a49fbe93e6b26","sha256":"2f5cd6777fad1cf114030be3341d16177ac5bd99c216d4dfd52c57f4aba18710","sha512":"457fce16e82dfdb920c11420e01db629813bf5d421c1a3e9d8865a03f63253718ca3fa98ec6ad79221ba0efbf09ddb3afc379f09fc0f4e00979da0ba9c081563","ssdeep":"192:KTUXr5ZiULXx5ORyxLDgVT0SGkb9XQPKUFdTRet:KMXXORyxLDgOfuCdTQt","tlshash":"bc020f0436269d3e14edc39be82693453336a1462961706c797cccef5a21ccd727dbb9","first_seen":"2023-09-20T05:29:55Z","last_seen":"2026-09-09T19:27:27.005616Z","times_seen":1792,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.icons8.com/color/144/clash-royale.png","fqdn":"img.icons8.com","domain":"icons8.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg9.live/","date":"2026-09-09T19:26:48.654Z","timestamp":1788982008654,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1004834818.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 18:45:53 GMT","end":"Mon, 02 Nov 2026 18:45:52 GMT"},"fingerprint":{"sha1":"83:74:26:8D:0F:24:02:69:9F:17:C7:78:5B:64:C0:B3:44:07:1B:84","sha256":"94:4F:E8:BC:02:99:EC:70:E5:D4:2A:D5:E7:B0:97:30:78:D9:E2:10:8F:F3:71:BD:68:2D:69:AD:D4:E2:47:3F"}}},"request":{"raw":"GET /color/144/clash-royale.png HTTP/1.1\r\nHost: img.icons8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gg9.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 09 Sep 2026 19:26:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 5652\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: icon-id, icon-size, icon-format\r\nicon-id: 93NyEXRZ6Rk7\r\nicon-size: 144\r\nicon-format: png\r\nlast-modified: Thu, 03 Sep 2026 06:16:17\r\nversion: 0.0.29\r\nfrom-mongo-cache: true\r\nfrom-redis-cache: false\r\nnot-found-platform: false\r\ncache-control: public, max-age=302400\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-77-nzt: kwTq9NB9/Va93yaYrmHLUvsSUIOHfQ7WZDssCFuBcClnPcZgRR5tT/fQ9mWcZU1M2A\r\nx-77-nzt-ray: e2f75420d18a4e4f21b3a16a495f1810\r\nage: 714\r\nx-77-cache: HIT\r\nx-77-age: 123124\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":5652,"size_decoded":6399,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"da80e8c94b55b2d4631f34e780b3d774","sha1":"f92073415a0851495e203103f772e0c16f24d11f","sha256":"a81523c23ba6c4793be99eff0867135c8e566e123a72e7623466075d2edd6c86","sha512":"d2c02c34f4a95dc1672bedf576e1369d230d47720c79b446af50399d3caec5f092e30888545463b2bf279877d3aef4be2f546dcf3a61b7de2d7a63ab5782ba47","ssdeep":"96:MSmDuw5SAh1pxLDFsXIHHr1eLr06y7AzMkhVIidQA++hQDkdlLEZSweyaXs4T:MSQHvvBOi1UwkzMknI4QP+hJL+bFac+","tlshash":"31c1af5c53c144958a7816cefc349440e83d0ef3282cddb77e204e6498ee8327ab55b3","first_seen":"2026-05-03T05:58:46.022817Z","last_seen":"2026-09-09T19:27:27.006282Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3609,"timings":{"blocked":57,"dns":1,"connect":10,"send":0,"wait":9,"receive":0,"ssl":3528},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.icons8.com/color/144/minecraft-logo.png","fqdn":"img.icons8.com","domain":"icons8.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg9.live/","date":"2026-09-09T19:26:48.659Z","timestamp":1788982008659,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1004834818.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 18:45:53 GMT","end":"Mon, 02 Nov 2026 18:45:52 GMT"},"fingerprint":{"sha1":"83:74:26:8D:0F:24:02:69:9F:17:C7:78:5B:64:C0:B3:44:07:1B:84","sha256":"94:4F:E8:BC:02:99:EC:70:E5:D4:2A:D5:E7:B0:97:30:78:D9:E2:10:8F:F3:71:BD:68:2D:69:AD:D4:E2:47:3F"}}},"request":{"raw":"GET /color/144/minecraft-logo.png HTTP/1.1\r\nHost: img.icons8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gg9.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 09 Sep 2026 19:26:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 4467\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: icon-id, icon-size, icon-format\r\nicon-id: 16462\r\nicon-size: 144\r\nicon-format: png\r\nlast-modified: Tue, 08 Sep 2026 03:46:55\r\nversion: 0.0.29\r\nfrom-mongo-cache: true\r\nfrom-redis-cache: false\r\nnot-found-platform: false\r\ncache-control: public, max-age=302400\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-77-nzt: k309aF3pmsJhAcErKzq7PFB/yWCQNjjQ3XCVPCM23LUSUuoASC6u3n8FsWgFbAGQOQ\r\nx-77-nzt-ray: e2f75420d18a4e4f21b3a16af24d2510\r\nage: 3350\r\nx-77-cache: HIT\r\nx-77-age: 123124\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":4467,"size_decoded":5208,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"82297e75ca0a39ec2cffe7184cf756e7","sha1":"5a7bfc50fefbbf6145f24b03782b218fbeebc90d","sha256":"396527b16be7ef4bf9fd2ce2a1233fd3f4af9997ff5148a1fb5e7ef499c3f5fd","sha512":"5f595ef32b207464546297e47d16a2c9a4583b7a99e7da0eaf71bbe538261ac9bec50b7759761654c15f54ed462d09dfcdf30289fee62474fcd0dcdadad55564","ssdeep":"96:MS9tyVkkW4ZeQ91S5Z48FPWZ4X4RQFBqxdLlTuYgvc:MSSVkkrZL91Sf48tWZwFYpg0","tlshash":"61915dd84c40692b4f60d14097758cb9e07fee0bb19a6a8d24e50cb0ef0dc95db4e795","first_seen":"2026-05-03T05:58:46.019866Z","last_seen":"2026-09-09T19:27:27.007942Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3611,"timings":{"blocked":57,"dns":1,"connect":10,"send":0,"wait":10,"receive":0,"ssl":3530},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1542751371-adc38448a05e?q=80\u0026w=2070\u0026auto=format\u0026fit=crop","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.194.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg9.live/","date":"2026-09-09T19:26:48.754Z","timestamp":1788982008754,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R46 DV TLS CA 2026 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Jul 2026 16:16:25 GMT","end":"Sun, 14 Feb 2027 15:16:25 GMT"},"fingerprint":{"sha1":"F2:05:7E:AF:21:81:93:03:7B:A5:F9:F3:FD:CC:C9:24:49:3A:76:2C","sha256":"7F:6E:F5:E1:25:3F:25:87:8A:95:6F:06:BD:D7:52:15:BC:14:B2:83:78:51:94:51:FE:73:CD:C0:D3:C4:C9:68"}}},"request":{"raw":"GET /photo-1542751371-adc38448a05e?q=80\u0026w=2070\u0026auto=format\u0026fit=crop HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gg9.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: b1dc32a94065ddbb1f05e488b70465f19aa162fa\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 10 Aug 2026 12:59:06 GMT\r\nserver: imgix\r\ndate: Wed, 09 Sep 2026 19:26:48 GMT\r\nage: 2615262\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220079-FRA, cache-bma-essb1270033-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 101441\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":101441,"size_decoded":102073,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"502e7c2549538d8846a467081e4af7c2","sha1":"c1282b4a91267334899033badc4e503759484787","sha256":"cb62b3e91666402dd5b27dc1bfc46e0c7674bb44b0d4d7f407453f7e150ddf0c","sha512":"0ed5ff911d3df4c7ce9cea8bccdee054a41db8bb22c5e0b15f32952b78b3ef1e5f07de8e5459115a90617ed9af21e5ba4f2800f591e25076a1cf74218814441b","ssdeep":"3072:ra9jTqND75C/Hmqn7dik/mhPAoYb7ZvEx2lzs:GjTqND75Umq47AoYb7ZvEx2lzs","tlshash":"e8a302c8ed21c295c6abb9bb65336f9bc6c14881db937a6f310c29cf8e5540cd4097b9","first_seen":"2026-08-22T17:57:14.320225Z","last_seen":"2026-09-09T19:27:27.009684Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":2,"connect":10,"send":0,"wait":11,"receive":16,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg9.live/favicon.ico","fqdn":"gg9.live","domain":"gg9.live","tld":"live"},"ip":{"addr":"91.218.49.176","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg9.live/","date":"2026-09-09T19:26:50.350Z","timestamp":1788982010350,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg9.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:51:03 GMT","end":"Tue, 08 Dec 2026 07:51:02 GMT"},"fingerprint":{"sha1":"F6:96:AC:AE:5B:A7:39:24:20:AF:CC:C6:44:C5:05:00:B3:2A:6F:E5","sha256":"0E:F2:10:01:A5:5B:E3:F0:28:D2:50:89:0B:7C:BE:C9:F8:17:39:55:78:37:8C:75:B6:6E:DF:CB:27:BB:9D:24"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gg9.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gg9.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 09 Sep 2026 19:26:50 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1479,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-09-11T00:00:23.47318Z","times_seen":154774,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gg9.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gg9.live/","fqdn":"gg9.live","domain":"gg9.live","tld":"live"},"ip":{"addr":"91.218.49.176","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-09T19:26:47.894Z","timestamp":1788982007894,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg9.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:51:03 GMT","end":"Tue, 08 Dec 2026 07:51:02 GMT"},"fingerprint":{"sha1":"F6:96:AC:AE:5B:A7:39:24:20:AF:CC:C6:44:C5:05:00:B3:2A:6F:E5","sha256":"0E:F2:10:01:A5:5B:E3:F0:28:D2:50:89:0B:7C:BE:C9:F8:17:39:55:78:37:8C:75:B6:6E:DF:CB:27:BB:9D:24"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gg9.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Thu, 27 Aug 2026 00:10:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2706\r\ndate: Wed, 09 Sep 2026 19:26:48 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14103,"size_decoded":3015,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (347), with CRLF line terminators","md5":"80c75187401e4327adfa0824d8b19a56","sha1":"78e69a10db889a08607f978e3a07f1758574d5c9","sha256":"c5c4b5e6de6d9c72c11c487061ccae67516b0f026dd1e886d90d6d553da81bad","sha512":"347df5cdc6737b4862870dce56f7245f055800ebb3e34b72969b60903c8d245cefc230efeaa6c5a4f8678aa97197fdcd6877bcded37b32dea60d56d524ffb9d8","ssdeep":"192:Hmo/EPJurzm3/Co+iCrCdbAClGA3lCd9VC3sCGCmUyx3OBY6:HZcUHmyA3/McY6","tlshash":"90522f20e2c2693b1173c1d59ae15b8afea98217c6075e0073be2bb71fffd219813558","first_seen":"2026-09-09T19:27:27.013211Z","last_seen":"2026-09-09T19:27:27.013211Z","times_seen":1,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":128,"connect":43,"send":0,"wait":52,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gg9.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gg9.live/js/main.js","fqdn":"gg9.live","domain":"gg9.live","tld":"live"},"ip":{"addr":"91.218.49.176","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gg9.live/","date":"2026-09-09T19:26:48.638Z","timestamp":1788982008638,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg9.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:51:03 GMT","end":"Tue, 08 Dec 2026 07:51:02 GMT"},"fingerprint":{"sha1":"F6:96:AC:AE:5B:A7:39:24:20:AF:CC:C6:44:C5:05:00:B3:2A:6F:E5","sha256":"0E:F2:10:01:A5:5B:E3:F0:28:D2:50:89:0B:7C:BE:C9:F8:17:39:55:78:37:8C:75:B6:6E:DF:CB:27:BB:9D:24"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: gg9.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gg9.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 05 Apr 2026 01:46:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1342\r\ndate: Wed, 09 Sep 2026 19:26:48 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4086,"size_decoded":1599,"mime_type":"text/javascript","magic":"ASCII text","md5":"b93a7c43b9a2037602c48ae03d2f6b89","sha1":"ec1b8a8a0cda24d27df08db3e5054f2b05e12174","sha256":"b5a7f2799b56a3ae40d4bb98729ba77d8247b830d10a9e6186488428ded3da6b","sha512":"e58dd19676c493bad0357d073779c6fdec71a13a657127b68c8f9e46f741f1284b1d381d700ea4a2c9b3bb967dd17835c30d7c8d374df30868050900dc118acb","ssdeep":"","tlshash":"e88122ace23750a2167332b91b3771011575539b6e8acb697fed83002f8eb54f0a56ec","first_seen":"2026-05-03T05:58:46.024384Z","last_seen":"2026-09-09T19:27:27.014976Z","times_seen":2,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gg9.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gg9.live/gta6/logo.png","fqdn":"gg9.live","domain":"gg9.live","tld":"live"},"ip":{"addr":"91.218.49.176","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg9.live/","date":"2026-09-09T19:26:48.647Z","timestamp":1788982008647,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gg9.live","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:51:03 GMT","end":"Tue, 08 Dec 2026 07:51:02 GMT"},"fingerprint":{"sha1":"F6:96:AC:AE:5B:A7:39:24:20:AF:CC:C6:44:C5:05:00:B3:2A:6F:E5","sha256":"0E:F2:10:01:A5:5B:E3:F0:28:D2:50:89:0B:7C:BE:C9:F8:17:39:55:78:37:8C:75:B6:6E:DF:CB:27:BB:9D:24"}}},"request":{"raw":"GET /gta6/logo.png HTTP/1.1\r\nHost: gg9.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gg9.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 19:26:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 08 May 2025 20:43:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 220693\r\ndate: Wed, 09 Sep 2026 19:26:48 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":220693,"size_decoded":220980,"mime_type":"image/png","magic":"PNG image data, 1766 x 1339, 8-bit colormap, non-interlaced","md5":"1c18f091154c2bd09d0289ae68714518","sha1":"6df96a7c73759860fc16e9d204a1369af181b09d","sha256":"3b000f507edddbf8ca3d7f3e4d9a5358145823d5d6e80e5ca309cd4c6556199e","sha512":"924fb9a6f6d571f19466b531888883c991804ad2b0211f1ace4fc2098be1506102bc7d506826edf96828dfa595610dce94669c7ef953d72f3364a95f5109f77f","ssdeep":"6144:v++a3SD6s/GIy3vlgbh+u/xBElUp8zVDA:v+tIG/l8+uJBElUp8zVDA","tlshash":"a12423d8041381ca50667b565cac353b0a9bdf3c9ba88e3d6f04e186bcb7d16f985e90","first_seen":"2026-09-09T19:27:27.016576Z","last_seen":"2026-09-09T19:27:27.016576Z","times_seen":1,"resource_available":false,"data":null}},"time_used":997,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":920,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gg9.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.icons8.com/color/144/gift--v1.png","fqdn":"img.icons8.com","domain":"icons8.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg9.live/","date":"2026-09-09T19:26:48.651Z","timestamp":1788982008651,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1004834818.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 18:45:53 GMT","end":"Mon, 02 Nov 2026 18:45:52 GMT"},"fingerprint":{"sha1":"83:74:26:8D:0F:24:02:69:9F:17:C7:78:5B:64:C0:B3:44:07:1B:84","sha256":"94:4F:E8:BC:02:99:EC:70:E5:D4:2A:D5:E7:B0:97:30:78:D9:E2:10:8F:F3:71:BD:68:2D:69:AD:D4:E2:47:3F"}}},"request":{"raw":"GET /color/144/gift--v1.png HTTP/1.1\r\nHost: img.icons8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gg9.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 09 Sep 2026 19:26:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 912\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: icon-id, icon-size, icon-format\r\nicon-id: 12191\r\nicon-size: 144\r\nicon-format: png\r\nlast-modified: Sun, 30 Aug 2026 17:27:34\r\nversion: 0.0.29\r\nfrom-mongo-cache: false\r\nfrom-redis-cache: false\r\nnot-found-platform: false\r\ncache-control: public, max-age=302400\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-77-nzt: k2aORXMKJ9WQJAOz5BtoUImuDcj406CUUhvbQbOA3maeY8+p8NYWjFzCoPwq5PI8qZmbABo\r\nx-77-nzt-ray: e2f75420d18a4e4f20b3a16a10d4d03a\r\nage: 2186\r\nx-77-cache: HIT\r\nx-77-age: 199630\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":912,"size_decoded":1658,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"44ad5da3775528e50c9250080d465f9e","sha1":"6132a932023b60b1d0aa6cbe5f47c4c5e1f9ef71","sha256":"fe6100d9f2b46b18c1779ed412d03f3d77066b64f01af27766940e056e9d92cf","sha512":"782b8d5b8aa0d53c3bc288e570d4c478a6d2628304ce78e757f8e3fdd43b6d4ac6d760486279b86d2f7582cc60efcf8b804bfc435726dc98e80b98e0b0a43ff3","ssdeep":"","tlshash":"e2110ed648e672aae2f9053dd51186520773338cc38b1518122527ff3c2011f33699fe","first_seen":"2026-05-03T05:58:46.028471Z","last_seen":"2026-09-09T19:27:27.01819Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3328,"timings":{"blocked":57,"dns":1,"connect":8,"send":0,"wait":11,"receive":0,"ssl":3251},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.icons8.com/color/144/valorant.png","fqdn":"img.icons8.com","domain":"icons8.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gg9.live/","date":"2026-09-09T19:26:48.661Z","timestamp":1788982008661,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1004834818.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 18:45:53 GMT","end":"Mon, 02 Nov 2026 18:45:52 GMT"},"fingerprint":{"sha1":"83:74:26:8D:0F:24:02:69:9F:17:C7:78:5B:64:C0:B3:44:07:1B:84","sha256":"94:4F:E8:BC:02:99:EC:70:E5:D4:2A:D5:E7:B0:97:30:78:D9:E2:10:8F:F3:71:BD:68:2D:69:AD:D4:E2:47:3F"}}},"request":{"raw":"GET /color/144/valorant.png HTTP/1.1\r\nHost: img.icons8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gg9.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 09 Sep 2026 19:26:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1673\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: icon-id, icon-size, icon-format\r\nicon-id: aUZxT3Erwill\r\nicon-size: 144\r\nicon-format: png\r\nlast-modified: Mon, 17 Aug 2026 11:42:17\r\nversion: 0.0.29\r\nfrom-mongo-cache: true\r\nfrom-redis-cache: false\r\nnot-found-platform: false\r\ncache-control: public, max-age=302400\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-77-nzt: k9sJbdBQCUkzWsi2AiLBUKDWQqXZ5Q7ElZAO6XwN80riJgz/SIFXOE3RBiW8Tg1w5/XvgNo\r\nx-77-nzt-ray: e2f75420d18a4e4f21b3a16a34102010\r\nage: 792\r\nx-77-cache: HIT\r\nx-77-age: 96380\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1673,"size_decoded":2424,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"0a459aeba505836c96aeea4d6ea50753","sha1":"009550463707270b4c654327f832bb96e2224c28","sha256":"de197d580eaf38145a220d47797c762de261ac6624adcc797fe1e448dea1fee5","sha512":"5e61199e0cdaaa197091d419a8394d0e9871cde0dc479594839e84028af1c982a0380989460d59e7b5ca1ff6dcb0d1704eeafede5bdd6a8511bdfe82a5cbfab1","ssdeep":"","tlshash":"9631f8e153a3f260eb034530e43a4cb3a90fa924909b55b640ec17bccabd09702205a6","first_seen":"2026-05-03T05:58:46.023619Z","last_seen":"2026-09-09T19:27:27.019735Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3610,"timings":{"blocked":57,"dns":1,"connect":10,"send":0,"wait":9,"receive":0,"ssl":3531},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}