{"report_id":"dbba8d5f-dd65-47b2-80b7-2d520ea293c3","version":6,"status":"done","tags":[],"date":"2026-03-21T03:51:02Z","url":{"schema":"https","addr":"level-9.live","fqdn":"level-9.live","domain":"level-9.live","tld":"live"},"ip":{"addr":"34.111.179.208","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"level-9.live/","fqdn":"level-9.live","domain":"level-9.live","tld":"live"},"title":"Elite Trading Platform | Level9","dom":{"size":42395,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39656)","md5":"3f01cb432f69fc8b962300ab98f811ac","sha1":"3431b8b9e2efde8409f6aa2873c0167f13d73b63","sha256":"880055af01c3dcff3fbcdb0d6f73e4d388e0540b8d9b085d2478b071a5cbcc45","sha512":"00cd875b0aac7aacd5a680e2922ce63d0e716f869f7edfd3b018033fce778b9d564783f2fd80d20f5ed9d9e8d9dbf1c4cc32f957b35531b9d09c7ccdaa2712ac","ssdeep":"768:t8vz/zLrTG44JtgLu7jxcuesDSEFCKV6w0NgHn2iLu:tez/zbLu7quesXg","tlshash":"8413c471a2851f3ea167c6e2f1b57739519fd24ee65fc458e6ec02ab27c3c04ec22258","dom_hash":"domhash0797a09b9ff7d91079b59dd52bdcba3f","first_seen":"2026-03-21T03:51:04.296134Z","last_seen":"2026-03-21T03:51:04.296134Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"level-9.live","fqdn":"level-9.live","domain":"level-9.live","tld":"live"},"ip":{"addr":"34.111.179.208","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-25T03:51:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"level-9.live","ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-21T03:50:27.243347Z","last_seen":"2026-03-21T03:50:27.243347Z","alert_count":0,"request_count":7,"received_data":2149940,"sent_data":4631,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-15T22:16:12.279722Z","alert_count":0,"request_count":1,"received_data":49155,"sent_data":553,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-15T22:19:58.945817Z","alert_count":0,"request_count":1,"received_data":144759,"sent_data":1788,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"level-9.live/assets/index-nj-FfB7U.js","fqdn":"level-9.live","domain":"level-9.live","tld":"live"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c8c0d830ebf8118cd05b9f6d88d7644","sha1":"5640e4cf4915bd253e8a348cd905a7591a058af3","sha256":"4449f3ebe2a409ef7631cddc9dc62ce76ceefc6cb8493824f5cf0ac0e25aedf3","sha512":"7fedc0a12a001778067dadb4c0fbbcf8a040178a2e2aadaefb93b9a67ab0033f5942ed382d9aa29a59caed21e1620addd0513c689c6567b05039ca447494aa1d","ssdeep":"6144:WqY3Vl/N7nS9Y6gE64T8UE6wwSpA0yC6YC9/XiL40bzv3KBcBlUnZX:WrlznS9Y6gE6Smwsl+XJnZX","tlshash":"f1a46cc47196b6695ba244d1507f4006f23e1e15f40d88a0f16cecaa7bb9846b23ffed","size":467159,"data":"","first_seen":"2026-03-21T03:50:31.848307Z","last_seen":"2026-03-21T03:51:04.311623Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"level-9.live/assets/lvl9gt_1768818684906-9CBjhjUS.png","fqdn":"level-9.live","domain":"level-9.live","tld":"live"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://level-9.live/","date":"2026-03-21T03:50:40.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"level-9.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 09:55:07 GMT","end":"Sun, 19 Apr 2026 09:55:06 GMT"},"fingerprint":{"sha1":"32:D8:86:EB:4B:7E:49:D7:50:75:8B:51:FE:52:38:C7:58:32:58:32","sha256":"8D:90:DE:30:45:AB:E8:79:79:73:FE:CC:36:11:EB:2E:C8:1E:70:53:41:89:49:5A:2E:61:76:EE:8E:AF:57:DD"}}},"request":{"raw":"GET /assets/lvl9gt_1768818684906-9CBjhjUS.png HTTP/1.1\r\nHost: level-9.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://level-9.live/\r\nCookie: GAESA=CqIBMDBkYTZjZDJjNGJlMjJlNTA2MWVmYzcyOGIwMjViYzVjMDgxMWNiMGNiNzNmMjE5MmZlZjdjMjBiMDExYzFiNWQyZjczNjEyMDJiYjc1ODNmNDU0NmMyMTUwNDhmYWY0NzdmMTUxOTk0YmZkMWExNjYxZDdiMjM2NmY3OTI3NGYxMmY1OTk1MWVmMmFlYWU4NTdiNThkOTEwMjI1OGY2MzJjEObxkPTQMw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 14756\r\ncontent-type: image/png\r\ndate: Sat, 21 Mar 2026 03:50:40 GMT\r\netag: W/\"39a4-19bd5d8b1f8\"\r\nlast-modified: Mon, 19 Jan 2026 10:41:47 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: b2e0b5568bf7baf1d180997c3f9b78eb\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":14756,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"da9eb3b523877f827100e54a51d954aa","sha1":"626b43ee1b221826eafa16d1f27ddb6aa4c4f1ef","sha256":"f8f8e294e62d2e0c0977f1fb1ae5ad842fa27d25e717c06868b466f768a732ec","sha512":"0caf7ac6a517e61a68d87e792740c7b40d004148efb5cb7e07515b52fc0b12420921ad8053f689bcf5c925e0de98c2e76ee6b8039f598655575e4f8d37a920d9","ssdeep":"384:v56shz3uGI6IHDBQdX1x7CkboeGpvHb2sSZuVOiwp:v56Y3uGIfSdXX9uH6sSsAi6","tlshash":"de62c03f941658e3ec9565ba18015370f26327da6ea57a11a70c8a403c2b31c5feb1fe","first_seen":"2026-03-21T03:50:31.864064Z","last_seen":"2026-03-21T03:51:04.299741Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"level-9.live/assets/trading_floor_desk_setup-DGUZVbYB.png","fqdn":"level-9.live","domain":"level-9.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://level-9.live/","date":"2026-03-21T03:50:40.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"level-9.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 09:55:07 GMT","end":"Sun, 19 Apr 2026 09:55:06 GMT"},"fingerprint":{"sha1":"32:D8:86:EB:4B:7E:49:D7:50:75:8B:51:FE:52:38:C7:58:32:58:32","sha256":"8D:90:DE:30:45:AB:E8:79:79:73:FE:CC:36:11:EB:2E:C8:1E:70:53:41:89:49:5A:2E:61:76:EE:8E:AF:57:DD"}}},"request":{"raw":"GET /assets/trading_floor_desk_setup-DGUZVbYB.png HTTP/1.1\r\nHost: level-9.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://level-9.live/\r\nCookie: GAESA=CqIBMDBkYTZjZDJjNGJlMjJlNTA2MWVmYzcyOGIwMjViYzVjMDgxMWNiMGNiNzNmMjE5MmZlZjdjMjBiMDExYzFiNWQyZjczNjEyMDJiYjc1ODNmNDU0NmMyMTUwNDhmYWY0NzdmMTUxOTk0YmZkMWExNjYxZDdiMjM2NmY3OTI3NGYxMmY1OTk1MWVmMmFlYWU4NTdiNThkOTEwMjI1OGY2MzJjEObxkPTQMw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T16:49:10.936479Z","times_seen":17802646,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"level-9.live/assets/trading_floor_desk_setup-DGUZVbYB.png","fqdn":"level-9.live","domain":"level-9.live","tld":"live"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://level-9.live/","date":"2026-03-21T03:50:40.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"level-9.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 09:55:07 GMT","end":"Sun, 19 Apr 2026 09:55:06 GMT"},"fingerprint":{"sha1":"32:D8:86:EB:4B:7E:49:D7:50:75:8B:51:FE:52:38:C7:58:32:58:32","sha256":"8D:90:DE:30:45:AB:E8:79:79:73:FE:CC:36:11:EB:2E:C8:1E:70:53:41:89:49:5A:2E:61:76:EE:8E:AF:57:DD"}}},"request":{"raw":"GET /assets/trading_floor_desk_setup-DGUZVbYB.png HTTP/1.1\r\nHost: level-9.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://level-9.live/\r\nCookie: GAESA=CqIBMDBkYTZjZDJjNGJlMjJlNTA2MWVmYzcyOGIwMjViYzVjMDgxMWNiMGNiNzNmMjE5MmZlZjdjMjBiMDExYzFiNWQyZjczNjEyMDJiYjc1ODNmNDU0NmMyMTUwNDhmYWY0NzdmMTUxOTk0YmZkMWExNjYxZDdiMjM2NmY3OTI3NGYxMmY1OTk1MWVmMmFlYWU4NTdiNThkOTEwMjI1OGY2MzJjEObxkPTQMw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 1562317\r\ncontent-type: image/png\r\ndate: Sat, 21 Mar 2026 03:50:40 GMT\r\netag: W/\"17d6cd-19bd5d8b1f8\"\r\nlast-modified: Mon, 19 Jan 2026 10:41:47 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: ff959c27baf796a3d180997c3f9b7af1\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1562317,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1408 x 768, 8-bit/color RGB, non-interlaced","md5":"f0fd6fb45ccec6c874621272292d3c03","sha1":"a1e0238208423c898906440e53c8255b36bafe83","sha256":"ec1dcb67faa4fedbd4599889d860be44e5e8962384c83a0fabc9d7cbd5a86068","sha512":"d5033ddd0abd68def1ffc6c01afe9904f61c0b37e8f650433b2dc88d30fada04a5e7e173c7ad888747fd76b9ee223fa5e02d91bc78a8d325d6577f6b302f6655","ssdeep":"24576:Lv5Zox+WyP/1GmZIHvsTKEYlphoAFF5hM+veqFwC:lZ9XxqHEVWLF1/R","tlshash":"cc2533c4e48f48baa5ac8197dbb052dccbf53527ea6d90fca4a7d0786d45c403267b38","first_seen":"2026-03-21T03:50:31.854483Z","last_seen":"2026-03-21T03:51:04.303798Z","times_seen":2,"resource_available":false,"data":null}},"time_used":925,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":745,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://level-9.live/","date":"2026-03-21T03:50:40.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://level-9.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 05:34:55 GMT\r\nexpires: Mon, 15 Mar 2027 05:34:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 512145\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-09T16:47:09.866753Z","times_seen":323772,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":65,"dns":1,"connect":8,"send":0,"wait":9,"receive":11,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"level-9.live/favicon.png","fqdn":"level-9.live","domain":"level-9.live","tld":"live"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://level-9.live/","date":"2026-03-21T03:50:40.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"level-9.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 09:55:07 GMT","end":"Sun, 19 Apr 2026 09:55:06 GMT"},"fingerprint":{"sha1":"32:D8:86:EB:4B:7E:49:D7:50:75:8B:51:FE:52:38:C7:58:32:58:32","sha256":"8D:90:DE:30:45:AB:E8:79:79:73:FE:CC:36:11:EB:2E:C8:1E:70:53:41:89:49:5A:2E:61:76:EE:8E:AF:57:DD"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: level-9.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://level-9.live/\r\nCookie: GAESA=CqIBMDBkYTZjZDJjNGJlMjJlNTA2MWVmYzcyOGIwMjViYzVjMDgxMWNiMGNiNzNmMjE5MmZlZjdjMjBiMDExYzFiNWQyZjczNjEyMDJiYjc1ODNmNDU0NmMyMTUwNDhmYWY0NzdmMTUxOTk0YmZkMWExNjYxZDdiMjM2NmY3OTI3NGYxMmY1OTk1MWVmMmFlYWU4NTdiNThkOTEwMjI1OGY2MzJjEObxkPTQMw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 14756\r\ncontent-type: image/png\r\ndate: Sat, 21 Mar 2026 03:50:41 GMT\r\netag: W/\"39a4-19bd5d8ae10\"\r\nlast-modified: Mon, 19 Jan 2026 10:41:46 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 7e7686bedda8fa6bd180997c3f9b7a5f\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":14756,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"da9eb3b523877f827100e54a51d954aa","sha1":"626b43ee1b221826eafa16d1f27ddb6aa4c4f1ef","sha256":"f8f8e294e62d2e0c0977f1fb1ae5ad842fa27d25e717c06868b466f768a732ec","sha512":"0caf7ac6a517e61a68d87e792740c7b40d004148efb5cb7e07515b52fc0b12420921ad8053f689bcf5c925e0de98c2e76ee6b8039f598655575e4f8d37a920d9","ssdeep":"384:v56shz3uGI6IHDBQdX1x7CkboeGpvHb2sSZuVOiwp:v56Y3uGIfSdXX9uH6sSsAi6","tlshash":"de62c03f941658e3ec9565ba18015370f26327da6ea57a11a70c8a403c2b31c5feb1fe","first_seen":"2026-03-21T03:50:31.864064Z","last_seen":"2026-03-21T03:51:04.299741Z","times_seen":2,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":172,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"level-9.live/","fqdn":"level-9.live","domain":"level-9.live","tld":"live"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-21T03:50:39.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"level-9.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 09:55:07 GMT","end":"Sun, 19 Apr 2026 09:55:06 GMT"},"fingerprint":{"sha1":"32:D8:86:EB:4B:7E:49:D7:50:75:8B:51:FE:52:38:C7:58:32:58:32","sha256":"8D:90:DE:30:45:AB:E8:79:79:73:FE:CC:36:11:EB:2E:C8:1E:70:53:41:89:49:5A:2E:61:76:EE:8E:AF:57:DD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: level-9.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: private, max-age=0\r\ncontent-length: 2553\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 21 Mar 2026 03:50:39 GMT\r\netag: W/\"9f9-19bd5d8b1f8\"\r\nexpires: Sat, 21 Mar 2026 03:50:39 GMT\r\nlast-modified: Mon, 19 Jan 2026 10:41:47 GMT\r\nserver: Google Frontend\r\nset-cookie: GAESA=CqIBMDBkYTZjZDJjNGJlMjJlNTA2MWVmYzcyOGIwMjViYzVjMDgxMWNiMGNiNzNmMjE5MmZlZjdjMjBiMDExYzFiNWQyZjczNjEyMDJiYjc1ODNmNDU0NmMyMTUwNDhmYWY0NzdmMTUxOTk0YmZkMWExNjYxZDdiMjM2NmY3OTI3NGYxMmY1OTk1MWVmMmFlYWU4NTdiNThkOTEwMjI1OGY2MzJjEObxkPTQMw; expires=Mon, 20-Apr-2026 03:50:39 GMT; path=/\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 297226c4c9abff7903b72d3a3299e5d7\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":2553,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1432)","md5":"0d6bdd355b298029e9b5a6c07a1984b0","sha1":"e7b845d26853ecd54149cde934779ee8277769f4","sha256":"7d5ee7114892fc4ad14ef4af2c774794518bcaa98cf0d70c955ae654f82c498d","sha512":"1e0de4109efb5f060decaaf2f0b9c306e60e1f7dd9f8f4d9415920a5b8f87cc1928c5c474ca8df9bd4c8809d6f73cfdf3d3800af64ec3feb6eecbb045ab93c54","ssdeep":"","tlshash":"475103df8d5a4ca67020a139b8d5be16440ab48f57f5d8e0b187e84bcec97c9c863f15","first_seen":"2026-03-21T03:50:31.85912Z","last_seen":"2026-03-21T03:51:04.307799Z","times_seen":2,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":47,"dns":1,"connect":12,"send":0,"wait":171,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Architects+Daughter\u0026family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026family=Fira+Code:wght@300..700\u0026family=Geist+Mono:wght@100..900\u0026family=Geist:wght@100..900\u0026family=IBM+Plex+Mono:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026family=IBM+Plex+Sans:ital,wght@0,100..700;1,100..700\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=JetBrains+Mono:ital,wght@0,100..800;1,100..800\u0026family=Libre+Baskerville:ital,wght@0,400;0,700;1,400\u0026family=Lora:ital,wght@0,400..700;1,400..700\u0026family=Merriweather:ital,opsz,wght@0,18..144,300..900;1,18..144,300..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026family=Outfit:wght@100..900\u0026family=Oxanium:wght@200..800\u0026family=Playfair+Display:ital,wght@0,400..900;1,400..900\u0026family=Plus+Jakarta+Sans:ital,wght@0,200..800;1,200..800\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Roboto+Mono:ital,wght@0,100..700;1,100..700\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026family=Source+Code+Pro:ital,wght@0,200..900;1,200..900\u0026family=Source+Serif+4:ital,opsz,wght@0,8..60,200..900;1,8..60,200..900\u0026family=Space+Grotesk:wght@300..700\u0026family=Space+Mono:ital,wght@0,400;0,700;1,400;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://level-9.live/","date":"2026-03-21T03:50:39.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"63:D1:AE:99:1E:49:D7:6C:71:F3:BA:F5:BA:47:74:1E:EB:90:E7:D6","sha256":"69:90:BB:9D:82:60:82:88:FF:CE:F6:B3:3D:DD:B5:B5:FB:F0:56:17:FD:FA:0D:BC:9C:5B:83:51:98:0D:2F:CF"}}},"request":{"raw":"GET /css2?family=Architects+Daughter\u0026family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026family=Fira+Code:wght@300..700\u0026family=Geist+Mono:wght@100..900\u0026family=Geist:wght@100..900\u0026family=IBM+Plex+Mono:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026family=IBM+Plex+Sans:ital,wght@0,100..700;1,100..700\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=JetBrains+Mono:ital,wght@0,100..800;1,100..800\u0026family=Libre+Baskerville:ital,wght@0,400;0,700;1,400\u0026family=Lora:ital,wght@0,400..700;1,400..700\u0026family=Merriweather:ital,opsz,wght@0,18..144,300..900;1,18..144,300..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026family=Outfit:wght@100..900\u0026family=Oxanium:wght@200..800\u0026family=Playfair+Display:ital,wght@0,400..900;1,400..900\u0026family=Plus+Jakarta+Sans:ital,wght@0,200..800;1,200..800\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Roboto+Mono:ital,wght@0,100..700;1,100..700\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026family=Source+Code+Pro:ital,wght@0,200..900;1,200..900\u0026family=Source+Serif+4:ital,opsz,wght@0,8..60,200..900;1,8..60,200..900\u0026family=Space+Grotesk:wght@300..700\u0026family=Space+Mono:ital,wght@0,400;0,700;1,400;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://level-9.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 21 Mar 2026 03:50:39 GMT\r\ndate: Sat, 21 Mar 2026 03:50:39 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":144073,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"740eff5976ec5a7e25e3f9b01b1a637d","sha1":"69d18774433f2bc57102d8eff453e9e1f17e1304","sha256":"a98bedda5f431e420164188a09f11b4e42a514388f14a35426554fe6ffdc598e","sha512":"946fb22e81bae4341735ab6780ae2ff2eb44a23f296cd402875e71e1e38951a0bcb3add6e74dba013c6f6f54f69f327a32969dcc7a30bc45004373f3b9664e72","ssdeep":"768:CHFCevmEAr+gCS5xFJNGo6n3wafwe0utoEA3mknCiFyg2UfIUk+H00YNRYj7V3Et:xVXPNo6mACNqHvDyWNpQ9","tlshash":"fce31e91042b9004eb831cc233cfbe36ee4ea2657444d579affe1d99ac9bc265364b1d","first_seen":"2026-02-20T03:22:56.053146Z","last_seen":"2026-05-12T22:57:26.546803Z","times_seen":296,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":106,"dns":1,"connect":21,"send":0,"wait":38,"receive":0,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"level-9.live/assets/index-nj-FfB7U.js","fqdn":"level-9.live","domain":"level-9.live","tld":"live"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://level-9.live/","date":"2026-03-21T03:50:39.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"level-9.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 09:55:07 GMT","end":"Sun, 19 Apr 2026 09:55:06 GMT"},"fingerprint":{"sha1":"32:D8:86:EB:4B:7E:49:D7:50:75:8B:51:FE:52:38:C7:58:32:58:32","sha256":"8D:90:DE:30:45:AB:E8:79:79:73:FE:CC:36:11:EB:2E:C8:1E:70:53:41:89:49:5A:2E:61:76:EE:8E:AF:57:DD"}}},"request":{"raw":"GET /assets/index-nj-FfB7U.js HTTP/1.1\r\nHost: level-9.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://level-9.live/\r\nCookie: GAESA=CqIBMDBkYTZjZDJjNGJlMjJlNTA2MWVmYzcyOGIwMjViYzVjMDgxMWNiMGNiNzNmMjE5MmZlZjdjMjBiMDExYzFiNWQyZjczNjEyMDJiYjc1ODNmNDU0NmMyMTUwNDhmYWY0NzdmMTUxOTk0YmZkMWExNjYxZDdiMjM2NmY3OTI3NGYxMmY1OTk1MWVmMmFlYWU4NTdiNThkOTEwMjI1OGY2MzJjEObxkPTQMw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 467159\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sat, 21 Mar 2026 03:50:39 GMT\r\netag: W/\"720d7-19bd5d8b1f8\"\r\nlast-modified: Mon, 19 Jan 2026 10:41:47 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: cb9085f0f2fda8d2d180997c3f9b7a58;o=1\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":467159,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37654)","md5":"1c8c0d830ebf8118cd05b9f6d88d7644","sha1":"5640e4cf4915bd253e8a348cd905a7591a058af3","sha256":"4449f3ebe2a409ef7631cddc9dc62ce76ceefc6cb8493824f5cf0ac0e25aedf3","sha512":"7fedc0a12a001778067dadb4c0fbbcf8a040178a2e2aadaefb93b9a67ab0033f5942ed382d9aa29a59caed21e1620addd0513c689c6567b05039ca447494aa1d","ssdeep":"6144:WqY3Vl/N7nS9Y6gE64T8UE6wwSpA0yC6YC9/XiL40bzv3KBcBlUnZX:WrlznS9Y6gE6Smwsl+XJnZX","tlshash":"f1a46cc47196b6695ba244d1507f4006f23e1e15f40d88a0f16cecaa7bb9846b23ffed","first_seen":"2026-03-21T03:50:31.848307Z","last_seen":"2026-03-21T03:51:04.311623Z","times_seen":2,"resource_available":true,"data":null}},"time_used":689,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":517,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"level-9.live/assets/index-BuwbbN6n.css","fqdn":"level-9.live","domain":"level-9.live","tld":"live"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://level-9.live/","date":"2026-03-21T03:50:39.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"level-9.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 09:55:07 GMT","end":"Sun, 19 Apr 2026 09:55:06 GMT"},"fingerprint":{"sha1":"32:D8:86:EB:4B:7E:49:D7:50:75:8B:51:FE:52:38:C7:58:32:58:32","sha256":"8D:90:DE:30:45:AB:E8:79:79:73:FE:CC:36:11:EB:2E:C8:1E:70:53:41:89:49:5A:2E:61:76:EE:8E:AF:57:DD"}}},"request":{"raw":"GET /assets/index-BuwbbN6n.css HTTP/1.1\r\nHost: level-9.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://level-9.live/\r\nCookie: GAESA=CqIBMDBkYTZjZDJjNGJlMjJlNTA2MWVmYzcyOGIwMjViYzVjMDgxMWNiMGNiNzNmMjE5MmZlZjdjMjBiMDExYzFiNWQyZjczNjEyMDJiYjc1ODNmNDU0NmMyMTUwNDhmYWY0NzdmMTUxOTk0YmZkMWExNjYxZDdiMjM2NmY3OTI3NGYxMmY1OTk1MWVmMmFlYWU4NTdiNThkOTEwMjI1OGY2MzJjEObxkPTQMw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 85132\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 21 Mar 2026 03:50:39 GMT\r\netag: W/\"14c8c-19bd5d8b1f8\"\r\nlast-modified: Mon, 19 Jan 2026 10:41:47 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 3232001993ff720fd180997c3f9b7d59\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":85132,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"edf219262154950b7df3885a02a9d260","sha1":"f92e492203a631e7bb120cb1ca80661e446e815f","sha256":"54efbe1f59d733d341e0548e11a26751d09588fc594409b24221a5fce7bccadc","sha512":"78f75f7e674e97d80cd76df6b808086c9a6185c14b884406c562dd2252736aef5b15739b6aebd69e6338a131620a84615020067d515ba4db61981a3435dc13ae","ssdeep":"1536:iofh+ITB8w8w6mU+fVxFFMGvfC378VQZkt5FxPbTEs:iofh+Iuw8sUkMGvfC378VQZkt5Fh/Es","tlshash":"34838529b958503f3d6790f4d3ccbaace10af0c0de3e05a9bd8a412567d37f25daa644","first_seen":"2026-03-21T03:50:31.861464Z","last_seen":"2026-03-21T03:51:04.314232Z","times_seen":2,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}