{"report_id":"e79589c8-fc13-4b29-86a8-5f9844aca144","version":0,"status":"done","tags":[],"date":"2026-08-28T19:47:33Z","url":{"schema":"http","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"title":"Designer furniture, lighting, mirrors and interior design accessories | Furniture store 9design, showroom Warsaw","dom":{"size":284328,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34827)","md5":"fa92e05a66eaeea158e27310675e565c","sha1":"3ad7128306cd3269c81cfe7b29cdf2462aa86876","sha256":"6e0f992fee4d4cca58f7a2957569b9309de97ce645ead4e34fde966e535e6963","sha512":"56de722fc14e2aa45bddfe2e9fcafa0540430437546fa12a3a41490cd2c78e96e1b1cdddce02e0b4645cfbf400109a6643adb4d8750f7b5b02e6aa32ccd9b356","ssdeep":"3072:rM5/MeeU0Ts4skh+Hub9JHub9SAGbKfYO95dybnobiITjXUMSHpMN:1Ts4skh+4J4ShbKfYO95wb6TwPc","tlshash":"e954f712c9ed243b092345fda9789f68f09a501bd76f4a49b9ec2224cfc6fd28d1394d","dom_hash":"domhash24ea664cd6fa525aaad16b11c718e486","first_seen":"2026-08-28T19:47:59.553876Z","last_seen":"2026-08-28T19:47:59.553876Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-02T19:47:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"sw-assets.ekomiapps.de","ip":{"addr":"13.249.8.19","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":930120,"first_seen":"2018-05-04T04:52:24Z","last_seen":"2026-08-23T08:15:14.230751Z","alert_count":0,"request_count":12,"received_data":369226,"sent_data":6056,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"api.trustisto.com","ip":{"addr":"3.76.5.223","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2017-05-02","domain_rank":5806739,"first_seen":"2017-11-08T08:47:14Z","last_seen":"2026-07-26T05:22:40.580322Z","alert_count":0,"request_count":2,"received_data":1491,"sent_data":1198,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"js.trustisto.com","ip":{"addr":"143.204.238.120","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-05-02","domain_rank":0,"first_seen":"2019-06-09T05:44:24Z","last_seen":"2026-07-26T05:22:39.277319Z","alert_count":0,"request_count":1,"received_data":329314,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-23T22:23:59.870946Z","alert_count":0,"request_count":1,"received_data":7296,"sent_data":564,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"connect.getflowbox.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2015-12-21","domain_rank":395649,"first_seen":"2019-01-28T13:25:03Z","last_seen":"2026-08-20T01:55:50.557761Z","alert_count":0,"request_count":2,"received_data":317138,"sent_data":939,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"9design.live","ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-28T19:47:43.106177Z","last_seen":"2026-08-28T19:47:43.106177Z","alert_count":300,"request_count":75,"received_data":41042016,"sent_data":53094,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"crypto-js:4.0.0","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"AWIN","description":"AWIN is a global affiliate marketing network.","website":"https://www.awin.com","common_platform_enumeration":"","icon":"AWIN.svg","categories":["Affiliate programs"]}]},{"fqdn":"ekomi-srr.s3.eu-central-1.amazonaws.com","ip":{"addr":"3.5.122.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2018-01-22T15:18:43Z","last_seen":"2026-08-08T18:44:14.393924Z","alert_count":0,"request_count":5,"received_data":12884,"sent_data":3188,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"ct.pinterest.com","ip":{"addr":"151.101.128.84","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2009-11-26","domain_rank":5144,"first_seen":"2015-03-12T08:12:48Z","last_seen":"2026-08-25T02:34:16.921347Z","alert_count":0,"request_count":2,"received_data":1746,"sent_data":1362,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"smart-widget-assets.ekomiapps.de","ip":{"addr":"13.249.8.19","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":1866473,"first_seen":"2019-11-21T11:45:46Z","last_seen":"2026-08-23T21:38:29.302201Z","alert_count":0,"request_count":2,"received_data":6776,"sent_data":1092,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"client819.idosell.com","ip":{"addr":"5.149.163.83","port":443,"asn":31229,"as":"Beyond.pl sp. z o.o.","country":"Poland","country_code":"PL"},"domain_registered":"2010-06-02","domain_rank":0,"first_seen":"2025-10-07T07:48:35.660823Z","last_seen":"2025-10-07T07:48:35.660823Z","alert_count":0,"request_count":1,"received_data":354,"sent_data":578,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"gateway.getflowbox.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2015-12-21","domain_rank":667117,"first_seen":"2019-07-04T10:43:07Z","last_seen":"2026-08-22T12:10:48.54417Z","alert_count":0,"request_count":1,"received_data":6139,"sent_data":513,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-08-23T22:47:41.849275Z","alert_count":0,"request_count":1,"received_data":49001,"sent_data":505,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"podsufitem.iai-shop.com","ip":{"addr":"5.149.163.83","port":443,"asn":31229,"as":"Beyond.pl sp. z o.o.","country":"Poland","country_code":"PL"},"domain_registered":"2005-04-05","domain_rank":0,"first_seen":"2017-02-13T08:54:47Z","last_seen":"2025-10-07T07:48:36.930854Z","alert_count":0,"request_count":1,"received_data":393,"sent_data":870,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"9design.iai-shop.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2005-04-05","domain_rank":0,"first_seen":"2025-10-07T07:48:35.658958Z","last_seen":"2025-10-07T07:48:35.658958Z","alert_count":0,"request_count":5,"received_data":0,"sent_data":3152,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-23T22:33:38.023236Z","alert_count":0,"request_count":3,"received_data":1519584,"sent_data":1441,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"podsufitem.pl","ip":{"addr":"5.149.163.83","port":443,"asn":31229,"as":"Beyond.pl sp. z o.o.","country":"Poland","country_code":"PL"},"domain_registered":"2016-01-22","domain_rank":0,"first_seen":"2025-10-07T07:48:35.656759Z","last_seen":"2025-10-07T07:48:35.656759Z","alert_count":0,"request_count":1,"received_data":393,"sent_data":860,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.trafficscanner.pl","ip":{"addr":"148.251.213.126","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2017-07-13","domain_rank":5277269,"first_seen":"2019-05-29T12:04:43Z","last_seen":"2026-08-23T11:49:47.983066Z","alert_count":0,"request_count":1,"received_data":753,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-23T22:20:52.902616Z","alert_count":0,"request_count":5,"received_data":85083,"sent_data":2736,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s.pinimg.com","ip":{"addr":"151.101.128.84","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2010-05-29","domain_rank":5793,"first_seen":"2017-01-13T22:40:08Z","last_seen":"2026-08-25T02:37:09.614892Z","alert_count":0,"request_count":1,"received_data":139445,"sent_data":463,"comment":"","tags":null,"fingerprints":null},{"fqdn":"trafficscanner.pl","ip":{"addr":"148.251.213.126","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2017-07-13","domain_rank":241688,"first_seen":"2018-01-14T04:43:46Z","last_seen":"2026-08-23T11:49:47.702913Z","alert_count":0,"request_count":1,"received_data":83796,"sent_data":470,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"9design.live/gfx/eng/main_producers.js.gzip?r=1785746984","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b18e8c6bda8442b374e98f6906998a81","sha1":"d46d263aa6a659f53c264a074c2927a1d283e53a","sha256":"19c6adb6172038e89e0f504dfaeb56caff3f9b03c3440bad0e777eea877ea412","sha512":"27fdda30c0703952816e1d7376c6e6098cdfcb3664bac397bdf193e71320958e09eb624004b235ab72a3386999781f5a8a8ac1d9e816a68cfbe73733b0140b0e","ssdeep":"","tlshash":"2360000cc003000003f00030f000c0000c03c0cf00ff00c0f00c0c0003003c303c0300","size":17,"data":"","first_seen":"2026-08-28T19:47:59.586984Z","last_seen":"2026-08-28T19:47:59.586984Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3be015c7bcb1533a4d26893b2f5c4827","sha1":"0fea1e2952ee01d275092ced587079f02d2e0857","sha256":"3c96964f01d90efbe0bf5b6ab6bfd39340e8efb37adce8c09a12714710d08f51","sha512":"1ab484af7c4bb0508d99109cfd9addea32c0d630453b738912d2b60a2f14e8fff2521373f586af24fbfff13abeda0b5f60e45b7fc0d0816d7e310a316954222f","ssdeep":"","tlshash":"e03144a0f094016e85b6519eb56616867f346c0177a2745ac81dae0c3971e8f9e30ead","size":1451,"data":"","first_seen":"2024-11-07T18:32:54.836562Z","last_seen":"2026-08-28T19:47:59.740715Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2d260da99368708f38d8ac9ab6931432","sha1":"3604524df5b18bc1e976702ca9ad24adb5309a96","sha256":"714a9164a646426d6cf479cb11cd93090ed35f7424b735cf53700d60ecc21f38","sha512":"0c6a9a99794496e561f8c75449f4e40bdd9a469f828836bf163f889751707731d4e3acdb707912a8b90fa5d61d9e54ddb9711a68219f7be7c520663e09abf2c1","ssdeep":"","tlshash":"bde0d8cc26365c7149f3398d1faf720436302104f04d7df415ab464c9e657179b52da4","size":381,"data":"","first_seen":"2026-06-23T22:50:00.162074Z","last_seen":"2026-08-28T19:47:59.742418Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"aec3a7e7c05952ee38e95bef2d687aa1","sha1":"afe916de2a0ba17cc390885e66c79dae66c17b8e","sha256":"2e7d64b0792d154e357f313e2dbe9ed6250c62ff2d711b680e561c7d31009d6e","sha512":"a2655c8e72c1abb3cc2b7de17e359d0167c75ea3867181b064dd9281f333517797552fc68de81e32689605db42f7b0597c883f5c783dfd1158cd9e87475d7549","ssdeep":"","tlshash":"40d0a78c1cb48c325ab3785d167af2443b100102e04dede446ee461494027824e46975","size":232,"data":"","first_seen":"2026-06-23T22:50:00.164513Z","last_seen":"2026-08-28T19:47:59.743496Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c90934d8ba20a3f1f356880de381c3d9","sha1":"afcc0a27eb9f5b2c5e652747fde169035849d30b","sha256":"03d67ccce65b3ae6e4f60fa6afb15cb942bbf40e69bfd630d5067b322ae21a92","sha512":"282a6d9225bd9d8f08e7c0848621d4a98d9c174ec327ade84994279ae089d5839f6eba270777f027ac79edea33ba9b8e34f053bfb543bca4222d568d7d6e9907","ssdeep":"","tlshash":"f1d08c8c261b5cb091a72f010f2fb200b0163116a4d29e203a1e63085f30e03eb489a0","size":237,"data":"","first_seen":"2026-08-28T19:47:59.744381Z","last_seen":"2026-08-28T19:47:59.744381Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1447148ef0f8cbbebcb278ff4c8dce60","sha1":"58356c861bcd348b5ed3287d68c0e5a5b27c9ecd","sha256":"369d6b33d1761562cdf839e4b513b78b0fd94eac543c605a9aab41dda4440331","sha512":"ed905498395f6a159ac463d0fdb3c878585d4f4b7f5e2f57260a0d33552dd6a59e497bf8ee109a2db0911d3b77168061da3ed8ae594e57a6c13b786010704240","ssdeep":"","tlshash":"657000000ab000e8e02000000808a0c0a02200a0830320e2c288800800882800800083","size":20,"data":"","first_seen":"2026-06-23T22:50:00.167571Z","last_seen":"2026-08-28T19:47:59.745431Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ceb5a62ed4b87fc6e894a2e0bfbb6aba","sha1":"8e35fbb640391940080fe41adf30d1d4442afa8d","sha256":"4e7f5c955f1fcbae424db9ab2d63cf27b421d2c2b8956ece10710209607b3a5e","sha512":"23cad9c8f34056cbfe7dda8a13b085e80a0bf684d73f63e79c0d093fa606f5a565da70c1f424d43fff6b742fc4ce54f74763bcb2b3739b2cce4c94bbbd167152","ssdeep":"","tlshash":"efe0c0050d1d2293c00320e2080b5124f83040630f0f8c387b4c02108f0e075f3db3ce","size":294,"data":"","first_seen":"2026-06-27T07:00:09.987412Z","last_seen":"2026-08-28T19:47:59.746419Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fce721be38803e6a747e5bf3c1644256","sha1":"b2b258f512bae232e7fc1f003d6bb4dec3abbe6d","sha256":"ac5d01953e8cdf39852fe4d811ae9203f5f25c38df06fc87d5e226ed8bd1800a","sha512":"3a6f5dae83583da402aaa837c849aaf9d71e0eda214dae7d001dd57118821f5e05bf26a0ea03d8e3fc79ee906895cfde4ffe6ed18b89d1074a43ee0f4a80428a","ssdeep":"","tlshash":"9de0c0db70165871a19f86b663b5a1247153350d78091822fdfd88242f68a8b481319c","size":422,"data":"","first_seen":"2025-10-07T07:48:49.513072Z","last_seen":"2026-08-28T19:47:59.747479Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"affb9a304d747900fcfd3b202f10b538","sha1":"6661a6ee4de66a67ff10c25921f530276d12aece","sha256":"15dbd376ad5a9440cf0a15811fe1de20262ef474079c90006290bc94b03c63a6","sha512":"142d6d54fbf7004e73512616d0fc193ae976f682956ab86f4947dc772bdccc38a77e2cb09b1eb667dbffcf8eccd209e92f266cd0aee47b7c576c3d12faaf9651","ssdeep":"","tlshash":"c6f0d4481c1d5578c7b571e713e7a70d3ba22290f4910451814b8bdc24b68030c36a8c","size":474,"data":"","first_seen":"2026-08-28T19:47:59.748469Z","last_seen":"2026-08-28T19:47:59.748469Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"92429d4e57a0ef95c89a6f399ff7354a","sha1":"3e7f45fd1a9081c099397892748a41da8fc9b28c","sha256":"7cb88e31943df3d86d748ee107ec53f515906812459639077979a922779a8229","sha512":"540aaa4ca4ad15207ec1e2f9c9a097c71ec3814e8efe103da5cd59f2ad785f632dbe250452dbd72046583417647c3e8edeb7d73a34f4e7576d03d00e18a4c837","ssdeep":"","tlshash":"d9210a54b5f9988c602b319092de4266f85553136495f01cb97cfa701f40e13dd9baeb","size":1136,"data":"","first_seen":"2026-08-28T19:47:59.749582Z","last_seen":"2026-08-28T19:47:59.749582Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0068311950a15f8d2a504efcf549a1f2","sha1":"0542b743867e59339d4fb986ea4406c4cab31548","sha256":"298906fd91048da1debac3d7de8fc2d764daa5ae9a5d9318bdaf3804f34a18d3","sha512":"42afa1395379e2b0a82bd9bd26cc9a1af62c0fc39f2a8298e2e0db0704eafd960288e939d51b5c59f862dcfac4b4dc5e0010c6341264b663fb0f41e545d9fd3a","ssdeep":"","tlshash":"6ff0ab1a2da660382916203a033f9388305a00c54c44c8007d8ca048afe0feb0b9fdac","size":438,"data":"","first_seen":"2026-08-28T19:47:59.75059Z","last_seen":"2026-08-28T19:47:59.75059Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"48e1307ad430540219d24d683c95fd40","sha1":"ced8367c54c31265cfc0f7fc51da66c9a1212e79","sha256":"a465ea63c33824490e2dc0fb201f242642ca49b5cc7cf210ab5dcd5334749c0d","sha512":"15fb54df45ce91e01fcb99445da1735b6fffaf53843b1bb4edb17f56175f76163734ea6fdbd66d5d8266e0f7b5058728c024c2ebb901b04102347cd3198fff37","ssdeep":"","tlshash":"d901f5c29467c9618ef311efdcad924cd3b2af2e72d548b8e0a886481146b6b0663513","size":738,"data":"","first_seen":"2026-08-28T19:47:59.751792Z","last_seen":"2026-08-28T19:47:59.751792Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5b17781d33d5328961563da1d0e8ff54","sha1":"c806eed74d5e284e0d2d01b7201d64a9a4559e5a","sha256":"020c25108a1f78431f8dac6635cc4814ef91c415b36fe7941636a627f602ca7b","sha512":"145d48af72dae51a3c838da05a664b36d3f3c2b17e255c11435b2ae56597a0f027566b3c6a541db43c50d8a9dc5d8c9e645dd8aa725e54953fb9dc7464575c30","ssdeep":"","tlshash":"3780000880b20a22fcb300008cac828c82208820a3c2a83ea8a283080882ba80003023","size":32,"data":"","first_seen":"2026-04-05T18:50:50.305676Z","last_seen":"2026-08-28T19:47:59.753633Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"931b74792ba5a83c457b00ccadecd801","sha1":"2b1bd6ec52fbb6813a5725a33314cd79ddb2defd","sha256":"dca2d45615d3832fc7eabbef207c77ce83acd90bea7ca3b63711ed8f9d80f3e3","sha512":"7deffdbbf966760fb6afd76e084972fda6f3d21ce5d764e29045bb3096b39a77406f9cd962a6d13014b803ed776c2a6d69b42ee78befe238b4c02d52a03a80e7","ssdeep":"","tlshash":"18c092b689a2809a734562490b0e2b0198a221438c0b28fe75af8a306fd9d0f809b2d4","size":143,"data":"","first_seen":"2026-08-28T19:47:59.754972Z","last_seen":"2026-08-28T19:47:59.754972Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a69eac32571f05c853f0f9763c9c1c07","sha1":"dedb2e5393d2cf60a0b94dc8aa6261ff80db15de","sha256":"8d43f0d4600b5c03c9777ff9beb6054501bf6b59ff1a707eb71850edeb28a68d","sha512":"06fe581873e8042e16e9f0b1f595668c0ff841024ecf6ab393a81a9a6a45a21fb056f9fc7819433b6d144cd1a9b0ff289e5ed156c9c693f712b6ec32804f40f4","ssdeep":"","tlshash":"ff217f3858ba2031c36f94175f9da6186060112f914cfd417d1cdc85afa2ee306a7be5","size":1171,"data":"","first_seen":"2026-08-28T19:47:59.755997Z","last_seen":"2026-08-28T19:47:59.755997Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b0ec46f928fe1bcd5640be421e54dcec","sha1":"a1b745ffbf52aee0ee611420207e5ff549cf3e7f","sha256":"3e1812cf9da72701c0b6529247bd3097f98e136ed9630e723160f4e4b8cb1958","sha512":"5e921ffdacc6f1d2b2dbd6b8edb4f76f44389e3580a6bb03656d390c28e424ff0398968145b28523b0ac1bcbb9407af5974c5bc2706a9d4b01eb935a64392be9","ssdeep":"","tlshash":"a0d08c02830d8768b52c09c2903fc380803e8b3096c782f730c4c00e1f83222a0ccf34","size":196,"data":"","first_seen":"2026-06-26T12:57:00.057387Z","last_seen":"2026-08-28T19:47:59.757229Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"90e79984f98f13864bce6644ffb96b2f","sha1":"d6c3140033fe46e3e80e364fe6bcbf07ef7c0852","sha256":"b509a0ebae55e92a113e0368f4147a99974b203a3f7f02773b2ce53465327dcc","sha512":"26ef77f6fb8db27e31c083c0e722cef5ce339347e28a3895e0d42dadf8fda338ab737608d0c9d0a90fd54e0d9a626c923202bdabbddd786fa6972a6def7346f5","ssdeep":"","tlshash":"7cd09244c96bf3ecacc8c23293bc229042a682230206cc857c6ea0800f60700289a9e3","size":202,"data":"","first_seen":"2026-06-17T18:47:02.446602Z","last_seen":"2026-08-28T19:47:59.758384Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e6b3123be41b175737eff1977f4b1091","sha1":"88f1ecb50f1be0cb6cc899ac43963a9bec786e7a","sha256":"00419de435d679543a58ebe1f86221c138b17b75a58fc83f33099ab4309a1abd","sha512":"b670e97d0476a05cec82970c667713e5a8b48bd007e1946367c75442f369c535bc8da86c11efe670ed836ef96e03bbb8ac0a2d832f3f5399da61430225621e62","ssdeep":"","tlshash":"bcb0124209b18b00ce5b5244ccfc032da130842335014c74b91c56dd0bcb265d08ae5b","size":107,"data":"","first_seen":"2026-08-28T19:47:59.75985Z","last_seen":"2026-08-28T19:47:59.75985Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"01a9a1268aa342bfc85d0449b74b2639","sha1":"a57cbf22742b3aad6a96e50e1be0311eabf1b9c7","sha256":"1d341550143ff32d81d1fe0d95ddf364be44eb4229626abcb157684f23452e38","sha512":"ee6bb0581cd31b653c82bd466e9d8ac0bc563a4e7fff6e2164254428670eefc39bd38288f771f809406dfaabff7d89549467b869997b54a810dd515fe4136925","ssdeep":"","tlshash":"b401ac9f0c23d038522390f6637ee44db466001f808ac10afdbdc8825f10f9a5d24e6d","size":766,"data":"","first_seen":"2026-08-28T19:47:59.761077Z","last_seen":"2026-08-28T19:47:59.761077Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d974e3066a47cb0bda942079013115a","sha1":"55db6e89b193fc67f8ede6a961e82f49581076aa","sha256":"e75910ec9df7197c35e04d9bc5e2b2a0330dae5beb68adf825a4047932c31a9a","sha512":"d22538bff5cbec29fa9b555956c3cde323b5cca9638d4565e44804fc20e333400d770f80ab4d07072aa20ea25bf661f1c655f7e8439dfa7bbab912864b105b39","ssdeep":"","tlshash":"58a002286076398463fb717ad7573714b76260d18258504b364dc1ac2ff451f8059ee9","size":82,"data":"","first_seen":"2026-06-17T18:47:02.450092Z","last_seen":"2026-08-28T19:47:59.762305Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8ef0e9da530dbcc3c532484c38e61bfd","sha1":"ca85c4ec29a26fb2ca0ae3f8c12600505171bcd0","sha256":"527fb744251fdd9cf5cc5e20a8e67c472ea0803914000573d10ea32048e632a2","sha512":"e2a090b3111447ebaf7f256337b78cdfda3f2dbad6a8ec1591c087a9b3282c7e148891108efacf4a32b37effded7f83776e7fdd1fb70dd7b5f7e4911cca032f5","ssdeep":"","tlshash":"83900450c107f5140345117100050447cd17575f4031155c51d717c507d0751051d533","size":41,"data":"","first_seen":"2023-12-16T20:32:55Z","last_seen":"2026-08-28T19:47:59.763379Z","times_seen":464,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b7eb26028e2ba78778eea3ff3c08e363","sha1":"8721ff4c8a3075dd13dcc184b3cdf5cc7c473e18","sha256":"7b3b7c23036ce600386abaff46023c00624e3dfefc37a57c807e10298ff010ea","sha512":"e1d3baa60d0e5104a4125718b31568d3dd34012eca21f70c1cdd098cd9fe07d29395eb8a306d6e4c06cb9d58309ca50886ccbc34bc653a15f0b9b99879cb8b84","ssdeep":"","tlshash":"34f0f80720630a0e03f32cb122bf02183092062b39110db23aaf85c36ff8aed402ee0c","size":438,"data":"","first_seen":"2026-08-28T19:47:59.764454Z","last_seen":"2026-08-28T19:47:59.764454Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed17203add6f6bef5b23f99122e86600","sha1":"b3b5a899f0a6e1bb4b7927bc322d79a6e5217436","sha256":"4b6f953c7970b2b5aabcf7e66a75e91b0027f78f8cb1a498985a33bee813d386","sha512":"5463b727d839e16c0ecbedf5c11d4c2da6d4b6b39bfcbb4923de2c5558a6d6b467cbe0837c13c60a101876c615d5d68d1b79da61c9c5db0b586f7f7dfe0d36af","ssdeep":"","tlshash":"65f0c2247db8d47e05bf156a163ac3e9312521123649fa9468cce9741f50fea4df0dca","size":595,"data":"","first_seen":"2026-06-23T22:50:00.185507Z","last_seen":"2026-08-28T19:47:59.765604Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f982c7153c0c145e9c3c0c8721539f47","sha1":"86d0302842e19622cc7204045eb656a5c60ccc7d","sha256":"f560113d4d4102a54638fd11f46c6d432b44df17954bc1c8f127709149d93f0c","sha512":"64dc96d6f04fb558cc2f2743c73a188bc25d99da1beb49271ad50cc051c680d546504e4e0055fb866cbf8f08bdc1863a7e561e7154213b623522b163da80413f","ssdeep":"","tlshash":"3d11004d0fe5f03223f92034e332da5a6da205139583d1047e9d4a983f597c10c429df","size":1032,"data":"","first_seen":"2026-08-28T19:47:59.767487Z","last_seen":"2026-08-28T19:47:59.767487Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9aeb9006f507c9f3b7768b8ed2307143","sha1":"6d79418fd4cb22cfbe3aeda2ae487f8a32f9ca7b","sha256":"9c70be8952bc8615d4f8136f93c6d3b8ad839654634ed8dd2e0f5374848a7477","sha512":"a2b5429a45b6b2e304105490d3bf5098f463e14baf98413459d26165823c1c19962c34c00b4f08afe18debd601c183830f23644072cddabbc528c0e92ede2ebd","ssdeep":"","tlshash":"2a7000082ca08280222080200a2aea00a003000080c288000a880000b002bb3088008a","size":24,"data":"","first_seen":"2026-06-27T07:00:10.035742Z","last_seen":"2026-08-28T19:47:59.768742Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a10292e04423401fc5d54644433a22d","sha1":"7fd4e1b126ed6cce15d947958c1a662e810e94c8","sha256":"8bfc7a90064b56ea44af5aff2c656bdf30466bf431c194c6263ddaaa4c9f3220","sha512":"2f5a11cb6176a8ede1b670d0debc90abc17c3a4617a603ee55b68a8b34a5d81362f851804ee16af8cf1805b2a5a4a92dc114e836a73a7ac7717bde00222c19d5","ssdeep":"","tlshash":"0851f17a706b60f11cda94aab1abebd4f9760055f84bf4005849cda53f36ec3c166c98","size":2894,"data":"","first_seen":"2026-08-28T19:47:59.770003Z","last_seen":"2026-08-28T19:47:59.770003Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7e4da2bd132c9aa17fcdd630e6187d27","sha1":"849ebc1f727abb5d65eadca06bdf4f8f506c5b43","sha256":"4ce9013f0b6e2314331a07fd46cd025bcad8060998d3e828fb053c905ea3f73d","sha512":"3f736ea6a2af6fa02dc5460da0080a8f2723d765adf1b75584514237f0d3f1fbb83011240393408a8fbf74d3f0f650c093691d86a774ab1cb167374cac16b0a4","ssdeep":"","tlshash":"ef700000c0300c000000cc0cc00c030cc3000fc30300c00ccc00c30300003000303cc3","size":18,"data":"","first_seen":"2023-03-13T19:24:32Z","last_seen":"2026-08-28T19:47:59.771337Z","times_seen":242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.getflowbox.com/flowbox.js","fqdn":"connect.getflowbox.com","domain":"getflowbox.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"b24bc356e773a5a635b5929e69c5e40e","sha1":"4309d255b17c3e04155c099b7648884cf844f56c","sha256":"cf3c1b608a050c60ff1dfe538f0f600fea831fd48cd1ae0afec4a140b8fbd3b5","sha512":"429f2d837f60c494a1dc7bb88986eb2b7d6419bccf00966ab26afc24908f43611b0f8e2f99a98f3933f4b2f6f0d7623154427ed3478b32cb324b903101cce45c","ssdeep":"384:SihI+561dNI+zIDjhSQk5ks2A3/Borvoyc9r/1yr:S0W08QKky2rvozRdy","tlshash":"7792428af6c1b4d607f3a4a0022f650ff1b75999789ed9909365d1e4ac78a0fc027f6c","size":19480,"data":"","first_seen":"2026-08-03T14:39:41.272194Z","last_seen":"2026-08-28T19:47:59.666682Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sw-assets.ekomiapps.de/static_resources/f-widget.js","fqdn":"sw-assets.ekomiapps.de","domain":"ekomiapps.de","tld":"de"},"ip":{"addr":"13.249.8.19","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ddab932e27b9044a38cf98fcaa423a7","sha1":"fddc9b7959cc3ff59152f2d573bb0aa8703539c3","sha256":"1aa2b71c719bccbd20f2f523c2662c03e0184b14ef2336e18e1758f596d9cbde","sha512":"67a162ccbd2a4836e0917d1916ab8cca5a890dd6760311b5eabeb55df2be0eb36c6c898a6c5df08456d95fda4cdedcda37460667142e40cfe41a170c12ee55e1","ssdeep":"768:GeUe3VSKSHeZsjzrgXDwN74SKe9C7gTS3KJW7EWG4K3Pk77hTcyOF7YHevM8XYG8:GalpZizrgXMF4Ic7gTS3K6K3Pk77hTc2","tlshash":"ed230985b029746f41773489bcffa6656034385bd08a8808e9e9ed59343fceb6223e5d","size":47761,"data":"","first_seen":"2026-06-04T10:05:31.215202Z","last_seen":"2026-08-28T19:47:59.584561Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d26e0315e428a646302559cda50e4c84","sha1":"53599bd5168611e14ba6a896fc0196f882f88882","sha256":"ea66b9ac1f4c7e164971c5dcd5acdaba2cd3777be6aef79832ac784761f15311","sha512":"893946c380cbbe2dae0d340b4e48d314a1e092a047360cacfecafcaf7b10ff261b7d67518845d94a1ae1a6f6a454b3040cfcb10cde852a1b4bd43dd75e3721bd","ssdeep":"","tlshash":"b331742950b32a520933245d1b8bd509f0936013745cd590fecf07a9efe8e1a71b26ce","size":1734,"data":"","first_seen":"2026-08-28T19:47:59.77269Z","last_seen":"2026-08-28T19:47:59.77269Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sw-assets.ekomiapps.de/static_resources/slick.js?_=1787946408660","fqdn":"sw-assets.ekomiapps.de","domain":"ekomiapps.de","tld":"de"},"ip":{"addr":"13.249.8.19","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b5480640c5cab41c19f0652dd557860","sha1":"f7fcf968b7ab6d50f1b14dca46423dd7cda42429","sha256":"337290f29a7c1923ee4724b0bbae869e478e2b4cf883474bae2ff93216bd7ead","sha512":"79b79799447a962377f5f402f21c431b42c329df85f9b9229ebfbffdabd76348b5b71347a972647d3bd81e99bb9cbdd84cccfed92ad7abd4353eece5be147874","ssdeep":"768:prkk/1R3LK8pMtaNPkN54RnaZdUm32KYCQCWwQPCMzOuFSfG:nItapkNPmNxKiSfG","tlshash":"99038449d600276285d721e62105c40eb3f7fb3cba22c0e435c9d7eb646e85896d7bfa","size":41281,"data":"","first_seen":"2023-03-10T05:58:55Z","last_seen":"2026-08-28T19:47:59.595449Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.pinimg.com/ct/lib/main.e47a302d.js","fqdn":"s.pinimg.com","domain":"pinimg.com","tld":"com"},"ip":{"addr":"151.101.128.84","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"774d4c9e96c34bdd12394f8c68e6be91","sha1":"7faf69748b4ca73948d60296bbf3c6e8c9ee90f3","sha256":"69bb7e4baceedebe814570b659c33be75c3fd145c9932a0aa94363b646342252","sha512":"ee04a31f73fa9bd055bf63cf88451bf1ba9fc1b6ad8c3f733339ebffc6b911345d63a1c954df3d5a2f892f676ea301927cfb323b0f18ac3488df647e2b599038","ssdeep":"3072:y2omfmtPPjtfa/TgxBgn1DneGMmCgxWoj0Q9ehU2woPi8rE/yRmfJCNtqccgwvJP:y2/1/Tkgn1DneGMmCgxWoj0Q9ehU2wo0","tlshash":"1fd30859b5d2f06407a264a0412f100bf13ea918658da4a4e799ece13cbcedf8177f7e","size":138912,"data":"","first_seen":"2026-08-17T19:36:47.473808Z","last_seen":"2026-08-28T23:47:44.101665Z","times_seen":1057,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/eng/menu_categories.js.gzip?r=1785746984","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c727effb7b9a3fa853770122659ee30","sha1":"7853a72beed5978d89271b9a62c5a3925aa5c438","sha256":"f25ff03b14849d948a578f2103886222e09a68fe71b59b6a2debdc3b433fe55d","sha512":"28ceb1056348fab2869b714a926c77acb6e14443f7d8a8fa6f7668ee1067557835e406bb835563435fe0e2417fda23e8f97a4a978250b44809323832a8492fdc","ssdeep":"","tlshash":"5ce0c22ff0d1303217ca7a6d62feb915a0176560090a027b713b02913def002e636d7c","size":301,"data":"","first_seen":"2025-10-07T07:48:49.472741Z","last_seen":"2026-08-28T19:47:59.556655Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/eng/main_instagram.js.gzip?r=1785746984","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f3c74e124fa7533bf504d78fb4a406b","sha1":"ce7f04a9a290d0b88ecfd8f66a81cf4194d98f3d","sha256":"4b66716ff40441a03781651ad61ac96eab1bcc854d35b66f07132c1239755f39","sha512":"dc6846d79002e2ef721dbe8ac0d2c0a6c4570c1ec772fe6d3fc3ecd7313f19494306ca6203d3cbaf54ee2e1a1eb51817bd12acef6f3f8176c6157c36c2d20762","ssdeep":"","tlshash":"33513511a220797e458a16bfe25453a9e741f41ffcd41d2cbdac94cb878bc894133763","size":2911,"data":"","first_seen":"2025-06-29T14:36:36.825096Z","last_seen":"2026-08-28T19:47:59.654747Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/ajax/getCookieConsent.php","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a51eb0ec41602d0a5c41e15c2e244f8e","sha1":"1f3ce651b70772898d4a3d704e6dc739f4cada5c","sha256":"1df727f6fe29fd37c66dd3b7bf19baa514cc68443fc5508692c6d9d6081f81c7","sha512":"578142272e51a0b0bff30c9745026fc732293f7d0b878d060309bea46bb513d2138a99b86a5d1b5891c10f3bcc4b8d2aef468e829891c3057e9a7d547e5b0673","ssdeep":"1536:zlTs4sZ0mZm8km7fltUvTzbAJ3ildiG7PLkt6PNnt19ZrnZnNEVI2LfzbRtA3:hTs4sfkmjsAJOpPNnt19/MDA3","tlshash":"07932a5731fd713d026752b80a2fc78af229502b35cad82cb54ca4345f8556b8eb3adb","size":89855,"data":"","first_seen":"2026-08-28T19:47:59.662972Z","last_seen":"2026-08-28T19:47:59.662972Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.trustisto.com/socialproof.js","fqdn":"js.trustisto.com","domain":"trustisto.com","tld":"com"},"ip":{"addr":"143.204.238.120","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"02a3bc6ae510107b291f4ca730dc529e","sha1":"57de9b3f58b652cbbaba30076942289f94914960","sha256":"6b41f1db66896d3f822c67290c8def025e1dfc98fe38ec39e536c9f57a33ac39","sha512":"3a3a49edc48eb583f4742e210bf8f3368603ed91f53f087d5a1a42119f58fa2229a54159e9e3dd913bed0fae044faa1611887fa258d564ac7da13786836a1809","ssdeep":"3072:lGPMdE0wF4BoGWFC82sN1bKhlOuaQfACgvOdsAXZy8LJvFXzLIjnHbJzJHC:lGPMFwuBsbKhlOuEOdJZy8LzUHbJ1HC","tlshash":"c7643b8bf3b1acb505ea05e961a203907536658c7415b864faac9ec227c0f43d377b7e","size":328807,"data":"","first_seen":"2026-08-28T19:47:59.603662Z","last_seen":"2026-08-28T19:47:59.603662Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ca61960419b2472ecf5f6860569222fe","sha1":"fa8a9744cee77eea0ae6f322bbdb8e2fb6fda923","sha256":"3b3353a6ecb347e799464dba9ebdc4bd324e6601a5f2f8a970696796f1ec835a","sha512":"8741c16656e8150c37032a83b1612823766bcdf7a2556cfa2fda46bb3b3a8a252540ac9d23ac38d8435a3420f1c6505b68732db53f1d3bc0c7eedaeffe901f01","ssdeep":"","tlshash":"29119e04b43a6d2b493ba08c85bf964ba3d5a403879ecca8b7bc13c48f54218515176b","size":1061,"data":"","first_seen":"2026-08-28T19:47:59.774009Z","last_seen":"2026-08-28T19:47:59.774009Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-9N04KGPWSE","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"213b0d18bdd659ea13bdbe1e83c216c4","sha1":"94b6854cc10a2e0a699cc177ce8d7b081a0294bb","sha256":"eef54b1e9f008275b95d8ab0618286ac2ede8c6dbafaabbfc0790b1ac74a8b24","sha512":"46855cea4c18a891911b98d175b6cf51059e0b088fdd076a1e8594719414b1bdb6002a0b907a8c5588645326d2e6a38cfce2cc6e9ece1a1a065806476d5e339b","ssdeep":"6144:YvR6NcAuG706mInP9RaUvvccUQ/xEkY3UcHvEbO/cmcf8k5P0WnmA:ti1zPIftvavEccmcjMWmA","tlshash":"b7c408de73c674229396f578903f01cb697b28a2b49cc89ab189dce02d3454a5277f7c","size":558282,"data":"","first_seen":"2026-08-28T19:47:59.680061Z","last_seen":"2026-08-28T19:47:59.680061Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2e538b8bc0fd3bb056b3784a5c546787","sha1":"2cb06fbd677bdbdb707371d1f1056ae44728fc06","sha256":"5bff89e3c079c71a6f482f3f07c1d27d074b2eaa51ea2eca72be0f1b21df1b48","sha512":"7cad027c0328a089659db06df7d342fd25a9afe80338ef7b39de3ba580d7889bf0361c2f11093e75db1184e7a82cc962eef4ea518004d4ff0c32c44b917f1b30","ssdeep":"","tlshash":"a901707468ba2530827f90175fdebb146160117f914de1113c3ecc897f91ff20962ba5","size":816,"data":"","first_seen":"2026-08-28T19:47:59.775566Z","last_seen":"2026-08-28T19:47:59.775566Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/eng/main_banner_modules.js.gzip?r=1785746984","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"10a341d625cae74c2f0fd1910380840c","sha1":"c4ad0ebdd6eba4dada87a8f6af37b575309fb95d","sha256":"a4982e98cf582c8e0e916df40c37f02f0034b72c9c6b22cef6bd4402f182d624","sha512":"683cd228350fd51f280e1c8544ac84a1615b9a34bff52648d2eba6aeee911d425fb5186933227a1393921e82cca71590d61bbfbfca5fefa6e24df16611fd3cfa","ssdeep":"","tlshash":"8741435010b1253244fb0edfd0df8989e7d04caed88dc2e68068cd2e85e9185a973fe7","size":1926,"data":"","first_seen":"2024-11-07T18:32:54.499121Z","last_seen":"2026-08-28T19:47:59.555263Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/eng/shop.js.gzip?r=1785746983","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"63ddee8edec1a13bf7228b6e55ec8417","sha1":"a9514b9a94ef04601bc00041e6ae3dcc6609185a","sha256":"84f05996806c0135d35a3d89f02c74cf26f830388110fb85741f847f5007f3cb","sha512":"a9774b8a0acfafc7a4a829ac1f22d67f2630c948e00fb86ba7003216eff8acd6d4449fa542bf421ad6ba519904e109940834c1702880804528899d91fd079a65","ssdeep":"12288:OHcZHlP9IJHLo9gIr4tTPCCavJ8gLAxspGqMO2pIm:Se9gIrMTPCCavJ8gsxspGqMd","tlshash":"8ff43a8972a0b63242e721fa507f124bf23225597405805cf06cd9de6f6cd4972bbfba","size":732987,"data":"","first_seen":"2026-08-28T19:47:59.597281Z","last_seen":"2026-08-28T19:47:59.597281Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sw-assets.ekomiapps.de/static_resources/widget.js","fqdn":"sw-assets.ekomiapps.de","domain":"ekomiapps.de","tld":"de"},"ip":{"addr":"13.249.8.19","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e46299e255c66b45c44642b7b8f77584","sha1":"20a0689c6c4364911071dc54289c6fbc747902da","sha256":"085a4682f57909604e172485bcd79a00877b3163c66deae3fcc87a65b9344727","sha512":"9373ade9e5605fefa4d1f58af7979c3b5aa314232f04a89275dca441812d671c4ab5d6c30a1e3d05a077520dd8c59a9d77c6253430f5c1679325feaff85bed06","ssdeep":"","tlshash":"13e0267d8ca898360338085b20aefba1645201bec53c8004c108dc68b1b0de24150e68","size":314,"data":"","first_seen":"2024-07-13T15:10:15Z","last_seen":"2026-08-28T19:47:59.718676Z","times_seen":613,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trafficscanner.pl/ws2/script/4722/koniec.js","fqdn":"trafficscanner.pl","domain":"trafficscanner.pl","tld":"pl"},"ip":{"addr":"148.251.213.126","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6693bf91ebbfdc722f99d8c6df282ca","sha1":"88d0edb6cf52d9e13b79878a43d0075dad23aed9","sha256":"f9d86932cd752341af2b3fcd2cc628f0a814fe19cd0d523b9ba04ade325a3ad5","sha512":"79724028a9ed210f5c18969071a1dad9b31e0b6bb559bd1ecee84612537d6524bca2897ccf24e80737575e2295585346f0e52ba593b94045f9412b1427a92828","ssdeep":"1536:YwO1CKL8gUM5zM/vbm+3qVrsQimKLbPHElVMs91RCQlEuH/u4Hj4SHXewpU8GkwU:YjESdn1+3qV/36p16","tlshash":"5d83198e7692746142633574403f134ab13b19b2b85ad894e16dc8ed7e78f9e40bbf2c","size":82997,"data":"","first_seen":"2025-10-07T07:48:49.479328Z","last_seen":"2026-08-28T19:47:59.722228Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/advertising.js","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9bbbe70f94bbeba198d9b3e7a07fc42","sha1":"905f47e3885014cc5ab7a631c6687aa399c15884","sha256":"bf69c0c7f7f28e1a3ac16e0a52316d3252f8859f7328b01eb3952408ccd1c29b","sha512":"ada2f45c9c45e85a5e047ce37be40cb62dc09839ef681fe3e256b39b74acf91921a0f9c371924545331b22ef67c9df5498c7e7915c2f1bf942dc9092ebd29d89","ssdeep":"","tlshash":"2e70000a0a3000ec200000000802a0e0a22008a0030300c2c288800820c8080080888a","size":21,"data":"","first_seen":"2023-03-26T05:58:32Z","last_seen":"2026-08-28T19:47:59.727067Z","times_seen":366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2acbd6b9b4504a99ed52888f2193abfa","sha1":"e397b0b6d5ece13c127610055235736ad602b877","sha256":"f6fafcbf91487c86b3d099ae7493f257ade7d3234b71b357b4d09ed8ce3e2e50","sha512":"b762c70501d41d9353b560237c3138db48d0372e86e384fb3abc139770b8b34f3b6b96cd50bb9bf55eab8f57412badbbaa842e84082ec0c28b3af1cba655fa1d","ssdeep":"","tlshash":"4b9004404051471754d5455c3513d30341155cf3551f41c4cd411010173f15f74d304c","size":48,"data":"","first_seen":"2025-10-07T07:48:49.51782Z","last_seen":"2026-08-28T19:47:59.777342Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-T47XM8BT","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"41da6173f38cc22fbe6ee38222b8c5af","sha1":"a01d64da49dcf1101fc78a2292f9a959f40b798c","sha256":"aa9b2bd63fda7a9ca91e1b330d297218bc704ed204b0ec628834450caf9ac7da","sha512":"d35a731753d3c7c951fb42b50029c8b1a41526b1cac731f4c9b536a51af5a35052971dd99c812b0873c6f92bfe735fed8a1db194a53bbf37385274e9d3126b38","ssdeep":"6144:Mnq2dO6NOu47i6mInP9RaUvvccUQ/xEkY3Ucxd4O/4dcfIJGSBA:cq2x57PIftvodz4dcAJzBA","tlshash":"44b419cdb3c674629392f574903f018bb67a29a2b84cc895f289dcd42e3465a5273f7c","size":498087,"data":"","first_seen":"2026-08-28T19:47:59.613896Z","last_seen":"2026-08-28T19:47:59.613896Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-1044411784\u0026cx=c\u0026gtm=4e68q1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"599496178ed9056ef77057f057d9a146","sha1":"99568ba82c7c862496e8b3c1fa15910c28db784f","sha256":"8c44c98f23e5c66d02e42d46cee80eaf52a05aea42866ac26ba96a9a9ab84e68","sha512":"b0ecca48f116591412d5750d797cc06754d6921c5a605cf40a47b20acadc25f6e45039ac36fb5ef19180c37cdb122aeb9dee8b3045944830f4a12745af4ed5f1","ssdeep":"6144:E6G6NtuG7i6mInP9RaUvvccUQ/xEkY3Uc6f0O/adcftvA:E6aJPIftvffnadclvA","tlshash":"38a42acdb3d674629392f574903f018bb27a29a2b84cc895f289dcd42e3459a4277f7c","size":461351,"data":"","first_seen":"2026-08-28T19:47:59.70347Z","last_seen":"2026-08-28T19:47:59.70347Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf3402d7483b127ded4069d651ea4a22","sha1":"bde186152457cacf9c35477b5bdda5bcb56b1f45","sha256":"eab5d90a71736f267af39fdf32caa8c71673fd06703279b01e0f92b0d7be0bfc","sha512":"9ce42ebc3f672a2aefc4376f43d38ca9ed9d81aa5b3c1eef60032bcc98a1c399be68d71fd1d5f9de6e98c4ce0b800f6ef1ef5e83d417fbffa63eef2408da55d8","ssdeep":"768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe","tlshash":"9c231bc1a19c219152a774d0093f7107b463353a460ed5acf668e9eeecbcaea903dd7c","size":47992,"data":"","first_seen":"2023-03-07T12:04:24Z","last_seen":"2026-08-28T20:25:04.242238Z","times_seen":77155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/eng/main_shop.js.gzip?r=1785746984","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5992731d923643957b838ad40761f741","sha1":"344cec5b21b05fa9b623871f66434cd157c57460","sha256":"c1f5fe2b3ee76ee4ff4f7ded554419e432ffc7c15171b7190ce838a9f0c70f80","sha512":"e62f2fb2f79c9470dc97f41c099d4c2978a96391cbd44b33cc6e6f8ac5eaaecd1ca2fd7e63c93afc0cf2614b2c1bab2fa7393921ed2bdbfae4bdb4954e96bb94","ssdeep":"192:SVeaszNKsqbeSFwuU6+dqTJxRaaHd9U9A9lpct5MvNjPz/OJdIp:CwzNKsqbeSFq6+dqTJ6aHd9U9A9lpctA","tlshash":"9822d806e2703e2b06af16de817b5b0cd771d859eb4281a0e57efad407a4b452533f2b","size":10594,"data":"","first_seen":"2026-08-28T19:47:59.602487Z","last_seen":"2026-08-28T19:47:59.602487Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/eng/menu_suggested_shop_for_language.js.gzip?r=1785746984","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c2c7543864d12ced13550be5075d2a1","sha1":"be06f1ad806efd06ba273a357007e32f3c642c6a","sha256":"57bc98afdb8a6643b4eb67ccddecf1880d735574c05844f3908af008747781c1","sha512":"154c908ea4fcb170849adbb72db4cdc1f5ec8cde74199cca21527424f4c1bb778d7035a1c6079d24c8bf91f63697eb7fd38d5896effe64409fe8ceccc904c291","ssdeep":"","tlshash":"1051ab5134a1b97528ff119ee8e717c9b2329085644c403dfc30aed40dbaec261a3ebb","size":2748,"data":"","first_seen":"2024-11-07T18:32:54.50322Z","last_seen":"2026-08-28T19:47:59.720749Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sw-assets.ekomiapps.de/static_resources/jquery.min.js","fqdn":"sw-assets.ekomiapps.de","domain":"ekomiapps.de","tld":"de"},"ip":{"addr":"13.249.8.19","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a15c0a89a27a8a9a8f01d2383c8aa86b","sha1":"fe245058d950d57a64d66b15ff65fd1edb738a77","sha256":"d64872744533f880e2db04feaad26db4e3d8ea4588be10f479f639c1e9582f4d","sha512":"e4942544f020005bddfeb726a335216fa2ac4ab17ed0d03c1abbb88ceb816a73232a788b3d54c7bed0eafdd76314de6efd51626c6494723a618bace3a11a3fa9","ssdeep":"1536:pdhEyijTikEJqRdXXe9J578goJsWXdLVhNLkz4DTAjnWotoZqwsRWKKH7UggYiTh:wQcd5hNLLTwn3t0ikHiTDU8CuHDv","tlshash":"2893f7d9b2d670529b7730b850bf410bb17a98dab44c8d60f058c5e57db8a8e507bf2c","size":90963,"data":"","first_seen":"2023-03-10T14:43:21Z","last_seen":"2026-08-28T19:47:59.628687Z","times_seen":365,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.getflowbox.com/507e4e9/flowbox-flow-embed.js","fqdn":"connect.getflowbox.com","domain":"getflowbox.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"a20dda5847151dd6177e088d15cf163f","sha1":"e2b8631dc2dc1deaa3957eafaacfb29803f9987e","sha256":"f633b9ffc5be6560204d6b82b049d264a3fe5a95ff77ef3dc2dfad4d36f0c478","sha512":"a47fb54e157e903408c1910dac24b4147ed39572abe5ec62a1b1a9900af55ca7ddb1885dccf2b8bfe62747968aa9b2602d62d8895f76f96c5ffa9758f936b19b","ssdeep":"3072:bh+Hub9JHub9S8hcqagHpZg2pOKtOvxEJcRxctjTMkPI6Vl:bh+4J4SlqzH9pT0TsjTMkAy","tlshash":"42546ce475aaf1956fb342f600af1c1a733a281f2a0d4aa0b910fcd5e5e544d613bf9c","size":295515,"data":"","first_seen":"2026-08-03T14:39:41.264963Z","last_seen":"2026-08-28T19:47:59.657817Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/eng/envelope.js.gzip?r=1785746984","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02a3c191b6f4e9daf7553060f3ce7167","sha1":"df918eba0953127620a3d2976024b3aa9295b4f5","sha256":"57b802c82ee618a4a12e6b26a58ea0e2efaf0e758bb775f5781a07932abffb2a","sha512":"0fc042962c20c3c3d670c9177c549160f8e3ed44d61e68aa8ffc5a5fd491226c87d17f0fc289744a001117135793907f71d1f564acac8204ad706b2330b13887","ssdeep":"96:HY5JgDdzdHApjFcvYLclttGJJu8WQZdpUwaRpUan4c/xoXGCoz8h6mhm2G:4oAqlttGvu8WQZ0RyanZxDy8Amp","tlshash":"9122e05178ff76230c068ad4b5a36bad7e622336caf18824b3bf85756309db1046f16d","size":10283,"data":"","first_seen":"2024-11-07T18:32:54.501206Z","last_seen":"2026-08-28T19:47:59.573053Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/ajax/js/pwa_online_bar.js?v=1\u0026r=6","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b3284d720e54f16255a9a622e35adb0","sha1":"e9d7133c4bd5404a95f6f280446308c371f24c31","sha256":"6ac950570e3b03a17f2050425a6af80a77b4a912f4640a97a9214127f4196b78","sha512":"0a2f7865677bba8036b61ccff7cb34d0c57468cb78c5fbc8fc0e8d261756e4de272cc0328408eef6f2fb9630db867cc9c5787798438d60af1a1b8f030dd1f674","ssdeep":"96:pkICOXtuUfCrniBGm9rTxTfGqOHkQGFChMuXbRxkR6GunxsjMzaI:eICOtuUfCrnATxDFokQGFChM2R2EGNjY","tlshash":"88c1326de9fe00706773703d5bdfe20575371097560ad980be8d87903f82528a2abacd","size":5662,"data":"","first_seen":"2023-03-26T05:58:32Z","last_seen":"2026-08-28T19:47:59.715013Z","times_seen":366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e8f19410925ea5d589a7535acdc571d","sha1":"cd38a830ddde6163b8140a2654ece0ec67b91734","sha256":"27895ee7abe9329195968987600819c6cdf6d6433e88738e6d3648232ddf8aa0","sha512":"4fe00b244a7823d2d75dbe1e6e0d59fac95a4c8562e93b6e3049743c40188a0abd054167eaabb0d6eece131f4bc592a0638826ba094093a628f79529a34b0fb4","ssdeep":"","tlshash":"71b01240e3f08905b673102d00b98062a17d054750051925d28506188f019452645086","size":88,"data":"","first_seen":"2025-10-07T07:48:49.511806Z","last_seen":"2026-08-28T19:47:59.779049Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.pinimg.com/ct/core.js","fqdn":"s.pinimg.com","domain":"pinimg.com","tld":"com"},"ip":{"addr":"151.101.128.84","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"416ce158a064468c337277c0b0960a00","sha1":"834f48e9d32e3e93f8529ec8f1c52e73b5147757","sha256":"84ac972ebc774e18d80c50dad3fa86abac8690b77e8084f28c97fd5a3a9f3926","sha512":"1fb47d0b8b8115883308ec85e0997f9eaea8b559c1a1c8bed55e40fb4b9b876d2060b3bfcaaa7b5b92742a750e84e31b582a92912556e89a9515156e46e2800a","ssdeep":"96:CALwet4oU/C6Gho1Y2FDImbBEoM1ie2JuuBwCplY7gzpE91Rv:8aM/skY29bRQxCpGmKnv","tlshash":"fda108dc7a91d0a12def5130363f0783b0398d28b035f481a15eda599418e2551adfbe","size":5043,"data":"","first_seen":"2026-08-17T19:36:47.456403Z","last_seen":"2026-08-28T23:47:44.051898Z","times_seen":1074,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"#TRUSTISTO ERROR:No appinfo found! Is website published?","filename":"https://js.trustisto.com/socialproof.js","line_number":1,"column_number":326881}]},"http":[{"url":{"schema":"https","addr":"9design.live/gfx/eng/main_banner_modules.js.gzip?r=1785746984","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.755Z","timestamp":1787946407755,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /gfx/eng/main_banner_modules.js.gzip?r=1785746984 HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: application/x-javascript\r\npriority: u=3,i=?0\r\ncf-ray: a325d2f87b424c11-OSL\r\ncf-cache-status: DYNAMIC\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\netag: \"6a7057ed-362\"\r\nexpires: Sat, 28 Aug 2027 19:46:47 GMT\r\nlast-modified: Mon, 03 Aug 2026 08:57:17 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2FEW83wnv6Codv0930GDLKbCVPsCO7zpwG6kqwx7iX1nHv%2FHDrKeC2M%2BCW5064Wf3fVSToLBXGqa7rbnVR4kFj2jcDC38F0Wn524Hmy6Lzamsd%2FhP%2BGRr1tZQkT2YH8%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 866\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1926,"size_decoded":1719,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (1926), with no line terminators","md5":"10a341d625cae74c2f0fd1910380840c","sha1":"c4ad0ebdd6eba4dada87a8f6af37b575309fb95d","sha256":"a4982e98cf582c8e0e916df40c37f02f0034b72c9c6b22cef6bd4402f182d624","sha512":"683cd228350fd51f280e1c8544ac84a1615b9a34bff52648d2eba6aeee911d425fb5186933227a1393921e82cca71590d61bbfbfca5fefa6e24df16611fd3cfa","ssdeep":"","tlshash":"8741435010b1253244fb0edfd0df8989e7d04caed88dc2e68068cd2e85e9185a973fe7","first_seen":"2024-11-07T18:32:54.499121Z","last_seen":"2026-08-28T19:47:59.555263Z","times_seen":52,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/eng/menu_categories.js.gzip?r=1785746984","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.761Z","timestamp":1787946407761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /gfx/eng/menu_categories.js.gzip?r=1785746984 HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: application/x-javascript\r\npriority: u=3,i=?0\r\ncf-ray: a325d2f88b464c11-OSL\r\ncf-cache-status: DYNAMIC\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\netag: \"6a7057ed-b6\"\r\nexpires: Sat, 28 Aug 2027 19:46:47 GMT\r\nlast-modified: Mon, 03 Aug 2026 08:57:17 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wItmyari%2FgkXzeN1JoUc1mx22mZueJWoX3oRNcIjkm8UilWdvJYyF8NLnR2aYKM9yqRF%2FPyXlZG59q%2F0hnxL%2BQuMaF%2FAeQ3xWbjH1vAVYf6g1pQm5rdbne9EbMz%2BskI%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 182\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":301,"size_decoded":1036,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (301), with no line terminators","md5":"7c727effb7b9a3fa853770122659ee30","sha1":"7853a72beed5978d89271b9a62c5a3925aa5c438","sha256":"f25ff03b14849d948a578f2103886222e09a68fe71b59b6a2debdc3b433fe55d","sha512":"28ceb1056348fab2869b714a926c77acb6e14443f7d8a8fa6f7668ee1067557835e406bb835563435fe0e2417fda23e8f97a4a978250b44809323832a8492fdc","ssdeep":"","tlshash":"5ce0c22ff0d1303217ca7a6d62feb915a0176560090a027b713b02913def002e636d7c","first_seen":"2025-10-07T07:48:49.472741Z","last_seen":"2026-08-28T19:47:59.556655Z","times_seen":2,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/cms/footer/visa.png","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.817Z","timestamp":1787946407817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/cms/footer/visa.png HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a325d2f8db804c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"615aacf1-fc0\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Mon, 04 Oct 2021 07:27:45 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5dV6e%2BHLjOs7hZ1OaqwX6hnxP9hIlW3JQYugJxNcxsNpJXXZPnHPK3YOYc3C5FHRlh0mArGlrh6FB1AZKYg47zxGwNnRGNIcQVLk4fPwb6KF0DSGHK8AcqIGWVAavrA%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4032\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4032,"size_decoded":4809,"mime_type":"image/png","magic":"PNG image data, 90 x 58, 8-bit/color RGBA, non-interlaced","md5":"b26593978389df7a2f8135e9a6ec08d7","sha1":"b19b554be7aafea7f42976eb1609f6b1d3a7049a","sha256":"ebfc7e91e42732807896ea0e903391dc79e5d7413eddd9df667ae95907726753","sha512":"5715bfd63518619551c2f3d27c8d335e651fa4e87aa30df12b71ebf24b0e4fa4afb21d436ec8c68fc8429c42ac8db40ed7cece9e1c187248169f33bfc148d452","ssdeep":"","tlshash":"b6819e1b52c3d1321cac7491621cc5fcdb6d998438408596cdae987c0859d8efefd416","first_seen":"2025-10-07T07:48:49.45778Z","last_seen":"2026-08-28T19:47:59.558101Z","times_seen":2,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/custom/arrow.webp?r=1785746749","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.775Z","timestamp":1787946407775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /gfx/custom/arrow.webp?r=1785746749 HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/png; charset=binary\r\npriority: u=5,i\r\ncf-ray: a325d2f89b524c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"218a12285b94f6d030298a35479a3e6a\"\r\nexpires: Sat, 28 Aug 2027 19:46:47 GMT\r\nlast-modified: Thu, 17 Apr 2025 09:37:11 GMT\r\nserver: cloudflare\r\niai-header-source: cos\r\nx-amz-meta-mtime: 1721037057.395\r\nx-amz-request-id: tx00000b1def62b026ded11-006a7d013e-6518685-default\r\nx-content-type-options: nosniff\r\nx-proxy-cache: HIT\r\nx-rgw-object-type: Normal\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FVBIDds7XjsbUYt5p996DB4NwSioxNIfrb2znj5bJwYO68HfmGVT77G5OmraklUpS2PtP5rKpFlVVf2wHA7MRgsHq0R4jixSYASYbJ2cioL1KRTT5fPZg9XJHRM6ttU%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 308\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":308,"size_decoded":1271,"mime_type":"image/png; charset=binary","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"218a12285b94f6d030298a35479a3e6a","sha1":"76f8413c0e6c6bee203f06be18ccb164d7e2e7ae","sha256":"3f34232ed94f96fe40afef4ba6929b2463325554b04394186b98eb40df9f85f5","sha512":"a55e565d6913afdbac4eeedbdc6893c74452e52d116a282e98b5f023935d4eedff131ff7ca3c77f054814094d61d78aaa324b15f3215c255b47c2ba1c59cc2e5","ssdeep":"","tlshash":"2ce07dd1573419bbd19d0c37a13b02b0dab340d4a811be449c579c249a631ba200035b","first_seen":"2025-10-07T07:48:49.412381Z","last_seen":"2026-08-28T19:47:59.559695Z","times_seen":2,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/cms/style_sg/Group_22_1.jpg","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.802Z","timestamp":1787946407802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/cms/style_sg/Group_22_1.jpg HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a325d2f8cb6f4c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"66e2aa05-78fe\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Thu, 12 Sep 2024 08:44:53 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=plu9WAULxUHOKMnZ%2BEHaN%2B7fuQ4FjYdMjDUNA11orzfTlkqCp3UUX6ayTnPyF7PGGH641m3TM2iUTYtxcGiXoDjqAykKL2WSt%2BwI7DMoOlA%2Fp%2B6agOTJwa1NksytzKk%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30974\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30974,"size_decoded":31762,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 224x185, components 3","md5":"deff554d17a678b3c43aa61aeeaeb633","sha1":"4cee27cf5eb471ecba06de265c0a6af7188c2ed4","sha256":"545081b07ace5d3a1a1227d7019f664913a8805ed4b31ed6f484938825eeb46c","sha512":"497c0f5f83d7ffcfae573047439da5a63966fc57876422261aad052a920ac02482f4c35858c8a6f63ee9e99a131f88ad819812c7c852e94c48d6d9da3b919e89","ssdeep":"768:0TltQRdUYBur/sDn/WVJ1WpREZCizEPANKB9vg:0TltQRmAK0z/WgEoIEvo","tlshash":"cad2f1394fcfa168c828bd50e518e9d8177a22c534723b9cc93549f5f278c895b3be48","first_seen":"2026-08-28T19:47:59.562227Z","last_seen":"2026-08-28T19:47:59.562227Z","times_seen":1,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/cms//zerti_gold_new_1.webp","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.809Z","timestamp":1787946407809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/cms//zerti_gold_new_1.webp HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a325d2f8cb754c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"63563d29-1f9a\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Mon, 24 Oct 2022 07:22:17 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iPCpJmGWhVks6b%2FLMqvRsQjkUZRj%2B%2FeNWjg84k8LNKCN%2FndUzl2ueaSxGF2ffp0Etrg8vAbTJraxqpQgqxBJaOz%2Fzk32fLfXiwYhR4MDJFa4CmdiXbxPa3HW%2F6NS8sg%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8090\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8090,"size_decoded":8879,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"00ba67da7984390403c76baa6ea8071a","sha1":"f153bf58ba414053e38573be8977c7fbccb85997","sha256":"d0400dfae30f548dd3827bf708fc9e4dccd51b8c48d7a7eb57f143f4fc952b89","sha512":"9233822f8d346f74d4292e5a02b6a236a40a287bdc1f009d8d24d98acc0a54a11117c62f49260a9fa66b9c0ebf8357ff14c4f3edaf38eda726105ab0aaedea0c","ssdeep":"192:Y0aR8gBayeHFra3khCTgNEIeV63+SkQr3PC:LaFtq5ZhN3+SJjC","tlshash":"cdf1ae8c862606549c4ca6e7684c11c5716bc630aaa679f9f130323e1daf373216caaa","first_seen":"2026-08-28T19:47:59.56473Z","last_seen":"2026-08-28T19:47:59.56473Z","times_seen":1,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/cms/footer/dts.png","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.824Z","timestamp":1787946407824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/cms/footer/dts.png HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a325d2f8eb8d4c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"615aad06-1a39\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Mon, 04 Oct 2021 07:28:06 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jzowxTDJ%2FaBTnzotJkPMWqBc1SANgaNylWeks3d8OHSAHDCCJYK5TxCvmqlW1pRTkuxRjRM13ToMwbaNnyzn%2BWaMRGeDJkjgvLLjtZuvVYb%2FD6oftPi1gi%2FrYkzxx9o%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6713\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6713,"size_decoded":7497,"mime_type":"image/png","magic":"PNG image data, 73 x 72, 8-bit/color RGBA, non-interlaced","md5":"b5dbb7c5c630d0fe04c4274900ec06d1","sha1":"b1aa1a3677b55c768288eb7ebbd985fe529c4e67","sha256":"d5e9ef06fb5f055afb43449395be0fab7334e84980def6343717aaf3440f3254","sha512":"67d489e1f976d6f7ce296c9c2e51be5116656b4d8c198cdc8bcd357d80bfcbce5f861628678ab83c6c035df98315b7ee39a09ede55dd7532f2a1071a8ab54851","ssdeep":"192:ggYGBYuM945yVNffBz2W681JSc9EiM8sMoadr:ggbBYIsVhBz2P8+c9EiCadr","tlshash":"a4d1afaf1e04daf14775c4e025ad507b3515c972304e84ce1cd69fee16b722f4ae8a42","first_seen":"2025-10-07T07:48:49.459044Z","last_seen":"2026-08-28T19:47:59.566975Z","times_seen":2,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sw-assets.ekomiapps.de/data_files/json/140553_schema.json","fqdn":"sw-assets.ekomiapps.de","domain":"ekomiapps.de","tld":"de"},"ip":{"addr":"13.249.8.19","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://9design.live/","date":"2026-08-28T19:46:49.114Z","timestamp":1787946409114,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ekomiapps.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 14 Jul 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"86:C8:B9:2F:D5:8F:02:89:92:89:39:A0:01:AD:67:54:EB:B6:56:F8","sha256":"C0:1F:04:81:40:8E:C8:A1:15:CB:2F:F6:A6:20:E1:AD:8B:DA:75:54:D9:1E:BC:3F:BC:76:16:BB:1F:69:73:DF"}}},"request":{"raw":"GET /data_files/json/140553_schema.json HTTP/1.1\r\nHost: sw-assets.ekomiapps.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://9design.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ndate: Fri, 28 Aug 2026 19:46:50 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\nlast-modified: Thu, 27 Aug 2026 19:44:46 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=43200,private\r\nserver: AmazonS3\r\netag: W/\"421fd88150086c31d199a553192f4f45\"\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method,Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 b96196480b09999ed2996bb489d3679c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: m39hLkJCrEfmxQ1V5FpQuVh5Sp46GDh3jLSBaM1-qjJFHZo21qAr8g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1305,"size_decoded":1150,"mime_type":"application/json","magic":"JSON text data","md5":"421fd88150086c31d199a553192f4f45","sha1":"9906ee465311e05cb9498a1ff8281b88791fed8b","sha256":"907f80fd2c2c0c10d9ec940a04f67ae3af49c25fb141e8cab9c51212434b4ce1","sha512":"4154df29233a1e263b06312896d73621453b5fd8d6d704aefa3cc2cbe09a411adf56ccb9ec07174bf97494da8d9f4fab846b1d1342fb997d11571c59783fcafb","ssdeep":"","tlshash":"7721baa9e901dc7943d20eec1e782d3a36c1a1cb05a544bd3e3ce99fe3b21f18652285","first_seen":"2026-08-28T19:47:59.569112Z","last_seen":"2026-08-28T19:47:59.569112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.trustisto.com/app/64495f016be45a25?uid=\u0026ab=b","fqdn":"api.trustisto.com","domain":"trustisto.com","tld":"com"},"ip":{"addr":"3.76.5.223","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.556Z","timestamp":1787946408556,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"api.trustisto.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 15 Apr 2026 00:00:00 GMT","end":"Thu, 29 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D9:EB:37:CE:0F:A0:11:C0:79:AE:C5:D2:76:D5:99:95:55:55:81:DB","sha256":"EC:A2:38:AB:E4:87:C0:17:D6:CE:C6:EE:7D:D3:D9:0B:BC:2D:BC:82:E3:5F:53:77:C5:B7:62:A5:5F:68:EE:03"}}},"request":{"raw":"GET /app/64495f016be45a25?uid=\u0026ab=b HTTP/1.1\r\nHost: api.trustisto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-dl: https://9design.live/\r\nX-sid: null\r\nX-st: 0\r\nX-sr: {\"width\":1280,\"height\":1024}\r\nOrigin: https://9design.live\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://9design.pl\r\ncache-control: max-age=60,public\r\ncontent-length: 414\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 28 Aug 2026 19:46:52 GMT\r\nset-cookie: uid=64495f016be45a25_199151bb-c060-4009-94c4-2d9bccad7a19; Max-Age=63072000; Path=/; Expires=Sun, 27 Aug 2028 19:46:52 GMT; HttpOnly; Secure; SameSite=None\r\nx-powered-by: Express\r\nx-robots-tag: noindex\r\nx-envoy-upstream-service-time: 3\r\nserver: envoy\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"64495f016be45a25_199151bb-c060-4009-94c4-2d9bccad7a19","quoted":false,"path":"/","expires":"2028-08-27T19:46:52Z","raw_expires":"Sun, 27 Aug 2028 19:46:52 GMT","max_age":63072000,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"uid=64495f016be45a25_199151bb-c060-4009-94c4-2d9bccad7a19; Max-Age=63072000; Path=/; Expires=Sun, 27 Aug 2028 19:46:52 GMT; HttpOnly; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":414,"size_decoded":925,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9ca8b9486cf6aa03980f6ee8d75767d4","sha1":"55a75a6f3200f500c1d887695a8a763c6d2c5046","sha256":"c763c9860168a5427e134ddc3cd929b4252e764f80dc3f1cfdf180dd27d9a309","sha512":"1d4ac2d2b9dcde96a9a203e5eb63c75dbcf1376df088ffb62a52d2d02bf50652083114d8ec6d047a418435a4d49c1cfe9ea6a945616e00b1f5b984c7a89bfaf6","ssdeep":"","tlshash":"32e02b4205311c7565c8066dfe4e786410ce1223b39a0d2bf9aaaf8d2df977c551713b","first_seen":"2026-08-28T19:47:59.571163Z","last_seen":"2026-08-28T19:47:59.571163Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":25,"send":0,"wait":29,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/eng/envelope.js.gzip?r=1785746984","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.758Z","timestamp":1787946407758,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /gfx/eng/envelope.js.gzip?r=1785746984 HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: application/x-javascript\r\npriority: u=3,i=?0\r\ncf-ray: a325d2f87b444c11-OSL\r\ncf-cache-status: DYNAMIC\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\netag: \"6a7057ed-8fa\"\r\nexpires: Sat, 28 Aug 2027 19:46:47 GMT\r\nlast-modified: Mon, 03 Aug 2026 08:57:17 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xG%2B32ItufNLpq9jsPBo2cJ2pKbHSMGpLOLcX4u1YcmZ3UnIZwD73hNACchTt35w%2B8BqMyfl36NAQcgDw8V%2BqRg9Ma9rIB0dDG%2FjzU68XqSeKDXAdeMLNPK5HlEO8NXc%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2298\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10283,"size_decoded":3150,"mime_type":"application/x-javascript","magic":"HTML document, ASCII text, with very long lines (10283), with no line terminators","md5":"02a3c191b6f4e9daf7553060f3ce7167","sha1":"df918eba0953127620a3d2976024b3aa9295b4f5","sha256":"57b802c82ee618a4a12e6b26a58ea0e2efaf0e758bb775f5781a07932abffb2a","sha512":"0fc042962c20c3c3d670c9177c549160f8e3ed44d61e68aa8ffc5a5fd491226c87d17f0fc289744a001117135793907f71d1f564acac8204ad706b2330b13887","ssdeep":"96:HY5JgDdzdHApjFcvYLclttGJJu8WQZdpUwaRpUan4c/xoXGCoz8h6mhm2G:4oAqlttGvu8WQZ0RyanZxDy8Amp","tlshash":"9122e05178ff76230c068ad4b5a36bad7e622336caf18824b3bf85756309db1046f16d","first_seen":"2024-11-07T18:32:54.501206Z","last_seen":"2026-08-28T19:47:59.573053Z","times_seen":29,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/cms/banner3/time.webp","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.791Z","timestamp":1787946407791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/cms/banner3/time.webp HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a325d2f8bb5f4c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"669e1e38-348\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Mon, 22 Jul 2024 08:54:16 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GAiB8CzxxX4u9ibZCmj%2F%2F7jYxQAOh7gPLxbfIKufq5vpgHgq%2BIJXfuWehaKj5JiEbnCsX%2FzTthiiaYJI%2BrjRSMyfqmVUqGp9ozK1DNqtAuiEWk0aF74oP1XzOoUbyl4%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 840\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":840,"size_decoded":1625,"mime_type":"image/webp","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"af7116c54b4a4b16972d6de4cb8f7708","sha1":"70084a9edeebe76e659d64ef204d52af31cef645","sha256":"b42bcb8085fc73254505be10458701379ea32f58f51f3b31d82891c061f336e6","sha512":"c5251a7f88fb0674f99bab559f0c60eff3374a568f5a441c7c4ae5cb324beb40cf99bc3c07c792bbb3dca837442d3b315d26b80f9b4ea5b7e450d1d1842439ef","ssdeep":"","tlshash":"db01d61f732002e3cde0513b903eb3f02d3f0a7a1a3a9531b6b81aaf5458c8c08a0f51","first_seen":"2026-08-28T19:47:59.57563Z","last_seen":"2026-08-28T19:47:59.57563Z","times_seen":1,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.089Z","timestamp":1787946408089,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://9design.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 02:02:10 GMT\r\nexpires: Fri, 27 Aug 2027 02:02:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 150278\r\nlast-modified: Mon, 15 Sep 2025 17:09:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23580,"size_decoded":24393,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23580, version 1.0","md5":"e1b3b5908c9cf23dfb2b9c52b9a023ab","sha1":"fcd4136085f2a03481d9958cc6793a5ed98e714c","sha256":"918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537","sha512":"b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828","ssdeep":"384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK","tlshash":"91b2e1ce5d546e3a8028213785c17b488273572e9edf42c6dd83a6263a7092cfd3d96e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-08-29T00:27:44.018121Z","times_seen":262087,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjxAwXjeu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.099Z","timestamp":1787946408099,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjxAwXjeu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://9design.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 5612\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 07:42:17 GMT\r\nexpires: Fri, 27 Aug 2027 07:42:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 129871\r\nlast-modified: Mon, 15 Sep 2025 17:09:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5612,"size_decoded":6424,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5612, version 1.0","md5":"633f8feda2188d767d2396652da17377","sha1":"d35cc70037f82ab61d86f2c4d80685a474821d45","sha256":"8b9fc9737043f88c1a9a7195c27a239bd329cc33d928ffb67736c61ae7a1dbbd","sha512":"edadc35473adc7d3d2b6c0bc04789dc78c7f38c0eccac6f08625738d5c8cfa9203c1d9ef2ee6ce721fabc5a4eba41cd19f47e56dc85ff3bc1f7f0ede2ec5ba0b","ssdeep":"96:iD0G8mpQLE+J8uftoCUdUZ/OGjfSg7uov39XTr9a8dBmhPk7jJ5lpqaAjiv/8qBA:7xXLZ8uVoCUdUFOGjJ7Pv39Pw0MiZ5cB","tlshash":"23c1af36b54e1d4bf74201b8137b823e41c70c621637356dbb16aa9418dcf4161371e7","first_seen":"2025-09-17T03:45:02.002945Z","last_seen":"2026-08-28T21:44:47.066369Z","times_seen":5491,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/hpeciai/1e5faefb9a1814e1fddbf037b420473e/eng_il_Flexlux-Clement-upholstered-reclining-armchair-with-footstool-gray-oak-medium-size-52737.jpg","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.822Z","timestamp":1787946408822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /hpeciai/1e5faefb9a1814e1fddbf037b420473e/eng_il_Flexlux-Clement-upholstered-reclining-armchair-with-footstool-gray-oak-medium-size-52737.jpg HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1; iws=45e5a23fd351f61bca84c7e98647dbf3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a325d2ff2d344c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=5184000\r\netag: \"1e5faefb9a1814e1fddbf037b420473e\"\r\nexpires: Tue, 27 Oct 2026 19:46:48 GMT\r\nlast-modified: Tue, 25 Feb 2025 01:07:58 GMT\r\nserver: cloudflare\r\niai-header-source: cos\r\nx-amz-meta-height: 216\r\nx-amz-meta-height_real: 216\r\nx-amz-meta-key: 1e5faefb9a1814e1fddbf037b420473e\r\nx-amz-meta-kind: n\r\nx-amz-meta-mime: image/jpeg\r\nx-amz-meta-size: 14883\r\nx-amz-meta-type: jpg\r\nx-amz-meta-width: 270\r\nx-amz-meta-width_real: 270\r\nx-amz-request-id: tx000001b6709fd25e5f989-006a8c23de-3621276467-zone1\r\nx-content-type-options: nosniff\r\nx-iai-served-by: vm819\r\nx-rgw-object-type: Normal\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JOVJA7wtKo01BcG9hqBz4%2FMNoRbdL5BspsjtHVdX47b0HN7v7Xj3Lhn%2BolxlEmos%2F%2FnA7LRmsTjT8PAPaughgmGwE8vYpzQLqZZH7yGjaUbbwMTJgIXclRJM28huoeU%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14883\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14883,"size_decoded":16060,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 270x216, components 3","md5":"1e5faefb9a1814e1fddbf037b420473e","sha1":"bbc1e7a7c8e6ef37a4de968ca47cb042b40d3e37","sha256":"4b408f8a898b83c57d38cf7c0f1c4f04de4c83c79f3d2517112cb986dab33842","sha512":"3e7c7be1bd3c8145b45c325cd9cd14026c676d5c93c18ffc4922ed83cdee9c4bcfc1945026346714bf08e03d7c1ac0710b7e6771ac489a7b56f027bfc98b1c95","ssdeep":"384:NpYNg7jFMI94JNliNvICoUYTWtG4H2yE4P6ehvcMd:bYydFKviNhw14HICd","tlshash":"ad627c78e7e3c340eb6341bc55bcbf7263d656e0e2e8a01b15a309218545fb96a470bc","first_seen":"2026-08-28T19:47:59.578958Z","last_seen":"2026-08-28T19:47:59.578958Z","times_seen":1,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ekomi-srr.s3.eu-central-1.amazonaws.com/production/assets/uploads/ckeditor_images/Logo-Zau-New-657280-1694158274.png","fqdn":"ekomi-srr.s3.eu-central-1.amazonaws.com","domain":"ekomi-srr.s3.eu-central-1.amazonaws.com","tld":"s3.eu-central-1.amazonaws.com"},"ip":{"addr":"3.5.122.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:49.310Z","timestamp":1787946409310,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.eu-central-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Jul 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:44:60:1F:17:93:6D:C9:C5:10:D3:A4:E4:E6:8A:BE:66:B8:D6:BE","sha256":"E1:01:B1:9F:0D:F4:07:C0:2C:1E:48:2B:2B:9E:3B:E4:D9:A0:F8:F0:58:B3:1A:2F:FB:93:D5:F5:79:0C:25:7B"}}},"request":{"raw":"GET /production/assets/uploads/ckeditor_images/Logo-Zau-New-657280-1694158274.png HTTP/1.1\r\nHost: ekomi-srr.s3.eu-central-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: sletIq02C/uozgP/t8YY1ilLpXUcfXdmIIRYjcMPh4DOoOUUNCWNptmiGAAQSS0dQF6jBYyBafMhEegn9E/pRkJ8lTqmN7FI\r\nx-amz-request-id: R8M6ESS7ER2V14HR\r\nDate: Fri, 28 Aug 2026 19:46:50 GMT\r\nLast-Modified: Fri, 08 Sep 2023 07:31:15 GMT\r\nETag: \"287a48793355b1ca5b202efd9318166e\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 5566\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":5566,"size_decoded":5981,"mime_type":"image/png","magic":"PNG image data, 91 x 91, 8-bit/color RGBA, non-interlaced","md5":"287a48793355b1ca5b202efd9318166e","sha1":"173697b8625a2043bc0e5b387891eb9427e11511","sha256":"d81e227f5615f2271dbb4c16b9a2e5754e1e380f1729024b8fc9112aac61d284","sha512":"8eac9b4c0b85e4c5997e7b926751d7dfcfb84e80c422716f4a6448e98ae455a8fcfe66f65f7df9c3a68a848717133c80fb0d837be112f3428d4510a16541235b","ssdeep":"96:oPsS5/EyYj0rMLDPt9+SripLNclJJ2VNiRiTuRQDFd9qqlATRpzPTT3:9SW/IrcDPQpWlJJ2MiC+DF7m7","tlshash":"6cb17e8382f1352d1e4f5801715218dffe81abbf8765edde6d54800d446b1c2a82e8a7","first_seen":"2024-12-12T03:19:56.489205Z","last_seen":"2026-08-28T19:47:59.580562Z","times_seen":11,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":5,"connect":24,"send":0,"wait":49,"receive":0,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ct.pinterest.com/v3/?tid=2612687808709\u0026pd=%7B%22em%22%3A%22d41d8cd98f00b204e9800998ecf8427e%22%7D\u0026event=init\u0026ad=%7B%22loc%22%3A%22https%3A%2F%2F9design.live%2F%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22e47a302d%22%2C%22is_eu%22%3Atrue%7D\u0026cb=1787946411101","fqdn":"ct.pinterest.com","domain":"pinterest.com","tld":"com"},"ip":{"addr":"151.101.128.84","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://9design.live/","date":"2026-08-28T19:46:51.106Z","timestamp":1787946411106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pinterest.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 13 Aug 2026 00:00:00 GMT","end":"Fri, 26 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"29:C4:71:65:04:3A:28:58:1C:6C:6C:58:16:55:B3:C6:17:5B:6C:CF","sha256":"4B:CD:17:54:85:57:4F:28:33:A0:D4:39:6B:C2:2B:EE:7A:C7:76:4E:65:B5:87:7F:B5:27:C3:3C:7B:BA:8F:0F"}}},"request":{"raw":"GET /v3/?tid=2612687808709\u0026pd=%7B%22em%22%3A%22d41d8cd98f00b204e9800998ecf8427e%22%7D\u0026event=init\u0026ad=%7B%22loc%22%3A%22https%3A%2F%2F9design.live%2F%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22e47a302d%22%2C%22is_eu%22%3Atrue%7D\u0026cb=1787946411101 HTTP/1.1\r\nHost: ct.pinterest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://9design.live\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 35\r\ncache-control: no-cache,no-store,must-revalidate,max-age=0\r\npragma: no-cache\r\nexpires: Sat, 01 Jan 2000 00:00:00 GMT\r\ncontent-type: image/gif\r\naccess-control-allow-origin: https://9design.live\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 3\r\nreferrer-policy: origin\r\nx-pinterest-rid: 4856399183060124\r\nx-pinterest-rid-128bit: 94754d5834ce627143656553a1cbc2e1\r\ndate: Fri, 28 Aug 2026 19:46:51 GMT\r\nx-cdn: fastly\r\nalt-svc: h3=\":443\";ma=604800\r\npinterest-version: 5bbbd57185da7ba4a4fc32855ea52b4e40424111\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":35,"size_decoded":599,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"9b8d19f4310c758344e40bf17fbc7e85","sha1":"2290ef058812d5f5e398736e2316cba8cf8093cf","sha256":"37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b","sha512":"793f00c21fe332ed3cc1c1b17b4ebb115379d6468c6cc3668d6e99da0ff73c52e8e023fda8786193f8b256c7ad6e1415378969602c72ba3206da6fd46470cea7","ssdeep":"","tlshash":"5c800003c280c003c2a2e0300e28c380aba0f0208208030fb0ce2baeec3a0e20c00000","first_seen":"2023-04-05T10:21:28Z","last_seen":"2026-08-28T23:47:44.163756Z","times_seen":121658,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/cms/banner2/banner4.webp","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.788Z","timestamp":1787946407788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/cms/banner2/banner4.webp HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a325d2f8ab5c4c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"669e1686-169ab\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Mon, 22 Jul 2024 08:21:26 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o5KaPkDua3j3rh8KixGbzvKZ7bNSNrsubP3YGdFwdXPVVjkb7nhiyjsOw9Z9vOx602tpd6hlYsiaz1KCbuZ8heBtS1rm2pWDnmMVfzsPlnOhWbH9m52TsPljIoB3ERk%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 92587\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92587,"size_decoded":93366,"mime_type":"image/webp","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 720x720, components 3","md5":"da471e1189ca450313d8484e90c9ff96","sha1":"22ce3df6f64391e68806267f986e2f47ca83a16f","sha256":"f043f2066b2b733e1864e02a6a9b229352acda905237b5452d30ec2beca2a247","sha512":"661b1ec1bf3b8aa5be5e1736b171a257335c61cf43acdd4cae442fdead49abcbdcba2c91d6f48f71ba80ef2d5f44066d3d690c2e9c231a69cf8f17ec8b1afb3e","ssdeep":"1536:5HyswnMrsPyjZjz8jKZPbTsO6icxQeRsumG5YMZPK3ETvP1xQwhJ2JGM7cG8:py0EyjZf817i+yGyvmv1hY57cG8","tlshash":"a19312cd1d9de1d41e22f338bc53979ebb95986bfb42e34b8192141cb801f9cc6e1960","first_seen":"2026-08-28T19:47:59.582914Z","last_seen":"2026-08-28T19:47:59.582914Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sw-assets.ekomiapps.de/static_resources/f-widget.js","fqdn":"sw-assets.ekomiapps.de","domain":"ekomiapps.de","tld":"de"},"ip":{"addr":"13.249.8.19","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.402Z","timestamp":1787946408402,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ekomiapps.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 14 Jul 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"86:C8:B9:2F:D5:8F:02:89:92:89:39:A0:01:AD:67:54:EB:B6:56:F8","sha256":"C0:1F:04:81:40:8E:C8:A1:15:CB:2F:F6:A6:20:E1:AD:8B:DA:75:54:D9:1E:BC:3F:BC:76:16:BB:1F:69:73:DF"}}},"request":{"raw":"GET /static_resources/f-widget.js HTTP/1.1\r\nHost: sw-assets.ekomiapps.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ndate: Fri, 28 Aug 2026 19:46:49 GMT\r\nlast-modified: Thu, 04 Jun 2026 06:45:34 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000,private\r\ncontent-encoding: gzip\r\netag: W/\"8ddab932e27b9044a38cf98fcaa423a7\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 b96196480b09999ed2996bb489d3679c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: ubhaTEXab3VszwwK4R1YiRkNx9dNx07SaKJ0t0uB5QsxhflocoaDtA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":47761,"size_decoded":13606,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (47761), with no line terminators","md5":"8ddab932e27b9044a38cf98fcaa423a7","sha1":"fddc9b7959cc3ff59152f2d573bb0aa8703539c3","sha256":"1aa2b71c719bccbd20f2f523c2662c03e0184b14ef2336e18e1758f596d9cbde","sha512":"67a162ccbd2a4836e0917d1916ab8cca5a890dd6760311b5eabeb55df2be0eb36c6c898a6c5df08456d95fda4cdedcda37460667142e40cfe41a170c12ee55e1","ssdeep":"768:GeUe3VSKSHeZsjzrgXDwN74SKe9C7gTS3KJW7EWG4K3Pk77hTcyOF7YHevM8XYG8:GalpZizrgXMF4Ic7gTS3K6K3Pk77hTc2","tlshash":"ed230985b029746f41773489bcffa6656034385bd08a8808e9e9ed59343fceb6223e5d","first_seen":"2026-06-04T10:05:31.215202Z","last_seen":"2026-08-28T19:47:59.584561Z","times_seen":139,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/hpeciai/0b51ea9ba6787fbaa0a48e18f2269343/eng_il_Claudie-Movano-upholstered-chair-color-to-choose-width-53-5-cm-51826.webp","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.820Z","timestamp":1787946408820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /hpeciai/0b51ea9ba6787fbaa0a48e18f2269343/eng_il_Claudie-Movano-upholstered-chair-color-to-choose-width-53-5-cm-51826.webp HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1; iws=45e5a23fd351f61bca84c7e98647dbf3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a325d2ff2d314c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=5184000\r\netag: \"0b51ea9ba6787fbaa0a48e18f2269343\"\r\nexpires: Tue, 27 Oct 2026 19:46:48 GMT\r\nlast-modified: Mon, 24 Feb 2025 16:15:29 GMT\r\nserver: cloudflare\r\niai-header-source: cos\r\nx-amz-meta-height: 270\r\nx-amz-meta-height_real: 270\r\nx-amz-meta-key: 0b51ea9ba6787fbaa0a48e18f2269343\r\nx-amz-meta-kind: n\r\nx-amz-meta-mime: image/webp\r\nx-amz-meta-size: 3482\r\nx-amz-meta-type: webp\r\nx-amz-meta-width: 258\r\nx-amz-meta-width_real: 258\r\nx-amz-request-id: tx00000e218827765dc5572-006a900a8d-3621263692-zone1\r\nx-content-type-options: nosniff\r\nx-iai-served-by: vm819\r\nx-rgw-object-type: Normal\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S%2BfJqDHqToVdtXpmQioh9pHFeOMdEAxiSERwTwyYIjoV4ySC9EmpUke4LP%2Bg9om2OXHZO1FogXsJqrIYQI3gpvBJof2oUO9hjewSt0hTe8S3C5TO80fW7ugW6oz%2B9S0%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3482\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3482,"size_decoded":4656,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0b51ea9ba6787fbaa0a48e18f2269343","sha1":"d8ad0b2032c8c42996cd36b75dc8040240c140fb","sha256":"7fa3f5fded47126ed6ed45a2ea33cf4f558291b0fb7773f6133619c98ca0ff90","sha512":"d1250b9402906dcde5c7cdd0b36eccc2f2542ddc30beff867c7c8859bef02641d41f3d19009e338a6ee0ead915ce502de493d6c1a63815230dc677c820ca5076","ssdeep":"","tlshash":"9b716ce99711199299a4e8fe3c4ab1508a92c4110328db9f6e460e2f7ce649ed550acf","first_seen":"2026-08-28T19:47:59.585314Z","last_seen":"2026-08-28T19:47:59.585314Z","times_seen":1,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/eng/main_producers.js.gzip?r=1785746984","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.763Z","timestamp":1787946407763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /gfx/eng/main_producers.js.gzip?r=1785746984 HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: application/x-javascript\r\npriority: u=3,i=?0\r\ncf-ray: a325d2f88b484c11-OSL\r\ncf-cache-status: DYNAMIC\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\netag: \"6a7057ed-2b\"\r\nexpires: Sat, 28 Aug 2027 19:46:47 GMT\r\nlast-modified: Mon, 03 Aug 2026 08:57:17 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0djdbLOKJde1ksxe1Y0RqDEujuO1006KbfG%2BQcAJazD0KDplgLZ7U4KTydzFxgtdUchDY68fowlkhyQz%2BfqDKSS9HdypMPOAj0p6FwXvd50%2Blk2UGs1psCWwb6c2SZw%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17,"size_decoded":890,"mime_type":"application/x-javascript","magic":"ASCII text, with no line terminators","md5":"b18e8c6bda8442b374e98f6906998a81","sha1":"d46d263aa6a659f53c264a074c2927a1d283e53a","sha256":"19c6adb6172038e89e0f504dfaeb56caff3f9b03c3440bad0e777eea877ea412","sha512":"27fdda30c0703952816e1d7376c6e6098cdfcb3664bac397bdf193e71320958e09eb624004b235ab72a3386999781f5a8a8ac1d9e816a68cfbe73733b0140b0e","ssdeep":"","tlshash":"2360000cc003000003f00030f000c0000c03c0cf00ff00c0f00c0c0003003c303c0300","first_seen":"2026-08-28T19:47:59.586984Z","last_seen":"2026-08-28T19:47:59.586984Z","times_seen":1,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/cms/banner2/banner3.webp","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.785Z","timestamp":1787946407785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/cms/banner2/banner3.webp HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a325d2f8ab5b4c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"669e1686-2a2931\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Mon, 22 Jul 2024 08:21:26 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P6MJFU7KgBWwMZPLGBK3gNJI86Z5WfUqO62cTrjE76vWIyATOtoVvfcTW34jfJ2hAIGnHheqXFs04vmAr7Tm3RMCA53ZSJm9Fh4kBDF2yFp0Ae%2BLvRusVJPSaN91uS4%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2763057\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2763057,"size_decoded":2763841,"mime_type":"image/webp","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=16, height=6699, bps=206, compression=LZW, PhotometricInterpretation=RGB, orientation=upper-left, width=4466], baseline, precision 8, 1815x2722, components 3","md5":"1f3088ea0c9b32eaa8f2bfa2c2ae41d1","sha1":"bd170957cefd983622773f5b8237c8aa4644cc5c","sha256":"e25881608a6630276fa6e1b0df39e615837e7cc6f3aa6f7b873863612c73e880","sha512":"82040297c08cfd74e6ac1bafe867787064a68ec5bd7af0d3f2d34381106035cd084434d3f04589f5a6f1d77b449a92f65dab219f758e573977c209cdf45ca3d0","ssdeep":"24576:AQx2Wa2X9JFPMveAHAE4dQLntVVrlF6Yx/24t:X2Wa2XFPMvtIe/l/dt","tlshash":"902533387d31d42bd0dbb634b3a6921270a72dfbd77714e2b21eb4087baa7d2d484506","first_seen":"2026-08-28T19:47:59.588502Z","last_seen":"2026-08-28T19:47:59.588502Z","times_seen":1,"resource_available":false,"data":null}},"time_used":633,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":427,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/custom/newsletter.webp?r=1785746749","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.805Z","timestamp":1787946407805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /gfx/custom/newsletter.webp?r=1785746749 HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/jpeg; charset=binary\r\npriority: u=5,i\r\ncf-ray: a325d2f8cb714c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"ff63ab5ce528c3baf8a9b29b29db2d44\"\r\nexpires: Sat, 28 Aug 2027 19:46:47 GMT\r\nlast-modified: Thu, 17 Apr 2025 09:37:29 GMT\r\nserver: cloudflare\r\niai-header-source: cos\r\nx-amz-meta-mtime: 1722241159.352\r\nx-amz-request-id: tx00000990b3578799c86db-006a90db1f-6518685-default\r\nx-content-type-options: nosniff\r\nx-proxy-cache: HIT\r\nx-rgw-object-type: Normal\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=plhCnxHz115m45%2FNITai1L3Y9LZGUStCAzhBhTw0ebagMsmVt8R0MddIGhllxA0lQfeFkZQw%2BJCLS7ZEUky%2BYxlls6Oe5TMfiprg1vYl1Z4A%2FTu6RnsILeiXTjTM5BA%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 105270\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105270,"size_decoded":106245,"mime_type":"image/jpeg; charset=binary","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x887, components 3","md5":"ff63ab5ce528c3baf8a9b29b29db2d44","sha1":"bbede6fd441771ea1be7b0509cc4cdf334738a8d","sha256":"716316c92ab2dc29826f7fb1f145abe2fa452b13c5dd57de97675b71f1f0f411","sha512":"b04815840d62bdc5c02be68400258ec57b38dac6146702e2762eff571a27818f4e86b05625fa70cc4ad6206861782bb85e2522e9974136c8a09cecb8d62352a1","ssdeep":"1536:lKVZLtEdCPXPP2WYdgzI6C2xiw21kIaJVfs2g9bD0KecASewIsGizBIarGQvPCLT:lKVZLtcCv2WYdcVjI8+AEyc/R6RB","tlshash":"18a31279a0366348f01bef2674eef8ec105dbc16c0dd469aa5a0f2ea885318c35768d3","first_seen":"2026-08-28T19:47:59.590428Z","last_seen":"2026-08-28T19:47:59.590428Z","times_seen":1,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/custom/icons-basket.png","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.116Z","timestamp":1787946408116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /gfx/custom/icons-basket.png HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/gfx/eng/style.css.gzip?r=1785746983\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1; iws=45e5a23fd351f61bca84c7e98647dbf3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: image/png; charset=binary\r\npriority: u=4,i\r\ncf-ray: a325d2facc234c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"b16c12f4418f29255fa9005ce556280c\"\r\nexpires: Sat, 28 Aug 2027 19:46:48 GMT\r\nlast-modified: Thu, 29 May 2025 09:25:17 GMT\r\nserver: cloudflare\r\niai-header-source: cos\r\nx-amz-request-id: tx0000051b4385156eb5676-006a90db1f-6505718-default\r\nx-content-type-options: nosniff\r\nx-proxy-cache: HIT\r\nx-rgw-object-type: Normal\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k2gUB3j%2BzE1KCFL1Z6oR6Trg0dD0rTxJ9j60Eofex4%2FAzYvGEQOSLgPcsme2gRi09ZNg4LqZ%2FPMc7vemCNXKHWNsInYpg8rjX1t9otHi8MHkdVN%2FGP5W2G8bQqTWNcM%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 386\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":386,"size_decoded":1323,"mime_type":"image/png; charset=binary","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"b16c12f4418f29255fa9005ce556280c","sha1":"ff1b35d06835e1ffc6692aca563e68ab7b0a5331","sha256":"7b5cc6cbed917bec37934434c1dabf3ec145ddf985b3869aa677cf43e82e45bb","sha512":"9c59bcee74bcc9455e7dc9d0a1cd2b43cdd3e5a885cfcb7684cda95ee6f627e36a48236ef8e5594b680dd78406565a4a911e4dbe7fcac20c2ff574d50c79e6b5","ssdeep":"","tlshash":"53e0fadf0168547e41514431c51a1ad0c4f79e762c79500c509588617512198b6de30f","first_seen":"2026-08-28T19:47:59.592294Z","last_seen":"2026-08-28T19:47:59.592294Z","times_seen":1,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/pwa/pwa-offline-en.html","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.577Z","timestamp":1787946408577,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/pwa/pwa-offline-en.html HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1; iws=45e5a23fd351f61bca84c7e98647dbf3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GxC7ZSAQ3c87kAldvwT0g8599QEn3Wo8Gq71%2BS181hCS6fHiEpp9avC5qCnoZmaTOMJBwNiIebFo%2BDU3kyULcBbPSAmOX3IBkylUobdB84DEBWS%2F67SiHFjkNUOqOEU%3D\"}]}\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a325d2fd9cd64c11-OSL\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=3600\r\npriority: u=4,i=?0\r\nexpires: Fri, 28 Aug 2026 20:46:48 GMT\r\nlast-modified: Wed, 10 Oct 2018 11:10:13 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28222,"size_decoded":15110,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (24170)","md5":"4bea580e289f70020b3de95fb00f706b","sha1":"8ad8cb5283062fabf938b2f5f748f1e6c06d56b0","sha256":"14f22254a0684070854d87fb540f3c244a1d5b5a67e010c7d12d442b51bc2e8c","sha512":"35732b48221a907babf7c80c69be6d7a6ff04da20f56ee09ed6586b4c43843f9363db67f02b391fea09766123dd0ecb338125c2bc6a4901d1ec23276eb1302d5","ssdeep":"384:ZPBAaqSZNS+mAo6D+w3GQ4t7V1DJ8oyT14U2IEOtEJAD6ILVpmZEzK5MTmtjoNy:1BEnzw374ZeoiMCJD5LoEzK5MTmtuy","tlshash":"e5c20ee9a762fc59cc67352ff1593b2a81610f2bddf9848479dcb4080ba4e4aa0d15cf","first_seen":"2026-06-23T22:50:00.062118Z","last_seen":"2026-08-28T19:47:59.593981Z","times_seen":3,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sw-assets.ekomiapps.de/static_resources/slick.js?_=1787946408660","fqdn":"sw-assets.ekomiapps.de","domain":"ekomiapps.de","tld":"de"},"ip":{"addr":"13.249.8.19","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9design.live/","date":"2026-08-28T19:46:49.309Z","timestamp":1787946409309,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ekomiapps.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 14 Jul 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"86:C8:B9:2F:D5:8F:02:89:92:89:39:A0:01:AD:67:54:EB:B6:56:F8","sha256":"C0:1F:04:81:40:8E:C8:A1:15:CB:2F:F6:A6:20:E1:AD:8B:DA:75:54:D9:1E:BC:3F:BC:76:16:BB:1F:69:73:DF"}}},"request":{"raw":"GET /static_resources/slick.js?_=1787946408660 HTTP/1.1\r\nHost: sw-assets.ekomiapps.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ndate: Fri, 28 Aug 2026 19:46:50 GMT\r\nlast-modified: Tue, 19 Nov 2019 20:26:09 GMT\r\nserver: AmazonS3\r\ncache-control: max-age=604800,public\r\ncontent-encoding: gzip\r\netag: W/\"1b5480640c5cab41c19f0652dd557860\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 b96196480b09999ed2996bb489d3679c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: CDnP3VdYT8JAyACnaU_2UWNGivGYn_T0YDn1dYwPBamTmTEiqJ7elA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":41281,"size_decoded":10583,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41281), with no line terminators","md5":"1b5480640c5cab41c19f0652dd557860","sha1":"f7fcf968b7ab6d50f1b14dca46423dd7cda42429","sha256":"337290f29a7c1923ee4724b0bbae869e478e2b4cf883474bae2ff93216bd7ead","sha512":"79b79799447a962377f5f402f21c431b42c329df85f9b9229ebfbffdabd76348b5b71347a972647d3bd81e99bb9cbdd84cccfed92ad7abd4353eece5be147874","ssdeep":"768:prkk/1R3LK8pMtaNPkN54RnaZdUm32KYCQCWwQPCMzOuFSfG:nItapkNPmNxKiSfG","tlshash":"99038449d600276285d721e62105c40eb3f7fb3cba22c0e435c9d7eb646e85896d7bfa","first_seen":"2023-03-10T05:58:55Z","last_seen":"2026-08-28T19:47:59.595449Z","times_seen":163,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/eng/shop.js.gzip?r=1785746983","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.753Z","timestamp":1787946407753,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /gfx/eng/shop.js.gzip?r=1785746983 HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: application/x-javascript\r\npriority: u=3,i=?0\r\ncf-ray: a325d2f87b414c11-OSL\r\ncf-cache-status: DYNAMIC\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\netag: \"6a7057ed-31888\"\r\nexpires: Sat, 28 Aug 2027 19:46:47 GMT\r\nlast-modified: Mon, 03 Aug 2026 08:57:17 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k4NIWoLgKsi9YftOcDpMiWTuwPGt021PBQizwF9Lf5dRIdT%2BEYCBSjngr6XnGlD2Ikp9S6FqmADTxAoy71g2ybAc4HyqWBxDTuXUbWBalWiZ71asKjP4CfnvZa89%2FQ4%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 202888\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":732987,"size_decoded":203740,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65394), with no line terminators","md5":"63ddee8edec1a13bf7228b6e55ec8417","sha1":"a9514b9a94ef04601bc00041e6ae3dcc6609185a","sha256":"84f05996806c0135d35a3d89f02c74cf26f830388110fb85741f847f5007f3cb","sha512":"a9774b8a0acfafc7a4a829ac1f22d67f2630c948e00fb86ba7003216eff8acd6d4449fa542bf421ad6ba519904e109940834c1702880804528899d91fd079a65","ssdeep":"12288:OHcZHlP9IJHLo9gIr4tTPCCavJ8gLAxspGqMO2pIm:Se9gIrMTPCCavJ8gsxspGqMd","tlshash":"8ff43a8972a0b63242e721fa507f124bf23225597405805cf06cd9de6f6cd4972bbfba","first_seen":"2026-08-28T19:47:59.597281Z","last_seen":"2026-08-28T19:47:59.597281Z","times_seen":1,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"smart-widget-assets.ekomiapps.de/resources/ekomi_logo.png","fqdn":"smart-widget-assets.ekomiapps.de","domain":"ekomiapps.de","tld":"de"},"ip":{"addr":"13.249.8.19","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.804Z","timestamp":1787946407804,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ekomiapps.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 14 Jul 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"86:C8:B9:2F:D5:8F:02:89:92:89:39:A0:01:AD:67:54:EB:B6:56:F8","sha256":"C0:1F:04:81:40:8E:C8:A1:15:CB:2F:F6:A6:20:E1:AD:8B:DA:75:54:D9:1E:BC:3F:BC:76:16:BB:1F:69:73:DF"}}},"request":{"raw":"GET /resources/ekomi_logo.png HTTP/1.1\r\nHost: smart-widget-assets.ekomiapps.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 3962\r\nlast-modified: Thu, 03 Jun 2021 13:17:50 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 28 Aug 2026 16:29:49 GMT\r\ncache-control: max-age=604800,public\r\netag: \"b530be3bbb79efc7d0046747bc9cdc91\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b96196480b09999ed2996bb489d3679c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: 6MVBSc_ADrxzVkQKM2jf_uNYMVAblTk-vfurH7IIeXMWdUEKgHBfFQ==\r\nage: 11819\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":3962,"size_decoded":4478,"mime_type":"image/png","magic":"PNG image data, 147 x 40, 8-bit colormap, non-interlaced","md5":"b530be3bbb79efc7d0046747bc9cdc91","sha1":"88a265c1e4660b4e1e6063972663a76598b84208","sha256":"f57ea7c0570b601ac564111f10eff322b55fa998b3ed40e756087ca1ccb3c24b","sha512":"92699522cf75ae046f031e598f3daf37f9dc30170f51196e25946ad3bb37a1dbe5324f8e417e06b9e387ab12caeeef2ba09ff2d64482d6228c50d8594d746546","ssdeep":"","tlshash":"a3815baf45bfaead0db0c3015d52779c68c93166948e88864cf64a0970a43d0e3cf3cd","first_seen":"2023-07-15T08:09:36Z","last_seen":"2026-08-28T19:47:59.59883Z","times_seen":406,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":10,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.iai-shop.com/data/include/cms/maska/youtube_icon.png","fqdn":"9design.iai-shop.com","domain":"iai-shop.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.813Z","timestamp":1787946407813,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /data/include/cms/maska/youtube_icon.png HTTP/1.1\r\nHost: 9design.iai-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T00:37:18.225338Z","times_seen":18157800,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.trustisto.com/app/64495f016be45a25?uid=\u0026ab=b","fqdn":"api.trustisto.com","domain":"trustisto.com","tld":"com"},"ip":{"addr":"3.76.5.223","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.582Z","timestamp":1787946408582,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"api.trustisto.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 15 Apr 2026 00:00:00 GMT","end":"Thu, 29 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D9:EB:37:CE:0F:A0:11:C0:79:AE:C5:D2:76:D5:99:95:55:55:81:DB","sha256":"EC:A2:38:AB:E4:87:C0:17:D6:CE:C6:EE:7D:D3:D9:0B:BC:2D:BC:82:E3:5F:53:77:C5:B7:62:A5:5F:68:EE:03"}}},"request":{"raw":"OPTIONS /app/64495f016be45a25?uid=\u0026ab=b HTTP/1.1\r\nHost: api.trustisto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-dl,x-sid,x-sr,x-st\r\nReferer: https://9design.live/\r\nOrigin: https://9design.live\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, X-Content-Origin, Cache-Control, Expires, Pragma, X-dl, X-sid, X-st, X-sr\r\naccess-control-allow-methods: PUT, POST, GET, OPTIONS, DELETE\r\naccess-control-allow-origin: https://9design.live\r\naccess-control-max-age: 86400\r\ncontent-length: 2\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Fri, 28 Aug 2026 19:46:52 GMT\r\nx-powered-by: Express\r\nx-robots-tag: noindex\r\nx-envoy-upstream-service-time: 1\r\nserver: envoy\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":2,"size_decoded":566,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-08-29T00:33:59.877381Z","times_seen":371855,"resource_available":true,"data":null}},"time_used":3675,"timings":{"blocked":-1,"dns":0,"connect":25,"send":0,"wait":27,"receive":0,"ssl":3624},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sw-assets.ekomiapps.de/resources/language/100_en.json","fqdn":"sw-assets.ekomiapps.de","domain":"ekomiapps.de","tld":"de"},"ip":{"addr":"13.249.8.19","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.940Z","timestamp":1787946408940,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ekomiapps.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 14 Jul 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"86:C8:B9:2F:D5:8F:02:89:92:89:39:A0:01:AD:67:54:EB:B6:56:F8","sha256":"C0:1F:04:81:40:8E:C8:A1:15:CB:2F:F6:A6:20:E1:AD:8B:DA:75:54:D9:1E:BC:3F:BC:76:16:BB:1F:69:73:DF"}}},"request":{"raw":"GET /resources/language/100_en.json HTTP/1.1\r\nHost: sw-assets.ekomiapps.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://9design.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ndate: Fri, 28 Aug 2026 19:46:49 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\nlast-modified: Mon, 04 May 2026 20:00:44 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000,private\r\nserver: AmazonS3\r\netag: W/\"137b7cce542c312233f84d11d86ca439\"\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method,Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 b96196480b09999ed2996bb489d3679c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: HNfgE6-xCkWdfBfd1SGPxYglIY0N7qT4jz3MPgfyMZP7YtnLfvBmjQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1031,"size_decoded":1045,"mime_type":"application/json","magic":"JSON text data","md5":"137b7cce542c312233f84d11d86ca439","sha1":"416c25c9476bda69b41384a630e58f5c02b65534","sha256":"c2be823cfe416a01f86ac9c210265c5522eccd7ed3eb962f8555663424fec485","sha512":"19f8e0d4680028dea75461c32d5b8fc8be9fbf00605384835df3d441b8a76ebcfec17565f429245b4288490f00f5cc09b089eeb82d12220e7e8fd85371d80bc3","ssdeep":"","tlshash":"3e11367b71e84a310b37a6c61d9cfdf0a4092293cd11905ae58dec10f0abae8418f87b","first_seen":"2026-05-06T20:45:57.961477Z","last_seen":"2026-08-28T19:47:59.601439Z","times_seen":78,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/eng/main_shop.js.gzip?r=1785746984","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.756Z","timestamp":1787946407756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /gfx/eng/main_shop.js.gzip?r=1785746984 HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: application/x-javascript\r\npriority: u=3,i=?0\r\ncf-ray: a325d2f87b434c11-OSL\r\ncf-cache-status: DYNAMIC\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\netag: \"6a7057ed-f0f\"\r\nexpires: Sat, 28 Aug 2027 19:46:47 GMT\r\nlast-modified: Mon, 03 Aug 2026 08:57:17 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e7FQsrnf9se%2Bnt2DHxi%2Bw8R1mUAYKaiuAcQT%2FgOt2lGD7SZym18M2lWc2VX%2BumcKj2KDnf93OS9RsxyogTvlLBNaAxxuZtH1PDWsF623DAZeDBWt9x8nuFlaLq%2Ba3Rc%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3855\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10594,"size_decoded":4709,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (10594), with no line terminators","md5":"5992731d923643957b838ad40761f741","sha1":"344cec5b21b05fa9b623871f66434cd157c57460","sha256":"c1f5fe2b3ee76ee4ff4f7ded554419e432ffc7c15171b7190ce838a9f0c70f80","sha512":"e62f2fb2f79c9470dc97f41c099d4c2978a96391cbd44b33cc6e6f8ac5eaaecd1ca2fd7e63c93afc0cf2614b2c1bab2fa7393921ed2bdbfae4bdb4954e96bb94","ssdeep":"192:SVeaszNKsqbeSFwuU6+dqTJxRaaHd9U9A9lpct5MvNjPz/OJdIp:CwzNKsqbeSFq6+dqTJ6aHd9U9A9lpctA","tlshash":"9822d806e2703e2b06af16de817b5b0cd771d859eb4281a0e57efad407a4b452533f2b","first_seen":"2026-08-28T19:47:59.602487Z","last_seen":"2026-08-28T19:47:59.602487Z","times_seen":1,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.trustisto.com/socialproof.js","fqdn":"js.trustisto.com","domain":"trustisto.com","tld":"com"},"ip":{"addr":"143.204.238.120","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.333Z","timestamp":1787946408333,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trustisto.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Thu, 05 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F2:75:F2:6D:FC:A4:48:11:B2:CD:DD:1B:81:0A:D8:D6:61:74:7C:BB","sha256":"37:BE:B3:8B:92:6B:5A:D0:6B:33:D1:40:8E:1E:7B:75:82:36:38:86:6B:72:6B:63:7F:66:83:E3:C3:69:94:3E"}}},"request":{"raw":"GET /socialproof.js HTTP/1.1\r\nHost: js.trustisto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nlast-modified: Tue, 25 Aug 2026 14:30:52 GMT\r\ncontent-encoding: gzip\r\nserver: AmazonS3\r\ndate: Fri, 28 Aug 2026 19:31:11 GMT\r\ncache-control: max-age=3600,public\r\netag: W/\"02a3bc6ae510107b291f4ca730dc529e\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4d370877aaf92bbc7827e0db032dc51c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: CjiyKZdtyMwUr7OdzQKQm9wgc-MYzfPBNtBBBZ31u0BtLctkuEDIOQ==\r\nage: 938\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":328807,"size_decoded":70778,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"02a3bc6ae510107b291f4ca730dc529e","sha1":"57de9b3f58b652cbbaba30076942289f94914960","sha256":"6b41f1db66896d3f822c67290c8def025e1dfc98fe38ec39e536c9f57a33ac39","sha512":"3a3a49edc48eb583f4742e210bf8f3368603ed91f53f087d5a1a42119f58fa2229a54159e9e3dd913bed0fae044faa1611887fa258d564ac7da13786836a1809","ssdeep":"3072:lGPMdE0wF4BoGWFC82sN1bKhlOuaQfACgvOdsAXZy8LJvFXzLIjnHbJzJHC:lGPMFwuBsbKhlOuEOdJZy8LzUHbJ1HC","tlshash":"c7643b8bf3b1acb505ea05e961a203907536658c7415b864faac9ec227c0f43d377b7e","first_seen":"2026-08-28T19:47:59.603662Z","last_seen":"2026-08-28T19:47:59.603662Z","times_seen":1,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":17,"connect":8,"send":0,"wait":12,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/ajax/get.php","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.458Z","timestamp":1787946408458,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"POST /ajax/get.php HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 334\r\nOrigin: https://9design.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1; iws=45e5a23fd351f61bca84c7e98647dbf3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":334,"data":"request={\"Snippets\":{\"format\":\"json\",\"params\":{\"mobile\":\"false\",\"tablet\":\"false\",\"pc\":\"true\",\"request_uri\":\"%2Fmain-eng.html\",\"additional_ajax\":\"/index.php\"}},\"ToplayersAndWidgets\":{\"format\":\"json\",\"params\":{\"mobile\":\"false\",\"tablet\":\"false\",\"pc\":\"true\",\"request_uri\":\"%2Fmain-eng.html\",\"additional_ajax\":\"/index.php\"}},\"Wishlist\":{}}"}},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=65kPYIZyjMvKZMzWnCiR4PL1yd6KJycBCWh8vZjwqn8fO3m6%2FwBlxQZtO3BxmfvZnFkmqUE2jzz10OAVIbR3Hl803zAf9aMso4AAyklNmBNRiciXDsZvhKDNXRCx1j4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a325d2fcecaa4c11-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate\r\npriority: u=4,i=?0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nserver: cloudflare\r\nset-cookie: wishes_products_count=0; path=/; secure\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-frame-options: sameorigin\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"wishes_products_count","value":"0","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"wishes_products_count=0; path=/; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4285,"size_decoded":2366,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"fdfdac1b1c5377073123c71f43954498","sha1":"c12ae91100526d9cc55ca7baca9978f68bda6f3a","sha256":"7a93b9ba0f917982037763378383b5433938826895ad62861d62b2463d379b2e","sha512":"9188383a62fcdb0d70d54ad92b9f5acaac07f6f07158fbb3e6fa7917da8365a1b70e8489ce6a64ca4fe32308d0d0af7dde90b8acaedc780e0f5dae53391a0495","ssdeep":"96:7407KZ8f/zI4uEmBvOu4NF/nMcvKrw46ciE4bLO4PtgE:r7fGE2Kxn4lIptr","tlshash":"029178751c68ba3b4f8fc0fa54affe18d5677c16920848157aac4c8defc3349c855a1a","first_seen":"2026-08-28T19:47:59.60481Z","last_seen":"2026-08-28T19:47:59.60481Z","times_seen":1,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sw-assets.ekomiapps.de/resources/slider-next-icon-arrow.png","fqdn":"sw-assets.ekomiapps.de","domain":"ekomiapps.de","tld":"de"},"ip":{"addr":"13.249.8.19","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:49.496Z","timestamp":1787946409496,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ekomiapps.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 14 Jul 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"86:C8:B9:2F:D5:8F:02:89:92:89:39:A0:01:AD:67:54:EB:B6:56:F8","sha256":"C0:1F:04:81:40:8E:C8:A1:15:CB:2F:F6:A6:20:E1:AD:8B:DA:75:54:D9:1E:BC:3F:BC:76:16:BB:1F:69:73:DF"}}},"request":{"raw":"GET /resources/slider-next-icon-arrow.png HTTP/1.1\r\nHost: sw-assets.ekomiapps.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 296\r\ndate: Fri, 28 Aug 2026 04:23:42 GMT\r\nlast-modified: Tue, 19 Nov 2019 20:26:02 GMT\r\netag: \"019e56790cf8fb35a6e2ff718408f2dc\"\r\ncache-control: max-age=604800,public\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b96196480b09999ed2996bb489d3679c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: mAeuRBo7FeUcifpwe1_iVlsB7CwKpW9p8YDC87Hq6UnDCuKtSY8h_Q==\r\nage: 55388\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":296,"size_decoded":788,"mime_type":"image/png","magic":"PNG image data, 18 x 28, 8-bit colormap, non-interlaced","md5":"019e56790cf8fb35a6e2ff718408f2dc","sha1":"75598e0793ff85eaeef58f8d7d6bb8d87065301f","sha256":"2cf93af00945521238ff5b763e8dcc47077d4602fe2c394ffeea13c4c4bba5ab","sha512":"a97809e5166aa5ce1f2e666cd025fa9c86e6d099e89431cc46ada65aac898b902bc9c91d5d61231ab88bf7bccc13b16d925f8dd93b629165daa0bae81f7391cd","ssdeep":"","tlshash":"55e0236a0c8f7c1dcec4003711cd02394c31100ba0bf00fb515ec4f04a3324166c1743","first_seen":"2023-11-09T17:31:52Z","last_seen":"2026-08-28T19:47:59.606438Z","times_seen":125,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/cms/banner2/banner2.webp","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.784Z","timestamp":1787946407784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/cms/banner2/banner2.webp HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a325d2f8ab5a4c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"669e1685-34eeb\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Mon, 22 Jul 2024 08:21:25 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WNpA3IIQmALmB5Oth48uhPrJEZgxHE%2FlL6O7QDRJSsJJaAxmUpdFDdoT0%2BYbkKn6XdQVmZYmGjzX%2FC%2BD0MH8OvhYktoOZQleWb1U%2FKt2eZpZclRUNpw0OgS2LprVPD4%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 216811\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":216811,"size_decoded":217601,"mime_type":"image/webp","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1500x950, components 3","md5":"27039e71ecc0e7396c04264631a6becd","sha1":"9b1a4970519d2a24104c1d22b832134b10830078","sha256":"baa0e55f7ed6d31f8ddbf1de5c20db109930d44d5d2efdbb6598f92b28a88956","sha512":"a0bfc3de4416054aa4a8fde66d8d024aba4256fe382760320d4445a081887d7b74537cda27b11798861561b86398fa82feda294342cded5c73959cf916d8fe2f","ssdeep":"6144:bwtOIUbKAYKhgwF05Qi+E7Z+YeCj79TRONGDRQaluTnrd:baOlC+ucCH9TFDRQ3Tnp","tlshash":"f32422fdfe93ad4495f86d6d1f1985a48c907ed2972e8609d14b1ab2c0c99430fe38f2","first_seen":"2026-08-28T19:47:59.608319Z","last_seen":"2026-08-28T19:47:59.608319Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/cms/style_sg/Rectangle_9.jpg","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.800Z","timestamp":1787946407800,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/cms/style_sg/Rectangle_9.jpg HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a325d2f8cb6d4c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"66c2f979-a281\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Mon, 19 Aug 2024 07:51:21 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y0vvCD5SRxdsR%2FPRUsjn5gQKQi6l4G6BjsfewS5JB93s%2FasYmtGXiuR0M818VpJ5QqVopLpeNKis5QQZyUoJasxuvQZDEdvZhuBuKHfrgDwFepEqbw9vGiLNPHJvi8k%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 41601\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41601,"size_decoded":42383,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 155x220, components 3","md5":"b1a6626127e08e17805126018737001a","sha1":"c17f21dbcd8823ff4ea75cf57d4731ee4aa66760","sha256":"ffc56068b3754cb04b3828b59e58d7330da910d01946596d6bd8e243e639394f","sha512":"75b92d5dac3db313d181b3c05fb21eaa6ae313debeebab2e871ad5c7c6a8f53538c8d9d913629fa1613fdc8da2a64f382253be8ea6b689b611b2cc5cc9e9292d","ssdeep":"768:2z3ZuizGGlfsJ0NlaqEdDnn+sgP55+qdqzaI1gtXcBBRAq4rFCSn:2TZlJpXEEK9zN1gyjRmhDn","tlshash":"6f13f11727d8efe8db98f778aa340124c4ca8efe48369e328b27b555d257cc5221490f","first_seen":"2026-08-28T19:47:59.60968Z","last_seen":"2026-08-28T19:47:59.60968Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.iai-shop.com/data/include/cms/maska/Pinterest_icon.png","fqdn":"9design.iai-shop.com","domain":"iai-shop.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.813Z","timestamp":1787946407813,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /data/include/cms/maska/Pinterest_icon.png HTTP/1.1\r\nHost: 9design.iai-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T00:37:18.225338Z","times_seen":18157800,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sw-assets.ekomiapps.de/static_resources/widget.css","fqdn":"sw-assets.ekomiapps.de","domain":"ekomiapps.de","tld":"de"},"ip":{"addr":"13.249.8.19","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://9design.live/","date":"2026-08-28T19:46:49.008Z","timestamp":1787946409008,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ekomiapps.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 14 Jul 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"86:C8:B9:2F:D5:8F:02:89:92:89:39:A0:01:AD:67:54:EB:B6:56:F8","sha256":"C0:1F:04:81:40:8E:C8:A1:15:CB:2F:F6:A6:20:E1:AD:8B:DA:75:54:D9:1E:BC:3F:BC:76:16:BB:1F:69:73:DF"}}},"request":{"raw":"GET /static_resources/widget.css HTTP/1.1\r\nHost: sw-assets.ekomiapps.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ndate: Fri, 28 Aug 2026 15:21:26 GMT\r\nlast-modified: Mon, 07 Feb 2022 19:45:01 GMT\r\nserver: AmazonS3\r\ncache-control: max-age=31536000,public\r\ncontent-encoding: gzip\r\netag: W/\"b380c60d7d560b269c16c4b63ab64f7e\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b96196480b09999ed2996bb489d3679c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: OWamPvVA8djTfOzPUxjyluc6VIBxlGYXSH27U12-DA3BEuCdqkIdJg==\r\nage: 15924\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":158884,"size_decoded":19401,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"b380c60d7d560b269c16c4b63ab64f7e","sha1":"502f5ad7ee19fe21c306ccd2183ae6fdb83f0c1f","sha256":"59df6220fbd943e8cc4fd226f0174e5ddd07c60f0b30a1312fe797139cdb93b9","sha512":"5a1e9029b31f93d96c527aa756e5824e500a1a71224cac84ca18b2ef9a1c93d90b246bfc3b10f0265cb7015a2275d23bb9782de6971a77f7bed595b5292fdc91","ssdeep":"768:RIk5hFsyGSRXEHb/1lRfLca5Bj8YaLca9YUkBGCb2EYHyNXYWLdyrDGw:KEqyyFca5Bj8YaPYUkBGCCEYiLYrL","tlshash":"94f30f105a02307db0f64e3d3a60dd4a9b15a0bbe0198dfdbdb6f756c68dec72532a24","first_seen":"2023-12-15T08:47:23Z","last_seen":"2026-08-28T19:47:59.611913Z","times_seen":528,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-T47XM8BT","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.384Z","timestamp":1787946408384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtm.js?id=GTM-T47XM8BT HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\nexpires: Fri, 28 Aug 2026 19:46:48 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 28 Aug 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 167493\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":498087,"size_decoded":168123,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8681)","md5":"41da6173f38cc22fbe6ee38222b8c5af","sha1":"a01d64da49dcf1101fc78a2292f9a959f40b798c","sha256":"aa9b2bd63fda7a9ca91e1b330d297218bc704ed204b0ec628834450caf9ac7da","sha512":"d35a731753d3c7c951fb42b50029c8b1a41526b1cac731f4c9b536a51af5a35052971dd99c812b0873c6f92bfe735fed8a1db194a53bbf37385274e9d3126b38","ssdeep":"6144:Mnq2dO6NOu47i6mInP9RaUvvccUQ/xEkY3Ucxd4O/4dcfIJGSBA:cq2x57PIftvodz4dcAJzBA","tlshash":"44b419cdb3c674629392f574903f018bb67a29a2b84cc895f289dcd42e3465a5273f7c","first_seen":"2026-08-28T19:47:59.613896Z","last_seen":"2026-08-28T19:47:59.613896Z","times_seen":1,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Lato:ital,wght@0,300;0,400;0,700;0,900;1,300;1,400;1,700;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.736Z","timestamp":1787946407736,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Lato:ital,wght@0,300;0,400;0,700;0,900;1,300;1,400;1,700;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 28 Aug 2026 19:46:47 GMT\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6612,"size_decoded":1232,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0b27db13edf03e8436b58433d5402083","sha1":"8e3cea07f842c1745e3edd3ab20d5f767991971a","sha256":"f50e9f89f4382259f5c4b49a63d74de58c2d22fad7aa317bf59a7aea82a66e2d","sha512":"6d790dff2d690c346b94865d04fe71621f73895fa432d74db756d2e279b14f211224cedc68e81919dbeac2cf09b523bd43fe278e661ac44a826434e6ec2adabf","ssdeep":"192:4n/J3n/lOw3Oir/i3r/Ux/o3x/7RIu71D5Mp76D:4/R/lFx7u7Up8p3","tlshash":"c8d1cf9204aba508db830dc222ca7e36ff0fa25064559935efff14c8bc97d699361b0c","first_seen":"2025-09-22T02:51:55.219663Z","last_seen":"2026-08-28T19:47:59.615419Z","times_seen":837,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":38,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.iai-shop.com/data/include/cms/maska/facebook_icon.png","fqdn":"9design.iai-shop.com","domain":"iai-shop.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.812Z","timestamp":1787946407812,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /data/include/cms/maska/facebook_icon.png HTTP/1.1\r\nHost: 9design.iai-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T00:37:18.225338Z","times_seen":18157800,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client819.idosell.com/checkup.php?c=58d987ba1685da9ca5c44ad28c80265d","fqdn":"client819.idosell.com","domain":"idosell.com","tld":"com"},"ip":{"addr":"5.149.163.83","port":443,"asn":31229,"as":"Beyond.pl sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.834Z","timestamp":1787946407834,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.idosell.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Thu, 13 Nov 2025 11:12:30 GMT","end":"Fri, 13 Nov 2026 11:12:29 GMT"},"fingerprint":{"sha1":"2C:40:B2:E8:DC:D8:EC:C4:78:52:1C:39:AD:1C:96:B9:4E:8D:20:87","sha256":"50:06:0D:14:D5:1F:4E:1D:52:7C:65:2D:C7:A0:6F:20:F9:EA:F5:5C:54:88:AD:72:E6:3C:05:32:DD:0B:83:B7"}}},"request":{"raw":"GET /checkup.php?c=58d987ba1685da9ca5c44ad28c80265d HTTP/1.1\r\nHost: client819.idosell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 0\r\nx-robots-tag: noindex, nofollow\r\nset-cookie: monit_token=75fa05346d48e77512650ee51b9441709fbce463; expires=Mon, 23 Aug 2027 19:46:48 GMT; Max-Age=31104000; path=/; domain=.idosell.com; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"monit_token","value":"75fa05346d48e77512650ee51b9441709fbce463","quoted":false,"path":"/","domain":".idosell.com","expires":"2027-08-23T19:46:48Z","raw_expires":"Mon, 23 Aug 2027 19:46:48 GMT","max_age":31104000,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"monit_token=75fa05346d48e77512650ee51b9441709fbce463; expires=Mon, 23 Aug 2027 19:46:48 GMT; Max-Age=31104000; path=/; domain=.idosell.com; secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":354,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T00:37:18.225338Z","times_seen":18157800,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":119,"connect":28,"send":0,"wait":47,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/cms/banner3/return.webp","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.789Z","timestamp":1787946407789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/cms/banner3/return.webp HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a325d2f8bb5e4c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"669e1e38-4e7\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Mon, 22 Jul 2024 08:54:16 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sbzj%2BM0a0tT8IMpJxnXUQ%2FZ9movy36HBEbC%2FCN4HBIxDANdHdLKUouQSAPdIKLlLH5i1AIR2WjbFdP%2FHK7a8Hnb4Wwa8FYaD8XUvcpIk%2FvZXfDA0iSaDMpZJoPzha24%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1255\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1255,"size_decoded":2041,"mime_type":"image/webp","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"f68c80353a15e61431b525d41de01eaa","sha1":"fa4b697c39cf9c42a16e4adefad39eaa66f9d1dd","sha256":"aae2beef07f3b432494facd377dc954f21fda09a136975b2a971c7148b28015c","sha512":"18e268b5c7ec217148dd0459363b47f627604b618cc2bccd6bfdb6951166795e6e9917499eb597a697850b16bab2a940361e3f30337545d80b90b7a2f290ad51","ssdeep":"","tlshash":"d821b7c2099587f8b50b3d9e143d8b6686db045ee22ffd354027c2187c89f77766d602","first_seen":"2026-08-28T19:47:59.616371Z","last_seen":"2026-08-28T19:47:59.616371Z","times_seen":1,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/img/links/1557395203.jpg?t=1692368868","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.811Z","timestamp":1787946407811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/img/links/1557395203.jpg?t=1692368868 HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a325d2f8db774c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"5cd3f6f0-3ac7\"\r\nexpires: Tue, 27 Oct 2026 19:46:48 GMT\r\nlast-modified: Thu, 09 May 2019 09:46:24 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mrpqt8tpnlrE4oJTEaj%2FdF88MC7t1%2BsC3Ia10vYoLDQ%2Fc4Emf3JC0heq1b45%2BD1YpRdWdauPUK28pt02Zk5TGSxOpFkBS5nvt3NjgqYIBtbvKvHVhjhyVDN%2BN4dtcWY%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15047\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15047,"size_decoded":15835,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 100x100, segment length 16, baseline, precision 8, 368x205, components 3","md5":"32ade53eb3a0f46dc3aea680ad13ef4e","sha1":"686e1d245ee0c9a3d925915ad6d2b7024a787947","sha256":"4a6d8e77b56bf7f2e02779330f6d27d1056c803e70b775b617f092551900ba80","sha512":"81f46559e9bccd15cc74492b561a61d3478ac7139f45644c7d22aa09874f079cb1c658ec80b3868e9c4221ed602e307947655233db44d34409bd869b6ba4d8b4","ssdeep":"384:K0ffPoJ4ekVpclqpaRUZ999lldAUS/SC05Ug:K0ffP3fslqpaIbAU0SCfg","tlshash":"7e62bfed3c28ea428cbfd1fd0891645dae05112e7ba731bed0e2b632756f535c366409","first_seen":"2026-08-28T19:47:59.618298Z","last_seen":"2026-08-28T19:47:59.618298Z","times_seen":1,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":614,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/pwa/pwa-offline-en.html","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.732Z","timestamp":1787946408732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/pwa/pwa-offline-en.html HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1; iws=45e5a23fd351f61bca84c7e98647dbf3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G3T0Rr4aKWTx%2Bd6jkufYCk6vcR0XTNQBjJ1O%2B0jef3qeEAX2X%2BGy4KSRnY17oIVAF6zNWS0AWYxqbHns8ho%2FYhC2q8%2B0zuBhB5aw5GuW0xH3WIAdQWcbrQa5L9ppGV4%3D\"}]}\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a325d2fe9d104c11-OSL\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=3600\r\npriority: u=4,i=?0\r\nexpires: Fri, 28 Aug 2026 20:46:48 GMT\r\nlast-modified: Wed, 10 Oct 2018 11:10:13 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28222,"size_decoded":15114,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (24170)","md5":"4bea580e289f70020b3de95fb00f706b","sha1":"8ad8cb5283062fabf938b2f5f748f1e6c06d56b0","sha256":"14f22254a0684070854d87fb540f3c244a1d5b5a67e010c7d12d442b51bc2e8c","sha512":"35732b48221a907babf7c80c69be6d7a6ff04da20f56ee09ed6586b4c43843f9363db67f02b391fea09766123dd0ecb338125c2bc6a4901d1ec23276eb1302d5","ssdeep":"384:ZPBAaqSZNS+mAo6D+w3GQ4t7V1DJ8oyT14U2IEOtEJAD6ILVpmZEzK5MTmtjoNy:1BEnzw374ZeoiMCJD5LoEzK5MTmtuy","tlshash":"e5c20ee9a762fc59cc67352ff1593b2a81610f2bddf9848479dcb4080ba4e4aa0d15cf","first_seen":"2026-06-23T22:50:00.062118Z","last_seen":"2026-08-28T19:47:59.593981Z","times_seen":3,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"smart-widget-assets.ekomiapps.de/static_resources/ekomi-slick.min.css","fqdn":"smart-widget-assets.ekomiapps.de","domain":"ekomiapps.de","tld":"de"},"ip":{"addr":"13.249.8.19","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://9design.live/","date":"2026-08-28T19:46:49.007Z","timestamp":1787946409007,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ekomiapps.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 14 Jul 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"86:C8:B9:2F:D5:8F:02:89:92:89:39:A0:01:AD:67:54:EB:B6:56:F8","sha256":"C0:1F:04:81:40:8E:C8:A1:15:CB:2F:F6:A6:20:E1:AD:8B:DA:75:54:D9:1E:BC:3F:BC:76:16:BB:1F:69:73:DF"}}},"request":{"raw":"GET /static_resources/ekomi-slick.min.css HTTP/1.1\r\nHost: smart-widget-assets.ekomiapps.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nlast-modified: Tue, 19 Nov 2019 20:26:08 GMT\r\nserver: AmazonS3\r\ncontent-encoding: gzip\r\ndate: Fri, 28 Aug 2026 15:10:38 GMT\r\ncache-control: max-age=604800,public\r\netag: W/\"a48ab2f807c5dda92f940b1789944387\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b96196480b09999ed2996bb489d3679c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: m-N0V7uNMmk1bp2Ix7Pk5U5anF3Ts3gqAZ5TcHGp7BpqVM0BkcfioQ==\r\nage: 16572\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1801,"size_decoded":997,"mime_type":"text/css","magic":"ASCII text, with very long lines (1801), with no line terminators","md5":"a48ab2f807c5dda92f940b1789944387","sha1":"5574edae02af86932d36ea8f15c3a977c51d26d0","sha256":"50202b25adc5f2d81a3fe0b19a6d83bcac9feb4ece6626208f9cc5e3bce7aedc","sha512":"61678bb66d0022fbd48e24a613bc87dbe415b0a32e039e15d23ecefaf215e13b2c0905642cf88371360f9caba9ea25ad136c3ab9444ac2149aeb18a378fba501","ssdeep":"","tlshash":"ff31cc144a83216d90799e2e3ea29dcd7fcbf167e43d4ddcbd90d30689cd9d628b01a1","first_seen":"2023-11-09T17:31:52Z","last_seen":"2026-08-28T19:47:59.620767Z","times_seen":154,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/eng/main_style.css.gzip?r=1785746984","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.725Z","timestamp":1787946407725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /gfx/eng/main_style.css.gzip?r=1785746984 HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2FvpLhvIx1oPDtKE4zIdyIzEvWP9mOEo5JrMx5sPKVCra2AGVBderO2Tnm6EZTyRKSZCNwjsAGOLwu5LzDOua4yTS95PoMBRcYmEfkjhqX%2F%2FzSxSW04Vl2AaAjQPsL4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a325d2f84b384c11-OSL\r\ncf-cache-status: DYNAMIC\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\netag: \"6a7057ed-1100\"\r\nexpires: Sat, 28 Aug 2027 19:46:47 GMT\r\nlast-modified: Mon, 03 Aug 2026 08:57:17 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nx-iai-served-by: vm819\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23639,"size_decoded":5154,"mime_type":"text/css","magic":"ASCII text, with very long lines (695)","md5":"4cdd7e80d62549a3a23c7f67839449f6","sha1":"d995fd5942982a22d6840743a884d136c92da37a","sha256":"8761ca42dc016bd46591cbe7e5ade2212aa1df159c8db475cc3f386d09191910","sha512":"79682eafcb45477f47f27bdb70e1f6fe303ded527caca61ec22d210b7956cf3a7d06eba027a05b8537f2058eb16287ae5e9a5dd9b93cc758883c7e0ecc073838","ssdeep":"192:H+UB6j7NpxECZ4VYD+MkIcekd5oYD5TclOhvsP4FARTdjHsAzcqkTsEk0sPGd19d:H+UUNUCMDIcJd5oYDXsnRxVcubM1z","tlshash":"60b2b8235a62357cf0fb912c68d19afc62bc9803e75b415ddb529426c3cb2a62f634cd","first_seen":"2026-08-28T19:47:59.622735Z","last_seen":"2026-08-28T19:47:59.622735Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/ajax/basket.php?\u0026getAjax=true","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.410Z","timestamp":1787946408410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /ajax/basket.php?\u0026getAjax=true HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1; iws=45e5a23fd351f61bca84c7e98647dbf3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6noue7UxSx7awIEvMarxMwhYo3q454Tw5bOT36ovqQ7P0xV39gMwXvN%2FTjB0hk2X6cE4zfAmw9%2FdScJBIDCxS4pyppMtEcPNTU74yN7qP3f6vIwSCg6IQVU%2B0hdvR3c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a325d2fcac9c4c11-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate\r\npriority: u=3,i=?0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-frame-options: sameorigin\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1094,"size_decoded":1255,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"7949ddaaf038a774d1900236b25be06b","sha1":"522c8cefe91f1ef9e1214be3d1a4c004d8aebbe7","sha256":"8089bceff872987738dcb734280df6de6ccfcf38911a88f245677a0977c22025","sha512":"b1e5b13c27051ddd8dd7a3a1e4bc2bd7aef81aad82ff9ff02f7298856b095e6ce88b6b27f2dc96bc8ae17527ed3475085c27ff98755fa9044751bd10bf667b3f","ssdeep":"","tlshash":"b1118385687c08ba579a4b8c6d07be4b074e712b694b0ee5c9fd0f4c95e50261720733","first_seen":"2026-08-28T19:47:59.62446Z","last_seen":"2026-08-28T19:47:59.62446Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/ajax/hotspots.php?action=get-hotspots-html\u0026zones-names=main_hotspot_zone1\u0026components=main_hotspot_zone1\u0026zones-types=main\u0026product=\u0026products=","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.495Z","timestamp":1787946408495,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /ajax/hotspots.php?action=get-hotspots-html\u0026zones-names=main_hotspot_zone1\u0026components=main_hotspot_zone1\u0026zones-types=main\u0026product=\u0026products= HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1; iws=45e5a23fd351f61bca84c7e98647dbf3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9vunUVEdq4uZMxjAK7VqxJcIap%2BkSff9ntjNgqFZv2Yp1EDEjIIWhheJGco2myOaP0qUd3spk4EdynH%2Ffr03GJ7FUc6JwGD9N5IQ6BwenXTUzU8lJF8nqfesmQ9%2BcCA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a325d2fd2cb54c11-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate\r\npriority: u=4,i=?0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-frame-options: sameorigin\r\nx-ua-compatible: IE=edge\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14153,"size_decoded":3154,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"6a9e82f7564fc7e22d4028b11ceb1cbd","sha1":"6085eef118a7e489588909d8483da27b9784ab98","sha256":"adfc873d625bd5387c124c59b98051898b0f9ffee7d0517dabe29cda1fe79599","sha512":"517c8e39f29063c22c21bdde207dea1bf4344ff30ea8578c57858909f0a035a29ed732fb0b0c3f693c29a03c8e7325fe2a5c28a9c57db875f29c5daba93dccf4","ssdeep":"384:BYsOqE8nFWxOj4trw8ywgr+FodvZTZzFcyFTwFtRvWVts0hghGQR13lChB:WBz8nFWMj/XRZTIRWA0q/a","tlshash":"025292d2ccfc212a0d0748ef51b055efb805f268dbaf55cf67ed62865342ba29e5b108","first_seen":"2026-08-28T19:47:59.626387Z","last_seen":"2026-08-28T19:47:59.626387Z","times_seen":1,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sw-assets.ekomiapps.de/static_resources/jquery.min.js","fqdn":"sw-assets.ekomiapps.de","domain":"ekomiapps.de","tld":"de"},"ip":{"addr":"13.249.8.19","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.605Z","timestamp":1787946408605,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ekomiapps.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 14 Jul 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"86:C8:B9:2F:D5:8F:02:89:92:89:39:A0:01:AD:67:54:EB:B6:56:F8","sha256":"C0:1F:04:81:40:8E:C8:A1:15:CB:2F:F6:A6:20:E1:AD:8B:DA:75:54:D9:1E:BC:3F:BC:76:16:BB:1F:69:73:DF"}}},"request":{"raw":"GET /static_resources/jquery.min.js HTTP/1.1\r\nHost: sw-assets.ekomiapps.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ndate: Fri, 28 Aug 2026 15:37:58 GMT\r\nlast-modified: Tue, 19 Nov 2019 20:26:08 GMT\r\nserver: AmazonS3\r\ncache-control: max-age=31536000,public\r\ncontent-encoding: gzip\r\netag: W/\"a15c0a89a27a8a9a8f01d2383c8aa86b\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b96196480b09999ed2996bb489d3679c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: BZ3tfx0562iFTUtostTZlyjWcr20Lm2JhQYgEjS3U8QTdMG-01agUw==\r\nage: 14931\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":90963,"size_decoded":32860,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a15c0a89a27a8a9a8f01d2383c8aa86b","sha1":"fe245058d950d57a64d66b15ff65fd1edb738a77","sha256":"d64872744533f880e2db04feaad26db4e3d8ea4588be10f479f639c1e9582f4d","sha512":"e4942544f020005bddfeb726a335216fa2ac4ab17ed0d03c1abbb88ceb816a73232a788b3d54c7bed0eafdd76314de6efd51626c6494723a618bace3a11a3fa9","ssdeep":"1536:pdhEyijTikEJqRdXXe9J578goJsWXdLVhNLkz4DTAjnWotoZqwsRWKKH7UggYiTh:wQcd5hNLLTwn3t0ikHiTDU8CuHDv","tlshash":"2893f7d9b2d670529b7730b850bf410bb17a98dab44c8d60f058c5e57db8a8e507bf2c","first_seen":"2023-03-10T14:43:21Z","last_seen":"2026-08-28T19:47:59.628687Z","times_seen":365,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/pwa/1/icon-128.png","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:50.214Z","timestamp":1787946410214,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/pwa/1/icon-128.png HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1; iws=45e5a23fd351f61bca84c7e98647dbf3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:50 GMT\r\ncontent-type: image/png\r\npriority: u=6,i=?0\r\ncf-ray: a325d307df3f4c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"6900a2d1-1603\"\r\nexpires: Tue, 27 Oct 2026 19:46:50 GMT\r\nlast-modified: Tue, 28 Oct 2025 11:02:41 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2CGBOoAk1JxU%2B9ASIsitG7Fol5Tax%2BRAWWOcpvchkedZSL2SPe7rq0Wj5ebQEKUYvTntbFVYl0TmxE034Me6RooC3qX3BXh%2Bw5cwjAkiHPdt9t2fJXYFde40cqU%2BaIE%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5635\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5635,"size_decoded":6422,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"6f8ed3adbeb8965a2f37e9a4b322b23f","sha1":"1046c90b6185feca616ca73895246244e17b0ffd","sha256":"0857a302f22b367dd810e74f278be588421e3d5963207dc100e5b87ab458bb5d","sha512":"b32735110e718197063f973967ef23bbb2a2c602f98094ed6037f44e47d089def3a4d847be4adf2a025bf1e1411da560e25de524359b8ab37508a66992ebc967","ssdeep":"96:aBGzv2rS2NmnVN4thTGU+gsZs08Ny2zzzFM56cc5Q1a6iW:aBWv2HPfFGiNy2PZM57aqa6","tlshash":"13c18eefc37a0007c58d46b9163153537b9d2479497a1b63f16aa8c62f5c21b09d5c4f","first_seen":"2026-08-28T19:47:59.629464Z","last_seen":"2026-08-28T19:47:59.629464Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/gfx/mask/eng/logo_1_big.svg","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.774Z","timestamp":1787946407774,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/gfx/mask/eng/logo_1_big.svg HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MZjGqTjuFMH4otQQomsAKkkLimsFh2aS8rjgRHfBMf5QkBDuvlA%2Bf6RUEFrSN4AaWfqa9%2FFfE25kR582NbRjbGH3fmv6KeeiF4TgLHo1de697hfaqlPoRRS11Q3CIWk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a325d2f89b4e4c11-OSL\r\ncf-cache-status: MISS\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: W/\"685b8b04-c26\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Wed, 25 Jun 2025 05:37:08 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3110,"size_decoded":2178,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd84091113d70e4099c0483ddfd26fa0","sha1":"ea61d89bdb4994538722d9f253fa3e23a7bba98e","sha256":"c775d801fb00dec73fdfc9d2d8bc48b1fc86b81403fd21a378ecc56a2fc7b87e","sha512":"c75a18739d21ccca081d25940c596633ed87cdd1d6fb1e0f5f2528cd8eef5c19614055620a1b1079f5ee7bdcbca118ec1b1f72dbfb3d4686c97ed34f3755c22c","ssdeep":"","tlshash":"315133475338177c649299088e3da85935f2d1a3f3b6e3d8e5bb8741dac38f18832932","first_seen":"2025-10-07T07:48:49.482379Z","last_seen":"2026-08-28T19:47:59.63163Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/cms/footer/blik.png","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.815Z","timestamp":1787946407815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/cms/footer/blik.png HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a325d2f8db7d4c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"615aacf0-e44\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Mon, 04 Oct 2021 07:27:44 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C26q9wjnMTZP7Vb6b4v1lB9gICX4uzm9oLhh4bypMqXRzVZejo0HqaZjX8dzA8ChBimFTTXOGmjjKMU2%2BjZrsZ4h0jfCTuc7zmnrWJ5iyDg0y6j%2BeAg%2BUDXmJuQDy8Y%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3652\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3652,"size_decoded":4433,"mime_type":"image/png","magic":"PNG image data, 117 x 56, 8-bit/color RGBA, non-interlaced","md5":"28bfb4362bb9e0f0f916374eb2f194f6","sha1":"e5e9d7ffaf19bcb06bf85ffaacc3f41f98bf848d","sha256":"db0efe56e4daddf421e2634ba76a0129a41588d0a5d773556e277a41becbb368","sha512":"6a34c1a6ba9330da380141a6391cfb567d7208c9b08753a84c89ad8ed2912051ee6469bee55ba2d067f33a2127403eaca4440f049afb1d738b4ff1c2b9975965","ssdeep":"","tlshash":"b5714bdb6eff81e1d9a518b5527338701f9f015a56a20b1da33ed409096335b2bc431a","first_seen":"2025-10-07T07:48:49.424944Z","last_seen":"2026-08-28T19:47:59.634119Z","times_seen":2,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/cms/salon_warszawa/salon2.webp","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.794Z","timestamp":1787946407794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/cms/salon_warszawa/salon2.webp HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a325d2f8bb644c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"669e3722-a70631\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Mon, 22 Jul 2024 10:40:34 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KV4Z8nKJBeeBod7S%2FtFWyJwtsD8OlM9PCjUJ2CVVPV81pLsuaarz1NjWiZItt0tbbgIcHrffVn8H89ZN33fsRHk9J%2FI4keuoyWumnuVLf%2BQh1Q7J2u8TOEvPKmVmcrw%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10946097\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10946097,"size_decoded":10946886,"mime_type":"image/webp","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 4096x2731, components 3","md5":"751e7365cb96073e637afc4794d762ee","sha1":"c1443fb2d8c71ac6b6f8c7ea665870ceec67d067","sha256":"68c1e4c04b7ebb474988289cea020726ef23111432abd6d6ac432abb0ef431ad","sha512":"690017e1f7eb5f6c30b51cf66ce58762db2abd971b6512bdb0ba74ff3cf68472e66ae048dc72db60adb62e5769d81da25ad069b18f176fafea85fcc74e02ea30","ssdeep":"24576:vKCTFdsotbj2XQQviVWHf6lTlFYWfVM6uU8ktFwv1REl1:vRs+bSsVWSlp3fjFwNRE7","tlshash":"f225234411e4f95fd8284d3eb1afa06f09c79d3582b0db88a718675af131add870fa4e","first_seen":"2026-08-28T19:47:59.635551Z","last_seen":"2026-08-28T19:47:59.635551Z","times_seen":1,"resource_available":false,"data":null}},"time_used":960,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":814,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/cms/salon_warszawa/salon4.webp","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.796Z","timestamp":1787946407796,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/cms/salon_warszawa/salon4.webp HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a325d2f8bb674c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"669e3724-8f07e5\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Mon, 22 Jul 2024 10:40:36 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4noOqTIJbVITofKPCzdsBPHXE5cXP%2FO%2FD%2BCOuYY9rMIHkM1%2Fk56gt168V3dYaSz%2FfovP4Bu1%2B2e6Rpi5GH1XkUaDw9w25RWOY4Q2GsKgSxpt6lwYlqYfv4toY6CvOkM%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9373669\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9373669,"size_decoded":9374463,"mime_type":"image/webp","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 4096x2731, components 3","md5":"a259dada53473213caa9486a639f405b","sha1":"9f76a6bfd2dd6f2ad5487b2ea22e484add2acc32","sha256":"92aefa5fded96cff26cbded73b765d286242e2964233fb2a471d4cc43c44fe71","sha512":"f89c0be8ed00185bdd67448194a1274bd225d5c3b976f4e8333bc248b234e070fa0ada4f90e1eed1b8db17f643c7e9e401cc49139b98e11e7bf33ad9502f73da","ssdeep":"12288:1jDpx/B/cnSn6D62o5Cs+bJEqFEs8ikS3c20JjjK/tPtL+p/DJjSHikmYGIauv5s:1ppB046D62o2JdEndB2oVyauRh3moU","tlshash":"a82533227ea51631636894a387e3c78c5d4d8d7d8af6401a7c7de168bd83fd44a341bc","first_seen":"2026-08-28T19:47:59.637234Z","last_seen":"2026-08-28T19:47:59.637234Z","times_seen":1,"resource_available":false,"data":null}},"time_used":941,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":731,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/cms/salon_warszawa/salon5.webp","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.797Z","timestamp":1787946407797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/cms/salon_warszawa/salon5.webp HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a325d2f8bb694c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"669e3724-146e5e\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Mon, 22 Jul 2024 10:40:36 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5xsV8AqPZ2lLTTdY%2B62j6%2Fz1Z6gzK8s7c9tJcajQ8ZASmm2263fx%2B1DYnO2kj%2FT%2FIxGAwBBIdHKIxgXwOMw7igWklxc6j9ED6LGVPIhCJNx2mTUcV2nYhIYpPiP4Tlk%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1338974\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1338974,"size_decoded":1339766,"mime_type":"image/webp","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=2048, bps=182, PhotometricInterpretation=RGB, manufacturer=Canon, model=Canon EOS 250D, orientation=upper-left, width=1365], progressive, precision 8, 1365x2005, components 3","md5":"dca739e539ea5abbe111a8796625df32","sha1":"76f8bdb42212e8c61c3c18d7ea47372219b9f4a1","sha256":"3df52f815bfd9c70d5c103f9ec5e787419feb4d81894433543fac3cb7c9823ef","sha512":"e301e8272de1c0ef45dd270b972f653f54addb0cef3dc495c599ff4c7b48f83f591fd7c01341c2c1c75ee6a6304247b50d8154685c62bf67d0275c71a66ab327","ssdeep":"24576:cC3loTGeW+bjkb2q8c0evQOzaap+jAkqLPPXYQzbm4d/P:P3loTLob2q85Xap+fqLXXYQzbVdH","tlshash":"f92523c4c995a265ce312cb1c5db43124bbbab261de308cfb66cb7a05b701d18cdda97","first_seen":"2026-08-28T19:47:59.638752Z","last_seen":"2026-08-28T19:47:59.638752Z","times_seen":1,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":214,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/cms/style_sg/6100144_221.jpg","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.801Z","timestamp":1787946407801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/cms/style_sg/6100144_221.jpg HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a325d2f8cb6e4c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"66c2f978-da98\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Mon, 19 Aug 2024 07:51:20 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p56Nxm4zBmNYn032tGrsqfNUyKf7CU43dLu8XRzbWc6NtCb7gLzoJ%2F8bVkJNhBh4XwmYZdZvqkBeRqkRL0WP4WKuuNuAxlO0XnKj00vi4XDEdKZFEktEJF4l2hpf%2BS0%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 55960\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55960,"size_decoded":56742,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 155x220, components 3","md5":"e7c229e68ef6b09fbe41d8bbce8a0d82","sha1":"5a21ca9a0459adae51a445e340fb8b78d1230329","sha256":"af1c4c9189dca83b3009770fcbdda02f266a87833ee7acc0c045f664b99cae04","sha512":"e4349331adf9b27cac144a22695c660a6af1e6e874441aa5c5a567d63dfa34e61d19f3d2bb931f5db1c07815ac0f696fb0af5f1700b054dc8206a2ea729c148c","ssdeep":"768:2d6WZd1NLZRxYDpgHyR0JbqYlCA4+y9XcCT+HgfeO16j/nN/U7Dqwf1H9Dq2BMMf:2drpZZRSDuHUsCtEfHgfeO1AnNq7Zj","tlshash":"b743016b1dbc1696f598a0fd0e00172623ce0e7465fa38439811a645defee8254caff7","first_seen":"2026-08-28T19:47:59.640123Z","last_seen":"2026-08-28T19:47:59.640123Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/cms/footer/przelewy.png","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.816Z","timestamp":1787946407816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/cms/footer/przelewy.png HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a325d2f8db7e4c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"615aacf1-262a\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Mon, 04 Oct 2021 07:27:45 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HxawqxZN%2FE9j8bROyhCKL8YVgbtQl8PBWM898i3hP%2FZauOWl2LvMdm6dBIcl1k608rJkSWAql6ihWaglfoyHK2hJ%2ByVqKIy9C1CPuJcLze5Q1ROpkNLD6zZ8axkRbdU%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9770\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9770,"size_decoded":10552,"mime_type":"image/png","magic":"PNG image data, 161 x 55, 8-bit/color RGBA, non-interlaced","md5":"d7770b650d7f7ff110fd81a5df47f28a","sha1":"c0c4a6eb91728a19b06695ed8e69b36ec7b4c29f","sha256":"7163f25c3b4cd269a5df8f295cbe1d3b187b3678cd90342d339cffbb76e023cd","sha512":"766945bc9007f2306190aaa68fdbb0f2da4f8afc65944266944e65f815035f0ef3079d2c5eb19c5dfebe53f1a9cb36f80bc6bdf6d330f9b8296b5e2a6167c1a1","ssdeep":"192:aaWogeJX7ujBSgEIaf8qHm0bhF6hV3E5VJ3UOPbT4qstPS3+i5QpCiHWdk7:4gpOBEIaEmbhF6hVU5D3UdrIvMYdk7","tlshash":"9a12c02d1a815363e1482bc07131d3f6f36859de1d388b65d0d33763b8d46bd1a2bd29","first_seen":"2025-10-07T07:48:49.450434Z","last_seen":"2026-08-28T19:47:59.6415Z","times_seen":2,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/ajax/set_session.php?set_session=true\u0026sso_token=WXRKVjNBWW93aFFMWEhnc3JubDZkKzBDeVNyTHpMVHl2L3dZV0xvZ29FbE94M2ptNHZta1UvdE9vQjRDL2NjbkRtNS9zOFVoRGFCOFhFOXo5dWorQStsbjVXZElqK3JUTTRTTWdzSDk2a1RlR2ZVNmU4Smc2M3FSWk9jOVlzbEhNMVUwVWdybEwyMklpNDV6M3cwVC8rNUYxMTVDenBCZSthSGFqYXRJWWJmSll4Y1RUNVRaY3E4MVdLRHZ0enVEZUJvZkFWTkRFQnd0bjBRSEYxOE54UT09","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.460Z","timestamp":1787946408460,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /ajax/set_session.php?set_session=true\u0026sso_token=WXRKVjNBWW93aFFMWEhnc3JubDZkKzBDeVNyTHpMVHl2L3dZV0xvZ29FbE94M2ptNHZta1UvdE9vQjRDL2NjbkRtNS9zOFVoRGFCOFhFOXo5dWorQStsbjVXZElqK3JUTTRTTWdzSDk2a1RlR2ZVNmU4Smc2M3FSWk9jOVlzbEhNMVUwVWdybEwyMklpNDV6M3cwVC8rNUYxMTVDenBCZSthSGFqYXRJWWJmSll4Y1RUNVRaY3E4MVdLRHZ0enVEZUJvZkFWTkRFQnd0bjBRSEYxOE54UT09 HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1; iws=45e5a23fd351f61bca84c7e98647dbf3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i\r\ncf-ray: a325d2fceca94c11-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nserver: cloudflare\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D%2B8HvB4qPzNHk3gXx2O733q7FJCejCJyOXopYBUGJVhZJNRXdTZP13CTJ9jJZ5DdXsvDKUZ0SdwpIKX9nrVJ343ICNxjwD%2FHfkqaqAV%2Fv4TWSL%2FHOSgjp3hPawP50%2Bw%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":694,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-29T00:34:23.323489Z","times_seen":453919,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/hpeciai/8b1d2d85bd7628f8650d3e524344cc1f/eng_il_Estiluz-Lampa-wiszaca-Volta-szer-63-cm-zloto-czarna-58717.webp","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.821Z","timestamp":1787946408821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /hpeciai/8b1d2d85bd7628f8650d3e524344cc1f/eng_il_Estiluz-Lampa-wiszaca-Volta-szer-63-cm-zloto-czarna-58717.webp HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1; iws=45e5a23fd351f61bca84c7e98647dbf3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a325d2ff2d334c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=5184000\r\netag: \"8b1d2d85bd7628f8650d3e524344cc1f\"\r\nexpires: Tue, 27 Oct 2026 19:46:48 GMT\r\nlast-modified: Tue, 16 Jun 2026 09:18:28 GMT\r\nserver: cloudflare\r\niai-header-source: cos\r\nx-amz-meta-height: 270\r\nx-amz-meta-height_real: 270\r\nx-amz-meta-key: 8b1d2d85bd7628f8650d3e524344cc1f\r\nx-amz-meta-kind: n\r\nx-amz-meta-mime: image/webp\r\nx-amz-meta-size: 6210\r\nx-amz-meta-type: webp\r\nx-amz-meta-width: 191\r\nx-amz-meta-width_real: 191\r\nx-amz-request-id: tx00000e224ce37b42dbca4-006a91b69d-3632622976-zone1\r\nx-content-type-options: nosniff\r\nx-iai-served-by: vm819\r\nx-rgw-object-type: Normal\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7lF%2BsqbYHqr7gIPRwyhEedJvsh%2B0p4uazXnu076%2FtAQO%2FbfzXX1ytv0X%2Fm6mZOt6UlklFhPQCEGrxIGHu8imPp2MYBKEuDmLt0ApFEGPeQu16Z46pCunyJOFU6jy71Y%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6210\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6210,"size_decoded":7388,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8b1d2d85bd7628f8650d3e524344cc1f","sha1":"959e106463d4262520ba05da5f26ca62c86c5ee8","sha256":"40559b0dfb2ef6ca6618f66f7d703c18e21e00ca5ca0895a539c5fbfe04628cd","sha512":"843756e3157d70ba202b9b94a5c5d445e5cdda5a7a442c916ab2a1c1fc64746ee60baff145cbbca3549a127f0446dc6035ee5f611e63b516352e5d3691294bab","ssdeep":"96:ECbN26MT0D5MdtbZPAVwzVHJCLu1rQu7IDYPAJRPj4gYvsfSKaGUILutQl:R2YNMtKwVJCKrQuEDYNgYvsfVxAw","tlshash":"65d18eb7ea75d75ad530fa3c68f25b10b2d32365d3317bc631246b10164028a9e8e399","first_seen":"2026-08-28T19:47:59.643517Z","last_seen":"2026-08-28T19:47:59.643517Z","times_seen":1,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/custom/icon_gift.png","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.780Z","timestamp":1787946407780,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /gfx/custom/icon_gift.png HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/png; charset=binary\r\npriority: u=5,i\r\ncf-ray: a325d2f8ab564c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"86dde2a0e3ed06e6a608dd7ffb3b8920\"\r\nexpires: Sat, 28 Aug 2027 19:46:47 GMT\r\nlast-modified: Mon, 08 Dec 2025 07:16:27 GMT\r\nserver: cloudflare\r\niai-header-source: cos\r\nx-amz-request-id: tx000001b930e6bb8e3cd27-006a7db059-6490644-default\r\nx-content-type-options: nosniff\r\nx-proxy-cache: HIT\r\nx-rgw-object-type: Normal\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zznaNo87g3IkH8tgmoleTAYOfZGT%2FcwtCXCpr7xMchNdCTey0c%2BX9nCxITSWX3oqfDsv1mMaO5jXMe0Amzhy6lxHtWfPRr%2FWNsUC5maUQymgm%2Fd%2FFXpoHOctDcEXed8%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 328\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":328,"size_decoded":1267,"mime_type":"image/png; charset=binary","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"86dde2a0e3ed06e6a608dd7ffb3b8920","sha1":"196b80d2d6b82608c1141ea222616667f713c232","sha256":"cb20ca1c645d536e18ee551aabfa6e00465a1fde37f485b6c349e8124b14e634","sha512":"9c0bf17b499ddefbb334a0a141397205b3e7733f20d5015aa62c1d9be608f7566913f21c9892a53f3417862692a325af51e5d7acdac0665b50f978dfb3b05d83","ssdeep":"","tlshash":"abe02dd7bb102cbf4e4c732b3a188821cfd34e708e6003984a00e43c07890832bf11b0","first_seen":"2026-08-28T19:47:59.644841Z","last_seen":"2026-08-28T19:47:59.644841Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/pwa/pwa-out-of-internet.gif","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.725Z","timestamp":1787946408725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/pwa/pwa-out-of-internet.gif HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1; iws=45e5a23fd351f61bca84c7e98647dbf3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: image/gif\r\npriority: u=4,i=?0\r\ncf-ray: a325d2fe8d0b4c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"5bbdde15-25dc\"\r\nexpires: Tue, 27 Oct 2026 19:46:48 GMT\r\nlast-modified: Wed, 10 Oct 2018 11:10:13 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2NKnaGkVAVF%2BJM84LENVR9rCUVorfpRj07ehvGVhEWozU%2Fg6CeACL%2B1CJGgNMkVeQEUZrzbcw1%2BNE6o2qIU0vsAvyGA2O5sljFskLqPPR%2FSgozCwl%2BMVddgt90p92lA%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9692\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9692,"size_decoded":10483,"mime_type":"image/gif","magic":"GIF image data, version 89a, 362 x 309","md5":"aa9ac21c1e5f36bb8ff8c7f826319519","sha1":"91444f8e099184c63d52481ee13b7329a7eb8f71","sha256":"4f318f2c09c2dcd178f3d9491f6a0a11f040bb7d013dee49d28503a6669706bd","sha512":"635e0dbe7d3e7d793c3b4f9933727d54ce4850f33a046930b69dfb32b07d7e2315db80e99fa0828b00179fcc7b0df6322c5b157ecb4e3b4f91dc5cd1a6de5087","ssdeep":"192:TuzX1+0Ko/A4SKtBGCBPZYkRCZ4d6/d/AVs8cmYtk40Q7jHkAd:TuDo5URtB1BPZYMCZ4wm9fIf9d","tlshash":"a912bf18708b1a73d386aefa7ab8435fa6b7b3427c905430d7ce18a1e7453658bc07c5","first_seen":"2026-06-23T22:50:00.154099Z","last_seen":"2026-08-28T19:47:59.646166Z","times_seen":3,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sw-assets.ekomiapps.de/data_files/json/140553_positive_1.json","fqdn":"sw-assets.ekomiapps.de","domain":"ekomiapps.de","tld":"de"},"ip":{"addr":"13.249.8.19","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://9design.live/","date":"2026-08-28T19:46:49.181Z","timestamp":1787946409181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ekomiapps.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 14 Jul 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"86:C8:B9:2F:D5:8F:02:89:92:89:39:A0:01:AD:67:54:EB:B6:56:F8","sha256":"C0:1F:04:81:40:8E:C8:A1:15:CB:2F:F6:A6:20:E1:AD:8B:DA:75:54:D9:1E:BC:3F:BC:76:16:BB:1F:69:73:DF"}}},"request":{"raw":"GET /data_files/json/140553_positive_1.json HTTP/1.1\r\nHost: sw-assets.ekomiapps.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://9design.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ndate: Fri, 28 Aug 2026 19:46:50 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\nlast-modified: Thu, 27 Aug 2026 19:44:46 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=43200,private\r\nserver: AmazonS3\r\netag: W/\"d2f053b5633f813a159bbba19dcfdb52\"\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method,Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 b96196480b09999ed2996bb489d3679c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: vRqHb3BbddxtDJX9TCsk0blmK97e1TNzckwFqbWKUAq7Gn4zRmRFtA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":5641,"size_decoded":1826,"mime_type":"application/json","magic":"JSON text data","md5":"d2f053b5633f813a159bbba19dcfdb52","sha1":"3139a7b0ec851c6338747efdb5e498d37a8c1f96","sha256":"0f1f41cf9242fdafdd9e98b02f79ee69717f8f23fb1719e9370107333adb228f","sha512":"7dda5b39da3e52f00e9d72e052c8babfbf634794484339dcb47c13fc8b65ec4c2f555b6567e97d36986227d7958fd3813a5385438484977a29a362e698a2c27e","ssdeep":"96:4SCzAXI+JmfzZmX8sPGDyFxsUCnOWfpJ/kJhDyFxsUCn1WfpJ/k5qDLFIslNX2SY:4SSAY+AfzZmXjPquBCO6/kruBC16/k5b","tlshash":"bbc15aa9883ccb7a5f074e132e21d11f5ee67412b1daf991cbb92f6c02bce65261548c","first_seen":"2026-08-28T19:47:59.647584Z","last_seen":"2026-08-28T19:47:59.647584Z","times_seen":1,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/custom/icons8-person-48_1.svg?r=1785746749","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.782Z","timestamp":1787946407782,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /gfx/custom/icons8-person-48_1.svg?r=1785746749 HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pc0PMB2HoYAn%2BYr3opFrkM3FLFgZR0jw2C631q%2FBa3LD5e7kxuvbWG%2BeHHTVbnVpWHkHqE03CJvu7ZKmvc4epp02InKdLy6GroejcRZUNpCRNXsdYwl%2BZwhj3PXxFKg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a325d2f8ab574c11-OSL\r\ncf-cache-status: MISS\r\npriority: u=5,i\r\ncache-control: max-age=31536000\r\netag: W/\"d46c462fa0feec5681a7397775f82fec\"\r\nexpires: Sat, 28 Aug 2027 19:46:47 GMT\r\nlast-modified: Thu, 17 Apr 2025 09:37:19 GMT\r\nserver: cloudflare\r\niai-header-source: cos\r\nx-amz-meta-mtime: 1724665030.562\r\nx-amz-request-id: tx00000e2e40d3948b3b857-006a7d0128-6505718-default\r\nx-content-type-options: nosniff\r\nx-proxy-cache: HIT\r\nx-rgw-object-type: Normal\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1535,"size_decoded":2074,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d46c462fa0feec5681a7397775f82fec","sha1":"8428a7ebd41a81ad6dad2e0c3c3e77a3d37b27e6","sha256":"7124a092a760239417fa35d84cbcebb6bbba99d699620b9b189400b128a3f694","sha512":"3feee71cbd44ae01ad153291f0b1909571cdfb91e2d0059cb56331de167524550179c41ab39112c1608dd90ac9c156912a0a0d84da9b77f39ca1a610684ca5ee","ssdeep":"","tlshash":"2731dab1d10e6c4e16821440522ac2d0c88f9a47b799419bd745778cdccf88b2f61269","first_seen":"2025-10-07T07:48:49.46489Z","last_seen":"2026-08-28T19:47:59.649552Z","times_seen":2,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/cms/footer/mastercard.png","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.818Z","timestamp":1787946407818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/cms/footer/mastercard.png HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a325d2f8db814c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"615aacf0-229b\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Mon, 04 Oct 2021 07:27:44 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gQXGgi7NHo5FhaTo6hOm8W4G56Bssf8ceLDOWmgClFPo6ekaYdz1JkztqU8mWdjZvC%2FGoO3Zn9TC6XRKIIKAMxE5Ku%2FIAbpHmb7Mp4AU0H%2FlI13NJ9XZT8YhT0eUpM0%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8859\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8859,"size_decoded":9641,"mime_type":"image/png","magic":"PNG image data, 101 x 61, 8-bit/color RGBA, non-interlaced","md5":"7751d7386e66e6a768048dab31560ddd","sha1":"c668f70da9ce396498279dde41f7e41c72ad098c","sha256":"b07dcd12f44b70c56d296783fd23944fe2ac36cb64ea217d1d108ed470a3d4d6","sha512":"a61dff3cb0b35820a8d623d3df652a0411dc156210450d9aed8071c5704cd26096ccda1eb66cedc1e2c6f53caf9391f60ac81326e1c49ed514e681f0d3f9e3d3","ssdeep":"192:r2Yr0uljAr+7x+i9o6C26bbYxPH4f3yxROHkhE3Z/0wC:rpVlMS179o6C26fYxQqFhEp/0l","tlshash":"b802af863dd2812b96b73124c67027c0a1ad688b53d0cbdfe517ab7298d6c1fb65f44c","first_seen":"2025-10-07T07:48:49.447431Z","last_seen":"2026-08-28T19:47:59.651825Z","times_seen":2,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/eng/main_instagram.js.gzip?r=1785746984","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.762Z","timestamp":1787946407762,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /gfx/eng/main_instagram.js.gzip?r=1785746984 HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: application/x-javascript\r\npriority: u=3,i=?0\r\ncf-ray: a325d2f88b474c11-OSL\r\ncf-cache-status: DYNAMIC\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\netag: \"6a7057ed-476\"\r\nexpires: Sat, 28 Aug 2027 19:46:47 GMT\r\nlast-modified: Mon, 03 Aug 2026 08:57:17 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9G%2FTQ3fJZwCdlF2ajqcfWQLqX7hjvnOsiRIcpmy2mrNQpqvY4FypEcuJQezntgGspRlAVUTkwzcs2PDFf42639ZraFCjm7kIYNxpp31KxXZ4k7apQedQNQh5leGQVWY%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1142\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2911,"size_decoded":1988,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (2911), with no line terminators","md5":"8f3c74e124fa7533bf504d78fb4a406b","sha1":"ce7f04a9a290d0b88ecfd8f66a81cf4194d98f3d","sha256":"4b66716ff40441a03781651ad61ac96eab1bcc854d35b66f07132c1239755f39","sha512":"dc6846d79002e2ef721dbe8ac0d2c0a6c4570c1ec772fe6d3fc3ecd7313f19494306ca6203d3cbaf54ee2e1a1eb51817bd12acef6f3f8176c6157c36c2d20762","ssdeep":"","tlshash":"33513511a220797e458a16bfe25453a9e741f41ffcd41d2cbdac94cb878bc894133763","first_seen":"2025-06-29T14:36:36.825096Z","last_seen":"2026-08-28T19:47:59.654747Z","times_seen":5,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/ajax/set_session.php?set_session=true\u0026sso_token=WXRKVjNBWW93aFFMWEhnc3JubDZkKzBDeVNyTHpMVHl2L3dZV0xvZ29FbE94M2ptNHZta1UvdE9vQjRDL2NjbkRtNS9zOFVoRGFCOFhFOXo5dWorQStsbjVXZElqK3JUTTRTTWdzSDk2a1RlR2ZVNmU4Smc2M3FSWk9jOVlzbEhNMVUwVWdybEwyMklpNDV6M3cwVC8rNUYxMTVDenBCZSthSGFqYXRJWWJmSll4Y1RUNVRaY3E4MVdLRHZ0enVEZUJvZkFWTkRFQnd0bjBRSEYxOE54UT09","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.833Z","timestamp":1787946407833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /ajax/set_session.php?set_session=true\u0026sso_token=WXRKVjNBWW93aFFMWEhnc3JubDZkKzBDeVNyTHpMVHl2L3dZV0xvZ29FbE94M2ptNHZta1UvdE9vQjRDL2NjbkRtNS9zOFVoRGFCOFhFOXo5dWorQStsbjVXZElqK3JUTTRTTWdzSDk2a1RlR2ZVNmU4Smc2M3FSWk9jOVlzbEhNMVUwVWdybEwyMklpNDV6M3cwVC8rNUYxMTVDenBCZSthSGFqYXRJWWJmSll4Y1RUNVRaY3E4MVdLRHZ0enVEZUJvZkFWTkRFQnd0bjBRSEYxOE54UT09 HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=5,i\r\ncf-ray: a325d2f8fb954c11-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nserver: cloudflare\r\nset-cookie: iws=45e5a23fd351f61bca84c7e98647dbf3; expires=Mon, 26 Apr 2083 15:33:34 GMT; Max-Age=1788032807; path=/; secure; HttpOnly\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CZF8xltVSE1MyJlIav33T8PAxsKzevRPd8O5OOhfdeQVkpdTU4xPRVIaUyO95OHtKXdEI2BFtvowtZgqI4Kz6g7Nq6AWKJvj4iUhQ4%2FEplCNXKoi92bxDcykX%2FnDzx0%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2\r\n\r\n","headers":null,"cookies":[{"name":"iws","value":"45e5a23fd351f61bca84c7e98647dbf3","quoted":false,"path":"/","expires":"2083-04-26T15:33:34Z","raw_expires":"Mon, 26 Apr 2083 15:33:34 GMT","max_age":1788032807,"secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"iws=45e5a23fd351f61bca84c7e98647dbf3; expires=Mon, 26 Apr 2083 15:33:34 GMT; Max-Age=1788032807; path=/; secure; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":823,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-29T00:34:23.323489Z","times_seen":453919,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect.getflowbox.com/507e4e9/flowbox-flow-embed.js","fqdn":"connect.getflowbox.com","domain":"getflowbox.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.665Z","timestamp":1787946408665,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.getflowbox.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 17:02:27 GMT","end":"Wed, 11 Nov 2026 17:02:26 GMT"},"fingerprint":{"sha1":"BE:D2:AF:08:05:01:5D:05:8B:10:77:30:C5:7D:9F:DE:66:AA:EF:C9","sha256":"55:B3:AD:7E:FC:92:02:61:29:C2:D9:CB:2E:3D:97:D2:BE:6F:FF:2B:85:CB:FB:40:AD:29:3B:B1:92:05:A0:1F"}}},"request":{"raw":"GET /507e4e9/flowbox-flow-embed.js HTTP/1.1\r\nHost: connect.getflowbox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 3783887\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=946707779\r\ncontent-encoding: zstd\r\netag: \"a20dda5847151dd6177e088d15cf163f\"\r\nlast-modified: Thu, 30 Jul 2026 12:41:40 GMT\r\nx-amz-id-2: iO3CGTZUWfwE7JYFCnMmSBGp5yh2mxp/2z1ZxLBua+DWGz2UG6yykO2oClUQxCvRPIqxxUSrJdiRqmNbWVyKIDdkEdN7aDXx\r\nx-amz-request-id: SNSMRPFPG99DKKVW\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/30/2026 12:44:49\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 28aad2f54c7253d97f00ffd77d445a61\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":295515,"size_decoded":100883,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65460)","md5":"a20dda5847151dd6177e088d15cf163f","sha1":"e2b8631dc2dc1deaa3957eafaacfb29803f9987e","sha256":"f633b9ffc5be6560204d6b82b049d264a3fe5a95ff77ef3dc2dfad4d36f0c478","sha512":"a47fb54e157e903408c1910dac24b4147ed39572abe5ec62a1b1a9900af55ca7ddb1885dccf2b8bfe62747968aa9b2602d62d8895f76f96c5ffa9758f936b19b","ssdeep":"3072:bh+Hub9JHub9S8hcqagHpZg2pOKtOvxEJcRxctjTMkPI6Vl:bh+4J4SlqzH9pT0TsjTMkAy","tlshash":"42546ce475aaf1956fb342f600af1c1a733a281f2a0d4aa0b910fcd5e5e544d613bf9c","first_seen":"2026-08-03T14:39:41.264963Z","last_seen":"2026-08-28T19:47:59.657817Z","times_seen":7,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwaPGR_p.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.802Z","timestamp":1787946408802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh6UVSwaPGR_p.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://9design.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 5552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 25 Aug 2026 23:07:36 GMT\r\nexpires: Wed, 25 Aug 2027 23:07:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 247152\r\nlast-modified: Mon, 15 Sep 2025 17:11:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5552,"size_decoded":6364,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5552, version 1.0","md5":"33c906549bd61edf700e9a28132f25f8","sha1":"30128ef02a089c98139c978a2a0cedaadd634dbe","sha256":"3a5797f440bc67b59830cad81e59a71011e35cb45ed7f747b61a69b0a9b0d6ae","sha512":"dc4a63153cec46714504239de7184f87585c5805498300c8d1ba066053135ca04895f1484e739ee3fc492baba6920b5686e40a05ade1b962e5113a9635013503","ssdeep":"96:tg4V29KoaW+ekf+c3aIw2Lp/HwoGccbVjNRFRf7g/v/88V6PnW4+Kydey7kh:tnKKovjHULVHwMcbtFR+v082njyPg","tlshash":"c6b1ae0c7d929cebf5ac14792c508c34199b5eac8f5ee94c8c860c2a02e25dd1e0e7be","first_seen":"2025-09-17T01:22:23.26484Z","last_seen":"2026-08-28T21:44:47.090562Z","times_seen":3894,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.getflowbox.com/public/feed/config/0eBxPyAqRs2Qb7tM7_qzMg?locale=pl-PL","fqdn":"gateway.getflowbox.com","domain":"getflowbox.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.497Z","timestamp":1787946408497,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.getflowbox.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 16:04:00 GMT","end":"Sat, 14 Nov 2026 16:03:59 GMT"},"fingerprint":{"sha1":"2D:ED:4D:37:76:1D:B0:45:4C:76:C6:08:DF:7D:AC:EA:3D:E1:52:BB","sha256":"13:71:FE:56:5E:59:A9:54:DE:EF:55:33:F6:18:CE:BE:59:E0:01:DB:D9:51:71:55:A5:C8:48:D2:4B:0E:6C:18"}}},"request":{"raw":"GET /public/feed/config/0eBxPyAqRs2Qb7tM7_qzMg?locale=pl-PL HTTP/1.1\r\nHost: gateway.getflowbox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://9design.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4843892\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: Content-Type, Authorization, X-Amz-Date\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=180\r\ncdn-tag: config-feed-0eBxPyAqRs2Qb7tM7_qzMg\r\napigw-requestid: C1DSahNOjoEEPcw=\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 19:46:48\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 35593fa4b21a98908a6f97ff519bf2ed\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5406,"size_decoded":2677,"mime_type":"application/json","magic":"JSON text data","md5":"5780eee5fb1d28aebeb8afc6d623d8e1","sha1":"cb01a83b886ebcdb4af16538965f1ef2876a7b25","sha256":"510e0bebf01ddaf06bcaecfbb239b19a23dd03e89e722ec90f161ee254fe4c6c","sha512":"c63a4a8b2185b96a68ee4c55d05de935aac1341f49b03072c518d3226d89af67df4be5f6a6570193eeb7fba1d31f97fb0e6464e368ad86cf531b2a900164ad34","ssdeep":"96:fYe80jdMm6lJXFwtw+zdndmRw4CANvY34x9u540NlLFE95douWnWbtYGFWyp4M:fYXKYt+FEO4DNZe406douWnWbGGsM4M","tlshash":"c9b1cd22f90810bb27a69ca87377676732957f0c02405efa6160e4d4bf9ec744203fe9","first_seen":"2026-08-28T19:47:59.659554Z","last_seen":"2026-08-28T19:47:59.659554Z","times_seen":1,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":3,"connect":8,"send":0,"wait":71,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.pinimg.com/ct/lib/main.e47a302d.js","fqdn":"s.pinimg.com","domain":"pinimg.com","tld":"com"},"ip":{"addr":"151.101.128.84","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9design.live/","date":"2026-08-28T19:46:50.324Z","timestamp":1787946410324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pinterest.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 13 Aug 2026 00:00:00 GMT","end":"Fri, 26 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"29:C4:71:65:04:3A:28:58:1C:6C:6C:58:16:55:B3:C6:17:5B:6C:CF","sha256":"4B:CD:17:54:85:57:4F:28:33:A0:D4:39:6B:C2:2B:EE:7A:C7:76:4E:65:B5:87:7F:B5:27:C3:3C:7B:BA:8F:0F"}}},"request":{"raw":"GET /ct/lib/main.e47a302d.js HTTP/1.1\r\nHost: s.pinimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 34411\r\netag: \"a29e1d648512da886127212cf6ce1169\"\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\nx-cdn: fastly\r\nalt-svc: h3=\":443\";ma=600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 86400\r\naccess-control-expose-headers: X-CDN\r\nvary: Accept-Encoding, Origin\r\nserver-timing: cdn;desc=\"fastly\", cdn-cache;desc=\"HIT\", cdn-edge-time;dur=0\r\ncache-control: max-age=1209600\r\ndate: Fri, 28 Aug 2026 19:46:51 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":138912,"size_decoded":34944,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"774d4c9e96c34bdd12394f8c68e6be91","sha1":"7faf69748b4ca73948d60296bbf3c6e8c9ee90f3","sha256":"69bb7e4baceedebe814570b659c33be75c3fd145c9932a0aa94363b646342252","sha512":"ee04a31f73fa9bd055bf63cf88451bf1ba9fc1b6ad8c3f733339ebffc6b911345d63a1c954df3d5a2f892f676ea301927cfb323b0f18ac3488df647e2b599038","ssdeep":"3072:y2omfmtPPjtfa/TgxBgn1DneGMmCgxWoj0Q9ehU2woPi8rE/yRmfJCNtqccgwvJP:y2/1/Tkgn1DneGMmCgxWoj0Q9ehU2wo0","tlshash":"1fd30859b5d2f06407a264a0412f100bf13ea918658da4a4e799ece13cbcedf8177f7e","first_seen":"2026-08-17T19:36:47.473808Z","last_seen":"2026-08-28T23:47:44.101665Z","times_seen":1057,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/ajax/getCookieConsent.php","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.766Z","timestamp":1787946407766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /ajax/getCookieConsent.php HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BUKuXHWz3R86uD0VSfdOuSvxIZO11%2F2UOpGNyAA2Yv8kWl8lZJa5ZuPSc1g928PwmWt3UFfL0tWjHXN10%2B%2FkIj2QM6U8n0qrcKlk%2BnX%2FGwjMdOm97DjZKYqyAFKPys8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-ray: a325d2f88b4a4c11-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate\r\ncontent-encoding: gzip\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-frame-options: sameorigin\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89855,"size_decoded":27658,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (11760)","md5":"a51eb0ec41602d0a5c41e15c2e244f8e","sha1":"1f3ce651b70772898d4a3d704e6dc739f4cada5c","sha256":"1df727f6fe29fd37c66dd3b7bf19baa514cc68443fc5508692c6d9d6081f81c7","sha512":"578142272e51a0b0bff30c9745026fc732293f7d0b878d060309bea46bb513d2138a99b86a5d1b5891c10f3bcc4b8d2aef468e829891c3057e9a7d547e5b0673","ssdeep":"1536:zlTs4sZ0mZm8km7fltUvTzbAJ3ildiG7PLkt6PNnt19ZrnZnNEVI2LfzbRtA3:hTs4sfkmjsAJOpPNnt19/MDA3","tlshash":"07932a5731fd713d026752b80a2fc78af229502b35cad82cb54ca4345f8556b8eb3adb","first_seen":"2026-08-28T19:47:59.662972Z","last_seen":"2026-08-28T19:47:59.662972Z","times_seen":1,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/cms/salon_warszawa/salon3.webp","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.795Z","timestamp":1787946407795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/cms/salon_warszawa/salon3.webp HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a325d2f8bb664c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"669e3722-4ecb5\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Mon, 22 Jul 2024 10:40:34 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HHe2NBBqVzVhqLrmIrKoVjhC1GJTpa16SK2YV5r4PEbHURv068O%2FTngjsC5yU254WElhMV6xgVqKokMEQIV9UC4cuKegPvlq8WSAH9BQsi%2BCcfdIYpR3JU5xb5vdukY%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 322741\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":322741,"size_decoded":323525,"mime_type":"image/webp","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.9 (Windows), datetime=2024:06:03 11:05:38], baseline, precision 8, 1080x1920, components 3","md5":"71bb284a155443d5d2c74e2da1a4e355","sha1":"66cb9b1a65769108dd2b703f01b68a2cc8fea1e1","sha256":"17adbe3bb2d86c62ae76de028f2f95e69416627c38b6bf8f4ee57b081f83b281","sha512":"46e0af231c87832cf35ba5eb1392762254ab3957c35a0c9202499b373860e5e62760a84f09e69d550f264fadf85d29ebb1e8454ca050b3e2115b1deb1c755294","ssdeep":"6144:uHAmHA4jZ6pLKLA/za1gwI+aLrxC6hxAzxGY+gznSefrrSgBN:ugmg4duzagw4t7hxAManPrSs","tlshash":"ce6423249359ac20e8c40af5b5b196705672cb4996a30f87fd6e9e15b7a933ecdf00cc","first_seen":"2026-08-28T19:47:59.66478Z","last_seen":"2026-08-28T19:47:59.66478Z","times_seen":1,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect.getflowbox.com/flowbox.js","fqdn":"connect.getflowbox.com","domain":"getflowbox.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.036Z","timestamp":1787946408036,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connect.getflowbox.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 17:02:27 GMT","end":"Wed, 11 Nov 2026 17:02:26 GMT"},"fingerprint":{"sha1":"BE:D2:AF:08:05:01:5D:05:8B:10:77:30:C5:7D:9F:DE:66:AA:EF:C9","sha256":"55:B3:AD:7E:FC:92:02:61:29:C2:D9:CB:2E:3D:97:D2:BE:6F:FF:2B:85:CB:FB:40:AD:29:3B:B1:92:05:A0:1F"}}},"request":{"raw":"GET /flowbox.js HTTP/1.1\r\nHost: connect.getflowbox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 3783887\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=300, must-revalidate\r\ncontent-encoding: zstd\r\netag: \"b24bc356e773a5a635b5929e69c5e40e\"\r\nlast-modified: Thu, 30 Jul 2026 12:41:43 GMT\r\nx-amz-id-2: 5OGD8bTpHeZdhfYwPytORwRhNiQJP4yQ9aqXWLjrI3bscBh226Sh5jNuGCZm6833ZMGqKzxE0386VQ/cYoew12KchHanA03H\r\nx-amz-request-id: SNSVDB84PK08BN3B\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/30/2026 12:44:49\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 8d3475004abee44d5c0672b3b4927482\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":19480,"size_decoded":8629,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19479), with no line terminators","md5":"b24bc356e773a5a635b5929e69c5e40e","sha1":"4309d255b17c3e04155c099b7648884cf844f56c","sha256":"cf3c1b608a050c60ff1dfe538f0f600fea831fd48cd1ae0afec4a140b8fbd3b5","sha512":"429f2d837f60c494a1dc7bb88986eb2b7d6419bccf00966ab26afc24908f43611b0f8e2f99a98f3933f4b2f6f0d7623154427ed3478b32cb324b903101cce45c","ssdeep":"384:SihI+561dNI+zIDjhSQk5ks2A3/Borvoyc9r/1yr:S0W08QKky2rvozRdy","tlshash":"7792428af6c1b4d607f3a4a0022f650ff1b75999789ed9909365d1e4ac78a0fc027f6c","first_seen":"2026-08-03T14:39:41.272194Z","last_seen":"2026-08-28T19:47:59.666682Z","times_seen":13,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":73,"connect":45,"send":0,"wait":4,"receive":-1,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sw-assets.ekomiapps.de/data_files/json/140553_seller_summary.json","fqdn":"sw-assets.ekomiapps.de","domain":"ekomiapps.de","tld":"de"},"ip":{"addr":"13.249.8.19","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://9design.live/","date":"2026-08-28T19:46:49.012Z","timestamp":1787946409012,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ekomiapps.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 14 Jul 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"86:C8:B9:2F:D5:8F:02:89:92:89:39:A0:01:AD:67:54:EB:B6:56:F8","sha256":"C0:1F:04:81:40:8E:C8:A1:15:CB:2F:F6:A6:20:E1:AD:8B:DA:75:54:D9:1E:BC:3F:BC:76:16:BB:1F:69:73:DF"}}},"request":{"raw":"GET /data_files/json/140553_seller_summary.json HTTP/1.1\r\nHost: sw-assets.ekomiapps.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://9design.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ndate: Fri, 28 Aug 2026 19:46:50 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\nlast-modified: Thu, 27 Aug 2026 19:44:46 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=43200,private\r\nserver: AmazonS3\r\netag: W/\"e0e40e9a66e9c1958e65c29c2db5a690\"\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method,Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 b96196480b09999ed2996bb489d3679c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: wiiSHy7fg4ZiPkU4LkISENDUjYQRucmVKKJwh5o9tnZu0ACJdDmT1g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2858,"size_decoded":2065,"mime_type":"application/json","magic":"JSON text data","md5":"e0e40e9a66e9c1958e65c29c2db5a690","sha1":"e29b78731d585ea15865179e71ee4628ce1a580b","sha256":"8cd09a3027885d4ce294aee8b3b9ac4cfb5b10b3c95d768d2f827cf0f536409c","sha512":"c762b11de44a605c2a029a79775d3c3a5f7bb12cf16e54ec047caad43d045975db8bb4815fcecd444aec4d6b7c32d1e2c354c751c17d36c54f7cba657724335e","ssdeep":"","tlshash":"e051644af3e0e834479a844a5c7cfa5ffa57733788ea95f47cff8858a7552121388248","first_seen":"2026-08-28T19:47:59.669404Z","last_seen":"2026-08-28T19:47:59.669404Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ekomi-srr.s3.eu-central-1.amazonaws.com/production/assets/uploads/ckeditor_images/lg-stars-yellow-136x23-new-222945-1703761114.png","fqdn":"ekomi-srr.s3.eu-central-1.amazonaws.com","domain":"ekomi-srr.s3.eu-central-1.amazonaws.com","tld":"s3.eu-central-1.amazonaws.com"},"ip":{"addr":"3.5.122.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:49.317Z","timestamp":1787946409317,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.eu-central-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Jul 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:44:60:1F:17:93:6D:C9:C5:10:D3:A4:E4:E6:8A:BE:66:B8:D6:BE","sha256":"E1:01:B1:9F:0D:F4:07:C0:2C:1E:48:2B:2B:9E:3B:E4:D9:A0:F8:F0:58:B3:1A:2F:FB:93:D5:F5:79:0C:25:7B"}}},"request":{"raw":"GET /production/assets/uploads/ckeditor_images/lg-stars-yellow-136x23-new-222945-1703761114.png HTTP/1.1\r\nHost: ekomi-srr.s3.eu-central-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: w+sYIIuK/ySkSTMZf5OnG/PUK0a6sSZrB90/tLEuNbXsUBRFDMTJcP+hHQ5ClMGSu7Tbp8NYa4Wj/l+8bNewRPH94kqEKL1q\r\nx-amz-request-id: C9VZ3Y570H7J377G\r\nDate: Fri, 28 Aug 2026 19:46:54 GMT\r\nLast-Modified: Thu, 28 Dec 2023 10:58:35 GMT\r\nETag: \"7fee26724c02677b8ba4617ffcaa9f58\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 1161\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1161,"size_decoded":1576,"mime_type":"image/png","magic":"PNG image data, 136 x 23, 8-bit/color RGBA, non-interlaced","md5":"7fee26724c02677b8ba4617ffcaa9f58","sha1":"4f688f7224a1c36a2e36a9f0f28841589eda16ed","sha256":"fa320ec4cbe19942e239d9b90ff348334997233183474adf067becf3e57c9463","sha512":"cb0bbcded984c22fffb12a1adb7fb4e39fb2caa3ae379116364c94c430498f50f930b6f719e35c056544cecd0a2f5eed8ab6c906896be6d9893e62eca431288b","ssdeep":"","tlshash":"8f2174e6584d597eca46470ac000b025fed1ee271e56211b40aedcafac3a095b26f62a","first_seen":"2024-12-12T03:19:56.497439Z","last_seen":"2026-08-28T19:47:59.671285Z","times_seen":6,"resource_available":false,"data":null}},"time_used":3750,"timings":{"blocked":-1,"dns":0,"connect":21,"send":0,"wait":42,"receive":0,"ssl":3687},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/custom/icons8-account-32.png?r=1785746749","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.776Z","timestamp":1787946407776,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /gfx/custom/icons8-account-32.png?r=1785746749 HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: image/png; charset=binary\r\npriority: u=5,i\r\ncf-ray: a325d2f89b534c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"7c2acd161ac47f4b196849b0333d22c3\"\r\nexpires: Sat, 28 Aug 2027 19:46:47 GMT\r\nlast-modified: Thu, 29 May 2025 11:24:01 GMT\r\nserver: cloudflare\r\niai-header-source: cos\r\nx-amz-request-id: tx000004cbdf5c863affac5-006a8107ce-6505718-default\r\nx-content-type-options: nosniff\r\nx-proxy-cache: HIT\r\nx-rgw-object-type: Normal\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AVSsPzL1ygSk1rSHlSA0VC20iT9EWxRvogPgKJYh9LyGeXChjD1cHnKMx4p56CBc%2FS3RDLuNSKIfxdXFknMSnRVA%2BNyEuyGLLQV8JpNpmBwC%2FjbYEh%2FxFsjwVhXQm3I%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 495\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":495,"size_decoded":1432,"mime_type":"image/png; charset=binary","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"7c2acd161ac47f4b196849b0333d22c3","sha1":"bc4658014031e28c6a0676ca3d44ae080a098c8f","sha256":"2542a1f31e0be84da6e5144c5738daba82dc08028e0e68ac086ca2804eee74c0","sha512":"d1919b3c1029566e893f078692f2d79daa38dbaed42ecc39cd12baf5ee9aa5e1ef8d61a2f57405ae27a1aad7c83100989c3905f5f12f9ece3b381baf3fa959e0","ssdeep":"","tlshash":"9cf054d523d4c4bf8c0694151446c7f08ee319b408112ecc72bd50e8f03ad9054ec3b6","first_seen":"2025-10-07T07:48:49.413906Z","last_seen":"2026-08-28T19:47:59.673245Z","times_seen":2,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/custom/icons8-menu-32.png?r=1785746749","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.779Z","timestamp":1787946407779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /gfx/custom/icons8-menu-32.png?r=1785746749 HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: image/png; charset=binary\r\npriority: u=5,i\r\ncf-ray: a325d2f89b554c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"9e2eec75672fb5c215648208b53a5ac9\"\r\nexpires: Sat, 28 Aug 2027 19:46:47 GMT\r\nlast-modified: Thu, 29 May 2025 11:31:20 GMT\r\nserver: cloudflare\r\niai-header-source: cos\r\nx-amz-request-id: tx00000349d7209c6dece28-006a82429a-6518685-default\r\nx-content-type-options: nosniff\r\nx-proxy-cache: HIT\r\nx-rgw-object-type: Normal\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kLOz7aL1JpjzWn4VIAu1MLSQeJ5esm6cOdR4ujdbjbrGnFwUXrD4Th6%2BmlpO2WtaN5b92Fjq4dssTZy4z3yl7ghiiyt2fci3FQr9NLndn6FTnL%2BYiewX1hoH0QMZOdA%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 124\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124,"size_decoded":1057,"mime_type":"image/png; charset=binary","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"9e2eec75672fb5c215648208b53a5ac9","sha1":"c06e50556ec70b903d086dbbef8307d6b366e945","sha256":"9f0544d687414efd7d52ec6c0aad8b82fc65336314316c7459355833d636b24d","sha512":"f8589512080728ca46563308bd0c393bec40499cab79b6e5e9206dfa079ae13a6f8da5b161151fb75cf12774c0606b93c8b60cbf5511fd12d26d3abc478103cf","ssdeep":"","tlshash":"8ab02bd921801c7dc71817229f2500209ca31fe80019030c7498d0352012948364d2d0","first_seen":"2025-10-07T07:48:49.456655Z","last_seen":"2026-08-28T19:47:59.675066Z","times_seen":2,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/cms/banner2/banner1.webp","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.783Z","timestamp":1787946407783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/cms/banner2/banner1.webp HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a325d2f8ab584c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"669e1685-9cf19\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Mon, 22 Jul 2024 08:21:25 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vd%2FjRl0%2B1hi8jfq7is2vORlrrdiqga4U4H6Pr2uewUeVRGrp8WPeBICN0DITcZaB6pqzq0jEWODrBIZW8N1jvuL6NV3l8yazn6KP8xPeuyHbsJh5jgGz%2FczzNNsqwZ8%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 642841\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":642841,"size_decoded":643627,"mime_type":"image/webp","magic":"PNG image data, 910 x 635, 8-bit/color RGB, non-interlaced","md5":"e913e50c7bec9ddf2c8ac6ab13e7ff4b","sha1":"a1e1d4b85c223f09b2e96a135df08fbc435a39a2","sha256":"565c777db08d3ca0530a037ebd32f1b84b9b228c372fc08c19eda1ad7c745107","sha512":"17626224546ea63ad229346a396ae3365a82459b42a7b0509089a4d14c243e8e0652bb2eacf273f138bf9dbb2965bd6c5658cca47e22f1d49274b4a2136acb29","ssdeep":"12288:DPHwReiOcBoMAc6nDk1jjIaCuweBWtAb1pjexAKFjxeUM+WQJX:DPmJO1/VD8/4AZpKWKF9+I","tlshash":"94d423dce78d1da005ac12c5cae4285a45c58c95cd1aded40dfce85c62a3e8f262ff7a","first_seen":"2026-08-28T19:47:59.67674Z","last_seen":"2026-08-28T19:47:59.67674Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sw-assets.ekomiapps.de/resources/slider-previous-icon-arrow.png","fqdn":"sw-assets.ekomiapps.de","domain":"ekomiapps.de","tld":"de"},"ip":{"addr":"13.249.8.19","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:49.494Z","timestamp":1787946409494,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ekomiapps.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 14 Jul 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"86:C8:B9:2F:D5:8F:02:89:92:89:39:A0:01:AD:67:54:EB:B6:56:F8","sha256":"C0:1F:04:81:40:8E:C8:A1:15:CB:2F:F6:A6:20:E1:AD:8B:DA:75:54:D9:1E:BC:3F:BC:76:16:BB:1F:69:73:DF"}}},"request":{"raw":"GET /resources/slider-previous-icon-arrow.png HTTP/1.1\r\nHost: sw-assets.ekomiapps.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 303\r\nlast-modified: Tue, 19 Nov 2019 20:26:02 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 28 Aug 2026 11:42:07 GMT\r\ncache-control: max-age=604800,public\r\netag: \"004a926490a6aab44ddd8ee3e074543a\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b96196480b09999ed2996bb489d3679c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: HUUv-3CVSX1BiQyQaNQhoQhN6Yfxo2NnrJclXq6gmqtr2DvglnQu0w==\r\nage: 29083\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":303,"size_decoded":818,"mime_type":"image/png","magic":"PNG image data, 20 x 31, 8-bit colormap, non-interlaced","md5":"004a926490a6aab44ddd8ee3e074543a","sha1":"872583196ed3cd246daf3d466d47748000ca7425","sha256":"f57c72f10af251b51da424d3b0cb9cfb75ab7ab4e4b6edbcaa5b5aecaaabcde4","sha512":"6e4c9577003d09ad04e712e3675ea61be710620db6f514f3a7a10c69158bc43acd1395689025b989e5b771be701ba4c8cffb78bf09ab9e4478715a46b99cbbef","ssdeep":"","tlshash":"78e097ca203d9839c0a50543d624412498b8893b220a32e3818089271932aa066c8e84","first_seen":"2023-11-09T17:31:52Z","last_seen":"2026-08-28T19:47:59.678319Z","times_seen":126,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-9N04KGPWSE","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.727Z","timestamp":1787946407727,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=G-9N04KGPWSE HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\nexpires: Fri, 28 Aug 2026 19:46:47 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 183878\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":558282,"size_decoded":184482,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6370)","md5":"213b0d18bdd659ea13bdbe1e83c216c4","sha1":"94b6854cc10a2e0a699cc177ce8d7b081a0294bb","sha256":"eef54b1e9f008275b95d8ab0618286ac2ede8c6dbafaabbfc0790b1ac74a8b24","sha512":"46855cea4c18a891911b98d175b6cf51059e0b088fdd076a1e8594719414b1bdb6002a0b907a8c5588645326d2e6a38cfce2cc6e9ece1a1a065806476d5e339b","ssdeep":"6144:YvR6NcAuG706mInP9RaUvvccUQ/xEkY3UcHvEbO/cmcf8k5P0WnmA:ti1zPIftvavEccmcjMWmA","tlshash":"b7c408de73c674229396f578903f01cb697b28a2b49cc89ab189dce02d3454a5277f7c","first_seen":"2026-08-28T19:47:59.680061Z","last_seen":"2026-08-28T19:47:59.680061Z","times_seen":1,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":2,"connect":18,"send":0,"wait":36,"receive":48,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.734Z","timestamp":1787946407734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14107\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:09:17 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=noIYdZViXAY6BCdpulT8F1ZrMSI%2BEDtieki5Qz839SWucl%2Bec4tF3NWfX%2Bp5Oyvazke%2FjijtZXQY3Wqk0nsqF5QuFMuc9IIGZY%2FkqiEiW1eZCtRUH0uJKbXMPFUFtTTI4tGDEISa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a325d2f87adc76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47992,"size_decoded":15116,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (47992), with no line terminators","md5":"cf3402d7483b127ded4069d651ea4a22","sha1":"bde186152457cacf9c35477b5bdda5bcb56b1f45","sha256":"eab5d90a71736f267af39fdf32caa8c71673fd06703279b01e0f92b0d7be0bfc","sha512":"9ce42ebc3f672a2aefc4376f43d38ca9ed9d81aa5b3c1eef60032bcc98a1c399be68d71fd1d5f9de6e98c4ce0b800f6ef1ef5e83d417fbffa63eef2408da55d8","ssdeep":"768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe","tlshash":"9c231bc1a19c219152a774d0093f7107b463353a460ed5acf668e9eeecbcaea903dd7c","first_seen":"2023-03-07T12:04:24Z","last_seen":"2026-08-28T20:25:04.242238Z","times_seen":77155,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":5,"connect":11,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/eng/style.css.gzip?r=1785746983","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.739Z","timestamp":1787946407739,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /gfx/eng/style.css.gzip?r=1785746983 HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hOmXG1nNwqXex65jTxyTeo4JY7NGig93J7MYg%2FTJ3btor4tbXASxrGDRRaGkcGma7KASc2Nq2gA6ldludJ9JZglb%2Fz7ME86qi4IGOnSWu%2F30qkk0UpL5%2FFU%2Bpr3Mw5M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: text/css\r\npriority: u=0,i=?0\r\ncf-ray: a325d2f86b3d4c11-OSL\r\ncf-cache-status: DYNAMIC\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\netag: \"6a7057ed-f717\"\r\nexpires: Sat, 28 Aug 2027 19:46:47 GMT\r\nlast-modified: Mon, 03 Aug 2026 08:57:17 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nx-iai-served-by: vm819\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":394907,"size_decoded":64042,"mime_type":"text/css","magic":"ASCII text, with very long lines (1337)","md5":"1ca62722062c81f2e601b273bb5cd230","sha1":"18c9a1dfed7ecf9b49296f8724f04f103651fd6a","sha256":"af7a32187298c067c48945c356e592c204effbc82cdd7f98850ca515950b44aa","sha512":"df32695d69946ccbeb2f9aabcb7e419dc615579ed20ee03932d20229c65216068cabf8d11bb3009bb653754929290362f71dc537b35d3a5b54d2773dd676d27d","ssdeep":"12288:ieWI+Z+In5YQHL9lPfwyp9qYCQJhkRBP1o:iq+0I5YQHL1","tlshash":"a3841a93a5b4216c617bc52da8d03bbd79398400cb570effe653af28c7ce5e60663948","first_seen":"2026-08-28T19:47:59.682536Z","last_seen":"2026-08-28T19:47:59.682536Z","times_seen":1,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/custom/icons8-heart-32.png?r=1785746749","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.778Z","timestamp":1787946407778,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /gfx/custom/icons8-heart-32.png?r=1785746749 HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: image/png; charset=binary\r\npriority: u=5,i\r\ncf-ray: a325d2f89b544c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"0b4a933d72d5d9ac56ef7146341cf080\"\r\nexpires: Sat, 28 Aug 2027 19:46:47 GMT\r\nlast-modified: Thu, 29 May 2025 11:24:22 GMT\r\nserver: cloudflare\r\niai-header-source: cos\r\nx-amz-request-id: tx000004b6a3083238662d1-006a8107ce-6490644-default\r\nx-content-type-options: nosniff\r\nx-proxy-cache: HIT\r\nx-rgw-object-type: Normal\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ErKSsx1o0SYnAZq4BqUIYux6AIkuCpfztDLhv%2BgzWMCK%2BlwiL9lxtz%2Fhk%2BviDzFZpFzwRtMzc5Yuk%2FNb1ntrUIAHk6jr4nJwZxmC8j4O4k7ydOz%2BsLcuxKBpw2lnA7s%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 493\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":493,"size_decoded":1434,"mime_type":"image/png; charset=binary","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"0b4a933d72d5d9ac56ef7146341cf080","sha1":"bffb1e0cdf5943647d9c7b3763f8811ae4b367f6","sha256":"5f535715c744e8ce64cfb88188802711f27e27deae6be611fb05a3c1a571fce6","sha512":"625066f3f0ab1a1621b7924b6f1d5bc6853be1d5efa6153e16e1928dcc9cc411ad335b8ea5856eb6e4f1664c88bb9e9dff29d0662e46f04a210fb464938344d4","ssdeep":"","tlshash":"9ef0058a3515ccebc144892154335524b4b304ddb019714678e1d317339745a0168787","first_seen":"2025-10-07T07:48:49.444953Z","last_seen":"2026-08-28T19:47:59.68416Z","times_seen":2,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sw-assets.ekomiapps.de/data_files/widget/sf14055368415accc9ac5.json","fqdn":"sw-assets.ekomiapps.de","domain":"ekomiapps.de","tld":"de"},"ip":{"addr":"13.249.8.19","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.829Z","timestamp":1787946408829,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ekomiapps.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 14 Jul 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"86:C8:B9:2F:D5:8F:02:89:92:89:39:A0:01:AD:67:54:EB:B6:56:F8","sha256":"C0:1F:04:81:40:8E:C8:A1:15:CB:2F:F6:A6:20:E1:AD:8B:DA:75:54:D9:1E:BC:3F:BC:76:16:BB:1F:69:73:DF"}}},"request":{"raw":"GET /data_files/widget/sf14055368415accc9ac5.json HTTP/1.1\r\nHost: sw-assets.ekomiapps.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://9design.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ndate: Fri, 28 Aug 2026 19:46:49 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\nlast-modified: Thu, 27 Aug 2026 07:38:09 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=43200,private\r\nserver: AmazonS3\r\netag: W/\"83e46c2535734bb5445af22ab0b512e4\"\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method,Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 b96196480b09999ed2996bb489d3679c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: 6gaEVow0CqW1i6R1KYRWTDmKVXgtqzktyVXEhK5dlKbWrlCxrWcifQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":11626,"size_decoded":4400,"mime_type":"application/json","magic":"JSON text data","md5":"83e46c2535734bb5445af22ab0b512e4","sha1":"1f596684d3575229254b88e9f3506ca726ae8203","sha256":"ebe77059b33ad0078169152923a1a47f5f0cd08025a11e383f6be7d563804583","sha512":"bf655107edec7e8fc9c0299907957e51ba0829e7d391258b83de762f143a553e386164cbbfb2de2fab1ecbaefae0f8492524601daf393d8a7f72f6e96001ea5a","ssdeep":"192:WhCK7S6QyKiFTRSu3tYza79P2woh48zhO0AYQ7hKJhowW:W0f6QyKiFlfCy9ALzc0AYQ7ym","tlshash":"2632d837a5a5b13f0d03802eae66955c7c27b44add2608acff9c753cc3da9e25276318","first_seen":"2026-08-28T19:47:59.685857Z","last_seen":"2026-08-28T19:47:59.685857Z","times_seen":1,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ekomi-srr.s3.eu-central-1.amazonaws.com/production/assets/uploads/ckeditor_images/mini-stars-yellow-122x22-new-367924-1694600348.png","fqdn":"ekomi-srr.s3.eu-central-1.amazonaws.com","domain":"ekomi-srr.s3.eu-central-1.amazonaws.com","tld":"s3.eu-central-1.amazonaws.com"},"ip":{"addr":"3.5.122.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:49.320Z","timestamp":1787946409320,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.eu-central-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Jul 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:44:60:1F:17:93:6D:C9:C5:10:D3:A4:E4:E6:8A:BE:66:B8:D6:BE","sha256":"E1:01:B1:9F:0D:F4:07:C0:2C:1E:48:2B:2B:9E:3B:E4:D9:A0:F8:F0:58:B3:1A:2F:FB:93:D5:F5:79:0C:25:7B"}}},"request":{"raw":"GET /production/assets/uploads/ckeditor_images/mini-stars-yellow-122x22-new-367924-1694600348.png HTTP/1.1\r\nHost: ekomi-srr.s3.eu-central-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 9yLw8PyMDLQsRF9zTY/0OIB65IdCYLqhtMF7aOtchAlyAesCCSEF/WQx1AB5RUcLx4z3rNQ3qqbHEF1Pb/D0N74sTmLKCUFp\r\nx-amz-request-id: R8MC9NNY5AK2XVDX\r\nDate: Fri, 28 Aug 2026 19:46:50 GMT\r\nLast-Modified: Wed, 13 Sep 2023 10:19:09 GMT\r\nETag: \"782e2bf8a12241d88d58964bbee80323\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 994\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":994,"size_decoded":1408,"mime_type":"image/png","magic":"PNG image data, 122 x 22, 8-bit/color RGBA, non-interlaced","md5":"782e2bf8a12241d88d58964bbee80323","sha1":"290de650346209a2b8b65f04714cc2552d914e9a","sha256":"f403f7b6bb93cb6da94c79daf1d9300f34e282a3827de67e553d0bb3a752a7d6","sha512":"b935e63a588678a502425b23bdc33a671cf3b679490e1777483fd06069ba66f0045cd5a4f399b26336282c0b22d0e9a0c3ce260e58a915491be66873d878672f","ssdeep":"","tlshash":"5111a5b22e462523d04c6b2e8169c9a499503a74e2c3268e03fb8520ee235bbd441417","first_seen":"2024-12-12T03:19:56.473065Z","last_seen":"2026-08-28T19:47:59.687755Z","times_seen":6,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":23,"send":0,"wait":46,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.iai-shop.com/data/include/cms/maska/instagram_icon.png","fqdn":"9design.iai-shop.com","domain":"iai-shop.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.814Z","timestamp":1787946407814,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /data/include/cms/maska/instagram_icon.png HTTP/1.1\r\nHost: 9design.iai-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T00:37:18.225338Z","times_seen":18157800,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/cms/footer/paypo.png","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.819Z","timestamp":1787946407819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/cms/footer/paypo.png HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a325d2f8eb834c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"615aacf0-18aa\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Mon, 04 Oct 2021 07:27:44 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3UH1ercuaqoL2OER0SW4l77HXSgiQK5jGEM2STPQWmYUfyCilQ9OrtunWCvCYIgHAryGh6A06viyFwFd84FSbt43VoJ8X5QKde%2FHH%2BllCRoL6%2BLJeKZfPZ%2B0ONmfMeg%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6314\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6314,"size_decoded":7098,"mime_type":"image/png","magic":"PNG image data, 181 x 50, 8-bit/color RGBA, non-interlaced","md5":"78fbf83500efe602b381a1546c92161b","sha1":"1bc00887f58511221b3daf538fc682fd045be6a3","sha256":"64043b592a97f16a87a13b0e3e0ee69cda5b171af1b123af7b6dac27b704e2da","sha512":"64fb38cae2908e9d7f0d5158bb1f6fd9b7dfe35b6e971851646f228ac907e3c30bd71aeebd05d14f58ca295bec256de296669f4c13f515358c3a3e21a8dd66c4","ssdeep":"96:XGu9xAEl88eJoZ4FjL8R3ego1+XJkmQw7eEMDSnHkCRTh1RWYoWxgR:XfAy882kKL8ROBkDt7eZGnEsdhoWxgR","tlshash":"d6d1aef0a0bccddde8f4ac607321a1f322c245cb8d1dd5a8259ae9896576d0c4aa36c3","first_seen":"2025-10-07T07:48:49.420402Z","last_seen":"2026-08-28T19:47:59.689238Z","times_seen":2,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/standards/fontello.woff?r=1785747415","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.094Z","timestamp":1787946408094,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /gfx/standards/fontello.woff?r=1785747415 HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/gfx/eng/style.css.gzip?r=1785746983\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1; iws=45e5a23fd351f61bca84c7e98647dbf3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: application/octet-stream; charset=binary\r\npriority: u=3,i=?0\r\ncf-ray: a325d2faac1a4c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"c28ffac9740f5de3560df87d8cf555ad\"\r\nexpires: Sat, 28 Aug 2027 19:46:48 GMT\r\nlast-modified: Wed, 10 Dec 2025 08:59:41 GMT\r\nserver: cloudflare\r\niai-header-source: cos\r\nx-amz-request-id: tx00000c101b29928e541b0-006a810a6b-6490644-default\r\nx-content-type-options: nosniff\r\nx-proxy-cache: HIT\r\nx-rgw-object-type: Normal\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tgx7zWgUGvGmjoao6udTtrmjuHFAyg45%2BO0IRc%2Fwy7%2BwSz%2B4Nz0AsPNhHYlaioZG6f59U9ys3blEjWMb%2B3oslD%2FKjFh1e1uA7e5dD0%2B5NuCCf%2BErfFSjDp1lwf9Anh8%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 45872\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45872,"size_decoded":46837,"mime_type":"application/octet-stream; charset=binary","magic":"Web Open Font Format, TrueType, length 45872, version 1.0","md5":"c28ffac9740f5de3560df87d8cf555ad","sha1":"d79227e4a3be06f52ac9863c93343360af041620","sha256":"038ea5d8e0a615128fed4b7b5ba40480dd4c2d9031e06ffbd8f4c2d05096eedd","sha512":"b0aa681230c3848e8eaf0ab703978dfdc6fd3d69ff16a9f58f17b2d9c7250f61bc5ae53b6253bae66ef42131fa60aaaf63510b8b02fcf30193e3981f93292d16","ssdeep":"768:diBZLkrnh1BQiXLSFo5ZQVYzHJM62pjtbWRDERMQcPmc5aZsodDIA5Id+:4Li0Yzx2p4Roq9PmSo55Q+","tlshash":"7d23f1f5af32a3da92771923dc40e91da1f87b1059aedcec480bbc5e958212634f4c6c","first_seen":"2025-12-12T13:45:55.892691Z","last_seen":"2026-08-28T19:47:59.690841Z","times_seen":155,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ekomi-srr.s3.eu-central-1.amazonaws.com/production/assets/uploads/ckeditor_images/mini-stars-blank-122x22-new-339623-1694601372.png","fqdn":"ekomi-srr.s3.eu-central-1.amazonaws.com","domain":"ekomi-srr.s3.eu-central-1.amazonaws.com","tld":"s3.eu-central-1.amazonaws.com"},"ip":{"addr":"3.5.122.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:49.318Z","timestamp":1787946409318,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.eu-central-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Jul 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:44:60:1F:17:93:6D:C9:C5:10:D3:A4:E4:E6:8A:BE:66:B8:D6:BE","sha256":"E1:01:B1:9F:0D:F4:07:C0:2C:1E:48:2B:2B:9E:3B:E4:D9:A0:F8:F0:58:B3:1A:2F:FB:93:D5:F5:79:0C:25:7B"}}},"request":{"raw":"GET /production/assets/uploads/ckeditor_images/mini-stars-blank-122x22-new-339623-1694601372.png HTTP/1.1\r\nHost: ekomi-srr.s3.eu-central-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: seWGD2wKl9yVSbiMen5RKjv7zCTAqNVRnfuthXUaRD1dpOFratobl97yaOi33VmKrWCR5zesRPFAjHyO0isJIxgX3JHVSOu4\r\nx-amz-request-id: R8M8BG14QX7D8TND\r\nDate: Fri, 28 Aug 2026 19:46:50 GMT\r\nLast-Modified: Wed, 13 Sep 2023 10:36:13 GMT\r\nETag: \"6ff5482dfc647942de715eace18a6192\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 1470\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1470,"size_decoded":1885,"mime_type":"image/png","magic":"PNG image data, 122 x 22, 8-bit/color RGBA, non-interlaced","md5":"6ff5482dfc647942de715eace18a6192","sha1":"14d7f09f85bdeaa8ec3e0065818bbd45820eefd6","sha256":"1092482bb7f5a1c3155e426370cdda053db6d8525c9f90f0a4692a64a8cc91aa","sha512":"2da7d71f15883849853ba0cdf75c18e0f12549990ef958001447dfbc6373d624529a2db49b18900a9e6d3fc6c2398bda9400d0aa4772bf217942c95cb5598751","ssdeep":"","tlshash":"c931e9efa75c00bda541ba06a7e5f54c5114b4bda234621630aa8221ff7182a5dc3f33","first_seen":"2024-12-12T03:19:56.471881Z","last_seen":"2026-08-28T19:47:59.692293Z","times_seen":6,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":21,"send":0,"wait":45,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/cms/style_sg/MIRO_C1289-1024x707.jpg","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.799Z","timestamp":1787946407799,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/cms/style_sg/MIRO_C1289-1024x707.jpg HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a325d2f8cb6b4c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"66c2f979-6834\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Mon, 19 Aug 2024 07:51:21 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7I2GjWFj5WCHWYqOmjLTCK6qyQMUuSAvccVGmE%2F%2FUlFTZ39dmc0jndfNZGvbXYs3wDCn352XNjh6i8Q8JMWlP6bJdoutytEDdTwBd9WyrjOyAqWRXU5cAD6oE1c14FU%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26676\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26676,"size_decoded":27458,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 155x220, components 3","md5":"f6be7d4385e6aca4c969fe31f7d2bfa2","sha1":"58e14cb9b3648c5d2c14b754de61bdb80bea1f02","sha256":"c5d3ba5c89bdf7f4f41b4e4b7105d5ca4b7ff33d9dc95561530bd9c4bac94072","sha512":"38f2fead704a3de1ba61160a3b4171ce21262833a06d933c682fcec48740654f45886bd7697488717a944f461d3d4d6f796f598d414e559205656a61632d0e83","ssdeep":"768:2bNQ84zZvgZ3j4fAMImIxL7Gy3LacFYBUc:2bNQ8AvM4f6p7GybaCPc","tlshash":"93c2e12717c1f0d2e99861efbdfd3246d28da521256cb5e58b1f8832fe50e24a4cbc19","first_seen":"2026-08-28T19:47:59.693956Z","last_seen":"2026-08-28T19:47:59.693956Z","times_seen":1,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/cms/footer/pobranie.png","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.821Z","timestamp":1787946407821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/cms/footer/pobranie.png HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a325d2f8eb854c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"615aacf0-b34\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Mon, 04 Oct 2021 07:27:44 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ne4giHGeoS3l%2FXvY6TAKrqNewNYp36kbll87GJuf2kdT3pwepaKu54ESUIPdwi3nnMiz67VhUeMCcbBIeR0DQUqG5fwHSWgVGj6mxeDyLvknEO8VxYYMTcr0ykFKRAk%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2868\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2868,"size_decoded":3645,"mime_type":"image/png","magic":"PNG image data, 111 x 29, 8-bit/color RGBA, non-interlaced","md5":"f46a1fb75778d3c054e8267f572bd459","sha1":"71cc61d0c35606d5448326383208b638948d8e72","sha256":"02d9e3b804c193ee42fd24e76779ae1e8a5776f8442d21bd701e0546a8e730c6","sha512":"f7d8bfa06646b8b132d504128eb8ad2ab7aecfc0c44cab377cc1c5810130a3d1f3d377c690bcc3ba3dc57e3235a4b9de269bd8991537ba305b37d8cfe89011c9","ssdeep":"","tlshash":"58516a797281aba0814a333c62be2d64ec453ca8c6d36bd36d024e950c3b052e246f83","first_seen":"2025-10-07T07:48:49.448943Z","last_seen":"2026-08-28T19:47:59.695712Z","times_seen":2,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/standards/loader.gif?r=1785746749","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.818Z","timestamp":1787946408818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /gfx/standards/loader.gif?r=1785746749 HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1; iws=45e5a23fd351f61bca84c7e98647dbf3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: image/gif; charset=binary\r\npriority: u=5,i\r\ncf-ray: a325d2ff2d2d4c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"ef3ca436a5780d84254050ed1a418c0e\"\r\nexpires: Sat, 28 Aug 2027 19:46:48 GMT\r\nlast-modified: Thu, 17 Apr 2025 08:49:42 GMT\r\nserver: cloudflare\r\niai-header-source: cos\r\nx-amz-meta-mtime: 1643713868.464\r\nx-amz-request-id: tx000002b21177e6697359a-006a7d08a4-6524646-default\r\nx-content-type-options: nosniff\r\nx-proxy-cache: HIT\r\nx-rgw-object-type: Normal\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N6d5jg8yPNSNZjVs0yoF8KrkmPII2n2NMLjvp5ZTKKD%2Fcy5rnQk%2Bocoe2oU5kT6FYbmv6FgAz0g8S%2BKaKkBuC49UifimwpzYzKokDr%2Fof7kr6mC3p1jyj50JVzG7VuY%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4000,"size_decoded":4972,"mime_type":"image/gif; charset=binary","magic":"GIF image data, version 89a, 24 x 24","md5":"ef3ca436a5780d84254050ed1a418c0e","sha1":"1f7552eb953946d42ed145e0c35b9a7567d18ade","sha256":"699b7d717284198e9060cdf785d2abc0fa4c47a4d122218d4e702fac7ba1adaf","sha512":"e38dcae7052e3a9fbeb766c3996fbb5833494c840c684ee42a25554134f8103acd12ec3cfdc3b728d318ef79e397b23104083facf1f2da7974bd5bdacca4d4e9","ssdeep":"","tlshash":"a2819482f665e577c9790636e73e81cf325144bde2282f1cd2938646dc2b63d9231bc6","first_seen":"2023-05-22T01:49:33Z","last_seen":"2026-08-28T19:47:59.697259Z","times_seen":315,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/eng/favicon.ico","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:50.212Z","timestamp":1787946410212,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /gfx/eng/favicon.ico HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1; iws=45e5a23fd351f61bca84c7e98647dbf3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u19nhxFOkQOsVJS6ozqJjDYkTI92%2BAtJN%2F8uKmYT%2BWbbzx5268WEa73elq0UXmlO%2B0v77HL%2F%2BU9m%2BvjdPH3BPGIbcQa7KjZgVavsajDDlxwfoP2%2FbOC9bSZErM9PdN4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:50 GMT\r\ncontent-type: image/x-icon\r\ncontent-encoding: zstd\r\ncf-ray: a325d307df3e4c11-OSL\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: W/\"685b8c08-fc32\"\r\nexpires: Tue, 27 Oct 2026 19:46:50 GMT\r\nlast-modified: Wed, 25 Jun 2025 05:41:28 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64562,"size_decoded":2095,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 125x125, 32 bits/pixel","md5":"20915ad0afdc2187e1dfebbae8aa3901","sha1":"ec50d2ff9997f87ae3edf53edd8a851ab485e4ff","sha256":"0dedb48578487e4e322595d193bee78af87b341ab84cb897a82689cd5fdcbd03","sha512":"a5840b975697576a2a3c85412f5ce4f8f0f5465675eab461e052509a32805d547921c2b30e304e35d86d5d55836a5e3712105b1a7e7072054abb19c415296040","ssdeep":"6:fO0l/OsAf000000000000000000000000000000000000000000000000000000j:fOcl+yyyyyOZEIBrY8yyyyf","tlshash":"70531384b640e94acc948d3cde82d3fc9e047d06ed10564736c07f8fbd76a50a9032a8","first_seen":"2025-10-07T07:48:49.451667Z","last_seen":"2026-08-28T19:47:59.698888Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/standards/eng.svg","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.111Z","timestamp":1787946408111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /gfx/standards/eng.svg HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/gfx/eng/style.css.gzip?r=1785746983\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1; iws=45e5a23fd351f61bca84c7e98647dbf3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rtDnrQiC48ZxXZfpL5B9UogPUxcwIXyKc7UpYrlCZtRc6CFRQ0tVoO2x99mfcTP8OI2dRGRshyge6P0Ip02QCWJUYX6sA6P%2Fro4h8cHUeyVDtUF8TtSrDWX%2B4ilcVpI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a325d2fabc1e4c11-OSL\r\ncf-cache-status: MISS\r\npriority: u=4,i\r\ncache-control: max-age=31536000\r\netag: W/\"e820300206df04311c54d94e1becb62a\"\r\nexpires: Sat, 28 Aug 2027 19:46:48 GMT\r\nlast-modified: Thu, 17 Apr 2025 08:49:40 GMT\r\nserver: cloudflare\r\niai-header-source: cos\r\nx-amz-meta-mtime: 1654524451.373\r\nx-amz-request-id: tx000008712ddf23309540b-006a7db155-6564197-default\r\nx-content-type-options: nosniff\r\nx-proxy-cache: HIT\r\nx-rgw-object-type: Normal\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1284,"size_decoded":1428,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e820300206df04311c54d94e1becb62a","sha1":"242dc1933f388ea20ab43d3561369de678ff9819","sha256":"70498a3e2a717f2b41dcd53f80fbb1f852ded5012c68994e21b257f42902c719","sha512":"0e34b766f4485c79ed2d17981a39ec96f006b596b5cb7e6f6f0509973044192792f59d175a5d2a63fad762e3a44b1dd60e7be42801ae5cebd4edd7119fb272c9","ssdeep":"","tlshash":"6621d001cf24b86ed04317d6ded86aa15074d3b443a40ebda208c933759b926d4ceee7","first_seen":"2024-08-19T17:04:11.74091Z","last_seen":"2026-08-28T19:47:59.701544Z","times_seen":77,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh7USSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.120Z","timestamp":1787946408120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh7USSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://9design.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 06:03:18 GMT\r\nexpires: Fri, 27 Aug 2027 06:03:18 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:09:18 GMT\r\ncontent-type: font/woff2\r\nage: 135810\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23236,"size_decoded":24049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23236, version 1.0","md5":"716309aab2bca045f9627f63ad79d0bf","sha1":"38804233a29aaf975d557fe14e762c627bef76e0","sha256":"115f6a626ca115d4ad5581b59275327e0e860b30330a52b0f785561332dd2429","sha512":"adb0bc6cb9b230eda5dac7396a94a9a4dba9c8ba0b2eb73f5f21a20c3ca3d14651420bc6a17e67a71b5bba624f5a4e92d55cbbb898985dcca838184f6dfb2b15","ssdeep":"384:AHLaTYDpoR9l+9cJHxkGk3kbFpW88POLvFd9EDtwntxiFyLs86d975a2sfbAh:AHLKSSD49c0SFQ1wFnCajiws86dJ59WK","tlshash":"8aa2e10a0b99e00ff53655ba7504daa0b1c554b9c3ed69a2a12115c7b4eeecbf83138e","first_seen":"2023-04-05T15:38:53Z","last_seen":"2026-08-29T00:03:04.436511Z","times_seen":58795,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-1044411784\u0026cx=c\u0026gtm=4e68q1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.717Z","timestamp":1787946408717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=AW-1044411784\u0026cx=c\u0026gtm=4e68q1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\nexpires: Fri, 28 Aug 2026 19:46:48 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 28 Aug 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 159095\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":461351,"size_decoded":159725,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6662)","md5":"599496178ed9056ef77057f057d9a146","sha1":"99568ba82c7c862496e8b3c1fa15910c28db784f","sha256":"8c44c98f23e5c66d02e42d46cee80eaf52a05aea42866ac26ba96a9a9ab84e68","sha512":"b0ecca48f116591412d5750d797cc06754d6921c5a605cf40a47b20acadc25f6e45039ac36fb5ef19180c37cdb122aeb9dee8b3045944830f4a12745af4ed5f1","ssdeep":"6144:E6G6NtuG7i6mInP9RaUvvccUQ/xEkY3Uc6f0O/adcftvA:E6aJPIftvffnadclvA","tlshash":"38a42acdb3d674629392f574903f018bb27a29a2b84cc895f289dcd42e3459a4277f7c","first_seen":"2026-08-28T19:47:59.70347Z","last_seen":"2026-08-28T19:47:59.70347Z","times_seen":1,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/pwa/pwa-offline-pl.html","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.726Z","timestamp":1787946408726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/pwa/pwa-offline-pl.html HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1; iws=45e5a23fd351f61bca84c7e98647dbf3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ysSLnxpooUiH1%2BmPSER%2FLceTg6rqinsmVJM%2FV%2F95NSOffQ1hXfxCCY8cSVLe4zY9zA7oGIhlDCI8XcQQSLRq4%2BbDA982Lr6E1tT3lZ9xKYjaWA0WICyolcVbnXhxngg%3D\"}]}\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a325d2fe8d0d4c11-OSL\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=3600\r\npriority: u=4,i=?0\r\nexpires: Fri, 28 Aug 2026 20:46:48 GMT\r\nlast-modified: Wed, 10 Oct 2018 11:10:13 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28255,"size_decoded":15152,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (24170)","md5":"63a4b7865dffcb1258bd2c436a5ea30f","sha1":"110c4f280eb4047adc31b4ef477ff5e776210421","sha256":"6b08f8cf49696cb13665966069ff3edd6ae53d844cfa2b56efd831a185325925","sha512":"7cd493d51dcb00e03284f2818a3d6ec50f557a0cb7f2f45b0977da2d82ea2865bfc892194ff221d36e05b448b478c4d4c064401ed385e484005af6b470dd12ad","ssdeep":"384:ZPBAaqSZNS+mAo6D+w3GQ4t7V1DJ8oyT14U2IEOtEJAD6ILVpmZEzK5M5mtjoNi:1BEnzw374ZeoiMCJD5LoEzK5M5mtui","tlshash":"aec21ee5a762fc59cc57352ff1593b2a81610f2bddfa848479dcb4080ba4e4aa0d15cf","first_seen":"2026-06-23T22:50:00.127818Z","last_seen":"2026-08-28T19:47:59.70564Z","times_seen":3,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/custom/icons8-cancel-50_1.svg?r=1785746749","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.781Z","timestamp":1787946407781,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /gfx/custom/icons8-cancel-50_1.svg?r=1785746749 HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2THizZkplHtIC%2Bu3qCddUR6JI%2BdUm1Pf097jIqYhqLs0drtfl10EOPqvg16LNIQR0Ov%2BB01jgBc%2FGLuCJDjqJ561roWxXbzBQl4Als%2Fm4IOy75Y2YMkSzDbSI9uqjSo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a325d2f8ab594c11-OSL\r\ncf-cache-status: MISS\r\npriority: u=5,i\r\ncache-control: max-age=31536000\r\netag: W/\"d4be36e8a045c599afe5512f6691845d\"\r\nexpires: Sat, 28 Aug 2027 19:46:47 GMT\r\nlast-modified: Thu, 17 Apr 2025 09:37:18 GMT\r\nserver: cloudflare\r\niai-header-source: cos\r\nx-amz-meta-mtime: 1724660137.667\r\nx-amz-request-id: tx0000040193d84f1c7de24-006a8f8ab7-6518685-default\r\nx-content-type-options: nosniff\r\nx-proxy-cache: HIT\r\nx-rgw-object-type: Normal\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":970,"size_decoded":1640,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d4be36e8a045c599afe5512f6691845d","sha1":"71e4f41803da44c813e4072e9121763af1872387","sha256":"10788948e668233dd121ffeae8bafe35e2741eb76b4a0c685d6fc9a78c3d393b","sha512":"dff4fbbe6ccea64945f88bc41c85508527cd5efaa1777a51291028e393d030f9155473f3cdf668610210b8c4f544b77ac30e0c46bdc2f32d2b03281df7ffc3dd","ssdeep":"","tlshash":"a411c471a10e0c0cd1ce092432bdf0198cc2922b93a4c089ec00629cf87d8cb38f11cf","first_seen":"2025-10-07T07:48:49.439895Z","last_seen":"2026-08-28T19:47:59.708243Z","times_seen":2,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T19:46:46.066Z","timestamp":1787946406066,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J%2FcP3eyc6106U98WgqOERTAAA2rJ6nHEQbos5BF53f7mHXnh5v4EyuYH3ImetB4waHcuStBQYOToE%2FYkCQWXOeQZQurWlryzmucyjVwQAJ45aFFhwjBshVqhzi7fnN8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a325d2ee69314c11-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate\r\npriority: u=0,i\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nserver: cloudflare\r\nset-cookie: client=46f0077375970b1de9dfe83d4cbb09ca; expires=Sat, 29 Aug 2026 19:46:46 GMT; Max-Age=86400; path=/; secure; HttpOnly\nclient=761066ab7a84263cc7aa7b991dad0e70; expires=Sat, 29 Aug 2026 19:46:46 GMT; Max-Age=86400; path=/; secure; HttpOnly\nbasket_id=761066ab7a84263cc7aa7b991dad0e70; expires=Sun, 27 Sep 2026 19:46:46 GMT; Max-Age=2592000; path=/; secure\nbasket_products_count=0; path=/; secure\nwishes_products_count=0; path=/; secure\nREGID=1143020003; expires=Wed, 24 Feb 2027 19:46:47 GMT; Max-Age=15552000; path=/; secure\nbasket_products_count=0; path=/; secure\nwishes_products_count=0; path=/; secure\npage_counter=1; expires=Sat, 29 Aug 2026 19:46:47 GMT; Max-Age=86400; path=/; secure\nwishes_products_count=0; path=/; secure\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-cache-search-products: e\r\nx-frame-options: sameorigin\r\nx-ua-compatible: IE=edge\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"client","value":"46f0077375970b1de9dfe83d4cbb09ca","quoted":false,"path":"/","expires":"2026-08-29T19:46:46Z","raw_expires":"Sat, 29 Aug 2026 19:46:46 GMT","max_age":86400,"secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"client=46f0077375970b1de9dfe83d4cbb09ca; expires=Sat, 29 Aug 2026 19:46:46 GMT; Max-Age=86400; path=/; secure; HttpOnly"},{"name":"client","value":"761066ab7a84263cc7aa7b991dad0e70","quoted":false,"path":"/","expires":"2026-08-29T19:46:46Z","raw_expires":"Sat, 29 Aug 2026 19:46:46 GMT","max_age":86400,"secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"client=761066ab7a84263cc7aa7b991dad0e70; expires=Sat, 29 Aug 2026 19:46:46 GMT; Max-Age=86400; path=/; secure; HttpOnly"},{"name":"basket_id","value":"761066ab7a84263cc7aa7b991dad0e70","quoted":false,"path":"/","expires":"2026-09-27T19:46:46Z","raw_expires":"Sun, 27 Sep 2026 19:46:46 GMT","max_age":2592000,"secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"basket_id=761066ab7a84263cc7aa7b991dad0e70; expires=Sun, 27 Sep 2026 19:46:46 GMT; Max-Age=2592000; path=/; secure"},{"name":"basket_products_count","value":"0","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"basket_products_count=0; path=/; secure"},{"name":"wishes_products_count","value":"0","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"wishes_products_count=0; path=/; secure"},{"name":"REGID","value":"1143020003","quoted":false,"path":"/","expires":"2027-02-24T19:46:47Z","raw_expires":"Wed, 24 Feb 2027 19:46:47 GMT","max_age":15552000,"secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"REGID=1143020003; expires=Wed, 24 Feb 2027 19:46:47 GMT; Max-Age=15552000; path=/; secure"},{"name":"basket_products_count","value":"0","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"basket_products_count=0; path=/; secure"},{"name":"wishes_products_count","value":"0","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"wishes_products_count=0; path=/; secure"},{"name":"page_counter","value":"1","quoted":false,"path":"/","expires":"2026-08-29T19:46:47Z","raw_expires":"Sat, 29 Aug 2026 19:46:47 GMT","max_age":86400,"secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"page_counter=1; expires=Sat, 29 Aug 2026 19:46:47 GMT; Max-Age=86400; path=/; secure"},{"name":"wishes_products_count","value":"0","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"wishes_products_count=0; path=/; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"crypto-js:4.0.0","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"AWIN","description":"AWIN is a global affiliate marketing network.","website":"https://www.awin.com","common_platform_enumeration":"","icon":"AWIN.svg","categories":["Affiliate programs"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":134525,"size_decoded":29493,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (38764), with CRLF, LF line terminators","md5":"596c942114b347b0c3df4167d29637df","sha1":"1d94d411d57749d3059c1ea233b0347699f64def","sha256":"6181c339d5464a3efbf12d4bec5047e8fcd1fdba8e1c2e63085c33449dde41ba","sha512":"74284dc86cbe1a200fce2ba4bfc29bc64e8d3a56f801c651cb89e68ca17c711db66dcbe5f02cf79933c7e13523d28058e05323f3c39996aa59699bb6b8e939d2","ssdeep":"1536:w5/MeeU/9Vxx5x7YgM73iHeSHVr0dxawjQSKNrXtYknuKAcPIHsntWIRW9wmOquQ:w5/MeeUBxQ7rSHVr8xZLpIAL","tlshash":"94d37312cecd243b452369fda97cab24e0da402bd66f5a45f8fd23650b82fc19c13d96","first_seen":"2026-08-28T19:47:59.71063Z","last_seen":"2026-08-28T19:47:59.71063Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1274,"timings":{"blocked":-1,"dns":55,"connect":18,"send":0,"wait":1198,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/eng/loader.gif","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.803Z","timestamp":1787946407803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /gfx/eng/loader.gif HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/gif\r\npriority: u=5,i\r\ncf-ray: a325d2f8cb704c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"6246a0d8-fa0\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Fri, 01 Apr 2022 06:51:04 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BEZwSMrvykmuE6CYW7%2FP60WdcUFg9gnmuZUhg0n8jxuZloB4h40HEo2uzuW%2BxzndpMC036XxMiM9LxGwIa55mBG8WR8PxycnYjW7kEbPOfW3Xatwq3KoyP0DWJs5Bmk%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4000,"size_decoded":4779,"mime_type":"image/gif","magic":"GIF image data, version 89a, 24 x 24","md5":"ef3ca436a5780d84254050ed1a418c0e","sha1":"1f7552eb953946d42ed145e0c35b9a7567d18ade","sha256":"699b7d717284198e9060cdf785d2abc0fa4c47a4d122218d4e702fac7ba1adaf","sha512":"e38dcae7052e3a9fbeb766c3996fbb5833494c840c684ee42a25554134f8103acd12ec3cfdc3b728d318ef79e397b23104083facf1f2da7974bd5bdacca4d4e9","ssdeep":"","tlshash":"a2819482f665e577c9790636e73e81cf325144bde2282f1cd2938646dc2b63d9231bc6","first_seen":"2023-05-22T01:49:33Z","last_seen":"2026-08-28T19:47:59.697259Z","times_seen":315,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.087Z","timestamp":1787946408087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://9design.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 23 Aug 2026 10:07:28 GMT\r\nexpires: Mon, 23 Aug 2027 10:07:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 466760\r\nlast-modified: Mon, 15 Sep 2025 17:11:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23040,"size_decoded":23853,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23040, version 1.0","md5":"de69cf9e514df447d1b0bb16f49d2457","sha1":"2ac78601179c3a63ba3f3f3081556b12ddcaf655","sha256":"c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49","sha512":"4aebb7e54d88827d4a02808f04901c0d09b756c518202b056a6c0f664948f5585221d16967f546e064187c6545acef15d59b68d0a7a59897bd899d3e9dda37b1","ssdeep":"384:adpABC4a0HkBpR1HWtGu06B6lsoAKiwY0HcLKglV6Z+DVb35PJZDdiZeJ1vqYg:0AHa0Ezf2tZn6lsoABwTKK46ZQb3V7wD","tlshash":"fca2e1c05cc1e2d4ae02daf7fda5a4eab4e2f01123a8f65f8f114b75d505993640fe01","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-08-28T23:45:55.653149Z","times_seen":189523,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":3,"connect":39,"send":0,"wait":17,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ct.pinterest.com/user/?tid=2612687808709\u0026pd=%7B%22em%22%3A%22d41d8cd98f00b204e9800998ecf8427e%22%7D\u0026cb=1787946411100\u0026dep=2%2CPAGE_LOAD","fqdn":"ct.pinterest.com","domain":"pinterest.com","tld":"com"},"ip":{"addr":"151.101.128.84","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9design.live/","date":"2026-08-28T19:46:51.103Z","timestamp":1787946411103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pinterest.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 13 Aug 2026 00:00:00 GMT","end":"Fri, 26 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"29:C4:71:65:04:3A:28:58:1C:6C:6C:58:16:55:B3:C6:17:5B:6C:CF","sha256":"4B:CD:17:54:85:57:4F:28:33:A0:D4:39:6B:C2:2B:EE:7A:C7:76:4E:65:B5:87:7F:B5:27:C3:3C:7B:BA:8F:0F"}}},"request":{"raw":"GET /user/?tid=2612687808709\u0026pd=%7B%22em%22%3A%22d41d8cd98f00b204e9800998ecf8427e%22%7D\u0026cb=1787946411100\u0026dep=2%2CPAGE_LOAD HTTP/1.1\r\nHost: ct.pinterest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://9design.live\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 220\r\naccess-control-expose-headers: Epik,Pin-Unauth\r\npin-unauth: dWlkPU4yWTJNVE0xT1RNdE1EVmpNQzAwWm1ZeUxUazRNVGN0TURnMU1tTXlNV0UyTldJdw\r\ncache-control: no-cache,no-store,must-revalidate,max-age=0\r\npragma: no-cache\r\nexpires: Sat, 01 Jan 2000 00:00:00 GMT\r\naccess-control-allow-origin: https://9design.live\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\nx-envoy-upstream-service-time: 2\r\nreferrer-policy: origin\r\nx-pinterest-rid: 6899678759067593\r\nx-pinterest-rid-128bit: d4404359421210065fc095467a882bdd\r\ndate: Fri, 28 Aug 2026 19:46:51 GMT\r\nx-cdn: fastly\r\nalt-svc: h3=\":443\";ma=604800\r\npinterest-version: 5bbbd57185da7ba4a4fc32855ea52b4e40424111\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":404,"size_decoded":963,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8fa5973c3fe51977b81bbc7387a5e829","sha1":"0f2ae16aef699fd1da92db01d8f2ae0ade716ed5","sha256":"bbacefb0d945205138e976122c65606fda5273df0aacc5a7f663d3791273562c","sha512":"9e81cdf3ad57513f3e42988e994686b81a4dd77b01bec0ac72c9b045a65c23e7456e954aee162a7975621fa57560254e36dfa18577b031656fd4328055808513","ssdeep":"","tlshash":"11e046192010b4fa8082e578e140bac38b28dd3a3c487878ed5d484e60ef5f24d7ce7b","first_seen":"2026-06-10T19:05:44.402767Z","last_seen":"2026-08-28T22:41:57.238321Z","times_seen":1436,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/ajax/js/pwa_online_bar.js?v=1\u0026r=6","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.732Z","timestamp":1787946407732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /ajax/js/pwa_online_bar.js?v=1\u0026r=6 HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8hvHOg2lnjpy8sANMoDg4%2FfwPznsEvxLDzPRYarx24Ukpf7S1LixZgQ1BHSlLWmLf6UWyBD1RJ2IF4fRIXAd6VAv1OSj8lhNkfM0ieEFLWfatt2S0mDPJ1Ts8t4zeZ8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a325d2f85b3a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5662,"size_decoded":2587,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"7b3284d720e54f16255a9a622e35adb0","sha1":"e9d7133c4bd5404a95f6f280446308c371f24c31","sha256":"6ac950570e3b03a17f2050425a6af80a77b4a912f4640a97a9214127f4196b78","sha512":"0a2f7865677bba8036b61ccff7cb34d0c57468cb78c5fbc8fc0e8d261756e4de272cc0328408eef6f2fb9630db867cc9c5787798438d60af1a1b8f030dd1f674","ssdeep":"96:pkICOXtuUfCrniBGm9rTxTfGqOHkQGFChMuXbRxkR6GunxsjMzaI:eICOtuUfCrnATxDFokQGFChM2R2EGNjY","tlshash":"88c1326de9fe00706773703d5bdfe20575371097560ad980be8d87903f82528a2abacd","first_seen":"2023-03-26T05:58:32Z","last_seen":"2026-08-28T19:47:59.715013Z","times_seen":366,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sw-assets.ekomiapps.de/static_resources/widget.js","fqdn":"sw-assets.ekomiapps.de","domain":"ekomiapps.de","tld":"de"},"ip":{"addr":"13.249.8.19","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.054Z","timestamp":1787946408054,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ekomiapps.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 14 Jul 2026 00:00:00 GMT","end":"Wed, 27 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"86:C8:B9:2F:D5:8F:02:89:92:89:39:A0:01:AD:67:54:EB:B6:56:F8","sha256":"C0:1F:04:81:40:8E:C8:A1:15:CB:2F:F6:A6:20:E1:AD:8B:DA:75:54:D9:1E:BC:3F:BC:76:16:BB:1F:69:73:DF"}}},"request":{"raw":"GET /static_resources/widget.js HTTP/1.1\r\nHost: sw-assets.ekomiapps.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 314\r\ndate: Fri, 28 Aug 2026 19:46:49 GMT\r\nlast-modified: Thu, 04 Jun 2026 06:45:35 GMT\r\netag: \"e46299e255c66b45c44642b7b8f77584\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000,private\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 b96196480b09999ed2996bb489d3679c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: UmmTlUeln92eo7qVv1DVSTIdKNMfN4IoTmTifgR1hXVR1H1-Z0opuw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":314,"size_decoded":849,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (314), with no line terminators","md5":"e46299e255c66b45c44642b7b8f77584","sha1":"20a0689c6c4364911071dc54289c6fbc747902da","sha256":"085a4682f57909604e172485bcd79a00877b3163c66deae3fcc87a65b9344727","sha512":"9373ade9e5605fefa4d1f58af7979c3b5aa314232f04a89275dca441812d671c4ab5d6c30a1e3d05a077520dd8c59a9d77c6253430f5c1679325feaff85bed06","ssdeep":"","tlshash":"13e0267d8ca898360338085b20aefba1645201bec53c8004c108dc68b1b0de24150e68","first_seen":"2024-07-13T15:10:15Z","last_seen":"2026-08-28T19:47:59.718676Z","times_seen":613,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":6,"connect":14,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/eng/menu_suggested_shop_for_language.js.gzip?r=1785746984","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.759Z","timestamp":1787946407759,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /gfx/eng/menu_suggested_shop_for_language.js.gzip?r=1785746984 HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: application/x-javascript\r\npriority: u=3,i=?0\r\ncf-ray: a325d2f88b454c11-OSL\r\ncf-cache-status: DYNAMIC\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\netag: \"6a7057ed-35e\"\r\nexpires: Sat, 28 Aug 2027 19:46:47 GMT\r\nlast-modified: Mon, 03 Aug 2026 08:57:17 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MbuLTx7VJFC68vx0cWYOXhVOip%2F%2FTquMg93jujCEEcCdlYFkPkXlaELDpglPpWzI7yZoaXj26hm8eAmcr0gNRh%2Fbq8NZgvXw4WKvz943SLpPi9GfuwOHDHq0ZEldD4M%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 862\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2748,"size_decoded":1711,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (2748), with no line terminators","md5":"6c2c7543864d12ced13550be5075d2a1","sha1":"be06f1ad806efd06ba273a357007e32f3c642c6a","sha256":"57bc98afdb8a6643b4eb67ccddecf1880d735574c05844f3908af008747781c1","sha512":"154c908ea4fcb170849adbb72db4cdc1f5ec8cde74199cca21527424f4c1bb778d7035a1c6079d24c8bf91f63697eb7fd38d5896effe64409fe8ceccc904c291","ssdeep":"","tlshash":"1051ab5134a1b97528ff119ee8e717c9b2329085644c403dfc30aed40dbaec261a3ebb","first_seen":"2024-11-07T18:32:54.50322Z","last_seen":"2026-08-28T19:47:59.720749Z","times_seen":112,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trafficscanner.pl/ws2/script/4722/koniec.js","fqdn":"trafficscanner.pl","domain":"trafficscanner.pl","tld":"pl"},"ip":{"addr":"148.251.213.126","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.751Z","timestamp":1787946407751,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trafficscanner.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 09:30:43 GMT","end":"Mon, 09 Nov 2026 09:30:42 GMT"},"fingerprint":{"sha1":"BF:0D:CF:66:38:7A:C0:34:48:61:4B:43:AE:4F:D2:43:6A:BF:12:8E","sha256":"8D:8E:71:5D:B7:36:C7:CF:0E:A4:92:80:90:28:59:36:6B:B9:B3:4D:E3:74:8E:D5:E8:F6:DF:89:8B:DE:D0:43"}}},"request":{"raw":"GET /ws2/script/4722/koniec.js HTTP/1.1\r\nHost: trafficscanner.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 04 Sep 2026 19:46:47 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Tue, 11 Feb 2025 14:53:44 GMT\r\netag: \"14435-67ab6478-e4683b47ce37ad96;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 23713\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self'; frame-ancestors 'none'; form-action 'self';\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82997,"size_decoded":24512,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a6693bf91ebbfdc722f99d8c6df282ca","sha1":"88d0edb6cf52d9e13b79878a43d0075dad23aed9","sha256":"f9d86932cd752341af2b3fcd2cc628f0a814fe19cd0d523b9ba04ade325a3ad5","sha512":"79724028a9ed210f5c18969071a1dad9b31e0b6bb559bd1ecee84612537d6524bca2897ccf24e80737575e2295585346f0e52ba593b94045f9412b1427a92828","ssdeep":"1536:YwO1CKL8gUM5zM/vbm+3qVrsQimKLbPHElVMs91RCQlEuH/u4Hj4SHXewpU8GkwU:YjESdn1+3qV/36p16","tlshash":"5d83198e7692746142633574403f134ab13b19b2b85ad894e16dc8ed7e78f9e40bbf2c","first_seen":"2025-10-07T07:48:49.479328Z","last_seen":"2026-08-28T19:47:59.722228Z","times_seen":2,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":38,"connect":35,"send":0,"wait":36,"receive":36,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/custom/newsletter_mobile.jpg?r=1785746749","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.806Z","timestamp":1787946407806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /gfx/custom/newsletter_mobile.jpg?r=1785746749 HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: image/jpeg; charset=binary\r\npriority: u=5,i\r\ncf-ray: a325d2f8cb724c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"039d172c3f0d89c6809bdb94684730e7\"\r\nexpires: Sat, 28 Aug 2027 19:46:48 GMT\r\nlast-modified: Thu, 17 Apr 2025 09:37:32 GMT\r\nserver: cloudflare\r\niai-header-source: cos\r\nx-amz-meta-mtime: 1724058232.009\r\nx-amz-request-id: tx000008b5e6dcf9b7f46fa-006a8104bf-6518685-default\r\nx-content-type-options: nosniff\r\nx-proxy-cache: HIT\r\nx-rgw-object-type: Normal\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pq8QnardB8LVRBjIioWjhQBJq1Npr5aBmLTMBa1hmTTQeEPvMEzHo%2B5g3ceP%2BHQUNGErqGIQVUpK0ouWgC8Bi3vublIfZ3Y6%2B0AYnx3rNDJhbBwqh65zQkQy%2BwtuxAE%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 137943\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137943,"size_decoded":138918,"mime_type":"image/jpeg; charset=binary","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 360x488, components 3","md5":"039d172c3f0d89c6809bdb94684730e7","sha1":"3faf9bd643bc07545106680bba33979c858ecca8","sha256":"87abd7ed01c9382bc15bf851b76af420967476ecd675715cedca7c98490e9662","sha512":"6e74ad4a0330b99ed15d7973f6d591e08f960a2ae35060029f120087684646c400ed8be2af57d9b3206be769c1d1b973dbe5889dfe1da2c9d6662143b1b24653","ssdeep":"3072:qVCbfewTziGy5N9vYPDMn0O7z4Ct3hQAMxQ5m5Hjk9pzQvPdk5vqLQBzNeY:Jbfe8z4N8mzz1t6AMxIY2pzQvP24LQNf","tlshash":"49d3121a65aadafa596037a5ed83c4873cfeed12f425cd0263121c92c7bcb91605bccd","first_seen":"2026-08-28T19:47:59.723941Z","last_seen":"2026-08-28T19:47:59.723941Z","times_seen":1,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/cms/footer/caraty.png","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.822Z","timestamp":1787946407822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/cms/footer/caraty.png HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a325d2f8eb8a4c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"615aacf0-1a3e\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Mon, 04 Oct 2021 07:27:44 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BJIU82wIwPqJyCQ3i3pj%2ByKJWMxarI8MeROQ9O4JuJ2irnJeE0utvQ%2BN2ECJe5iE1JlX1G6V4mJSat7nBwwrdrDJ5QmZanoyOkSzSyk1CeQuvMESkVxYxsJ5P7WJzl8%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6718\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6718,"size_decoded":7498,"mime_type":"image/png","magic":"PNG image data, 115 x 56, 8-bit/color RGBA, non-interlaced","md5":"28d583155de1e0ec5cb681ced116bcc4","sha1":"9e55364b0f6eb771f015d2d862474e63a899678e","sha256":"4596522f1edfaec63a6155f0595dab4089c2a9f120461fe98a3d510aa74ae138","sha512":"6df0c9670ecca26bcf04236f1cf3d01393379690f08fc3f60ec79725570662cb44b7e38c72b66b54b974b09eded27f101fc97c089ec681b11bfb1511a48ccb89","ssdeep":"192:pV7YpS35bd4Rit9qfvcoi51hfeXyFjjz+:nUpSpbd48tWvco41hfeihz+","tlshash":"7cd1af8a489ea05497b5eb8424705c4e47b597660e553a4726f3a8b388353cf09c4b30","first_seen":"2025-10-07T07:48:49.433391Z","last_seen":"2026-08-28T19:47:59.725116Z","times_seen":2,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"podsufitem.iai-shop.com/ajax/set_session.php?set_session=true\u0026sso_token=WXRKVjNBWW93aFFMWEhnc3JubDZkKzBDeVNyTHpMVHl2L3dZV0xvZ29FbE94M2ptNHZta1UvdE9vQjRDL2NjbkRtNS9zOFVoRGFCOFhFOXo5dWorQStsbjVXZElqK3JUTTRTTWdzSDk2a1RlR2ZVNmU4Smc2M3FSWk9jOVlzbEhNMVUwVWdybEwyMklpNDV6M3cwVC8rNUYxMTVDenBCZSthSGFqYXRJWWJmSll4Y1RUNVRaY3E4MVdLRHZ0enVEZUJvZkFWTkRFQnd0bjBRSEYxOE54UT09","fqdn":"podsufitem.iai-shop.com","domain":"iai-shop.com","tld":"com"},"ip":{"addr":"5.149.163.83","port":443,"asn":31229,"as":"Beyond.pl sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.830Z","timestamp":1787946407830,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.iai-shop.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Tue, 17 Mar 2026 15:22:28 GMT","end":"Fri, 02 Oct 2026 15:22:27 GMT"},"fingerprint":{"sha1":"67:E7:15:EB:6D:D1:52:4F:62:14:EC:FC:38:76:05:0A:3D:4A:B6:36","sha256":"29:F6:D1:FC:05:47:06:00:97:1A:F9:AB:4D:13:7D:CC:69:BA:2D:6A:0E:1E:D1:ED:8B:F8:68:C4:A8:CA:14:BC"}}},"request":{"raw":"GET /ajax/set_session.php?set_session=true\u0026sso_token=WXRKVjNBWW93aFFMWEhnc3JubDZkKzBDeVNyTHpMVHl2L3dZV0xvZ29FbE94M2ptNHZta1UvdE9vQjRDL2NjbkRtNS9zOFVoRGFCOFhFOXo5dWorQStsbjVXZElqK3JUTTRTTWdzSDk2a1RlR2ZVNmU4Smc2M3FSWk9jOVlzbEhNMVUwVWdybEwyMklpNDV6M3cwVC8rNUYxMTVDenBCZSthSGFqYXRJWWJmSll4Y1RUNVRaY3E4MVdLRHZ0enVEZUJvZkFWTkRFQnd0bjBRSEYxOE54UT09 HTTP/1.1\r\nHost: podsufitem.iai-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 2\r\nset-cookie: iws=1991f079160e36befa2524e878dfd5c3; expires=Mon, 26 Apr 2083 15:33:36 GMT; Max-Age=1788032808; path=/; secure; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"iws","value":"1991f079160e36befa2524e878dfd5c3","quoted":false,"path":"/","expires":"2083-04-26T15:33:36Z","raw_expires":"Mon, 26 Apr 2083 15:33:36 GMT","max_age":1788032808,"secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"iws=1991f079160e36befa2524e878dfd5c3; expires=Mon, 26 Apr 2083 15:33:36 GMT; Max-Age=1788032808; path=/; secure; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":393,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-29T00:34:23.323489Z","times_seen":453919,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":94,"connect":27,"send":0,"wait":52,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"podsufitem.pl/ajax/set_session.php?set_session=true\u0026sso_token=WXRKVjNBWW93aFFMWEhnc3JubDZkKzBDeVNyTHpMVHl2L3dZV0xvZ29FbE94M2ptNHZta1UvdE9vQjRDL2NjbkRtNS9zOFVoRGFCOFhFOXo5dWorQStsbjVXZElqK3JUTTRTTWdzSDk2a1RlR2ZVNmU4Smc2M3FSWk9jOVlzbEhNMVUwVWdybEwyMklpNDV6M3cwVC8rNUYxMTVDenBCZSthSGFqYXRJWWJmSll4Y1RUNVRaY3E4MVdLRHZ0enVEZUJvZkFWTkRFQnd0bjBRSEYxOE54UT09","fqdn":"podsufitem.pl","domain":"podsufitem.pl","tld":"pl"},"ip":{"addr":"5.149.163.83","port":443,"asn":31229,"as":"Beyond.pl sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.831Z","timestamp":1787946407831,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.podsufitem.pl","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Wed, 15 Oct 2025 23:22:21 GMT","end":"Thu, 15 Oct 2026 23:22:20 GMT"},"fingerprint":{"sha1":"C4:CC:B5:A5:DE:B3:A3:68:A5:C7:19:B4:EC:30:DB:DC:1A:2F:DB:75","sha256":"60:7A:B0:4E:4A:0D:65:FA:4B:1E:C0:61:66:87:5D:29:AF:32:CF:52:AF:D6:19:5A:88:8B:3E:30:C9:AF:64:7A"}}},"request":{"raw":"GET /ajax/set_session.php?set_session=true\u0026sso_token=WXRKVjNBWW93aFFMWEhnc3JubDZkKzBDeVNyTHpMVHl2L3dZV0xvZ29FbE94M2ptNHZta1UvdE9vQjRDL2NjbkRtNS9zOFVoRGFCOFhFOXo5dWorQStsbjVXZElqK3JUTTRTTWdzSDk2a1RlR2ZVNmU4Smc2M3FSWk9jOVlzbEhNMVUwVWdybEwyMklpNDV6M3cwVC8rNUYxMTVDenBCZSthSGFqYXRJWWJmSll4Y1RUNVRaY3E4MVdLRHZ0enVEZUJvZkFWTkRFQnd0bjBRSEYxOE54UT09 HTTP/1.1\r\nHost: podsufitem.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 2\r\nset-cookie: iws=2454fa9fdf346dc7f2a7fd2c33ae1c16; expires=Mon, 26 Apr 2083 15:33:36 GMT; Max-Age=1788032808; path=/; secure; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"iws","value":"2454fa9fdf346dc7f2a7fd2c33ae1c16","quoted":false,"path":"/","expires":"2083-04-26T15:33:36Z","raw_expires":"Mon, 26 Apr 2083 15:33:36 GMT","max_age":1788032808,"secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"iws=2454fa9fdf346dc7f2a7fd2c33ae1c16; expires=Mon, 26 Apr 2083 15:33:36 GMT; Max-Age=1788032808; path=/; secure; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":393,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-29T00:34:23.323489Z","times_seen":453919,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":122,"connect":28,"send":0,"wait":47,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.iai-shop.com/ajax/set_session.php?set_session=true\u0026sso_token=WXRKVjNBWW93aFFMWEhnc3JubDZkKzBDeVNyTHpMVHl2L3dZV0xvZ29FbE94M2ptNHZta1UvdE9vQjRDL2NjbkRtNS9zOFVoRGFCOFhFOXo5dWorQStsbjVXZElqK3JUTTRTTWdzSDk2a1RlR2ZVNmU4Smc2M3FSWk9jOVlzbEhNMVUwVWdybEwyMklpNDV6M3cwVC8rNUYxMTVDenBCZSthSGFqYXRJWWJmSll4Y1RUNVRaY3E4MVdLRHZ0enVEZUJvZkFWTkRFQnd0bjBRSEYxOE54UT09","fqdn":"9design.iai-shop.com","domain":"iai-shop.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.832Z","timestamp":1787946407832,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /ajax/set_session.php?set_session=true\u0026sso_token=WXRKVjNBWW93aFFMWEhnc3JubDZkKzBDeVNyTHpMVHl2L3dZV0xvZ29FbE94M2ptNHZta1UvdE9vQjRDL2NjbkRtNS9zOFVoRGFCOFhFOXo5dWorQStsbjVXZElqK3JUTTRTTWdzSDk2a1RlR2ZVNmU4Smc2M3FSWk9jOVlzbEhNMVUwVWdybEwyMklpNDV6M3cwVC8rNUYxMTVDenBCZSthSGFqYXRJWWJmSll4Y1RUNVRaY3E4MVdLRHZ0enVEZUJvZkFWTkRFQnd0bjBRSEYxOE54UT09 HTTP/1.1\r\nHost: 9design.iai-shop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T00:37:18.225338Z","times_seen":18157800,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/advertising.js","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.730Z","timestamp":1787946407730,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/advertising.js HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S5OUyvDUtWSEPHcNFcJuVRtfTL%2FaZ6ZZaFGUJ4lfJxrZB3eYr9qddrSFpizzGPanI%2BuSwovDI2yOSLbcoYOPBiYyR0uwgBJC%2BLaajLz9dSsVU9sN17i1HMUS%2FjlRpVc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a325d2f85b394c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":615,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"f9bbbe70f94bbeba198d9b3e7a07fc42","sha1":"905f47e3885014cc5ab7a631c6687aa399c15884","sha256":"bf69c0c7f7f28e1a3ac16e0a52316d3252f8859f7328b01eb3952408ccd1c29b","sha512":"ada2f45c9c45e85a5e047ce37be40cb62dc09839ef681fe3e256b39b74acf91921a0f9c371924545331b22ef67c9df5498c7e7915c2f1bf942dc9092ebd29d89","ssdeep":"","tlshash":"2e70000a0a3000ec200000000802a0e0a22008a0030300c2c288800820c8080080888a","first_seen":"2023-03-26T05:58:32Z","last_seen":"2026-08-28T19:47:59.727067Z","times_seen":366,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/gfx/standards/newsletter.jpg?r=1785746749","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.807Z","timestamp":1787946407807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /gfx/standards/newsletter.jpg?r=1785746749 HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: image/jpeg; charset=binary\r\npriority: u=5,i\r\ncf-ray: a325d2f8cb744c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"3ea7531b825cfc2295a496ee4e8316e2\"\r\nexpires: Sat, 28 Aug 2027 19:46:47 GMT\r\nlast-modified: Thu, 17 Apr 2025 08:49:42 GMT\r\nserver: cloudflare\r\niai-header-source: cos\r\nx-amz-meta-mtime: 1638960749.115\r\nx-amz-request-id: tx00000a9996b24082f1f8f-006a90db1f-6505953-default\r\nx-content-type-options: nosniff\r\nx-proxy-cache: HIT\r\nx-rgw-object-type: Normal\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2EJ4qUGmNUCTex7uuI7OlalwotDQheSg8mDs%2FhEbTFyba3yMPIsq9450cuXxhOG%2BUD12POAbv0UGRJi8d5p8nikxZaOXyghMYhlHFaKP7GqpCEKLPvu%2FcHcXTZSvRJ4%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 42249\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42249,"size_decoded":43221,"mime_type":"image/jpeg; charset=binary","magic":"JPEG image data, progressive, precision 8, 500x335, components 3","md5":"3ea7531b825cfc2295a496ee4e8316e2","sha1":"4da8e423639ed6e12b009f556e43aa0e6df5db62","sha256":"9d2ecf8e79645cd5fe74cd96d33d02b8864a483a2cb2dabed592e03676bd7499","sha512":"2df4ac2ee226b95c818d4f75949e18fce702918e8a7b53ff51b2cd33c94aed539b88efcd6af3494331cdb6314d1bd491ffc072931b29143998061ea9a8c5ad7c","ssdeep":"768:/d7O2VPaaZjNPZHBdkBZIpxf10+Ku/xZAhqqiIJYMVOvzr4i:ViwPbjBZHHsZkxf10+rOYSAzr4i","tlshash":"13139b230a8ac827f99e90351b45b428b197950006c35768b87c3fbfb7bd18e5ecfa15","first_seen":"2024-05-07T22:12:57Z","last_seen":"2026-08-28T19:47:59.727979Z","times_seen":43,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/cms/footer/dhl.png","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.823Z","timestamp":1787946407823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/cms/footer/dhl.png HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a325d2f8eb8b4c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"615aad06-1a96\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Mon, 04 Oct 2021 07:28:06 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=puTnjdXP%2Fc5GB28oiC23RLW59FCvGza86u1x0y5qQgBBFlWVOM90eJT9YqIwFJanD3EG7K8EkXFfiKWpIrWHz7nAoYJ2wE3V71htGJNQL4C8ActhDG6%2B1RLbCDVj8Zg%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6806\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6806,"size_decoded":7586,"mime_type":"image/png","magic":"PNG image data, 286 x 40, 8-bit/color RGBA, non-interlaced","md5":"1495d820f5b766d62748bafc263dd3b4","sha1":"1cf11ecfa746d61541fd429266eccb90ce51aafe","sha256":"b22a203db3950cb2430492fd8ab587772ac74487af694d8a6d4d8a4203594cb8","sha512":"20e1d71b7278bb5341773cf0ca700697c098d23f9329cd45dee09f39c3a609fb7803a2129828f7d8104b25d0b26973766e4758224491f24f804d016d702b273f","ssdeep":"192:ipoVC45CKacvfjmKPMbs+8KPgTbd+P/lTzFGsq:ieCX6CLbu+3lFGsq","tlshash":"a4e19fe0bfbec02b4d0f02e767f9353a5825475ebdc26ba0840335a712c92bd99d44c9","first_seen":"2025-10-07T07:48:49.454165Z","last_seen":"2026-08-28T19:47:59.729889Z","times_seen":2,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.trafficscanner.pl/papi/pageviews/inc.php?cid=4722\u0026is_source=0\u0026k=scr\u0026host=9design.live","fqdn":"www.trafficscanner.pl","domain":"trafficscanner.pl","tld":"pl"},"ip":{"addr":"148.251.213.126","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.193Z","timestamp":1787946408193,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trafficscanner.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 09:30:43 GMT","end":"Mon, 09 Nov 2026 09:30:42 GMT"},"fingerprint":{"sha1":"BF:0D:CF:66:38:7A:C0:34:48:61:4B:43:AE:4F:D2:43:6A:BF:12:8E","sha256":"8D:8E:71:5D:B7:36:C7:CF:0E:A4:92:80:90:28:59:36:6B:B9:B3:4D:E3:74:8E:D5:E8:F6:DF:89:8B:DE:D0:43"}}},"request":{"raw":"GET /papi/pageviews/inc.php?cid=4722\u0026is_source=0\u0026k=scr\u0026host=9design.live HTTP/1.1\r\nHost: www.trafficscanner.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://9design.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\np3p: CP=\"ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI\"\r\naccess-control-allow-origin: *\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self'; frame-ancestors 'none'; form-action 'self';\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":753,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T00:37:18.225338Z","times_seen":18157800,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":46,"connect":32,"send":0,"wait":38,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ekomi-srr.s3.eu-central-1.amazonaws.com/production/assets/uploads/ckeditor_images/lg-stars-blank-136x23-new-535355-1703761149.png","fqdn":"ekomi-srr.s3.eu-central-1.amazonaws.com","domain":"ekomi-srr.s3.eu-central-1.amazonaws.com","tld":"s3.eu-central-1.amazonaws.com"},"ip":{"addr":"3.5.122.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:49.315Z","timestamp":1787946409315,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.eu-central-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Jul 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"94:44:60:1F:17:93:6D:C9:C5:10:D3:A4:E4:E6:8A:BE:66:B8:D6:BE","sha256":"E1:01:B1:9F:0D:F4:07:C0:2C:1E:48:2B:2B:9E:3B:E4:D9:A0:F8:F0:58:B3:1A:2F:FB:93:D5:F5:79:0C:25:7B"}}},"request":{"raw":"GET /production/assets/uploads/ckeditor_images/lg-stars-blank-136x23-new-535355-1703761149.png HTTP/1.1\r\nHost: ekomi-srr.s3.eu-central-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://9design.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: s3hiK9oggtGhrCUq2U5jLmq3k3raeVIfuGD/c3QOo9ZMBDDNGD2dEKvYLqNQff3/w4xA928mJD8qwk2A1Y5uur9z+QL/6rda\r\nx-amz-request-id: R8MEX25WNFREP4CC\r\nDate: Fri, 28 Aug 2026 19:46:50 GMT\r\nLast-Modified: Thu, 28 Dec 2023 10:59:10 GMT\r\nETag: \"229f1309fcac40571b0180c1af6393ea\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 1619\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1619,"size_decoded":2034,"mime_type":"image/png","magic":"PNG image data, 136 x 23, 8-bit/color RGBA, non-interlaced","md5":"229f1309fcac40571b0180c1af6393ea","sha1":"eb7f3296bf760b3aeabcc7d53b46ca40778a12ef","sha256":"0769d7d25eae3cba051ce02583d239ebb4678afb92c62de250e05e27b0036dad","sha512":"1725655156d0a59e4d982638f9bb8dd96a9fda4b27ac9c6f16b07818aba1d9d2007402b7ea7502d3a43bd5cef6a46caf630afbc45a1dae641d2ebde095304a7f","ssdeep":"","tlshash":"3a310ad50820717ee1959ef36e12d25f0da3427d704554f4b3d2c6c37f05a83587c648","first_seen":"2024-12-12T03:19:56.470675Z","last_seen":"2026-08-28T19:47:59.731011Z","times_seen":6,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":1,"connect":27,"send":0,"wait":46,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/cms/banner3/star.webp","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.792Z","timestamp":1787946407792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/cms/banner3/star.webp HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a325d2f8bb624c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"669e1e38-3a0\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Mon, 22 Jul 2024 08:54:16 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ok4mTtWOXBANZ2wACGpZBUbkXHjwUmbl6xXsDqdZmdtUzm%2FAvNlSrXAmaF6ItnHH%2FaU0Mf%2B5pwxmoIi4pQlPOJFwQEhX1NqVtTcoaS%2BDpLquYYk7oxlcAZoLCi5Ps64%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 928\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":928,"size_decoded":1711,"mime_type":"image/webp","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"6e235e061d7d22c4122178709eeb6332","sha1":"74854a83cef43becc539c3f27786c78e1bbd543b","sha256":"62e39deb857ff40c1b25464ad301e2606da719078fe5a08c614c28fb89efe89b","sha512":"a86b5da336622a7e00e0f9913d0d4b1a0141f047360ba549e81f4e9ed618f09f2cb16a0cf02a444a23bc03a79457908e254b52c95ca5343b2b4a5f1ac802c9a9","ssdeep":"","tlshash":"1111c8c300bd4e32c933b432473828d502694cf9359d26a96060281f217de946581382","first_seen":"2026-08-28T19:47:59.732449Z","last_seen":"2026-08-28T19:47:59.732449Z","times_seen":1,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/cms/salon_warszawa/salon6.webp","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.798Z","timestamp":1787946407798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/cms/salon_warszawa/salon6.webp HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a325d2f8bb6a4c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"669e3725-1a5c4d\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Mon, 22 Jul 2024 10:40:37 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7SKJlk7Z4ISH73QRvOfe%2FNJAe8Fgc8C7A8zheBudShbnrFmnWlIXkl7CTC1N7zJ74fEhJyNF6%2FzFwdpCNAsIu1FABN24%2F9kv6mPIpVxvkaK2euQnTAfk7iFtja%2ByNOA%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1727565\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1727565,"size_decoded":1728355,"mime_type":"image/webp","magic":"PNG image data, 1366 x 768, 8-bit/color RGB, non-interlaced","md5":"89a4b0301a810d953353626bea8946f6","sha1":"b187594c97db4e0e9a063279f0cb58355c17582a","sha256":"f327148c970be2fc9353bf06b1b9d307fb10e67b56158fded57435b8508c11a8","sha512":"4e39452be9b89b7e71dba4080eb078cd0c65282e183ffcc9007f0e8d3ceb032b6ee7acff67d784be4d497d062f280a8aca8292ee26fbad4ae791c54e4f6ecd27","ssdeep":"24576:kRh3dYgzEM2uaj0CaThCt/nLhT0B9VML3qxifm9FmQaffQhhj/:krIqaj08hT0B9V03OiqofQfj/","tlshash":"cd25338b13c7a87078f47b66057785a77e1620ce222444fef1b6d80ad516ca98b73dcd","first_seen":"2026-08-28T19:47:59.73365Z","last_seen":"2026-08-28T19:47:59.73365Z","times_seen":1,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":243,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/cms/zwrot.jpg","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.810Z","timestamp":1787946407810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/cms/zwrot.jpg HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a325d2f8db764c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"5d1cad3a-880\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Wed, 03 Jul 2019 13:27:22 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FXrJk83aeF2De4LHZpzZxZnt8NQhebkNEa9i6MAVjKYATyw8JEiG7OXnixM8HiUz%2BoMCH1J79SQ%2B24UpYxNkBoMmz%2Bxf2Zl1mQkmcCEavjbwESsWNJQp48LaR6nKZ8U%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2176\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2176,"size_decoded":2958,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 41x41, components 3","md5":"91f7261650ec1e7bda67054ab3500289","sha1":"52265168c286d5b495e8474098242f7c744d700e","sha256":"a076fc183caca3e6be1c6399e04d41efc73e0fee07fa10c494cb2678a1a639f3","sha512":"43c789262b218c1edd0ebcb1aa8514153502a9e1a895a7316a1f21fd43ff471ade3f5a359e427df9b28872643d84fc2fc2671f7036af39ab4e256bbfa17a804a","ssdeep":"","tlshash":"a1411a1ef905bf03c4e6b87024f3511a6e6252c0e0aad51ad9bd902290100b584123cf","first_seen":"2026-08-28T19:47:59.734899Z","last_seen":"2026-08-28T19:47:59.734899Z","times_seen":1,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/ajax/poweredby_IdoSell_Shop_black.svg?v=1","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.825Z","timestamp":1787946407825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /ajax/poweredby_IdoSell_Shop_black.svg?v=1 HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FNuuCSRePSU9ksIxaNlhZK6hQYgGk3YIiz6wW%2BL%2BrGwNy9srcBGsxIXCTM0wKSra90%2Fs8D0QP5cvcvx7pkqGtXeFlvgL%2Buc%2BM8Tv9bGwaiEJsTY4KHLdldpQtv4P1pQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a325d2f8eb914c11-OSL\r\ncf-cache-status: MISS\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: W/\"6a326ace-2496\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Wed, 17 Jun 2026 09:37:18 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9366,"size_decoded":4367,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6853b60079ca88b6014f4ea2a986b34f","sha1":"8df6e6cac86f76137738112b432ff015bfe17257","sha256":"c0f8f9ad78de00cd3c660351700280b7a5c3ca3e57c3c0bcd7d9aa06aea21bae","sha512":"2e33665ff087c63c52893f8987e041f3ecd7653646afae90963d0668be33241402ef0577d2011ae7729e6e474f4d2cff660acd848505f1115cd533c6826869c0","ssdeep":"192:LgTWfXkCDe9fJG1VyaqYFE03tmWX3eL/eKiLSMBF0rsya/OJKn:LmcDeNg186soeL/eKiLSMBFI1q","tlshash":"bf1251c763e5b3d8f50ae7b514176871b9af38feb797c288c7545ad1ea4001d0a9c8c2","first_seen":"2026-06-17T18:47:02.432134Z","last_seen":"2026-08-28T19:47:59.736129Z","times_seen":2,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/hpeciai/8bb1aa5a4ca2c6731ffc4148d6003758/eng_il_Thoro-Kinkiet-Ake-50-taupe-59783.jpg","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:48.823Z","timestamp":1787946408823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /hpeciai/8bb1aa5a4ca2c6731ffc4148d6003758/eng_il_Thoro-Kinkiet-Ake-50-taupe-59783.jpg HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1; iws=45e5a23fd351f61bca84c7e98647dbf3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:48 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a325d2ff2d354c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=5184000\r\netag: \"8bb1aa5a4ca2c6731ffc4148d6003758\"\r\nexpires: Tue, 27 Oct 2026 19:46:48 GMT\r\nlast-modified: Fri, 26 Jun 2026 07:26:27 GMT\r\nserver: cloudflare\r\niai-header-source: cos\r\nx-amz-meta-height: 270\r\nx-amz-meta-height_real: 270\r\nx-amz-meta-key: 8bb1aa5a4ca2c6731ffc4148d6003758\r\nx-amz-meta-kind: n\r\nx-amz-meta-mime: image/jpeg\r\nx-amz-meta-size: 9645\r\nx-amz-meta-type: jpg\r\nx-amz-meta-width: 270\r\nx-amz-meta-width_real: 270\r\nx-amz-request-id: tx0000095b8e1e8e30ded78-006a8d5f89-3621169413-zone1\r\nx-content-type-options: nosniff\r\nx-iai-served-by: vm819\r\nx-rgw-object-type: Normal\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sahXmMk8zKh74mQOLzeKhSMpe8oufYkAU0pN8781zTqVRrEsG5WepamEEUd%2B8FmKQkr%2B2zRxavBfh23%2Fm175naoKCFQktvcLipeBfngdEqVc2LdcSFqaB3CLVGsTcZY%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9645\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9645,"size_decoded":10818,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=100, yresolution=108, resolutionunit=2, copyright=WOLNO STUDIO], baseline, precision 8, 270x270, components 3","md5":"8bb1aa5a4ca2c6731ffc4148d6003758","sha1":"718cbf8e4ff59129006fad05b18a785d44c82d7f","sha256":"eb2e7371b16cc62acef899b1d0376faf1c3fa6401cd14bd12c1af8f42f46e6bf","sha512":"b5cef035d2b9511d76def7ca3760090d9df713dd36a9b5791ac1c3fe134cf03ef4f08fb0a2bac3f11342795c769b08681783f72aead59225f7d2ec020f36f376","ssdeep":"192:j9AGz7ygR8iJJWgkvJugdxqLOwtNFRDohlRRDkb3YmmqaGwR:j9AGzD8cWxELOwPr8hsYN","tlshash":"ca126d71fbe3d744279f627d807d7d6712e4ace0d584b287061714a16a98f70a28393c","first_seen":"2026-08-28T19:47:59.737427Z","last_seen":"2026-08-28T19:47:59.737427Z","times_seen":1,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9design.live/data/include/cms/salon_warszawa/salon1.webp","fqdn":"9design.live","domain":"9design.live","tld":"live"},"ip":{"addr":"172.67.214.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9design.live/","date":"2026-08-28T19:46:47.793Z","timestamp":1787946407793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9design.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 14:18:31 GMT","end":"Tue, 03 Nov 2026 15:17:02 GMT"},"fingerprint":{"sha1":"16:F4:D2:F0:30:35:41:67:00:8E:0E:0C:54:F2:42:3E:19:84:8D:80","sha256":"6B:4F:8F:1D:78:34:49:B1:D2:C2:40:6A:42:E8:6D:81:44:F3:0C:22:1E:14:C3:AF:59:AE:78:78:ED:C6:8F:5D"}}},"request":{"raw":"GET /data/include/cms/salon_warszawa/salon1.webp HTTP/1.1\r\nHost: 9design.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://9design.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: client=761066ab7a84263cc7aa7b991dad0e70; basket_id=761066ab7a84263cc7aa7b991dad0e70; basket_products_count=0; wishes_products_count=0; REGID=1143020003; page_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 28 Aug 2026 19:46:47 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a325d2f8bb634c11-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=5184000\r\netag: \"669e3726-acda5b\"\r\nexpires: Tue, 27 Oct 2026 19:46:47 GMT\r\nlast-modified: Mon, 22 Jul 2024 10:40:38 GMT\r\nserver: cloudflare\r\nx-iai-served-by: vm819\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jPdbw1nlvHHXtrTpqHZiL4VHWqN9OoZ74HADoLmOh7xC0qin3ldq797M4crjyf8sGNZYB9zjS%2FyY5FOqCbouNhhvf2TsxzPkefEld%2BKP7Rs8y2gTOWB3JCpL8TQHXiM%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11328091\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11328091,"size_decoded":11328878,"mime_type":"image/webp","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 4096x2731, components 3","md5":"c7cc799f656972286167605f88ead858","sha1":"c3978c303c25782a49e1cb0e7b7f79b4777c12c7","sha256":"fee33d28bd78480cc32a21a297b5758905ecb6790853e8bcef929304d86b1d6b","sha512":"567b96f37488dc4c613d5b6cd0c6e88a84c80fe469b64bda307907a91f0673959c825163559a7d82aecda1ac89c5ca2320b5c8e35c173e9728895f7af8ab2721","ssdeep":"24576:UfyRFIvJj52LZlU5DLZ/qqCS+ICcCIkjqnAq1tY9UBVU:USWJYLZMDLfxFLRAq1O9UBm","tlshash":"8e2523c242337d65dbfc67f3d052798efd75293a96956eb462e804be8010ae41c9f20b","first_seen":"2026-08-28T19:47:59.738852Z","last_seen":"2026-08-28T19:47:59.738852Z","times_seen":1,"resource_available":false,"data":null}},"time_used":954,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":788,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-28","alert":"Phishing Block","trigger":"9design.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"9design.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}