{"report_id":"05a13689-610c-45cb-979d-02004b7e97ce","version":6,"status":"done","tags":[],"date":"2025-08-31T06:30:50Z","url":{"schema":"http","addr":"twitchloot.com","fqdn":"twitchloot.com","domain":"twitchloot.com","tld":"com"},"ip":{"addr":"104.21.87.121","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"twitchloot.com/","fqdn":"twitchloot.com","domain":"twitchloot.com","tld":"com"},"title":"Rust | Twitch Drops"},"submit":{"url":{"schema":"http","addr":"twitchloot.com","fqdn":"twitchloot.com","domain":"twitchloot.com","tld":"com"},"ip":{"addr":"104.21.87.121","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-05T06:30:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"twitchloot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rustbox.io","ip":{"addr":"172.67.71.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-10-15","domain_rank":6945402,"first_seen":"2025-07-23T06:18:01.971615Z","last_seen":"2025-07-23T06:18:01.971615Z","alert_count":0,"request_count":1,"received_data":84707,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-08-27T16:13:13.023893Z","alert_count":0,"request_count":4,"received_data":1881700,"sent_data":1564,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-08-27T15:14:26.687687Z","alert_count":0,"request_count":1,"received_data":23429,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"community.akamai.steamstatic.com","ip":{"addr":"23.36.76.130","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2013-11-07","domain_rank":177446,"first_seen":"2021-01-05T18:54:34Z","last_seen":"2025-08-24T08:58:54.303057Z","alert_count":0,"request_count":6,"received_data":652889,"sent_data":3312,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"images.icon-icons.com","ip":{"addr":"104.26.13.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-03","domain_rank":1428815,"first_seen":"2025-03-14T08:34:29.082016Z","last_seen":"2025-08-23T11:49:52.482617Z","alert_count":0,"request_count":1,"received_data":7411,"sent_data":423,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-08-27T15:20:49.600294Z","alert_count":0,"request_count":4,"received_data":356727,"sent_data":1640,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"twitchloot.com","ip":{"addr":"172.67.143.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-10","domain_rank":0,"first_seen":"2025-08-18T16:16:09.870522Z","last_seen":"2025-08-18T16:16:09.870522Z","alert_count":6,"request_count":6,"received_data":421802,"sent_data":5406,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.icon-icons.com","ip":{"addr":"104.26.13.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-03","domain_rank":1523525,"first_seen":"2018-05-07T09:07:09Z","last_seen":"2025-08-26T20:23:29.780413Z","alert_count":0,"request_count":1,"received_data":7382,"sent_data":427,"comment":"","tags":null,"fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-06T04:26:56.324587Z","times_seen":138459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"twitchloot.com/751a7e027d5254505b5c531e.js","fqdn":"twitchloot.com","domain":"twitchloot.com","tld":"com"},"ip":{"addr":"172.67.143.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2e6ad803bf88fccbb72961e43ff429e","sha1":"56db95479f7810e9f542e83e4377cabe81302695","sha256":"b861218899fc72b61ba992e171c944d7ac565eee89bc63ed07478b012e052bcd","sha512":"58e558e0e8c1c6d832aea879f4a65528172e692a7fdad4182adf525f2230fd59ddb7ddee9c6544dddcc4e01ede6c03b5af0209d2ac650b19331d239964f38b60","ssdeep":"3072:IF28YS9B8IXmtDaMMaIEwRp2ZZ2+tNlVuOp5JapFssb4unk2jSw3mK+k:IMu9B/Rp2ZZ2+tNl3p7oZkQLP+k","tlshash":"0944974067c0a85c239b9b7a771fb4e9f42a05af3d89494fd101fc506aaa607fef9530","size":258551,"data":"","first_seen":"2025-08-20T14:36:50.101551Z","last_seen":"2025-09-08T00:38:20.00241Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.11.3/jquery-ui.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c811575fd210af968e09caa681917b9b","sha1":"0bf0ff43044448711b33453388c3a24d99e6cc9c","sha256":"d2f0522008bff05c6434e48ac8f11f7464331436a4d5d96a14a058a81a75c82e","sha512":"d2234d9e8dcc96bca55fafb83bb327f87c29ae8433fc296c48be3ef8c9a21a0a4305e14823e75416951eecd6221f56fbbb8c89d44b244a27be7b6bea310f2fd1","ssdeep":"6144:zK8SyEGdEXdujYWUl/plq/pGlgFld1HmcI48VirY7IXtu2Y5W5ZbHtQTiTXu5bgs:fljHmcI4q5W5FHttCnuJq7CjhBK1","tlshash":"b0a4a689f39c266a857a325d5c2e41ce723c8076d60158bfbc5c59dc29e883c42bbf79","size":469790,"data":"","first_seen":"2023-03-07T01:03:14Z","last_seen":"2026-08-05T05:44:01.839445Z","times_seen":3367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.11.3/jquery-ui.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c811575fd210af968e09caa681917b9b","sha1":"0bf0ff43044448711b33453388c3a24d99e6cc9c","sha256":"d2f0522008bff05c6434e48ac8f11f7464331436a4d5d96a14a058a81a75c82e","sha512":"d2234d9e8dcc96bca55fafb83bb327f87c29ae8433fc296c48be3ef8c9a21a0a4305e14823e75416951eecd6221f56fbbb8c89d44b244a27be7b6bea310f2fd1","ssdeep":"6144:zK8SyEGdEXdujYWUl/plq/pGlgFld1HmcI48VirY7IXtu2Y5W5ZbHtQTiTXu5bgs:fljHmcI4q5W5FHttCnuJq7CjhBK1","tlshash":"b0a4a689f39c266a857a325d5c2e41ce723c8076d60158bfbc5c59dc29e883c42bbf79","size":469790,"data":"","first_seen":"2023-03-07T01:03:14Z","last_seen":"2026-08-05T05:44:01.839445Z","times_seen":3367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"twitchloot.com/","fqdn":"twitchloot.com","domain":"twitchloot.com","tld":"com"},"ip":{"addr":"172.67.143.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f47aff43fdd43a7f32a868180cea00d8","sha1":"dbf6a81cf165e79fae1c9aea1ff2499244872a45","sha256":"a1f6ac8ed9f420baa9da1ac6d60077c30f4919ce3aecc1db4e8ccbc1d286cbd8","sha512":"f14a70ef69b1dbbee57e6f9f9aecdf4e7bb6f46e776dda3e38ea0424c6ed577489876b2dc3c3c6abbd71736928d6969fd7e64704b9cd905f09014f081be901f8","ssdeep":"768:I9zDjAFZYzxf2205QXId662jnXSZae6kShO:I9zDjAgf2cu6pSZaelt","tlshash":"b0f2a347646ae37682f210d6c21a25d3e649ff717d1ca51bb3936d0ef34ce80d7a8229","size":34841,"data":"","first_seen":"2025-08-20T14:36:50.2093Z","last_seen":"2025-09-08T00:12:31.5336Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-06T04:26:56.324587Z","times_seen":138459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.11.3/jquery-ui.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c811575fd210af968e09caa681917b9b","sha1":"0bf0ff43044448711b33453388c3a24d99e6cc9c","sha256":"d2f0522008bff05c6434e48ac8f11f7464331436a4d5d96a14a058a81a75c82e","sha512":"d2234d9e8dcc96bca55fafb83bb327f87c29ae8433fc296c48be3ef8c9a21a0a4305e14823e75416951eecd6221f56fbbb8c89d44b244a27be7b6bea310f2fd1","ssdeep":"6144:zK8SyEGdEXdujYWUl/plq/pGlgFld1HmcI48VirY7IXtu2Y5W5ZbHtQTiTXu5bgs:fljHmcI4q5W5FHttCnuJq7CjhBK1","tlshash":"b0a4a689f39c266a857a325d5c2e41ce723c8076d60158bfbc5c59dc29e883c42bbf79","size":469790,"data":"","first_seen":"2023-03-07T01:03:14Z","last_seen":"2026-08-05T05:44:01.839445Z","times_seen":3367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-06T04:26:56.324587Z","times_seen":138459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.11.3/jquery-ui.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c811575fd210af968e09caa681917b9b","sha1":"0bf0ff43044448711b33453388c3a24d99e6cc9c","sha256":"d2f0522008bff05c6434e48ac8f11f7464331436a4d5d96a14a058a81a75c82e","sha512":"d2234d9e8dcc96bca55fafb83bb327f87c29ae8433fc296c48be3ef8c9a21a0a4305e14823e75416951eecd6221f56fbbb8c89d44b244a27be7b6bea310f2fd1","ssdeep":"6144:zK8SyEGdEXdujYWUl/plq/pGlgFld1HmcI48VirY7IXtu2Y5W5ZbHtQTiTXu5bgs:fljHmcI4q5W5FHttCnuJq7CjhBK1","tlshash":"b0a4a689f39c266a857a325d5c2e41ce723c8076d60158bfbc5c59dc29e883c42bbf79","size":469790,"data":"","first_seen":"2023-03-07T01:03:14Z","last_seen":"2026-08-05T05:44:01.839445Z","times_seen":3367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-06T04:26:56.324587Z","times_seen":138459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rustbox.io/static/images/c307787c-0f32-440f-94c7-d3392c2c7833python-min.png","fqdn":"rustbox.io","domain":"rustbox.io","tld":"io"},"ip":{"addr":"172.67.71.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twitchloot.com/751a7e027d5254","date":"2025-08-31T06:30:28.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rustbox.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Jul 2025 08:37:34 GMT","end":"Mon, 13 Oct 2025 09:36:13 GMT"},"fingerprint":{"sha1":"9D:78:AB:77:60:33:29:0E:AF:D0:19:17:EA:7F:BE:22:C5:D7:89:98","sha256":"38:78:30:2D:21:E7:48:5C:73:D7:3C:63:DA:F4:BF:52:81:99:2B:23:41:1C:89:AF:77:1F:D5:56:C8:9E:47:95"}}},"request":{"raw":"GET /static/images/c307787c-0f32-440f-94c7-d3392c2c7833python-min.png HTTP/1.1\r\nHost: rustbox.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 06:30:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 84041\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Oct 2022 09:05:32 GMT\r\netag: \"6357a6dc-14849\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FvatB%2BixLbKxUtqZMZ1K85r%2FhdBfYuPW62zmHU2kaCJasXdZUGQu2Z5VoZOk1BGIEgSGGUjypkOyFGhmGWII39i%2BBnuVECB%2F\"}]}\r\ncf-ray: 977a7abf7fad7129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84041,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit colormap, non-interlaced","md5":"d53d20d37d8c1602e7cf2154f28f7be2","sha1":"dc8b8672c6f215d6318ade34a936b931fe0eb3a2","sha256":"1d4e5990e61f9b04fc15341fde52bc4d171dc00bab76900b0bcba3e18cc12c02","sha512":"2e0a5a8891f0b129e6a58cda86480dc88bc03530b4a151504885503554ef25ff93f311670afae670d3045dc5e57a5c78ad7b4e6c3683a93b8a7091b24f188206","ssdeep":"1536:QEM7QuGOmjsaXGjQVQyqMDHspKXAb8gQ3UA5GlSitnXNtiCjHGTDh7bwUjI:QAjsaWkV3bDHs0QNCUHBtXNhmT97zjI","tlshash":"3683120f11c49ceba0dcd0bae1f0c6236232c9556dd4dae3cd08a18d235568da6e78af","first_seen":"2025-07-23T06:18:04.713228Z","last_seen":"2025-09-28T14:22:53.314889Z","times_seen":7,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":40,"dns":1,"connect":1,"send":0,"wait":23,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.11.3/jquery-ui.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://twitchloot.com/751a7e027d5254","date":"2025-08-31T06:30:29.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /ui/1.11.3/jquery-ui.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-72b1e\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 31 Aug 2025 06:30:29 GMT\r\nage: 1558198\r\nx-served-by: cache-lga21958-LGA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 456, 524\r\nx-timer: S1756621829.499943,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 113814\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":469790,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (547)","md5":"c811575fd210af968e09caa681917b9b","sha1":"0bf0ff43044448711b33453388c3a24d99e6cc9c","sha256":"d2f0522008bff05c6434e48ac8f11f7464331436a4d5d96a14a058a81a75c82e","sha512":"d2234d9e8dcc96bca55fafb83bb327f87c29ae8433fc296c48be3ef8c9a21a0a4305e14823e75416951eecd6221f56fbbb8c89d44b244a27be7b6bea310f2fd1","ssdeep":"6144:zK8SyEGdEXdujYWUl/plq/pGlgFld1HmcI48VirY7IXtu2Y5W5ZbHtQTiTXu5bgs:fljHmcI4q5W5FHttCnuJq7CjhBK1","tlshash":"b0a4a689f39c266a857a325d5c2e41ce723c8076d60158bfbc5c59dc29e883c42bbf79","first_seen":"2023-03-07T01:03:14Z","last_seen":"2026-08-05T05:44:01.839445Z","times_seen":3367,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.11.3/jquery-ui.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://twitchloot.com/751a7e027d5254","date":"2025-08-31T06:30:29.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /ui/1.11.3/jquery-ui.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-72b1e\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 31 Aug 2025 06:30:29 GMT\r\nage: 1558198\r\nx-served-by: cache-lga21958-LGA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 456, 525\r\nx-timer: S1756621830.661796,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 113814\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":469790,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (547)","md5":"c811575fd210af968e09caa681917b9b","sha1":"0bf0ff43044448711b33453388c3a24d99e6cc9c","sha256":"d2f0522008bff05c6434e48ac8f11f7464331436a4d5d96a14a058a81a75c82e","sha512":"d2234d9e8dcc96bca55fafb83bb327f87c29ae8433fc296c48be3ef8c9a21a0a4305e14823e75416951eecd6221f56fbbb8c89d44b244a27be7b6bea310f2fd1","ssdeep":"6144:zK8SyEGdEXdujYWUl/plq/pGlgFld1HmcI48VirY7IXtu2Y5W5ZbHtQTiTXu5bgs:fljHmcI4q5W5FHttCnuJq7CjhBK1","tlshash":"b0a4a689f39c266a857a325d5c2e41ce723c8076d60158bfbc5c59dc29e883c42bbf79","first_seen":"2023-03-07T01:03:14Z","last_seen":"2026-08-05T05:44:01.839445Z","times_seen":3367,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@100;200;300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://twitchloot.com/751a7e027d5254","date":"2025-08-31T06:30:28.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:22:25 GMT","end":"Mon, 03 Nov 2025 19:22:24 GMT"},"fingerprint":{"sha1":"05:AF:87:21:D4:6B:A6:86:ED:A7:D2:07:92:06:E4:D4:79:84:27:E8","sha256":"F6:EC:75:67:99:66:34:CC:0C:0F:9D:D7:8B:6A:04:94:98:0C:7B:B5:47:E2:47:37:A6:F8:E2:08:99:72:AB:BE"}}},"request":{"raw":"GET /css2?family=Inter:wght@100;200;300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 31 Aug 2025 06:30:29 GMT\r\ndate: Sun, 31 Aug 2025 06:30:29 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22743,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"fe62abea396254861b824401a0b291cb","sha1":"a99f4793c0f626eaa3edcbaba7b721c42eeed708","sha256":"8f9b8671039dbae1267a13257ba881403b5110048faf7ea581c8ee835249e8ed","sha512":"c6ecc18329e01ef006b4c64a39802535f2a499e13b7c8add2843a1d16153310f092264a34b2746caada0433a4e922c980ba6935072ac55e10ea09579e5971896","ssdeep":"192:WpxmpJpGpq3tpzplYpFxnqHq3G0lRmxAZgq3lblifxNktq346lDYxOLuq3/pl8x3:WLmXoKtZIlRee0bGo4VuCM/WMC","tlshash":"aaa28a92402b9500ab971cc233cf7f3aaece10856485d1b96ff90cd59ceeda6436872d","first_seen":"2025-05-29T17:34:05.438291Z","last_seen":"2025-09-10T16:49:55.169506Z","times_seen":1586,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":145,"dns":0,"connect":7,"send":0,"wait":19,"receive":0,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/6TMcQ7eX6E0EZl2byXi7vaVKyDk_zQLX05x6eLCFM9neAckxGDf7qU2e2gu64OnAeQ7835dc52LBfDY0jhyo8DEiv5daPaA_rbMxR_-69xR2l0g/360fx360f/360fx360f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.130","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twitchloot.com/751a7e027d5254","date":"2025-08-31T06:30:29.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 Aug 2025 00:01:26 GMT","end":"Fri, 07 Nov 2025 00:01:25 GMT"},"fingerprint":{"sha1":"4F:86:DA:E3:FE:47:D2:86:9A:EB:5B:D6:D2:4C:FD:0B:7A:9E:3A:73","sha256":"0C:7B:E5:E3:FD:95:AF:A2:91:CA:6E:3F:7F:A8:40:D8:53:DA:6D:D9:78:93:D1:EA:18:05:B1:F1:BB:D4:96:83"}}},"request":{"raw":"GET /economy/image/6TMcQ7eX6E0EZl2byXi7vaVKyDk_zQLX05x6eLCFM9neAckxGDf7qU2e2gu64OnAeQ7835dc52LBfDY0jhyo8DEiv5daPaA_rbMxR_-69xR2l0g/360fx360f/360fx360f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 01 Mar 2024 09:15:48 GMT\r\nServer: nginx\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Type: image/png\r\nContent-Length: 149516\r\nCache-Control: public, max-age=216302\r\nExpires: Tue, 02 Sep 2025 18:35:31 GMT\r\nDate: Sun, 31 Aug 2025 06:30:29 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":149516,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"f3c3859057d88bfdece329e6317e9098","sha1":"725b24e25d49ac0620ad6450f2a572cd48276567","sha256":"962d84f17c00fa5fc64f5c56003645060a6c1113765efc715b83146bff47be30","sha512":"9c1537fe761a5c49e75051d30ce4c364224a129e6844c3ccade199bfa336e0be30d9c2bfc012958cae5d742adbc4544f4484f55dd781cc3bc5e3b1a34c856cae","ssdeep":"3072:W/VD8cMdZLfdqJKHe8OzsenQQYgxGT9/wO2keQ7uTAoVJ7qqW7Utw:W/DMzLfd2KH3OzhEjtmQ7uTpVVW7Utw","tlshash":"a0e312e183b66550b426ab92d91c370272edfb253dc2497b8e6b143d6eca271c7634cc","first_seen":"2025-07-23T06:18:04.734744Z","last_seen":"2026-03-08T22:31:42.312574Z","times_seen":12,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":162,"dns":8,"connect":1,"send":0,"wait":10,"receive":14,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.icon-icons.com/1381/PNG/512/rust_94773.png","fqdn":"images.icon-icons.com","domain":"icon-icons.com","tld":"com"},"ip":{"addr":"104.26.13.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twitchloot.com/","date":"2025-08-31T06:30:28.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icon-icons.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 Aug 2025 19:57:53 GMT","end":"Mon, 03 Nov 2025 20:57:50 GMT"},"fingerprint":{"sha1":"5B:DC:B5:FC:F7:41:65:C8:ED:7E:87:DF:ED:D6:10:69:A9:DA:D3:D5","sha256":"A9:64:4D:A5:08:DE:35:CF:56:42:EC:C8:D5:BE:C9:74:28:EC:4B:D8:F7:37:20:96:8B:C5:4C:6E:E3:DE:FA:88"}}},"request":{"raw":"GET /1381/PNG/512/rust_94773.png HTTP/1.1\r\nHost: images.icon-icons.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 06:30:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 6639\r\nserver: cloudflare\r\nage: 1526704\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: origSize=8503\r\netag: \"aeb76a501ee1665132bec2e716b40fbe\"\r\nlast-modified: Mon, 10 Mar 2025 15:27:22 GMT\r\nvary: accept\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iijjgdVhNOrBbIaepnyN3u%2BQ8hRwWhJ%2FM5TxAlQJ%2FTbI7KMwIm%2BI6wZ9FAmP5YzkYB70ClL7F2%2F1zG%2BWsfqu%2F7SSHnaN5XwN0zHpefqIdiXItw%3D%3D\"}]}\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\ncf-ray: 977a7ab9c84e7130-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6639,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"ba33e3c8d76f364a67671a6f13ae07cf","sha1":"899e7d2bf5bbd137d64bbc69dc0c0d4bc6685c4a","sha256":"833a105705f549db5190ea2a8d1e761e109a76cb4f1a04336eb1105b4c0e98ee","sha512":"cd51d48ee4b0a82737657303f5f95ee95ac1402f0fab715571f085196ba4c6d09b985ba02012412c39edb0d8d941a1375bbf127755e30a89f9afa1549dcb8ef3","ssdeep":"96:z90lxO22SUEku27JN06IkOOOOej/PlTO10eps/TTRLWKy8cFII5FIeTmtuJeu/QE:50mkCuU0JBXA100oWMcFII5VewY0D","tlshash":"f4d13a9355830d77c7a984fd40db50273e79f190a703136297ff7809ccb67aaab96081","first_seen":"2025-07-23T06:18:04.729411Z","last_seen":"2025-09-28T14:22:53.313589Z","times_seen":7,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":1,"dns":4,"connect":1,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://twitchloot.com/751a7e027d5254","date":"2025-08-31T06:30:29.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 Aug 2025 06:30:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27748\r\ncf-ray: 977a7ac1ddf50b06-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec4-15851\"\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 18821\r\nexpires: Fri, 21 Aug 2026 06:30:29 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IhVSzK4mngIlbO7uaKlOUfWo%2FujhylcNMExA0WccZXNPAXiFiGIVa6nktr3aHulL6LJnY0V7FrBOxRbrDhoHvfW5x61oW2QKFg%2BNch%2FyoCyQZzCQqK5iUtuYG7zgExHMZjwrzUCg\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88145,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-06T04:26:56.324587Z","times_seen":138459,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"twitchloot.com/","fqdn":"twitchloot.com","domain":"twitchloot.com","tld":"com"},"ip":{"addr":"172.67.143.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-31T06:30:27.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twitchloot.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 Aug 2025 07:47:04 GMT","end":"Tue, 11 Nov 2025 08:44:23 GMT"},"fingerprint":{"sha1":"B9:81:55:A8:7C:4F:7B:4D:9C:74:8E:06:D7:95:11:CC:07:04:BC:F2","sha256":"75:48:9B:E2:54:A9:BE:75:CC:D1:70:A5:47:1F:3D:54:F2:3F:1E:4F:06:CA:4E:31:D5:17:28:D7:49:EE:AA:17"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: twitchloot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 06:30:27 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E45iFLOnyysjG8qKqlKELOC4bkzfPeHXj0hhwVa0pJNBFDR7wfIk4t75HP6JgM0VDoGL8SFYxA5WhP1FF29b1mrZsIpvh5Jfgi4F%2FQ%3D%3D\"}]}\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\nset-cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.ELK5jO5YJcfqLPxyWe4hlHrR8Wjetr7j.642FyVgtG_RiBEKK.Ti4uT9d4Oyus5Exc9YLze0esJNI45hllEeyDv6FTxtrQvnaWSTp988a7AnAgysZxieF1p25ftF_Cr1vHepYVsVXY1BmEZODjUGZxGsiH9joupSMEHs7uGag22jXqNMTpy2_mdQjbnfGAXhCx2Bp27_H203e6xQLUn_-AfsU7sMUa_YQnWcY9mBAo0RJfs2HROrHCNb5I0FvKt_fAkN0_HOKlt7Y.sRXaYzUN0Nun9ZP_Twg7HA; SameSite=Lax; Path=/; Expires=Sun, 31 Aug 2025 10:30:27 GMT\ntoken=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6OTk3LCJzZWNyZXQiOiIxYzBjMGM3OTU4NmYzOTI3YTM1OWM3YTc5YmFiZDEyMSIsInNlcnZpY2UiOiJTdGVhbSJ9.OzW2Mf0ArCsn2W7GePMqVDflMDTckyBhFgIWXA4dQmc; SameSite=Lax; Path=/; Expires=Sun, 31 Aug 2025 10:30:27 GMT\r\ncf-ray: 977a7ab65d7356a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35476,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (34858)","md5":"d516a94c5deb9bdc52dee2274d25c980","sha1":"dadbf78c6aa3cc331c5364060370e90547f631db","sha256":"00c7f12009a47187c1af549c1c7cde4df1fe8d48b657da5e8f862070682e3b6e","sha512":"bbe73ddedb7eafd18b6bb80fb86baa9145c5af139cd2d8daef6ffa49b8ac79db881d624e0e05634d2b2971a30d88d7aba620c82dfa87a4d2c60f13ef78aa4ff4","ssdeep":"768:62f9zDjAFZYzxf2205QXId662jnXSZae6kShZ:tf9zDjAgf2cu6pSZaelE","tlshash":"48f2a447646ae37682f210d6c21a25d3e649ff717d1ca50bb7936d0ef34ce80d7a8229","first_seen":"2025-08-31T06:30:53.393905Z","last_seen":"2025-08-31T06:31:54.892774Z","times_seen":3,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":20,"dns":0,"connect":1,"send":0,"wait":231,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"twitchloot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twitchloot.com/751a7e027d5254505b5c531e.js","fqdn":"twitchloot.com","domain":"twitchloot.com","tld":"com"},"ip":{"addr":"172.67.143.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://twitchloot.com/751a7e027d5254","date":"2025-08-31T06:30:28.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twitchloot.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 Aug 2025 07:47:04 GMT","end":"Tue, 11 Nov 2025 08:44:23 GMT"},"fingerprint":{"sha1":"B9:81:55:A8:7C:4F:7B:4D:9C:74:8E:06:D7:95:11:CC:07:04:BC:F2","sha256":"75:48:9B:E2:54:A9:BE:75:CC:D1:70:A5:47:1F:3D:54:F2:3F:1E:4F:06:CA:4E:31:D5:17:28:D7:49:EE:AA:17"}}},"request":{"raw":"GET /751a7e027d5254505b5c531e.js HTTP/1.1\r\nHost: twitchloot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.ELK5jO5YJcfqLPxyWe4hlHrR8Wjetr7j.642FyVgtG_RiBEKK.Ti4uT9d4Oyus5Exc9YLze0esJNI45hllEeyDv6FTxtrQvnaWSTp988a7AnAgysZxieF1p25ftF_Cr1vHepYVsVXY1BmEZODjUGZxGsiH9joupSMEHs7uGag22jXqNMTpy2_mdQjbnfGAXhCx2Bp27_H203e6xQLUn_-AfsU7sMUa_YQnWcY9mBAo0RJfs2HROrHCNb5I0FvKt_fAkN0_HOKlt7Y.sRXaYzUN0Nun9ZP_Twg7HA; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6OTk3LCJzZWNyZXQiOiIxYzBjMGM3OTU4NmYzOTI3YTM1OWM3YTc5YmFiZDEyMSIsInNlcnZpY2UiOiJTdGVhbSJ9.OzW2Mf0ArCsn2W7GePMqVDflMDTckyBhFgIWXA4dQmc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-disposition: inline\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Sun, 31 Aug 2025 06:30:29 GMT\r\nlast-modified: Tue, 19 Aug 2025 09:18:20 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Up9eCrZklHv7J56lK5BrwzJFQFc9eusJlII7PTRh3cN9ylr7jR6Ypnj9m3pr79%2F%2BJsbh1v9vfdHBV91kr4qTA16FHD56iRPRuB4hpg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 977a7abee8a5569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":258551,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f2e6ad803bf88fccbb72961e43ff429e","sha1":"56db95479f7810e9f542e83e4377cabe81302695","sha256":"b861218899fc72b61ba992e171c944d7ac565eee89bc63ed07478b012e052bcd","sha512":"58e558e0e8c1c6d832aea879f4a65528172e692a7fdad4182adf525f2230fd59ddb7ddee9c6544dddcc4e01ede6c03b5af0209d2ac650b19331d239964f38b60","ssdeep":"3072:IF28YS9B8IXmtDaMMaIEwRp2ZZ2+tNlVuOp5JapFssb4unk2jSw3mK+k:IMu9B/Rp2ZZ2+tNl3p7oZkQLP+k","tlshash":"0944974067c0a85c239b9b7a771fb4e9f42a05af3d89494fd101fc506aaa607fef9530","first_seen":"2025-08-20T14:36:50.101551Z","last_seen":"2025-09-08T00:38:20.00241Z","times_seen":41,"resource_available":true,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"twitchloot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.icon-icons.com/icons2/1381/PNG/512/rust_94773.png","fqdn":"cdn.icon-icons.com","domain":"icon-icons.com","tld":"com"},"ip":{"addr":"104.26.13.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twitchloot.com/","date":"2025-08-31T06:30:28.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icon-icons.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 Aug 2025 19:57:53 GMT","end":"Mon, 03 Nov 2025 20:57:50 GMT"},"fingerprint":{"sha1":"5B:DC:B5:FC:F7:41:65:C8:ED:7E:87:DF:ED:D6:10:69:A9:DA:D3:D5","sha256":"A9:64:4D:A5:08:DE:35:CF:56:42:EC:C8:D5:BE:C9:74:28:EC:4B:D8:F7:37:20:96:8B:C5:4C:6E:E3:DE:FA:88"}}},"request":{"raw":"GET /icons2/1381/PNG/512/rust_94773.png HTTP/1.1\r\nHost: cdn.icon-icons.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 31 Aug 2025 06:30:28 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://images.icon-icons.com/1381/PNG/512/rust_94773.png\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PleskLin\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nage: 1099154\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fyA3HPzmXmy9qow3K1c3HB1Pl%2F1FGc83RVfzP9K50Xn%2BJNwuNxthZEKmJ5osxbwrVJBPLkGF9ccYlIZ2vMNMuwZyX%2BhxkEByCPwYuT1Wqg%3D%3D\"}]}\r\ncf-ray: 977a7ab998147130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6639,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T05:01:15.330506Z","times_seen":17737366,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":24,"connect":1,"send":0,"wait":17,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/6TMcQ7eX6E0EZl2byXi7vaVKyDk_zQLX05x6eLCFM9neAckxGDf7qU2e2gu64OnAeQ7835dc5GLDfDY0jhyo8DEiv5dYPao9rrAxSPi73tX9REs/360fx360f/360fx360f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.130","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twitchloot.com/751a7e027d5254","date":"2025-08-31T06:30:29.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 Aug 2025 00:01:26 GMT","end":"Fri, 07 Nov 2025 00:01:25 GMT"},"fingerprint":{"sha1":"4F:86:DA:E3:FE:47:D2:86:9A:EB:5B:D6:D2:4C:FD:0B:7A:9E:3A:73","sha256":"0C:7B:E5:E3:FD:95:AF:A2:91:CA:6E:3F:7F:A8:40:D8:53:DA:6D:D9:78:93:D1:EA:18:05:B1:F1:BB:D4:96:83"}}},"request":{"raw":"GET /economy/image/6TMcQ7eX6E0EZl2byXi7vaVKyDk_zQLX05x6eLCFM9neAckxGDf7qU2e2gu64OnAeQ7835dc5GLDfDY0jhyo8DEiv5dYPao9rrAxSPi73tX9REs/360fx360f/360fx360f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nLast-Modified: Fri, 01 Mar 2024 09:23:54 GMT\r\nContent-Length: 104338\r\nCache-Control: public, max-age=548574\r\nExpires: Sat, 06 Sep 2025 14:53:23 GMT\r\nDate: Sun, 31 Aug 2025 06:30:29 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":104338,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"ba8a307e808ecd3f13cb3a400fb8bbe3","sha1":"ee87e4aab05705b35e6ecd237c60e8f696a0234d","sha256":"32ece25fc8485932d3a70a794ca61df1c6030331033ade572c4b2a8e77bc1188","sha512":"43d780ac221a170c980d95a9fde643a84fc78eac902d09cb94efb8a310d2cd29b59ea93c97cfa9660866ad1eac5497502c8a6784e83758d2f67379affca80c07","ssdeep":"1536:tjHorkp15inLWC76mYee/oeNUxpnX14nJtyfjCspdzXdWUnJEP+EE:tn0neAeaxytCj3p/mPw","tlshash":"9fa312e579e0419d30d6c8dbbb0fd5d1aeeec855a1b66cb835b83e8a6f90043e8d4704","first_seen":"2025-07-23T06:18:04.731817Z","last_seen":"2026-03-08T22:31:42.308334Z","times_seen":12,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":156,"dns":0,"connect":9,"send":0,"wait":9,"receive":3,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"twitchloot.com/7b2ee7e4e45fbafe9429c84a56e1f51b65664970c3f8/5f0513e8bdc3963440bc5a0ad073e5081c7eb9e88b8e.js","fqdn":"twitchloot.com","domain":"twitchloot.com","tld":"com"},"ip":{"addr":"172.67.143.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://twitchloot.com/751a7e027d5254","date":"2025-08-31T06:30:29.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twitchloot.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 Aug 2025 07:47:04 GMT","end":"Tue, 11 Nov 2025 08:44:23 GMT"},"fingerprint":{"sha1":"B9:81:55:A8:7C:4F:7B:4D:9C:74:8E:06:D7:95:11:CC:07:04:BC:F2","sha256":"75:48:9B:E2:54:A9:BE:75:CC:D1:70:A5:47:1F:3D:54:F2:3F:1E:4F:06:CA:4E:31:D5:17:28:D7:49:EE:AA:17"}}},"request":{"raw":"GET /7b2ee7e4e45fbafe9429c84a56e1f51b65664970c3f8/5f0513e8bdc3963440bc5a0ad073e5081c7eb9e88b8e.js HTTP/1.1\r\nHost: twitchloot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.ELK5jO5YJcfqLPxyWe4hlHrR8Wjetr7j.642FyVgtG_RiBEKK.Ti4uT9d4Oyus5Exc9YLze0esJNI45hllEeyDv6FTxtrQvnaWSTp988a7AnAgysZxieF1p25ftF_Cr1vHepYVsVXY1BmEZODjUGZxGsiH9joupSMEHs7uGag22jXqNMTpy2_mdQjbnfGAXhCx2Bp27_H203e6xQLUn_-AfsU7sMUa_YQnWcY9mBAo0RJfs2HROrHCNb5I0FvKt_fAkN0_HOKlt7Y.sRXaYzUN0Nun9ZP_Twg7HA; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6OTk3LCJzZWNyZXQiOiIxYzBjMGM3OTU4NmYzOTI3YTM1OWM3YTc5YmFiZDEyMSIsInNlcnZpY2UiOiJTdGVhbSJ9.OzW2Mf0ArCsn2W7GePMqVDflMDTckyBhFgIWXA4dQmc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w9QrCj2t%2BomM3Hc5a6nkO%2FYf2YWSSP8PvwnvadsOhrHeF0LROXnTp6t1F6uAcrZKkuz9uzH1xwq%2FK47u1%2BVzFrjFzO2qSPccwJFlYQ%3D%3D\"}]}\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Sun, 31 Aug 2025 06:30:29 GMT\r\netag: W/\"41-0AeMVzV1pApYTMktTMxeiuYqqUg\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 977a7ac1d8b6569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T05:01:15.330506Z","times_seen":17737366,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"twitchloot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.11.3/jquery-ui.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://twitchloot.com/751a7e027d5254","date":"2025-08-31T06:30:29.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /ui/1.11.3/jquery-ui.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-72b1e\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 31 Aug 2025 06:30:29 GMT\r\nage: 1558199\r\nx-served-by: cache-lga21958-LGA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 456, 526\r\nx-timer: S1756621830.807390,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 113814\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":469790,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (547)","md5":"c811575fd210af968e09caa681917b9b","sha1":"0bf0ff43044448711b33453388c3a24d99e6cc9c","sha256":"d2f0522008bff05c6434e48ac8f11f7464331436a4d5d96a14a058a81a75c82e","sha512":"d2234d9e8dcc96bca55fafb83bb327f87c29ae8433fc296c48be3ef8c9a21a0a4305e14823e75416951eecd6221f56fbbb8c89d44b244a27be7b6bea310f2fd1","ssdeep":"6144:zK8SyEGdEXdujYWUl/plq/pGlgFld1HmcI48VirY7IXtu2Y5W5ZbHtQTiTXu5bgs:fljHmcI4q5W5FHttCnuJq7CjhBK1","tlshash":"b0a4a689f39c266a857a325d5c2e41ce723c8076d60158bfbc5c59dc29e883c42bbf79","first_seen":"2023-03-07T01:03:14Z","last_seen":"2026-08-05T05:44:01.839445Z","times_seen":3367,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"twitchloot.com/751a7e027d525449545f53305a4a5b43","fqdn":"twitchloot.com","domain":"twitchloot.com","tld":"com"},"ip":{"addr":"172.67.143.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://twitchloot.com/751a7e027d5254","date":"2025-08-31T06:30:33.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twitchloot.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 Aug 2025 07:47:04 GMT","end":"Tue, 11 Nov 2025 08:44:23 GMT"},"fingerprint":{"sha1":"B9:81:55:A8:7C:4F:7B:4D:9C:74:8E:06:D7:95:11:CC:07:04:BC:F2","sha256":"75:48:9B:E2:54:A9:BE:75:CC:D1:70:A5:47:1F:3D:54:F2:3F:1E:4F:06:CA:4E:31:D5:17:28:D7:49:EE:AA:17"}}},"request":{"raw":"POST /751a7e027d525449545f53305a4a5b43 HTTP/1.1\r\nHost: twitchloot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://twitchloot.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.ELK5jO5YJcfqLPxyWe4hlHrR8Wjetr7j.642FyVgtG_RiBEKK.Ti4uT9d4Oyus5Exc9YLze0esJNI45hllEeyDv6FTxtrQvnaWSTp988a7AnAgysZxieF1p25ftF_Cr1vHepYVsVXY1BmEZODjUGZxGsiH9joupSMEHs7uGag22jXqNMTpy2_mdQjbnfGAXhCx2Bp27_H203e6xQLUn_-AfsU7sMUa_YQnWcY9mBAo0RJfs2HROrHCNb5I0FvKt_fAkN0_HOKlt7Y.sRXaYzUN0Nun9ZP_Twg7HA; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6OTk3LCJzZWNyZXQiOiIxYzBjMGM3OTU4NmYzOTI3YTM1OWM3YTc5YmFiZDEyMSIsInNlcnZpY2UiOiJTdGVhbSJ9.OzW2Mf0ArCsn2W7GePMqVDflMDTckyBhFgIWXA4dQmc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 201 Created\r\ncontent-length: 16\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Sun, 31 Aug 2025 06:30:34 GMT\r\netag: W/\"10-oV4hJxRVSENxc/wX8+mA4/Pe4tA\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tQrJ4BNNqAniZHKEvqhHM14M8F4xgr2%2FGQnqyYimcglM%2FuFvO0bdX82qt5rDUVg2IzwTOkLkyHRnn5ZJU8dONRVqAwmBQe4hXkC4tQ%3D%3D\"}]}\r\ncf-ray: 977a7ade3a5f569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-08-06T04:53:00.274752Z","times_seen":180199,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":167,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"twitchloot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"twitchloot.com/751a7e027d5254","fqdn":"twitchloot.com","domain":"twitchloot.com","tld":"com"},"ip":{"addr":"172.67.143.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://twitchloot.com/","date":"2025-08-31T06:30:28.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twitchloot.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 Aug 2025 07:47:04 GMT","end":"Tue, 11 Nov 2025 08:44:23 GMT"},"fingerprint":{"sha1":"B9:81:55:A8:7C:4F:7B:4D:9C:74:8E:06:D7:95:11:CC:07:04:BC:F2","sha256":"75:48:9B:E2:54:A9:BE:75:CC:D1:70:A5:47:1F:3D:54:F2:3F:1E:4F:06:CA:4E:31:D5:17:28:D7:49:EE:AA:17"}}},"request":{"raw":"POST /751a7e027d5254 HTTP/1.1\r\nHost: twitchloot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 44\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.ELK5jO5YJcfqLPxyWe4hlHrR8Wjetr7j.642FyVgtG_RiBEKK.Ti4uT9d4Oyus5Exc9YLze0esJNI45hllEeyDv6FTxtrQvnaWSTp988a7AnAgysZxieF1p25ftF_Cr1vHepYVsVXY1BmEZODjUGZxGsiH9joupSMEHs7uGag22jXqNMTpy2_mdQjbnfGAXhCx2Bp27_H203e6xQLUn_-AfsU7sMUa_YQnWcY9mBAo0RJfs2HROrHCNb5I0FvKt_fAkN0_HOKlt7Y.sRXaYzUN0Nun9ZP_Twg7HA; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6OTk3LCJzZWNyZXQiOiIxYzBjMGM3OTU4NmYzOTI3YTM1OWM3YTc5YmFiZDEyMSIsInNlcnZpY2UiOiJTdGVhbSJ9.OzW2Mf0ArCsn2W7GePMqVDflMDTckyBhFgIWXA4dQmc\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 201 Created\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Sun, 31 Aug 2025 06:30:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BFVNK6r1N8SEepLIMuQuqmXqtfMZ%2BUDKeiWB56pIYqMPy1XP0hJsydG%2Fisq6%2FQ%2FtF%2BDOTez%2FBHa14JGAXNSYYpLd1FhrnxymbTyfng%3D%3D\"}]}\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 977a7ab94860569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120921,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (14761)","md5":"bd51a667587cb758c6c8eede68233a13","sha1":"658b0506192cbc349ab0cfd716757d4713acf01f","sha256":"b4c8baf91e5bbe1e66196e4dc2cbc6a59b49ed5c186abc37870c84857891f548","sha512":"f4ef9e714ef8d31b279781268ee057bcf77561670019bf179fbd8c5b66d46ef9dd0b6fe4abc4eb698fa202a3bd575142963ce69ea00c9af0b3c102a1d8f3d07b","ssdeep":"1536:GdAGkHSuV0i11ho4Qo4KRxIM2Edycdavbd3AlAt4w5G/6f+UlBwEz/jP/un:GdAZstdz46G/hUlBwEz/jP/un","tlshash":"42c35ae5137202fb2e43da54ffb6614d7555b10be7428a08faec32456f898c08c7ab9d","first_seen":"2025-08-31T06:30:53.398385Z","last_seen":"2025-08-31T06:30:53.398385Z","times_seen":1,"resource_available":false,"data":null}},"time_used":948,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":889,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"twitchloot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.11.3/jquery-ui.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://twitchloot.com/751a7e027d5254","date":"2025-08-31T06:30:28.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /ui/1.11.3/jquery-ui.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-72b1e\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 31 Aug 2025 06:30:29 GMT\r\nage: 1558198\r\nx-served-by: cache-lga21958-LGA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 456, 523\r\nx-timer: S1756621829.106663,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 113814\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":469790,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (547)","md5":"c811575fd210af968e09caa681917b9b","sha1":"0bf0ff43044448711b33453388c3a24d99e6cc9c","sha256":"d2f0522008bff05c6434e48ac8f11f7464331436a4d5d96a14a058a81a75c82e","sha512":"d2234d9e8dcc96bca55fafb83bb327f87c29ae8433fc296c48be3ef8c9a21a0a4305e14823e75416951eecd6221f56fbbb8c89d44b244a27be7b6bea310f2fd1","ssdeep":"6144:zK8SyEGdEXdujYWUl/plq/pGlgFld1HmcI48VirY7IXtu2Y5W5ZbHtQTiTXu5bgs:fljHmcI4q5W5FHttCnuJq7CjhBK1","tlshash":"b0a4a689f39c266a857a325d5c2e41ce723c8076d60158bfbc5c59dc29e883c42bbf79","first_seen":"2023-03-07T01:03:14Z","last_seen":"2026-08-05T05:44:01.839445Z","times_seen":3367,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":102,"dns":3,"connect":33,"send":0,"wait":27,"receive":56,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/6TMcQ7eX6E0EZl2byXi7vaVKyDk_zQLX05x6eLCFM9neAckxGDf7qU2e2gu64OnAeQ7835Fc5GLGfDY0jhyo8DEiv5daMag5qLU2QPi5ucQjeRg/360fx360f/360fx360f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.130","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twitchloot.com/751a7e027d5254","date":"2025-08-31T06:30:29.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 Aug 2025 00:01:26 GMT","end":"Fri, 07 Nov 2025 00:01:25 GMT"},"fingerprint":{"sha1":"4F:86:DA:E3:FE:47:D2:86:9A:EB:5B:D6:D2:4C:FD:0B:7A:9E:3A:73","sha256":"0C:7B:E5:E3:FD:95:AF:A2:91:CA:6E:3F:7F:A8:40:D8:53:DA:6D:D9:78:93:D1:EA:18:05:B1:F1:BB:D4:96:83"}}},"request":{"raw":"GET /economy/image/6TMcQ7eX6E0EZl2byXi7vaVKyDk_zQLX05x6eLCFM9neAckxGDf7qU2e2gu64OnAeQ7835Fc5GLGfDY0jhyo8DEiv5daMag5qLU2QPi5ucQjeRg/360fx360f/360fx360f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nLast-Modified: Fri, 01 Mar 2024 10:52:03 GMT\r\nContent-Length: 79476\r\nCache-Control: public, max-age=187625\r\nExpires: Tue, 02 Sep 2025 10:37:34 GMT\r\nDate: Sun, 31 Aug 2025 06:30:29 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":79476,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"cd2c88886c05e97c5258e098043ed93e","sha1":"a65f10840c2d4b8d86454825d94231d89eb28853","sha256":"0590156f82fd75a9454a027bd4de3045be8d98b20f5b375dd71edb23f94e57c3","sha512":"7b2e56e0ee98935a440a7697a13fe910b62cf91b26fcfadb2c7bf7c4a02b351c1932cd4979716c800c4505dd3c4b4335b8b1bcd0065860b5fe9535d5bfe2ac76","ssdeep":"1536:61DWBQCaC/ON0ZpU0R/XSofulivZ4ZEFWlYy0aYH6FT/phg2:myBQYOMpjVHfulivZ4/FHYaFjzR","tlshash":"5a7302ba33f3d5ae733c98940e242b0f34a23762d53ab4d6926d14d80b926d5a3d1f07","first_seen":"2025-07-11T11:51:46.528754Z","last_seen":"2026-03-08T22:31:42.265803Z","times_seen":20,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":165,"dns":5,"connect":1,"send":0,"wait":13,"receive":3,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/6TMcQ7eX6E0EZl2byXi7vaVKyDk_zQLX05x6eLCFM9neAckxGDf7qU2e2gu64OnAeQ7835Be5mLCfDY0jhyo8DEiv5dYMa07rbc-Rvm580f1ydE/360fx360f/360fx360f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.130","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twitchloot.com/751a7e027d5254","date":"2025-08-31T06:30:29.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 Aug 2025 00:01:26 GMT","end":"Fri, 07 Nov 2025 00:01:25 GMT"},"fingerprint":{"sha1":"4F:86:DA:E3:FE:47:D2:86:9A:EB:5B:D6:D2:4C:FD:0B:7A:9E:3A:73","sha256":"0C:7B:E5:E3:FD:95:AF:A2:91:CA:6E:3F:7F:A8:40:D8:53:DA:6D:D9:78:93:D1:EA:18:05:B1:F1:BB:D4:96:83"}}},"request":{"raw":"GET /economy/image/6TMcQ7eX6E0EZl2byXi7vaVKyDk_zQLX05x6eLCFM9neAckxGDf7qU2e2gu64OnAeQ7835Be5mLCfDY0jhyo8DEiv5dYMa07rbc-Rvm580f1ydE/360fx360f/360fx360f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 01 Mar 2024 09:33:47 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 89159\r\nCache-Control: public, max-age=254810\r\nExpires: Wed, 03 Sep 2025 05:17:19 GMT\r\nDate: Sun, 31 Aug 2025 06:30:29 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89159,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"d6aa3afbea6e4c2f277aceca1f42e1aa","sha1":"0046f8c008fdd577bed74d26fc812eb1e1de9371","sha256":"f2ab744c7c4c813549c7dc31c332e4f6441e938a97c97c61c5703651771a18aa","sha512":"8a06af923288d88c88277ed2c923fd635d16d6c93c1df49e1b597eb691ecb4f21366116bde573b518106e16d8834d8b9173960099c03bb980fc150550d494247","ssdeep":"1536:6CzrEOlpzUYz3vhJ5hgE3HEi4b5+Et9k9WWGn4+7+gi9iQU6m8hkA5ee2jMaICWP:6CzrP7jvz5ya81+Et9iWnn4+qgiwQmoH","tlshash":"3093125c37a9ffd18498b64fd8cb27ad51156bd2ec804ae862ed917be1053fc8e10278","first_seen":"2025-07-23T06:18:04.719626Z","last_seen":"2026-03-08T22:31:42.295235Z","times_seen":12,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":151,"dns":0,"connect":1,"send":0,"wait":5,"receive":2,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/6TMcQ7eX6E0EZl2byXi7vaVKyDk_zQLX05x6eLCFM9neAckxGDf7qU2e2gu64OnAeQ7835dc52LAfDY0jhyo8DEiv5ddOak9rbU3Qfy4D8--zig/360fx360f/360fx360f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.130","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twitchloot.com/751a7e027d5254","date":"2025-08-31T06:30:29.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 Aug 2025 00:01:26 GMT","end":"Fri, 07 Nov 2025 00:01:25 GMT"},"fingerprint":{"sha1":"4F:86:DA:E3:FE:47:D2:86:9A:EB:5B:D6:D2:4C:FD:0B:7A:9E:3A:73","sha256":"0C:7B:E5:E3:FD:95:AF:A2:91:CA:6E:3F:7F:A8:40:D8:53:DA:6D:D9:78:93:D1:EA:18:05:B1:F1:BB:D4:96:83"}}},"request":{"raw":"GET /economy/image/6TMcQ7eX6E0EZl2byXi7vaVKyDk_zQLX05x6eLCFM9neAckxGDf7qU2e2gu64OnAeQ7835dc52LAfDY0jhyo8DEiv5ddOak9rbU3Qfy4D8--zig/360fx360f/360fx360f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nLast-Modified: Fri, 01 Mar 2024 09:22:28 GMT\r\nContent-Length: 129933\r\nCache-Control: public, max-age=365007\r\nExpires: Thu, 04 Sep 2025 11:53:56 GMT\r\nDate: Sun, 31 Aug 2025 06:30:29 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":129933,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"163d0a31d33527751920fdd91e462498","sha1":"ab3149ff43e909b6914643923f8592f0891cfc0e","sha256":"e20b5186ed53904f1420bd30c5cf28a1d69cd932497fa9e323c396e11da401d9","sha512":"85b20196618fa9b0a22be26a4a6c3867533f955e2f62f0885d33193099b6e9ac709ccaa0e787d5163d16295e8b774590cd1a1fcb375ed84177ccc520db810a8d","ssdeep":"3072:Bd0qqcgvQ5VRgCFIULl9iWyJ7QDZ/xf0JwM:Bd0qiCFI4LIQDlxNM","tlshash":"c3c312577b1d9253535632ad62feaf7b03eb135c760e07e1833a24da601129a9b43ef0","first_seen":"2025-07-23T06:18:04.737105Z","last_seen":"2026-03-08T22:31:42.306759Z","times_seen":12,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":153,"dns":6,"connect":1,"send":0,"wait":5,"receive":22,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://twitchloot.com/751a7e027d5254","date":"2025-08-31T06:30:29.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 Aug 2025 06:30:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27748\r\ncf-ray: 977a7ac3cf690b06-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec4-15851\"\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 18821\r\nexpires: Fri, 21 Aug 2026 06:30:29 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=aHg987VxQSI7eDuRMfVqCeC%2Fe87pt2Yb3CX%2FNLhE1L9jKmPfBpuQUjUw4XgQYzeBc8SWH0zjl7gasXCcvIkp8PQkpHkyHyzW8Hpso5EZwzQGlNjAUDS8RaftFge%2BatssODDcl1EB\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88145,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-06T04:26:56.324587Z","times_seen":138459,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://twitchloot.com/751a7e027d5254","date":"2025-08-31T06:30:28.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 06:30:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27748\r\ncf-ray: 977a7abf6a11b509-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec4-15851\"\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 18821\r\nexpires: Fri, 21 Aug 2026 06:30:29 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=E726ioLmlT1nur9qKouejwAR5AFU8MRt1EkitfWwJ5Wq79dJDuB6A5lQuoxd%2BmVgLlySFDVwl6W%2FzWOYQs0cQEnUyWQitZ3igHqB5XokuAYp3HmdFqvWOwRlFxC0hXIHEb7g5tjw\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88145,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-06T04:26:56.324587Z","times_seen":138459,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":41,"dns":4,"connect":2,"send":0,"wait":14,"receive":2,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/6TMcQ7eX6E0EZl2byXi7vaVKyDk_zQLX05x6eLCFM9neAckxGDf7qU2e2gu64OnAeQ7835Fe5GrGfDY0jhyo8DEiv5dbMKg7qrI-R_25bLlcT1E/360fx360f/360fx360f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.130","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://twitchloot.com/751a7e027d5254","date":"2025-08-31T06:30:29.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 09 Aug 2025 00:01:26 GMT","end":"Fri, 07 Nov 2025 00:01:25 GMT"},"fingerprint":{"sha1":"4F:86:DA:E3:FE:47:D2:86:9A:EB:5B:D6:D2:4C:FD:0B:7A:9E:3A:73","sha256":"0C:7B:E5:E3:FD:95:AF:A2:91:CA:6E:3F:7F:A8:40:D8:53:DA:6D:D9:78:93:D1:EA:18:05:B1:F1:BB:D4:96:83"}}},"request":{"raw":"GET /economy/image/6TMcQ7eX6E0EZl2byXi7vaVKyDk_zQLX05x6eLCFM9neAckxGDf7qU2e2gu64OnAeQ7835Fe5GrGfDY0jhyo8DEiv5dbMKg7qrI-R_25bLlcT1E/360fx360f/360fx360f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 01 Mar 2024 14:12:39 GMT\r\nServer: nginx\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Type: image/png\r\nContent-Length: 89490\r\nCache-Control: public, max-age=382048\r\nExpires: Thu, 04 Sep 2025 16:37:57 GMT\r\nDate: Sun, 31 Aug 2025 06:30:29 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89490,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"8b2b22aa45a26488f6aa7cf314cbc43d","sha1":"767210d63428b5ed2221f4d74c5f9b4fe54abd0c","sha256":"2d8e2d714f662e59c67ee5fbdf219644825389471ea3e4d8ea0d16036eae597a","sha512":"82b2df64ac3a38a5693aae7fa8631e3253aa83d520224bbba002b5e4da0f812792f4e1b23c0524d5bd8f4dda8e16a3678a455f98e47eec26f78f416451ec8530","ssdeep":"1536:/fHvOsbE72dnW2hCfI0y1k/AmrcjaZOhVAk8kys9MHBlbcIvZDZd/nsYpo4i+:Hv5bE7CCw3k4SZ5kAQeltvFHppoe","tlshash":"e09302220bc103e8e3e877fe37e59ba728d52a0d02dd3e94ba45c47d2d24e65e362744","first_seen":"2025-07-23T06:18:04.716331Z","last_seen":"2026-03-08T22:31:42.294108Z","times_seen":12,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":159,"dns":8,"connect":1,"send":0,"wait":5,"receive":8,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"twitchloot.com/751a7e027d52545e504c650f475c71580f555c5e","fqdn":"twitchloot.com","domain":"twitchloot.com","tld":"com"},"ip":{"addr":"172.67.143.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://twitchloot.com/751a7e027d5254","date":"2025-08-31T06:30:29.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twitchloot.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 13 Aug 2025 07:47:04 GMT","end":"Tue, 11 Nov 2025 08:44:23 GMT"},"fingerprint":{"sha1":"B9:81:55:A8:7C:4F:7B:4D:9C:74:8E:06:D7:95:11:CC:07:04:BC:F2","sha256":"75:48:9B:E2:54:A9:BE:75:CC:D1:70:A5:47:1F:3D:54:F2:3F:1E:4F:06:CA:4E:31:D5:17:28:D7:49:EE:AA:17"}}},"request":{"raw":"GET /751a7e027d52545e504c650f475c71580f555c5e HTTP/1.1\r\nHost: twitchloot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.ELK5jO5YJcfqLPxyWe4hlHrR8Wjetr7j.642FyVgtG_RiBEKK.Ti4uT9d4Oyus5Exc9YLze0esJNI45hllEeyDv6FTxtrQvnaWSTp988a7AnAgysZxieF1p25ftF_Cr1vHepYVsVXY1BmEZODjUGZxGsiH9joupSMEHs7uGag22jXqNMTpy2_mdQjbnfGAXhCx2Bp27_H203e6xQLUn_-AfsU7sMUa_YQnWcY9mBAo0RJfs2HROrHCNb5I0FvKt_fAkN0_HOKlt7Y.sRXaYzUN0Nun9ZP_Twg7HA; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6OTk3LCJzZWNyZXQiOiIxYzBjMGM3OTU4NmYzOTI3YTM1OWM3YTc5YmFiZDEyMSIsInNlcnZpY2UiOiJTdGVhbSJ9.OzW2Mf0ArCsn2W7GePMqVDflMDTckyBhFgIWXA4dQmc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fKimbUbTzqVDYpK3a8XGP4PWE7ohRQ3mG6GVKWKX9HzsC1CbGM4SVvzdS5yOJPAmH4TeRMJZHFZgW4lVuS70JoILxNo4LqzjwYZnCg%3D%3D\"}]}\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Sun, 31 Aug 2025 06:30:29 GMT\r\netag: W/\"122-ha5HGNN5AhJADAtKRG7c64YcTr4\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 977a7ac208b7569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":290,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"231e50e905bc2035f47b89f3e51eaab8","sha1":"85ae4718d3790212400c0b4a446edceb861c4ebe","sha256":"174cf49ed416a4b1e0f8691115bc42525a643ecf2bb9b6328801ac93a3c59c16","sha512":"d5647859d78a1b4c1c2d299400bb1069179161fac5d7701428bc9241efe02a5e97556007ac2b38d624d4c8ea9c1a7716fb9685de8bb1e45047e97888ad02127d","ssdeep":"","tlshash":"9fd02b5244aca43adb005200014b7f0eeabd166304c4b81e76bd4b3298fc2eb2009d6f","first_seen":"2025-08-31T06:30:53.40566Z","last_seen":"2025-08-31T06:30:53.40566Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"twitchloot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://twitchloot.com/751a7e027d5254","date":"2025-08-31T06:30:29.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 31 Aug 2025 06:30:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27748\r\ncf-ray: 977a7ac2fea00b06-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec4-15851\"\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 18821\r\nexpires: Fri, 21 Aug 2026 06:30:29 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ikjL6vn8Lo9v0tTdsG9H3pXi%2F82VxeJuAszf6%2FW5N8UKV5u2YMZcENGD3XvMtAJOE5mRLXWmHwEnqiJbpMnSJDtLhctcka%2BuETNZS27n8VE%2B9sJRBhwXcw1gT12s%2F3JpJeZy1%2FnV\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88145,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-06T04:26:56.324587Z","times_seen":138459,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}