{"report_id":"246ed8dc-d455-4aac-82ac-e92c9605a0c0","version":0,"status":"done","tags":[],"date":"2026-07-20T13:02:34Z","url":{"schema":"https","addr":"6127576648.dojiner.at/","fqdn":"6127576648.dojiner.at","domain":"dojiner.at","tld":"at"},"ip":{"addr":"192.162.199.140","port":0,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"6127576648.dojiner.at/211b7e002e030600035f557d57065b0a62055250","fqdn":"6127576648.dojiner.at","domain":"dojiner.at","tld":"at"},"title":"Sign In","dom":{"size":13053,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11043)","md5":"1849a7226d6aef2857539534133f5098","sha1":"b0a6bfdf4413c3e2c351eda304e0dc7b5dbc66b5","sha256":"b34e2c736fdb59e46997cb15d48ddd36993a0670beea9bceba3c20d0287083cf","sha512":"299c83cd1d61a727c357925c4e92baf120578ee41d3a4423f0a6aaa3e7255b097e757ac494b9335beb0f4894837c9d9384aa01266764d284aa224aaa640e218f","ssdeep":"384:OlhK0ZCxqQXBoUS6vC3dF3RixhcKc7mtsk0ftQ0dh09l9u33rRiYd4ZfSNtIogA:OlhNQxqQXBoUS6K3dF3RiYp7mtUa0dhl","tlshash":"f542df368b5452677f8e0b912c69ad4c7ad2b6edc9c7840c5cb49fc38b83a7d97120d4","dom_hash":"domhash18d05dadef3c1088acefbacce53a41ad","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"6127576648.dojiner.at/","fqdn":"6127576648.dojiner.at","domain":"dojiner.at","tld":"at"},"ip":{"addr":"192.162.199.140","port":0,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-24T13:02:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6127576648.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6127576648.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6127576648.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.cdnfonts.com","ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-03","domain_rank":50661,"first_seen":"2020-06-10T09:02:17Z","last_seen":"2026-07-16T15:11:02.656326Z","alert_count":0,"request_count":4,"received_data":150127,"sent_data":2250,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-19T23:00:06.681739Z","alert_count":0,"request_count":2,"received_data":144209,"sent_data":958,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"community.akamai.steamstatic.com","ip":{"addr":"95.101.10.40","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2013-11-07","domain_rank":177446,"first_seen":"2021-01-05T18:54:34Z","last_seen":"2026-07-16T13:16:48.964915Z","alert_count":0,"request_count":3,"received_data":139872,"sent_data":1696,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"6127576648.dojiner.at","ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":18,"request_count":6,"received_data":359542,"sent_data":5837,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"community.steamstatic.com","ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-11-07","domain_rank":243965,"first_seen":"2022-08-16T00:22:56Z","last_seen":"2026-07-17T05:19:20.550051Z","alert_count":0,"request_count":3,"received_data":8836,"sent_data":1571,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"steamcommunity.com","ip":{"addr":"23.49.26.105","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2006-05-28","domain_rank":533,"first_seen":"2014-03-11T13:45:34Z","last_seen":"2026-07-19T00:07:43.791779Z","alert_count":0,"request_count":1,"received_data":38823,"sent_data":505,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"community.cloudflare.steamstatic.com","ip":{"addr":"23.33.119.64","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2013-11-07","domain_rank":246409,"first_seen":"2020-06-24T00:28:43Z","last_seen":"2026-07-11T04:30:18.179279Z","alert_count":0,"request_count":3,"received_data":936,"sent_data":1700,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"6127576648.dojiner.at/211b7e002e030600035f557d57065b0a62055250","fqdn":"6127576648.dojiner.at","domain":"dojiner.at","tld":"at"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-07-21T20:14:42.031917Z","times_seen":40451,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6127576648.dojiner.at/211b7e002e030600035f557d57065b0a62055250","fqdn":"6127576648.dojiner.at","domain":"dojiner.at","tld":"at"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-07-21T20:14:42.032476Z","times_seen":42034,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6127576648.dojiner.at/","fqdn":"6127576648.dojiner.at","domain":"dojiner.at","tld":"at"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"cbadd9c480859c98289b2b75d061a7d6","sha1":"3ce03e754a8e5c2abdf49626b6e4e679a3f94b49","sha256":"dc18dd26066a6c8b465f147e5ff7fcac850c7d0dc893b48bf6e9a8969f11b635","sha512":"5a179a5ed01cf5a3c1595c6a4cc6b74ee0a849ad5444989e6eb0137d3a35d489549fec77d28131e2d7f2f16b9a47f340b9131049cf5d37e1b2035d6f7be563a9","ssdeep":"","tlshash":"167000000282a020883c02208302a200aa800008000380a080e0020c200080b0080880","size":20,"data":"","first_seen":"2024-08-05T10:25:42Z","last_seen":"2026-07-21T19:01:36.488116Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6127576648.dojiner.at/","fqdn":"6127576648.dojiner.at","domain":"dojiner.at","tld":"at"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"0ec74946195056598ad72185cf237455","sha1":"eeba55aab6c8d20e5568ea7fd17ec14dd75796bf","sha256":"c932c7c42ffbd1963b9c5bf4ccba406d809b5c6ee776369e93602cc461056de1","sha512":"4af80ca39f7eb0ca6a0a820dd1c559491a6baee146b6149391171b2306952721a74dea01a10c7f8ffc37d6c5a6431be1a1e0a7b64a7bd057add3f1c85307172a","ssdeep":"","tlshash":"f4d012265bbe18700613a528031f7504267f914f10068d883b0c0b855f95b6550e06e4","size":219,"data":"","first_seen":"2026-07-20T13:02:38.643751Z","last_seen":"2026-07-20T13:09:48.623711Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/react@18.2.0/umd/react.production.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d86dcdbfed4c273c4742744941259902","sha1":"98089a33d0cf2fa4b3e1ba9b7eeb9b8ba0ac82a7","sha256":"4b4969fa4ef3594324da2c6d78ce8766fbbc2fd121fff395aedf997db0a99a06","sha512":"f10e98f579d36ce13e24dbe3050c09d87f12f94578b80ea1891ca485db48c83619d93a6b74d99639468a746cce872af8742ca4dbcece7a36cfbf097b96b7eaad","ssdeep":"96:DIxuZlZJFupWXpi0pGZBnXQd2q7s0ZiZmdUYe3egbwZqw8+mwoChzSBmqZTZ+Z33:kEXdMAFJdUTTE77tYHD4egFj2MFpKHc","tlshash":"6e22d5e4b952f0448a7338f1117f540f727eaea9b88c8d70a196d9d43db44ad9127f0e","size":10737,"data":"","first_seen":"2023-03-07T12:38:55Z","last_seen":"2026-07-21T19:40:59.475437Z","times_seen":16837,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6127576648.dojiner.at/211b7e002e03060f0c50554915250a004853544d57.js","fqdn":"6127576648.dojiner.at","domain":"dojiner.at","tld":"at"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c098b8cea37eb49733457647f090c6ed","sha1":"650d240add0e30c90b43115e820c515b42564292","sha256":"e5ab71545e59e696d06e2a189c78a4199b3a424e0461b415c79293d635a9c7ee","sha512":"0d3e95ba99d8e1cc0ad638ec063b95b011f3a02eb6a13ed79a94d49148ba5a3086447dfc833e5385b1929c10375a4e05c114735541b20db8c354a766a78d5e8f","ssdeep":"6144:BUwOwCb8r8ZHHtWIiCtM9/sN6bfVBXHRbH0kZIaG9ITb6f1x5WAEMssz/3ue6/I0:BUwOdbo84Vffxk2XwEV+/3ue6/It+Tsk","tlshash":"f0647d45b230ea7e704a1a4274b73806b0395d79b191eccce73c5b5279f1b8e95332ae","size":327917,"data":"","first_seen":"2026-05-03T14:38:27.82305Z","last_seen":"2026-07-20T13:09:48.610128Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/react-dom@18.2.0/umd/react-dom.production.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"64141792105ea4861f9f33294d65ab81","sha1":"506d9100caa070005a890bd496de64c437d6d008","sha256":"21758ed084cd0e37e735722ee4f3957ea960628a29dfa6c3ce1a1d47a2d6e4f7","sha512":"30e0a9aa84688ac093c09f2f41089c899bf4a9ca5138289d7a4dc64c54ba293936fb2ee6ba724894a09590509863ea7712b6055c28e61639df4d34520b538759","ssdeep":"1536:XtTqru1xouE1ZTnPrMiY6WRdA2qZpXnBnK3xsVdFE7zptEvp62kdS6F:JmuWl7ndK3xsVdKEd56F","tlshash":"ebd308e87996f6426ab202ab10ef1443737c992b784c4cb1e540fddd64b8069a17ff8d","size":131882,"data":"","first_seen":"2023-03-07T12:38:55Z","last_seen":"2026-07-21T19:40:59.472396Z","times_seen":16714,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"Checkingmap[actor:server1.conn0.watcher17.process7//obj22 class:Window extensible:true frozen:false isError:false ownPropertyLength:936 preview:map[kind:ObjectWithURL url:https://6127576648.dojiner.at/] sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj23 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[href:map[configurable:true enumerable:true value:https://6127576648.dojiner.at/ writable:true] isInternal:map[configurable:true enumerable:true value:false writable:true]] ownPropertiesLength:2] sealed:false type:object]","filename":"https://6127576648.dojiner.at/211b7e002e03060f0c505549.js","line_number":1,"column_number":238884},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj48 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[fbPixelInit:map[configurable:true enumerable:true value:false writable:true] linkData:map[configurable:true enumerable:true value:map[type:undefined] writable:true]] ownPropertiesLength:2] sealed:false type:object]","filename":"https://6127576648.dojiner.at/211b7e002e03060f0c50554915250a004853544d57.js","line_number":21,"column_number":87892},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj49 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[needCheckConf:map[configurable:true enumerable:true value:false writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://6127576648.dojiner.at/211b7e002e03060f0c50554915250a004853544d57.js","line_number":21,"column_number":9563},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj50 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[fbPixelInit:map[configurable:true enumerable:true value:false writable:true] linkData:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj51 class:Object extensible:true frozen:false isError:false ownPropertyLength:11 sealed:false type:object] writable:true]] ownPropertiesLength:2] sealed:false type:object]","filename":"https://6127576648.dojiner.at/211b7e002e03060f0c50554915250a004853544d57.js","line_number":21,"column_number":87892}]},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/react-dom@18.2.0/umd/react-dom.production.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6127576648.dojiner.at/211b7e002e030600035f557d57065b0a62055250","date":"2026-07-20T13:02:08.569Z","timestamp":1784552528569,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/react-dom@18.2.0/umd/react-dom.production.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://6127576648.dojiner.at\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 18.2.0\r\nx-jsd-version-type: version\r\netag: W/\"2032a-UG2RAMqgcABaiQvUlt5kxDfW0Ag\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 20 Jul 2026 13:02:08 GMT\r\nage: 1643968\r\nx-served-by: cache-fra-etou8220110-FRA, cache-bma-essb1270077-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 43516\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":131882,"size_decoded":44312,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (945)","md5":"64141792105ea4861f9f33294d65ab81","sha1":"506d9100caa070005a890bd496de64c437d6d008","sha256":"21758ed084cd0e37e735722ee4f3957ea960628a29dfa6c3ce1a1d47a2d6e4f7","sha512":"30e0a9aa84688ac093c09f2f41089c899bf4a9ca5138289d7a4dc64c54ba293936fb2ee6ba724894a09590509863ea7712b6055c28e61639df4d34520b538759","ssdeep":"1536:XtTqru1xouE1ZTnPrMiY6WRdA2qZpXnBnK3xsVdFE7zptEvp62kdS6F:JmuWl7ndK3xsVdKEd56F","tlshash":"ebd308e87996f6426ab202ab10ef1443737c992b784c4cb1e540fddd64b8069a17ff8d","first_seen":"2023-03-07T12:38:55Z","last_seen":"2026-07-21T19:40:59.472396Z","times_seen":16714,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":9,"receive":9,"ssl":237},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/public/shared/images/joinsteam/new_login_bg_strong_mask.jpg","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"95.101.10.40","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6127576648.dojiner.at/211b7e002e030600035f557d57065b0a62055250","date":"2026-07-20T13:02:08.903Z","timestamp":1784552528903,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/shared/images/joinsteam/new_login_bg_strong_mask.jpg HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/jpeg\r\nContent-Length: 124529\r\nLast-Modified: Fri, 22 Nov 2024 18:31:38 GMT\r\nETag: \"6740ce0a-1e671\"\r\nAccept-Ranges: bytes\r\nDate: Mon, 20 Jul 2026 13:02:09 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124529,"size_decoded":124766,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3","md5":"48b805d8fa321668db4ce8dfd96db5b9","sha1":"e0ded2606559c8100ef544c1f1c704e878a29b92","sha256":"9a75f8cc40bbe9c9499e7b2d3bab98a447685a361489357a111479517005c954","sha512":"95da761ca3f99f7808a0148cfa2416b8c03d90859bff65b396061ada5a4394fb50e2a4b82986caab07bc1fcd73980fe9b08e804b3ce897762a17d2e44935076d","ssdeep":"3072:R24zCBv0a8Oz/fxlnI0Nc49J7g3HOHQZP:R2GCea8OzHfjO85ygs","tlshash":"0bc3125bef39536bcc044b3328b74b000f79886a6c063d2a477155293a1a3b47df6a9f","first_seen":"2023-05-06T11:11:12Z","last_seen":"2026-07-21T19:46:43.297221Z","times_seen":904,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":0,"dns":0,"connect":2,"send":0,"wait":4,"receive":2,"ssl":221},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6127576648.dojiner.at/211b7e002e0306151651515c1d5374125b175c41","fqdn":"6127576648.dojiner.at","domain":"dojiner.at","tld":"at"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://6127576648.dojiner.at/211b7e002e030600035f557d57065b0a62055250","date":"2026-07-20T13:02:08.954Z","timestamp":1784552528954,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6127576648.dojiner.at","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 12:02:07 GMT","end":"Fri, 18 Sep 2026 12:02:06 GMT"},"fingerprint":{"sha1":"62:BC:C6:75:59:9E:16:0F:3B:A3:7F:EE:7B:CE:03:DD:63:26:51:09","sha256":"49:E5:17:D9:39:00:D4:BD:00:C6:94:B8:81:0E:99:4E:C4:9B:23:97:E7:D9:DE:FD:CB:E6:4F:F5:46:10:AC:37"}}},"request":{"raw":"POST /211b7e002e0306151651515c1d5374125b175c41 HTTP/1.1\r\nHost: 6127576648.dojiner.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 14\r\nOrigin: https://6127576648.dojiner.at\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.rxFWShgxEZ-3kF0FEu3wW5VyIhJX1WcJ.BdB0u-Q2pEpSve1_.m-8GOIfE4fXL0hiw_mMJzMWUukDA2Hr2GAs7fbmEiPUncBh9AWWrkuo0EWr8zjAqIXCUBaOVYFzeoi_qMAk-c6rZbcgK_MAaDDlG4eXSBn6AsO9ESlW_H3Kv_eOIOiMIkRg2r2V0aV4HX9E9FWw4YWMGmlv-N_3ss-Sk5JuQYgNC9NedbTsLQ0A4PY6WPVRK4xv94tGTNBzLLYRr8Trdcujknuuc419z7egb36667dFIS13ABJo-AkLY1xyeUVtkRJHryTuUDD9eT-hW7heM3RL_.6KLKGQ6sGKODWz9Dqo5aug; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTIwNywic2VjcmV0IjoiZWIwYWMyZWZiNDAxOGEyZDJkNTVhNGI3YWQ2YWM3NjQiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.HBWTHrOIT7M_Dc6VmI7iRyWYg_bYHnf9BTQ_RAT0suM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":14,"data":"{\"visit\":null}"}},"response":{"raw":"HTTP/2 201 \r\nserver: openresty\r\ndate: Mon, 20 Jul 2026 13:02:08 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 253\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"fd-yA16tyDp9g0TCNTmD7L1N44gyvs\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":253,"size_decoded":881,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"042639cbd89a011bdf7bda52f28cd9f1","sha1":"c80d7ab720e9f60d1308d4e60fb2f5378e20cafb","sha256":"4846aae4e7b7ed71f00fccb9d3abde7d873d6cbc052f8dc88f41cd1cb5dde726","sha512":"7605d777d0ba6cbfdc2a61d8e56a3a5af5dcb613a5dd282aa8a2d171f885d13514feef5272a0f81c9d5ed39cd619bbcc46bfc4f73db43865afb4bc40a16261ba","ssdeep":"","tlshash":"c7d05e8d229816be4542858ad8ae0a1a13001992707cbc5cf05d060278e31d3c4f0e0b","first_seen":"2025-12-21T13:36:47.439788Z","last_seen":"2026-07-20T13:09:48.618728Z","times_seen":17,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6127576648.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6127576648.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6127576648.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1","fqdn":"community.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6127576648.dojiner.at/211b7e002e030600035f557d57065b0a62055250","date":"2026-07-20T13:02:08.961Z","timestamp":1784552528961,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 06:33:09 GMT","end":"Tue, 22 Sep 2026 06:33:08 GMT"},"fingerprint":{"sha1":"19:6D:DC:98:BC:09:BE:D6:83:B1:DC:F5:FF:B7:3C:04:FD:C1:76:89","sha256":"35:83:44:F1:EF:BC:14:AB:36:88:58:F8:41:13:06:A6:4E:63:45:1B:0F:E0:E7:5C:BF:51:61:5F:54:3A:A6:C4"}}},"request":{"raw":"GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1\r\nHost: community.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-123\"\r\naccept-ranges: bytes\r\ndate: Mon, 20 Jul 2026 13:02:09 GMT\r\nvia: 1.1 varnish\r\nage: 45806\r\nx-served-by: cache-bma-essb1270036-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1626\r\nx-timer: S1784552529.209631,VS0,VE0\r\ncontent-length: 291\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":291,"size_decoded":655,"mime_type":"image/png","magic":"PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced","md5":"a2796187c58c7e948159e37d6990ecc2","sha1":"4209cd85add507247f9ce5a87a8c9095b54ee417","sha256":"23341256db7f44b1f3811880fa2bae6b7748bbf6b62c544a162e38cf0d5c5082","sha512":"5ef103b8398507495c2708df8fcd82bdb763b1d580aaaa6cacfb805614764277c19e8ece5d890a8aafc004fc8c25e3ab2e67d6fbf373c432a9a0d7c36fa0890f","ssdeep":"","tlshash":"83d0ebf3a3e86d79fb52fe97d10180e0465fcaeb6004877889c3880447a81f880f2996","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-07-21T19:46:43.330989Z","times_seen":7425,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":1,"connect":9,"send":0,"wait":9,"receive":0,"ssl":236},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamcommunity.com/favicon.ico","fqdn":"steamcommunity.com","domain":"steamcommunity.com","tld":"com"},"ip":{"addr":"23.49.26.105","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6127576648.dojiner.at/211b7e002e030600035f557d57065b0a62055250","date":"2026-07-20T13:02:09.222Z","timestamp":1784552529222,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.steampowered.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 05 Sep 2025 00:00:00 GMT","end":"Fri, 04 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:66:D7:D2:99:D6:A1:56:A5:A6:D9:94:5C:88:56:DD:5C:41:8E:49","sha256":"C5:81:A7:0E:F1:39:43:B6:7A:5C:E3:67:B5:C9:6C:8C:D4:AD:B1:96:E3:F0:6B:88:9F:83:D4:2D:94:97:36:7C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: steamcommunity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/x-icon\r\nCache-Control: public,max-age=86400\r\nExpires: Mon, 20 Jul 2026 21:25:20 GMT\r\nLast-Modified: Fri, 22 Nov 2024 18:31:38 GMT\r\nContent-Length: 38554\r\nDate: Mon, 20 Jul 2026 13:02:09 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38554,"size_decoded":38823,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"231913fdebabcbe65f4b0052372bde56","sha1":"553909d080e4f210b64dc73292f3a111d5a0781f","sha256":"9f890a9debcdfccc339149a7943be9aff9e4c9203c2fa37d5671a5b2c88503ad","sha512":"7b11b709968c5a52b9b60189fb534f5df56912417243820e9d1c00c97f4bd6d0835f2cdf574d0c36ecb32dbbf5fc397324df54f7fdf9e1b062b5dbda2c02e919","ssdeep":"768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh","tlshash":"70038de82e4917aee9e2cf324adb6716237b4f88c0bc169742b07f193175a51c6d78c1","first_seen":"2023-04-05T07:02:49Z","last_seen":"2026-07-21T19:46:43.341831Z","times_seen":6805,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":10,"receive":1,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/react@18.2.0/umd/react.production.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6127576648.dojiner.at/211b7e002e030600035f557d57065b0a62055250","date":"2026-07-20T13:02:08.566Z","timestamp":1784552528566,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/react@18.2.0/umd/react.production.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://6127576648.dojiner.at\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 18.2.0\r\nx-jsd-version-type: version\r\netag: W/\"29f1-mAiaM9DPL6Sz4bqbfuubi6Csgqc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 20 Jul 2026 13:02:08 GMT\r\nage: 1643971\r\nx-served-by: cache-fra-etou8220137-FRA, cache-bma-essb1270077-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 4382\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10737,"size_decoded":5176,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (630)","md5":"d86dcdbfed4c273c4742744941259902","sha1":"98089a33d0cf2fa4b3e1ba9b7eeb9b8ba0ac82a7","sha256":"4b4969fa4ef3594324da2c6d78ce8766fbbc2fd121fff395aedf997db0a99a06","sha512":"f10e98f579d36ce13e24dbe3050c09d87f12f94578b80ea1891ca485db48c83619d93a6b74d99639468a746cce872af8742ca4dbcece7a36cfbf097b96b7eaad","ssdeep":"96:DIxuZlZJFupWXpi0pGZBnXQd2q7s0ZiZmdUYe3egbwZqw8+mwoChzSBmqZTZ+Z33:kEXdMAFJdUTTE77tYHD4egFj2MFpKHc","tlshash":"6e22d5e4b952f0448a7338f1117f540f727eaea9b88c8d70a196d9d43db44ad9127f0e","first_seen":"2023-03-07T12:38:55Z","last_seen":"2026-07-21T19:40:59.475437Z","times_seen":16837,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":9,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6127576648.dojiner.at/211b7e002e03060f0c50554915250a004853544d57.js","fqdn":"6127576648.dojiner.at","domain":"dojiner.at","tld":"at"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6127576648.dojiner.at/211b7e002e030600035f557d57065b0a62055250","date":"2026-07-20T13:02:08.571Z","timestamp":1784552528571,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6127576648.dojiner.at","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 12:02:07 GMT","end":"Fri, 18 Sep 2026 12:02:06 GMT"},"fingerprint":{"sha1":"62:BC:C6:75:59:9E:16:0F:3B:A3:7F:EE:7B:CE:03:DD:63:26:51:09","sha256":"49:E5:17:D9:39:00:D4:BD:00:C6:94:B8:81:0E:99:4E:C4:9B:23:97:E7:D9:DE:FD:CB:E6:4F:F5:46:10:AC:37"}}},"request":{"raw":"GET /211b7e002e03060f0c50554915250a004853544d57.js HTTP/1.1\r\nHost: 6127576648.dojiner.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.rxFWShgxEZ-3kF0FEu3wW5VyIhJX1WcJ.BdB0u-Q2pEpSve1_.m-8GOIfE4fXL0hiw_mMJzMWUukDA2Hr2GAs7fbmEiPUncBh9AWWrkuo0EWr8zjAqIXCUBaOVYFzeoi_qMAk-c6rZbcgK_MAaDDlG4eXSBn6AsO9ESlW_H3Kv_eOIOiMIkRg2r2V0aV4HX9E9FWw4YWMGmlv-N_3ss-Sk5JuQYgNC9NedbTsLQ0A4PY6WPVRK4xv94tGTNBzLLYRr8Trdcujknuuc419z7egb36667dFIS13ABJo-AkLY1xyeUVtkRJHryTuUDD9eT-hW7heM3RL_.6KLKGQ6sGKODWz9Dqo5aug; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTIwNywic2VjcmV0IjoiZWIwYWMyZWZiNDAxOGEyZDJkNTVhNGI3YWQ2YWM3NjQiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.HBWTHrOIT7M_Dc6VmI7iRyWYg_bYHnf9BTQ_RAT0suM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Mon, 20 Jul 2026 13:02:08 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\ncontent-disposition: inline\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nlast-modified: Fri, 19 Jun 2026 22:37:50 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":327917,"size_decoded":108785,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64178)","md5":"c098b8cea37eb49733457647f090c6ed","sha1":"650d240add0e30c90b43115e820c515b42564292","sha256":"e5ab71545e59e696d06e2a189c78a4199b3a424e0461b415c79293d635a9c7ee","sha512":"0d3e95ba99d8e1cc0ad638ec063b95b011f3a02eb6a13ed79a94d49148ba5a3086447dfc833e5385b1929c10375a4e05c114735541b20db8c354a766a78d5e8f","ssdeep":"6144:BUwOwCb8r8ZHHtWIiCtM9/sN6bfVBXHRbH0kZIaG9ITb6f1x5WAEMssz/3ue6/I0:BUwOdbo84Vffxk2XwEV+/3ue6/It+Tsk","tlshash":"f0647d45b230ea7e704a1a4274b73806b0395d79b191eccce73c5b5279f1b8e95332ae","first_seen":"2026-05-03T14:38:27.82305Z","last_seen":"2026-07-20T13:09:48.610128Z","times_seen":22,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6127576648.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6127576648.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6127576648.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg","fqdn":"community.cloudflare.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.33.119.64","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6127576648.dojiner.at/211b7e002e030600035f557d57065b0a62055250","date":"2026-07-20T13:02:08.893Z","timestamp":1784552528893,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflare.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 12:23:39 GMT","end":"Mon, 05 Oct 2026 12:23:38 GMT"},"fingerprint":{"sha1":"0D:02:A7:E3:B4:38:2B:DD:DE:46:1F:F0:B6:42:DE:3C:4D:9D:C0:BC","sha256":"E3:45:F1:32:F6:F7:BC:A5:6F:A8:65:F2:0E:6A:3A:09:17:8E:E5:5C:5F:19:F3:FC:93:81:34:E3:D0:24:B3:FB"}}},"request":{"raw":"GET /public/shared/images/header/logo_steam.svg HTTP/1.1\r\nHost: community.cloudflare.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: nginx\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://community.steamstatic.com/public/shared/images/header/logo_steam.svg\r\ndate: Mon, 20 Jul 2026 13:02:08 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-grn: 0.3c772117.1784552528.15119997\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T20:24:29.14834Z","times_seen":17430674,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":4,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"95.101.10.40","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6127576648.dojiner.at/211b7e002e030600035f557d57065b0a62055250","date":"2026-07-20T13:02:08.894Z","timestamp":1784552528894,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nContent-Length: 3777\r\nLast-Modified: Fri, 05 Jan 2018 01:35:16 GMT\r\nETag: \"5a4ed654-ec1\"\r\nAccept-Ranges: bytes\r\nDate: Mon, 20 Jul 2026 13:02:08 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3777,"size_decoded":4009,"mime_type":"image/png","magic":"PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced","md5":"eabc76eb57feae44add7faead028521e","sha1":"4e3e53938fad15661d2d046a868338841a95db19","sha256":"fc9e6260a2706ae146282d77e67bc1b74688435f8912ab4c1932641eec28bffa","sha512":"5c6da6eeefddf321c2bc7e39a134e0a3140a9f93ad1560b2e102ef60ec218c29aae14ed344c79e25cc5493cd15551040d8c909de28dcab02034d787563104e07","ssdeep":"","tlshash":"eb717ce7323e5456e1f056c6015b52f69eb1a1080d2b4e09f224b77831ac63be38333d","first_seen":"2023-04-05T21:31:08Z","last_seen":"2026-07-21T19:46:43.307936Z","times_seen":7491,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":9,"connect":1,"send":0,"wait":3,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/61286/MotivaSansRegular.woff.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6127576648.dojiner.at/211b7e002e030600035f557d57065b0a62055250","date":"2026-07-20T13:02:08.916Z","timestamp":1784552528916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 15:30:21 GMT","end":"Tue, 29 Sep 2026 16:27:50 GMT"},"fingerprint":{"sha1":"21:75:89:40:49:CB:1B:FB:A2:4F:1A:FF:87:01:DA:0D:73:C0:47:C2","sha256":"4C:2F:0D:D9:28:F8:B0:D6:C9:A7:88:BE:DA:96:4E:DE:5F:27:94:4F:DB:C9:69:5E:5C:E5:82:C6:6A:CA:A8:7B"}}},"request":{"raw":"GET /s/61286/MotivaSansRegular.woff.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://6127576648.dojiner.at\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/css/motiva-sans?styles=101373,102902,102901,103845\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 13:02:09 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 05 Feb 2022 02:00:55 GMT\r\netag: \"a1d0-5d73bbcdc080a\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VL2hwlHTFRugFy3r%2FF41FHnws2CcI441dbvRnZdRkrAECz3oA629sY6r49K1szz4fBQ%2FBsdigIBWHBxzfhR3Vu3yknxbLy3gNFPCaY7B%2Bn4LE%2FfnW5hgcTTtowL2sYCNmVKOjdY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1e22899cb801525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 41424\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41424,"size_decoded":42162,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 41424, version 0.0","md5":"57bd6f5c2a7c3c90763fbf2744699879","sha1":"27a5cafffebd1d150c6a6b3f7987045482c507c9","sha256":"a472df8bf74a611c4136f892221d4832010988461b4cd9d68058896f1f25a512","sha512":"a7647198a5902e16ea4272b4d7f435b4c7a7e2d9a3ce86d9fce8be790627a738eaa87011864637e8248a2eedc809a7fd73ab250b21a35c0ef6060525611c81fd","ssdeep":"768:K+F7LEi09DTJ0yWQeu29lsoKyaYopWadPez4bw7VQbywb4AIb3+wEL5i+:ZF6RGVQn2PKboadPU42Qb4AIb9Etj","tlshash":"d313f279c9f2d623e1fcde4423d94249c415520ba7a24bc03567f98f3bbe399e6a160c","first_seen":"2023-11-04T01:38:20Z","last_seen":"2026-07-20T13:09:48.611483Z","times_seen":128,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":118,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/61286/MotivaSansMedium.woff.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6127576648.dojiner.at/211b7e002e030600035f557d57065b0a62055250","date":"2026-07-20T13:02:08.918Z","timestamp":1784552528918,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 15:30:21 GMT","end":"Tue, 29 Sep 2026 16:27:50 GMT"},"fingerprint":{"sha1":"21:75:89:40:49:CB:1B:FB:A2:4F:1A:FF:87:01:DA:0D:73:C0:47:C2","sha256":"4C:2F:0D:D9:28:F8:B0:D6:C9:A7:88:BE:DA:96:4E:DE:5F:27:94:4F:DB:C9:69:5E:5C:E5:82:C6:6A:CA:A8:7B"}}},"request":{"raw":"GET /s/61286/MotivaSansMedium.woff.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://6127576648.dojiner.at\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/css/motiva-sans?styles=101373,102902,102901,103845\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 13:02:09 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 05 Feb 2022 02:00:55 GMT\r\netag: \"a144-5d73bbcdc080a\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QK4KJyCANTgAzzYOn%2F18MlPsJmWasbL0%2FmjNg3YWcWjUFOiPYQVNrv6h8ZlHeVU2fpUz%2BOFRTc%2BkezsOyHQ9KwSEjpvgqKa%2FC9nfGdg2ZgX5%2BfVT1fFBMbe8tiYwnrwSvFNpd4s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1e22899cb811525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 41284\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41284,"size_decoded":42026,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 41284, version 0.0","md5":"6a3575348afb953addea554183438636","sha1":"bb136d68b07e69ab4272d098f522e2c740b668a7","sha256":"dee2f7d9132cbdf82ac50b78835902a6000d29876f467f43bc0a8df21bfd9dbd","sha512":"4401b4814cf15b10e832e64fff3431a36bcc5a244b1f723556e6cdc5bfbd93beb5b40365b2ee26bba1930dc4e4751282f16b483a653c3b5a6c35c98748da3670","ssdeep":"768:6bvd2M/P1Exmz4SXIT1d0QDS/LH400ZT9O1HCL8TXAo3+woBHIL:6bvXSw4wIF+/F0ZT9OI2X9oBoL","tlshash":"9d03f13bad025e9ae9f9b183937a07e54a12c11f31c2d7b4a227c87c6edc705ca9154e","first_seen":"2023-11-04T01:38:20Z","last_seen":"2026-07-20T13:09:48.615186Z","times_seen":125,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":116,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.steamstatic.com/public/shared/images/header/logo_steam.svg","fqdn":"community.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6127576648.dojiner.at/211b7e002e030600035f557d57065b0a62055250","date":"2026-07-20T13:02:08.960Z","timestamp":1784552528960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 06:33:09 GMT","end":"Tue, 22 Sep 2026 06:33:08 GMT"},"fingerprint":{"sha1":"19:6D:DC:98:BC:09:BE:D6:83:B1:DC:F5:FF:B7:3C:04:FD:C1:76:89","sha256":"35:83:44:F1:EF:BC:14:AB:36:88:58:F8:41:13:06:A6:4E:63:45:1B:0F:E0:E7:5C:BF:51:61:5F:54:3A:A6:C4"}}},"request":{"raw":"GET /public/shared/images/header/logo_steam.svg HTTP/1.1\r\nHost: community.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 09 Jul 2026 22:53:02 GMT\r\netag: \"6a50264e-e3f\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Mon, 20 Jul 2026 13:02:08 GMT\r\nvia: 1.1 varnish\r\nage: 23813\r\nx-served-by: cache-bma-essb1270036-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1784552529.995571,VS0,VE1\r\ncontent-length: 3647\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3647,"size_decoded":4045,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aec9fa54ca7e28babd4c40859083ad34","sha1":"8a620d234a6cb2e9b3ba7e58b6349331e1cf9f5a","sha256":"19d0f67899a61b13d43ad1c810ba2d8d619b48ec00caba3b888fe6a285ce6cde","sha512":"4d72f59de3392b514750a83b0b04e3da2916eb6e5a3911b75ec6178f23aebfca3272379b02dc051201715d8bc23383d608c7e5c6ce758669c69ba657e17ac76c","ssdeep":"","tlshash":"e471b4cc17338be02996c27d1a7476d223b365adf8b001e8a3920c202c0afe69e64d75","first_seen":"2026-07-11T20:48:47.788479Z","last_seen":"2026-07-21T19:46:43.337073Z","times_seen":64,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":10,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6127576648.dojiner.at/211b7e002e03060f0c505549.js","fqdn":"6127576648.dojiner.at","domain":"dojiner.at","tld":"at"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://6127576648.dojiner.at/","date":"2026-07-20T13:02:08.065Z","timestamp":1784552528065,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /211b7e002e03060f0c505549.js HTTP/1.1\r\nHost: 6127576648.dojiner.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.rxFWShgxEZ-3kF0FEu3wW5VyIhJX1WcJ.BdB0u-Q2pEpSve1_.m-8GOIfE4fXL0hiw_mMJzMWUukDA2Hr2GAs7fbmEiPUncBh9AWWrkuo0EWr8zjAqIXCUBaOVYFzeoi_qMAk-c6rZbcgK_MAaDDlG4eXSBn6AsO9ESlW_H3Kv_eOIOiMIkRg2r2V0aV4HX9E9FWw4YWMGmlv-N_3ss-Sk5JuQYgNC9NedbTsLQ0A4PY6WPVRK4xv94tGTNBzLLYRr8Trdcujknuuc419z7egb36667dFIS13ABJo-AkLY1xyeUVtkRJHryTuUDD9eT-hW7heM3RL_.6KLKGQ6sGKODWz9Dqo5aug; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTIwNywic2VjcmV0IjoiZWIwYWMyZWZiNDAxOGEyZDJkNTVhNGI3YWQ2YWM3NjQiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.HBWTHrOIT7M_Dc6VmI7iRyWYg_bYHnf9BTQ_RAT0suM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T20:24:29.14834Z","times_seen":17430674,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6127576648.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6127576648.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6127576648.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6127576648.dojiner.at/211b7e002e030600035f557d57065b0a62055250","fqdn":"6127576648.dojiner.at","domain":"dojiner.at","tld":"at"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-20T13:02:08.269Z","timestamp":1784552528269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6127576648.dojiner.at","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 12:02:07 GMT","end":"Fri, 18 Sep 2026 12:02:06 GMT"},"fingerprint":{"sha1":"62:BC:C6:75:59:9E:16:0F:3B:A3:7F:EE:7B:CE:03:DD:63:26:51:09","sha256":"49:E5:17:D9:39:00:D4:BD:00:C6:94:B8:81:0E:99:4E:C4:9B:23:97:E7:D9:DE:FD:CB:E6:4F:F5:46:10:AC:37"}}},"request":{"raw":"GET /211b7e002e030600035f557d57065b0a62055250 HTTP/1.1\r\nHost: 6127576648.dojiner.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.rxFWShgxEZ-3kF0FEu3wW5VyIhJX1WcJ.BdB0u-Q2pEpSve1_.m-8GOIfE4fXL0hiw_mMJzMWUukDA2Hr2GAs7fbmEiPUncBh9AWWrkuo0EWr8zjAqIXCUBaOVYFzeoi_qMAk-c6rZbcgK_MAaDDlG4eXSBn6AsO9ESlW_H3Kv_eOIOiMIkRg2r2V0aV4HX9E9FWw4YWMGmlv-N_3ss-Sk5JuQYgNC9NedbTsLQ0A4PY6WPVRK4xv94tGTNBzLLYRr8Trdcujknuuc419z7egb36667dFIS13ABJo-AkLY1xyeUVtkRJHryTuUDD9eT-hW7heM3RL_.6KLKGQ6sGKODWz9Dqo5aug; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTIwNywic2VjcmV0IjoiZWIwYWMyZWZiNDAxOGEyZDJkNTVhNGI3YWQ2YWM3NjQiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.HBWTHrOIT7M_Dc6VmI7iRyWYg_bYHnf9BTQ_RAT0suM\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Mon, 20 Jul 2026 13:02:08 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncontent-disposition: inline\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nlast-modified: Fri, 19 Jun 2026 22:37:50 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2024,"size_decoded":1651,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (433)","md5":"af6b50669ef3d08f44babcdd07364d26","sha1":"3896c7bf6e8bc7515e0f8587aa6e322a55aa8447","sha256":"1495deb257c4916b98fb3ea7536b386287b830619c9086ce26f3dda9dc92a0bd","sha512":"49404f92a08998e8d5c1af7832c8fd34df0304bbd21c63e50ee4d9710d85f3bded76c0fd688b95844cb800c4854f740bc8073fb182e8291bdf52ef14327a7372","ssdeep":"","tlshash":"7141735bfef4c5a10649195f7876f90c38e26a4a4a9de8c008efd0f59c22fd18e17c88","first_seen":"2026-07-20T13:02:39.865543Z","last_seen":"2026-07-20T13:02:39.865543Z","times_seen":1,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6127576648.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6127576648.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6127576648.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/css/motiva-sans?styles=101373,102902,102901,103845","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://6127576648.dojiner.at/211b7e002e030600035f557d57065b0a62055250","date":"2026-07-20T13:02:08.651Z","timestamp":1784552528651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 15:30:21 GMT","end":"Tue, 29 Sep 2026 16:27:50 GMT"},"fingerprint":{"sha1":"21:75:89:40:49:CB:1B:FB:A2:4F:1A:FF:87:01:DA:0D:73:C0:47:C2","sha256":"4C:2F:0D:D9:28:F8:B0:D6:C9:A7:88:BE:DA:96:4E:DE:5F:27:94:4F:DB:C9:69:5E:5C:E5:82:C6:6A:CA:A8:7B"}}},"request":{"raw":"GET /css/motiva-sans?styles=101373,102902,102901,103845 HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 13:02:08 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 1210197\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 06 Jul 2026 12:52:10 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jD%2BH6%2FTDtPJnhkLX6zXKP2QChauLS0LXQLxziWbGJX%2Fd32co%2BGi2YyK%2FguZiAToJQ3v7fuY6M73Er10c54x3XYBa5pQF2bVPn5OiSdC6P3vukyGSUx9UwLXPEwWbXxSK3tgZdMg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1e228982ae25687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":835,"size_decoded":914,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"f50ae0a6dc077a902b1ff78ad77cd89c","sha1":"1b25fa4f53b3c2cd927308fd4b8c54d25f8d11bb","sha256":"97e20f5c23acaf3c3334139a10003d96188e35e3d9d28ac231a7376ab163af03","sha512":"defe2f26f8f8f1b6df8429b6c283969ad316dde99e1b9f416a98e5d442d90fa69bc12544b71e4dd842d88d42bab04359523130fa9b175d2a28c393eb05a89d44","ssdeep":"","tlshash":"8b01a16125bfb55875340c8af35f35180d9b342b611dc625be792e448fba42d02b17ae","first_seen":"2024-11-20T13:09:05.413516Z","last_seen":"2026-07-20T13:09:48.610818Z","times_seen":62,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":2,"connect":13,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"95.101.10.40","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6127576648.dojiner.at/211b7e002e030600035f557d57065b0a62055250","date":"2026-07-20T13:02:08.896Z","timestamp":1784552528896,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/shared/images/responsive/header_logo.png HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nContent-Length: 10863\r\nLast-Modified: Fri, 22 Nov 2024 18:31:38 GMT\r\nETag: \"6740ce0a-2a6f\"\r\nAccept-Ranges: bytes\r\nDate: Mon, 20 Jul 2026 13:02:09 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10863,"size_decoded":11097,"mime_type":"image/png","magic":"PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced","md5":"a4e79c73ee13cb25b60fc4b0ba1f690c","sha1":"b690c31b2eb1b0eb085e91aaae7e79f03debe7c1","sha256":"6cb869df089146c12efb5e9c968e911c314842624ba6f052a11346ac734cadc8","sha512":"aad423119f410a655f0aa475d2fe692087d7262c3986ce71347981c5b60f6a10031d7050bf9b9aee4e7d84d814f0b8883c964028fcbe14ed3464602f3ba6cec3","ssdeep":"192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM","tlshash":"4722c06cfcc0c875958352ba3e27fb7043f93e10c44b86b86960e5a5365c8f4959d137","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-07-21T19:46:43.338694Z","times_seen":7462,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":7,"connect":3,"send":0,"wait":3,"receive":0,"ssl":222},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.cloudflare.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1","fqdn":"community.cloudflare.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.33.119.64","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6127576648.dojiner.at/211b7e002e030600035f557d57065b0a62055250","date":"2026-07-20T13:02:08.897Z","timestamp":1784552528897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflare.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 12:23:39 GMT","end":"Mon, 05 Oct 2026 12:23:38 GMT"},"fingerprint":{"sha1":"0D:02:A7:E3:B4:38:2B:DD:DE:46:1F:F0:B6:42:DE:3C:4D:9D:C0:BC","sha256":"E3:45:F1:32:F6:F7:BC:A5:6F:A8:65:F2:0E:6A:3A:09:17:8E:E5:5C:5F:19:F3:FC:93:81:34:E3:D0:24:B3:FB"}}},"request":{"raw":"GET /public/images/skin_1/footerLogo_valve.png?v=1 HTTP/1.1\r\nHost: community.cloudflare.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nserver: nginx\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://community.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1\r\ndate: Mon, 20 Jul 2026 13:02:09 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nquic-version: 0x00000001\r\nakamai-grn: 0.3c772117.1784552529.151199ae\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T20:24:29.14834Z","times_seen":17430674,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":4,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/61286/MotivaSansExtraBold.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://6127576648.dojiner.at/211b7e002e030600035f557d57065b0a62055250","date":"2026-07-20T13:02:08.919Z","timestamp":1784552528919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 15:30:21 GMT","end":"Tue, 29 Sep 2026 16:27:50 GMT"},"fingerprint":{"sha1":"21:75:89:40:49:CB:1B:FB:A2:4F:1A:FF:87:01:DA:0D:73:C0:47:C2","sha256":"4C:2F:0D:D9:28:F8:B0:D6:C9:A7:88:BE:DA:96:4E:DE:5F:27:94:4F:DB:C9:69:5E:5C:E5:82:C6:6A:CA:A8:7B"}}},"request":{"raw":"GET /s/61286/MotivaSansExtraBold.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://6127576648.dojiner.at\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/css/motiva-sans?styles=101373,102902,102901,103845\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 13:02:09 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 05 Feb 2022 02:00:55 GMT\r\netag: \"f88c-5d73bbcdc080a\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xDVFgwSxwHnjF0Hk2pSq7yGsx7olTwf0Zs6TZnldOF7vQODLWpKFLKD%2BURj92Pe9KeTh7d7utH7rAmtQTkkX%2B8zXAXjCdzWjj5aafzVWe4cKVSAf7Qkea202cFk0uS%2FJken%2BRqk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1e22899cb821525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 63628\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63628,"size_decoded":64366,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 63628, version 0.0","md5":"e704d909203f0e6a4ac8624c1e1b6536","sha1":"061607c6a57e63580fc7a46658763ff36cdd926d","sha256":"54b3bf2e12e41641dee7690b6e0eccf778d341713cb957aff9012f41d923cbe2","sha512":"c92aa2ac2ca0c75ebc5edd5008579692c120f05b33bbbce2f7f835b9cecddc3f1064647aa0543b93e17770422d4105227b32d0300d37b92e5a66610ec9fc8036","ssdeep":"1536:uacKl4quxZGi4XBHTXzU+9kZq7F1Tkd4wC5IryvbDz:rBl4qqGiO1TXYBI1YdCIryPz","tlshash":"b0530135d8e5e518b941937f20b19a33ba4e3080b51fc9e5124ce2c5af1ae7bb0bd489","first_seen":"2024-08-17T14:39:17Z","last_seen":"2026-07-20T13:09:48.618152Z","times_seen":72,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":120,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6127576648.dojiner.at/211b7e002e030607114755454b4400225b0a51501919267622364c242a0e.css","fqdn":"6127576648.dojiner.at","domain":"dojiner.at","tld":"at"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://6127576648.dojiner.at/211b7e002e030600035f557d57065b0a62055250","date":"2026-07-20T13:02:08.573Z","timestamp":1784552528573,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6127576648.dojiner.at","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 12:02:07 GMT","end":"Fri, 18 Sep 2026 12:02:06 GMT"},"fingerprint":{"sha1":"62:BC:C6:75:59:9E:16:0F:3B:A3:7F:EE:7B:CE:03:DD:63:26:51:09","sha256":"49:E5:17:D9:39:00:D4:BD:00:C6:94:B8:81:0E:99:4E:C4:9B:23:97:E7:D9:DE:FD:CB:E6:4F:F5:46:10:AC:37"}}},"request":{"raw":"GET /211b7e002e030607114755454b4400225b0a51501919267622364c242a0e.css HTTP/1.1\r\nHost: 6127576648.dojiner.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.rxFWShgxEZ-3kF0FEu3wW5VyIhJX1WcJ.BdB0u-Q2pEpSve1_.m-8GOIfE4fXL0hiw_mMJzMWUukDA2Hr2GAs7fbmEiPUncBh9AWWrkuo0EWr8zjAqIXCUBaOVYFzeoi_qMAk-c6rZbcgK_MAaDDlG4eXSBn6AsO9ESlW_H3Kv_eOIOiMIkRg2r2V0aV4HX9E9FWw4YWMGmlv-N_3ss-Sk5JuQYgNC9NedbTsLQ0A4PY6WPVRK4xv94tGTNBzLLYRr8Trdcujknuuc419z7egb36667dFIS13ABJo-AkLY1xyeUVtkRJHryTuUDD9eT-hW7heM3RL_.6KLKGQ6sGKODWz9Dqo5aug; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTIwNywic2VjcmV0IjoiZWIwYWMyZWZiNDAxOGEyZDJkNTVhNGI3YWQ2YWM3NjQiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.HBWTHrOIT7M_Dc6VmI7iRyWYg_bYHnf9BTQ_RAT0suM\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Mon, 20 Jul 2026 13:02:08 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\ncontent-disposition: inline\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nlast-modified: Fri, 19 Jun 2026 22:37:50 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24830,"size_decoded":6928,"mime_type":"text/css","magic":"ASCII text, with very long lines (24829)","md5":"6d85d611f609ae2030ac157ec5f5f07f","sha1":"13337042e8fd252d2c0074e36622085559a126e6","sha256":"583e3e859643c1c9fffb20286c12a1df80ac6a470cfb5d195f56013d9447e4e7","sha512":"b22c9362c3e26d19b9f14f8099d807bbad20e9181acb81b094b8e65437b2a75ee79b51d6a32f24783289751a4bfb0d656f46525511e5906afaf1aa8973ce2369","ssdeep":"768:+lMQqMdSi0vqDrXKtTrCdwahYX87/yne5L8:2xSPqDmtTrCdwahYX87/ynr","tlshash":"b5b2963297613239711b8a253cc2a9859031bc4695ffdabdfa711c2f86490930fe72f6","first_seen":"2025-08-24T16:19:12.380926Z","last_seen":"2026-07-20T13:09:48.615773Z","times_seen":53,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6127576648.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6127576648.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6127576648.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.cloudflare.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1","fqdn":"community.cloudflare.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.33.119.64","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6127576648.dojiner.at/211b7e002e030600035f557d57065b0a62055250","date":"2026-07-20T13:02:08.900Z","timestamp":1784552528900,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflare.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 12:23:39 GMT","end":"Mon, 05 Oct 2026 12:23:38 GMT"},"fingerprint":{"sha1":"0D:02:A7:E3:B4:38:2B:DD:DE:46:1F:F0:B6:42:DE:3C:4D:9D:C0:BC","sha256":"E3:45:F1:32:F6:F7:BC:A5:6F:A8:65:F2:0E:6A:3A:09:17:8E:E5:5C:5F:19:F3:FC:93:81:34:E3:D0:24:B3:FB"}}},"request":{"raw":"GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1\r\nHost: community.cloudflare.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: nginx\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://community.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1\r\ndate: Mon, 20 Jul 2026 13:02:08 GMT\r\nakamai-grn: 0.3c772117.1784552528.15119999\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T20:24:29.14834Z","times_seen":17430674,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":1,"send":0,"wait":3,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1","fqdn":"community.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://6127576648.dojiner.at/211b7e002e030600035f557d57065b0a62055250","date":"2026-07-20T13:02:09.136Z","timestamp":1784552529136,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 06:33:09 GMT","end":"Tue, 22 Sep 2026 06:33:08 GMT"},"fingerprint":{"sha1":"19:6D:DC:98:BC:09:BE:D6:83:B1:DC:F5:FF:B7:3C:04:FD:C1:76:89","sha256":"35:83:44:F1:EF:BC:14:AB:36:88:58:F8:41:13:06:A6:4E:63:45:1B:0F:E0:E7:5C:BF:51:61:5F:54:3A:A6:C4"}}},"request":{"raw":"GET /public/images/skin_1/footerLogo_valve.png?v=1 HTTP/1.1\r\nHost: community.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-e99\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Mon, 20 Jul 2026 13:02:09 GMT\r\nvia: 1.1 varnish\r\nage: 3467\r\nx-served-by: cache-bma-essb1270036-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 1\r\nx-timer: S1784552529.136740,VS0,VE1\r\ncontent-length: 3737\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3737,"size_decoded":4136,"mime_type":"image/png","magic":"PNG image data, 96 x 26, 8-bit/color RGBA, non-interlaced","md5":"1626f52addb7c56fe3679d82108c62e9","sha1":"2b414092d66ecff528950093a655f755c3c7f3b5","sha256":"ae9f6c61e25d15882bf57bde193d10d375bd315c9741cabda11d700fd1bb7dd1","sha512":"05548831477cc421556c404f3411f581e98a84ff2e699882cb4f5dca17d1c5f77b55ed2b8211eec32d0a4317be1c4ebc636277f840262491b753415f6f198276","ssdeep":"","tlshash":"0e718e669660b49e18cd70910dce2581eb543268c5673b3865d236cea8a1d179f2d071","first_seen":"2023-04-16T19:19:52Z","last_seen":"2026-07-21T06:21:09.766381Z","times_seen":3312,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6127576648.dojiner.at/","fqdn":"6127576648.dojiner.at","domain":"dojiner.at","tld":"at"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-20T13:02:07.756Z","timestamp":1784552527756,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6127576648.dojiner.at","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 12:02:07 GMT","end":"Fri, 18 Sep 2026 12:02:06 GMT"},"fingerprint":{"sha1":"62:BC:C6:75:59:9E:16:0F:3B:A3:7F:EE:7B:CE:03:DD:63:26:51:09","sha256":"49:E5:17:D9:39:00:D4:BD:00:C6:94:B8:81:0E:99:4E:C4:9B:23:97:E7:D9:DE:FD:CB:E6:4F:F5:46:10:AC:37"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6127576648.dojiner.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Mon, 20 Jul 2026 13:02:07 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 441\r\ncache-control: public, max-age=60, s-maxage=60, stale-while-revalidate=30\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"1b9-0OoNSURucMK75Wb4RskPxSK2xus\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nset-cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.rxFWShgxEZ-3kF0FEu3wW5VyIhJX1WcJ.BdB0u-Q2pEpSve1_.m-8GOIfE4fXL0hiw_mMJzMWUukDA2Hr2GAs7fbmEiPUncBh9AWWrkuo0EWr8zjAqIXCUBaOVYFzeoi_qMAk-c6rZbcgK_MAaDDlG4eXSBn6AsO9ESlW_H3Kv_eOIOiMIkRg2r2V0aV4HX9E9FWw4YWMGmlv-N_3ss-Sk5JuQYgNC9NedbTsLQ0A4PY6WPVRK4xv94tGTNBzLLYRr8Trdcujknuuc419z7egb36667dFIS13ABJo-AkLY1xyeUVtkRJHryTuUDD9eT-hW7heM3RL_.6KLKGQ6sGKODWz9Dqo5aug; Max-Age=21600; Path=/; Expires=Mon, 20 Jul 2026 19:02:07 GMT; SameSite=Lax\ntoken=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTIwNywic2VjcmV0IjoiZWIwYWMyZWZiNDAxOGEyZDJkNTVhNGI3YWQ2YWM3NjQiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.HBWTHrOIT7M_Dc6VmI7iRyWYg_bYHnf9BTQ_RAT0suM; Max-Age=21600; Path=/; Expires=Mon, 20 Jul 2026 19:02:07 GMT; SameSite=Lax\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":441,"size_decoded":1883,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"5ff6d27f35b1585039b675419de318de","sha1":"d0ea0d49446e70c2bbe566f846c90fc522b6c6eb","sha256":"bc3c7681f123cd0a8861bf33fda99f8f958ec2f1db05776a102c70366d7a2d82","sha512":"d0b27dbaa6e00d7677750c8f389c8b8e1e2ac9a005f34c42dd6e68f4edf85f498c341bc7002e0fc165decf0ed6746dc26f221f96a6a1595753b0ea6c32d1012b","ssdeep":"","tlshash":"9cf02bd95ffb5420057375140faeb10c2adfd15b2006cd543bcc56881f51ba58c429d0","first_seen":"2026-07-20T13:02:39.89439Z","last_seen":"2026-07-20T13:02:39.89439Z","times_seen":1,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":7,"connect":29,"send":0,"wait":51,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6127576648.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6127576648.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"6127576648.dojiner.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}