{"report_id":"4967c475-560c-4032-887e-2c9e594786e8","version":0,"status":"done","tags":[],"date":"2026-08-31T11:03:47Z","url":{"schema":"http","addr":"s.team-zi.com/p/sst-cgj/lctwghft","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"title":"Steam Community :: Pure","dom":{"size":92754,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2130)","md5":"df6c578d21d7d7cb94c3f4dd7e67c77c","sha1":"c82ec9e89795909b149ffa34a5517e6c6ac593ad","sha256":"2d25ab107770758bfa2d1334e360939af2613a1da07710c7e1968bdbcb1bec22","sha512":"48a415d450eeff89c11efc9cc8daf4e5b67ddd6a6ea99f200cbff40105a00e7625dd027e3e9f41b5870bfbae51743871611acdf9a8684f65afd9c01a705628b3","ssdeep":"1536:Ba4Z5rvv9SxAPelR2iQJ+UPG0BpiTPcAPvIAnMDMMQn:BawgtnMDMMQn","tlshash":"e3930a6254f1403712cbe2d0b6a61f0f7e52a62bd8054f21fbbd0ad49fe5dd2aa6301d","dom_hash":"domhashd5a2cba42c59631b03fa30fb186184a4","first_seen":"2026-08-31T11:03:57.030505Z","last_seen":"2026-08-31T12:17:02.478495Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"s.team-zi.com/p/sst-cgj/lctwghft","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T11:03:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"i.pinimg.com","ip":{"addr":"23.36.77.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2010-05-29","domain_rank":5120,"first_seen":"2015-10-15T00:21:29Z","last_seen":"2026-08-28T08:26:30.984579Z","alert_count":0,"request_count":1,"received_data":90226,"sent_data":574,"comment":"","tags":null,"fingerprints":null},{"fqdn":"community.akamai.steamstatic.com","ip":{"addr":"23.36.76.128","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2013-11-07","domain_rank":177446,"first_seen":"2021-01-05T18:54:34Z","last_seen":"2026-08-28T20:00:29.299803Z","alert_count":0,"request_count":14,"received_data":182643,"sent_data":10487,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"shared.fastly.steamstatic.com","ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-11-07","domain_rank":78219,"first_seen":"2024-10-15T21:07:30.155663Z","last_seen":"2026-08-26T02:51:52.170756Z","alert_count":0,"request_count":6,"received_data":487018,"sent_data":3704,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":1,"received_data":5571,"sent_data":559,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.fastly.steamstatic.com","ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-11-07","domain_rank":93505,"first_seen":"2024-10-16T05:53:45Z","last_seen":"2026-08-21T17:56:01.81085Z","alert_count":0,"request_count":1,"received_data":1141,"sent_data":598,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"images.steamusercontent.com","ip":{"addr":"23.36.76.155","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2014-12-04","domain_rank":202284,"first_seen":"2023-12-07T13:39:19Z","last_seen":"2026-08-28T03:22:56.56797Z","alert_count":0,"request_count":1,"received_data":9651,"sent_data":604,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}]},{"fqdn":"s.team-zi.com","ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-09","domain_rank":0,"first_seen":"2026-08-31T11:03:50.421841Z","last_seen":"2026-08-31T11:03:50.421841Z","alert_count":62,"request_count":31,"received_data":2233665,"sent_data":16018,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"community.fastly.steamstatic.com","ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-11-07","domain_rank":159922,"first_seen":"2024-10-31T18:27:03Z","last_seen":"2026-08-30T09:29:58.419581Z","alert_count":0,"request_count":21,"received_data":204230,"sent_data":14003,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"tbnoviytatic.com","ip":{"addr":"172.67.166.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-29","domain_rank":0,"first_seen":"2026-08-31T10:05:34.749913Z","last_seen":"2026-08-31T10:05:37.28306Z","alert_count":0,"request_count":16,"received_data":2203051,"sent_data":8841,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"store.fastly.steamstatic.com","ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-11-07","domain_rank":81796,"first_seen":"2024-10-31T18:26:40Z","last_seen":"2026-08-30T04:33:10.311642Z","alert_count":0,"request_count":4,"received_data":56613,"sent_data":2352,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tbnoviytatic.com/abbc8b926","fqdn":"tbnoviytatic.com","domain":"tbnoviytatic.com","tld":"com"},"ip":{"addr":"172.67.166.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-31T14:38:41.770986Z","times_seen":93342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a078c8ce55f83199dacae7b7b2bf85e8","sha1":"0e263663be2bcc374e1613945ac9ae520c98c18c","sha256":"e76565f284d8343efeffc29349d1ef7b47495a657cd16ea21227611e20be6131","sha512":"d8bd2f7efd3c8c674e107b7c8d257e2c15958e7e3da436bcaad5bc51eec94a3614938d203365c080319640d622bddaa12b8fcd70692eab0c314bcd118cb0bfa2","ssdeep":"","tlshash":"28d0273a1c54c110557d58c51cb1913dfc7d3b3b4459dc45f24f44e41140bf40b09854","size":291,"data":"","first_seen":"2026-06-26T02:14:11.760042Z","last_seen":"2026-08-31T12:17:02.540989Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6dc0136a4747bbbb35450c83e8fa60c2","sha1":"59bd75021b172b0474f23d7c528d8ddf8be68206","sha256":"97feb15d1aa6dd4080118effd700213fd949327a73bb34db9606759b97218d76","sha512":"7caaeacc35169b1e96281d6263df51b63fa9467fa102283491624c2f3ac795575fa43026c5f872d78bda4fbbae776d14c3124336848449a31fe0733ddc450302","ssdeep":"","tlshash":"d8c02b23457b20700123e018120ff704217200431182dc3a3e0c09cc0f6c708076088c","size":145,"data":"","first_seen":"2026-06-09T13:58:31.609365Z","last_seen":"2026-08-31T12:17:02.541496Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d91de63be5a393c235625c6803da424b","sha1":"856d7c80623a2a97dfbae4649c64a0e46b62e976","sha256":"69a6bc22c5d056c7df0b56fd9d2e32b71493e21508cf75df6de781b88a16ad08","sha512":"1e32c0c4aaaed2932d88fce393f7bf0739ed190e44b66c108f2d9a13f2c373de62572de78ca4cc6cac9df04b222aa5393f28b141ab0c154e79e5afd8ffcb339a","ssdeep":"","tlshash":"40e0cdbbfb771038e961c4afd11dd55815354117c45eb530782c92542f86658d742fd0","size":342,"data":"","first_seen":"2026-06-08T00:24:27.100605Z","last_seen":"2026-08-31T12:17:02.541997Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7958aae2d70493ce09fbb45d27e1dbb9","sha1":"4be9dae37f247824a4976c126e70a3df1f0ea8ac","sha256":"8520c3b299c64208e6905e6256dff980ad666536d9959d03c7ff7519355cee4f","sha512":"94ad322808b2a48d6cad05dc68d8c2a1966611c2588e630993c896f9bfe3d56aaf39c76130057e6ff2e1ff18817ca399f63c410d714573be449c899099ae2097","ssdeep":"","tlshash":"8e11006a7d37815aa49e4ce047aba41ff1192e772882c843778d01908fd07f10b1cc5e","size":1038,"data":"","first_seen":"2026-06-26T02:14:11.762699Z","last_seen":"2026-08-31T12:17:02.542928Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"88f23780faf92d3f8a3ee369e158b088","sha1":"3316ed79606681cc47f3a490d84ee50189cf9e2d","sha256":"d348e6cf8fbc4104bb4d6c7d8130646e6ce3484b88ee6a09a2a9c196f3a5e373","sha512":"9da83fc4b402d446e5fbb700aafbd9a83caccfe197d160c5c516a496f587bf6db5e04e26cab228798f2e29b277a4b8f5330944da90057b32c5348c5d549949d8","ssdeep":"","tlshash":"72f0ab1138df100b576a38cc66774a29331026ab379cc1017b1c96092f0dbcf8c5b39b","size":527,"data":"","first_seen":"2026-08-26T09:38:33.217565Z","last_seen":"2026-08-31T12:17:02.543793Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a06850cdc4fca8077520540dad8d1a57","sha1":"6fb5ad8cf0aaf2ea82949b1f80aaf4df0554c79c","sha256":"b802e2f03a9d32cfc3991d49e89ac795a469711dd933e02904b553cd089f64c0","sha512":"58ad8d4dbd51eab47e668a5e3b570a77a9bc323a99422c233189f9b0968e4911efe563dcb1a974b0c4300eeae1c162afb68a4634b4a8de2acc615f922199cde9","ssdeep":"","tlshash":"eba0220f000c20030af2bf80f03f80f20082202c008b08020c08002a2b2a028a2c2028","size":68,"data":"","first_seen":"2026-06-11T00:49:01.169566Z","last_seen":"2026-08-31T12:17:02.544267Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b46809204d8cd5b8186cd4f61bed86c1","sha1":"815467ba59825e0fbc4ac950d81f22342861a17a","sha256":"accffacaed1a1a6f23ea2bf181282bbdb69575a3d47b05ead4a9208a4f370fd4","sha512":"4d6f8934761241724a46690dd7b3d37aee1370e159d68f41600c3df1ab3184293a8d866617556b1e516ec83131b296402a008e6ce88c54f68adb53bfb4188a32","ssdeep":"","tlshash":"78e02619ade200b6089fa4a9d37b87c032f03097e483c110381d88c54f3c96020207cc","size":387,"data":"","first_seen":"2026-06-11T00:49:01.170794Z","last_seen":"2026-08-31T12:17:02.54501Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"40deebb4f364611ad6732e7d59940e09","sha1":"c89fc95a81f228cc385c8a68b34b2c4b18bfc6e5","sha256":"dd53e3f7645e20af0b6f4a68c3721ae09b8c5156d08c412e11c6763d297f783b","sha512":"d3f89faf79d2cd14c46a6e189a40a2d5a9eb9345de0e89e2d1e4a66cf629c3b045f1bcf1fd079e7fb961840977d3b1b948775232a67ac9abfc98ae606d4e1282","ssdeep":"","tlshash":"a9012897927d077203e7961a6bdb561ab730404756808e0c3f5c42c20fbde5505f51f6","size":668,"data":"","first_seen":"2026-08-13T09:02:03.765885Z","last_seen":"2026-08-31T12:17:02.545514Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8ec65138bae60b9a4cf7af5d92695a98","sha1":"4551f5b14412c96773a5e8d03c3eaa1e27845d09","sha256":"7233416468e11be6efe7515ce80483377ddf63a5b321416fd2f23eb2b34794d5","sha512":"b088227d870a98e3c7189507026238d64d5cb798fdcf6afa5c3fe331c952349723e9627af75372ba96fa6bb10a1525be6826a0d557231d71e8d84c2d6865d8f9","ssdeep":"","tlshash":"a5219e296f66553e401a826e4b98e6807574008b018fd1287a7c1fde3fc3c54c5bb6f2","size":1377,"data":"","first_seen":"2026-06-26T02:14:11.767766Z","last_seen":"2026-08-31T12:17:02.545979Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tbnoviytatic.com/abbc8b926","fqdn":"tbnoviytatic.com","domain":"tbnoviytatic.com","tld":"com"},"ip":{"addr":"172.67.166.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5adb657667231c0709e65790a05b7e1b","sha1":"4c01e1d013ad4e1d54f73505ba52525bbdf0277e","sha256":"40c790241da7b664845aba7db502e7c3ff03a37bd4f6b99de6218dc1a3439500","sha512":"da9962271d2e22a5b534fe88836ec4c4cab567d69e179ee7076ef771756bcf739297450cfabddc0e493f808a56e13016134affda7feb13a121a18f96c6b96105","ssdeep":"","tlshash":"bce07dda49322a8bf45f99e0596f024933108af2b895130cd78c8407f865506f0710b0","size":299,"data":"","first_seen":"2026-08-31T10:05:42.601742Z","last_seen":"2026-08-31T12:17:02.546891Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tbnoviytatic.com/abbc8b926","fqdn":"tbnoviytatic.com","domain":"tbnoviytatic.com","tld":"com"},"ip":{"addr":"172.67.166.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-31T14:52:16.387178Z","times_seen":238765,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tbnoviytatic.com/752180f7a/0b9aa/df97703.js?v=eisHsuZU","fqdn":"tbnoviytatic.com","domain":"tbnoviytatic.com","tld":"com"},"ip":{"addr":"172.67.166.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eba51a61894a773df5cab2a18e499c0b","sha1":"e028428f4f367af2660a66e976f223695020e732","sha256":"225edf54855697e6207ba9bded4d041d824e44c7c842f2803ede51764a9e54ab","sha512":"a57c4b5a43b3b629737c98ca9fb0cd549bc35c300208c23690bf9f04312d2aaca179d6cf523f031f2d6dcd42b4e8156a149b0ae676cc09737a6615c8d7119cfc","ssdeep":"1536:DPEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzmQ:oNMyqhJvN32cBC7M6Whca98Hrp","tlshash":"bd93d8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","size":95701,"data":"","first_seen":"2023-03-07T12:27:03Z","last_seen":"2026-08-31T12:17:02.509184Z","times_seen":242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tbnoviytatic.com/752180f7a/0b9aa/d5dcaeb.js?v=eisHsuZU","fqdn":"tbnoviytatic.com","domain":"tbnoviytatic.com","tld":"com"},"ip":{"addr":"172.67.166.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"295fe6d749a1a2faeab308626a8ba602","sha1":"827589947f63c84b8159c57b7b5cd901192de16d","sha256":"7df812a84af2bdd98beb6a55359d8a2ad443486c9d0303d600c04a06a286920d","sha512":"850cc4fdd4da63ec6d0322e8d0188cd2995d0f48fe11224c0751290df72f2c3d55fa81c95377b29521e98db412bfef917722f28fc30c453d8c223936de57d0fe","ssdeep":"12288:DBXJ72eiOPzFkvKy37zi46dldgk/ftFir1LeseoPF7c+BvDSOGK+EDv6:VF/hkvDHDM7i0seopc+gOrd6","tlshash":"41652ed53e44e73e40c2e7f7633de351f89ed1664b8f0a43b06a9d88a5a9602cd27970","size":1460580,"data":"","first_seen":"2026-08-31T10:05:42.600762Z","last_seen":"2026-08-31T12:17:02.548102Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tbnoviytatic.com/abbc8b926","fqdn":"tbnoviytatic.com","domain":"tbnoviytatic.com","tld":"com"},"ip":{"addr":"172.67.166.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-31T15:30:22.84494Z","times_seen":750903,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/js/main_1.js","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.396Z","timestamp":1788174190396,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft/js/main_1.js HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/p/sst-cgj/lctwghft/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y2dfdMkfJlS9atVzjfXJQGy7PlNy5kUgkoGMscihjNrANvsUiSY6%2F6tonf99OLFtv%2Ft6GZogDQhROeaZrH8npePrvIwq5fGQdMsEuNlhMAuOTG5nhV5%2Bls1ybEY8Ok4s\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33b8c11f9cf23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196,"size_decoded":810,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"62962daa1b19bbcc2db10b7bfd531ea6","sha1":"d64bae91091eda6a7532ebec06aa70893b79e1f8","sha256":"80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880","sha512":"9002a0475fdb38541e78048709006926655c726e93e823b84e2dbf5b53fd539a5342e7266447d23db0e5528e27a19961b115b180c94f2272ff124c7e5c8304e7","ssdeep":"","tlshash":"c0d0129e9183638b442225907ac211d2654d13a6b87645e82d82a48a951857dc5ca69d","first_seen":"2023-03-07T12:06:54Z","last_seen":"2026-08-31T15:17:32.886724Z","times_seen":112563,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH-XExsm1J37Y7Ft4-5Xg61XYUhX-i5rk-DBIoPujZat_NPGfMXSYzvt6tOR7XGfglk8h6zzWnNaocymQaFRxDJJxRu4C4xG9x4W1N-Lh5gLdjd1GyC_4kGoXueyQ-bge/96fx96f","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.497Z","timestamp":1788174190497,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH-XExsm1J37Y7Ft4-5Xg61XYUhX-i5rk-DBIoPujZat_NPGfMXSYzvt6tOR7XGfglk8h6zzWnNaocymQaFRxDJJxRu4C4xG9x4W1N-Lh5gLdjd1GyC_4kGoXueyQ-bge/96fx96f HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\ncache-control: public,max-age=604800\r\nexpires: Fri, 26 Dec 2025 02:21:23 GMT\r\nlast-modified: Tue, 31 Oct 2017 22:18:34 GMT\r\naccept-ranges: bytes\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nage: 3229\r\nx-served-by: cache-bma-essb1270042-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 1\r\nx-timer: S1788174191.792048,VS0,VE2\r\ncontent-length: 14213\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":14213,"size_decoded":16198,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"93a938ecab1c33555fc55c54fc19c332","sha1":"a3cf14b713d666c9a704542483b79e464ae8aec9","sha256":"988166346d7994f1176c16d507768b65ed42df18e55f6c0a9eb35ac2afb326b2","sha512":"7643fe18d32bad23450ca6e4aab357c440483158ec8e8c54428fb48e0f9c8cef8a442c567f2ed21bf0e68270fde9ee5b3f91761db2585cb59c8fa53f6dfc214b","ssdeep":"384:UWW0ZvNrL6mlPoAhfNXtJ1J4VX8LAsD9Ya7tBMQ1f5X:UWpNlL6mhoAhfCF0D9Ya5X","tlshash":"6452d0c7a9b81eb1eec28d12dc971e1e3c2d6f442b07a7b499900ab774044e8d5ecb94","first_seen":"2026-08-13T08:30:02.693047Z","last_seen":"2026-08-31T12:17:02.520065Z","times_seen":13,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":197,"dns":0,"connect":0,"send":0,"wait":63,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGJG51EejH-HRwt6pMGmo50Nn-o767RflQhulzcW5-SNa7KP-bqJpcKjLWjGVwrh1teNsGyznlEt_sTvXmImsbzvJOW7rcy6H/96fx96f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.128","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.519Z","timestamp":1788174190519,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGJG51EejH-HRwt6pMGmo50Nn-o767RflQhulzcW5-SNa7KP-bqJpcKjLWjGVwrh1teNsGyznlEt_sTvXmImsbzvJOW7rcy6H/96fx96f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 16 May 2016 22:33:41 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 12905\r\nCache-Control: public, max-age=354736\r\nExpires: Fri, 04 Sep 2026 13:35:26 GMT\r\nDate: Mon, 31 Aug 2026 11:03:10 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12905,"size_decoded":14734,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"311562407014b5d6d3e34f94a0f0085a","sha1":"f27840f547d32433b682788b4a63ab2677eba25e","sha256":"fe12009d04b6db9ab82e0117d5aeb6262d8edb57faa3c0acd841cf20bd182367","sha512":"d0ffe966aa4f36a3b39a61819d195ca5b25dc782372154265836207ef4c619f3553613e5db5525b69bfa3074ed9e80f36b56b2eaa9af1dbdf9150e377fcd9491","ssdeep":"192:yAbQU8bBld3GNuRobdoWubtXocq3PBVM2wfpAhkALb5LPh20:yAbQU+TGERIdonqcCZVMHBAyS1F","tlshash":"cb42bf9f8b9654c50cd7b3b20dea5102c6629919d352149293efcd63f09dc204dfb59d","first_seen":"2026-06-11T00:49:01.062932Z","last_seen":"2026-08-31T12:17:02.517287Z","times_seen":36,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tbnoviytatic.com/752180f7a/0b9aa/a30930a.png","fqdn":"tbnoviytatic.com","domain":"tbnoviytatic.com","tld":"com"},"ip":{"addr":"172.67.166.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tbnoviytatic.com/abbc8b926","date":"2026-08-31T11:03:11.672Z","timestamp":1788174191672,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tbnoviytatic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 14:37:22 GMT","end":"Fri, 27 Nov 2026 15:35:55 GMT"},"fingerprint":{"sha1":"B8:09:FE:61:80:08:81:A1:08:26:A4:17:F7:07:46:07:50:46:B1:17","sha256":"3A:B2:B9:EB:2C:E3:AB:48:5B:6B:B3:79:A3:62:50:09:4E:96:93:AA:E0:B9:3C:87:62:A0:CE:EF:CC:07:70:EB"}}},"request":{"raw":"GET /752180f7a/0b9aa/a30930a.png HTTP/1.1\r\nHost: tbnoviytatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tbnoviytatic.com/abbc8b926\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:11 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nage: 3503\r\nlast-modified: Mon, 31 Aug 2026 10:04:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wEWi0ObiLOSx0I5cCKat6JJZBNb%2BQ83DsyzF%2BF%2F5WpsdO3RLLmfET0xvJSpPqY9QFFE3EW3AimnrYe9zgH%2Bi%2BELj48epTLkGtl2uC0I%2FndCaZbaAGDdnX5io8pWllrQVhEGR\"}]}\r\ncf-ray: a33b8c19f88d56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7836,"size_decoded":8471,"mime_type":"image/png","magic":"PNG image data, 356 x 89, 8-bit/color RGBA, non-interlaced","md5":"be6972cc3ce26517c2d425ba0d9f5779","sha1":"49f709926e89b840caa71b5677c808f89b6fbe91","sha256":"8c3a05f82b80b6d633a3cab543f9ff7f1b3ba2e4aa12cb12eae12e7a4976c499","sha512":"ad1e3a0f6dd1fc8fc52e975d7d07b7ef63c8f6d83f509d32ef1960f5765f575f705c81fbd24ce222a5cb6480efbc9ae267a55478b184c9e69a68f6a668d055c1","ssdeep":"192:1arNSKbjKw0wC+2Ky84PcTct00brVXzmJUNheT2Y:WEKXF0wCyyBPcQq0bB6KhA2Y","tlshash":"1ff1aee1b0329a5cb4844a9bdaa6203e4add95800af3ccc4570faf75e7db20550daf1b","first_seen":"2026-04-23T02:33:12.452597Z","last_seen":"2026-08-31T12:17:02.483334Z","times_seen":4,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/shared/images/award_icon.svg","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.465Z","timestamp":1788174190465,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/shared/images/award_icon.svg HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-94e\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nage: 53821\r\nx-served-by: cache-bma-essb1270042-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 1357\r\nx-timer: S1788174191.796270,VS0,VE0\r\ncontent-length: 2382\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2382,"size_decoded":2789,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b6d84fce4193d4f91cb2373259b5333a","sha1":"ad1157e4f0e24c8ce671af84187a6c013f13d04c","sha256":"b972d744ba896f74221183731c0a24cc79acfa434ab60dc746221cb802617ea7","sha512":"a807d31ac243722e36af42860509f03ad208a7062ac5b84170207d9d812af1852800be4c174587e44eba0c02ac43722433a40a63939e315c1cbe32dde91401a2","ssdeep":"","tlshash":"df4125fb524261d6ec4fcbf8dd3b59a5719e34ba7ea4829541349a3076742e8480dd04","first_seen":"2023-10-31T01:09:47Z","last_seen":"2026-08-31T12:17:02.503286Z","times_seen":819,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":54,"receive":18,"ssl":264},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH_jR1c-zOHSF4Blm_Ibw5U7hSBj_mqnk-C9U4c2rabBoMr6SC2KVkLgl5OA-TC21lxx-sGuGwtz6eS2ROw92CcBxRLEIshHrkNDkKaq8sPDxdt5E/96fx96f","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.492Z","timestamp":1788174190492,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH_jR1c-zOHSF4Blm_Ibw5U7hSBj_mqnk-C9U4c2rabBoMr6SC2KVkLgl5OA-TC21lxx-sGuGwtz6eS2ROw92CcBxRLEIshHrkNDkKaq8sPDxdt5E/96fx96f HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\ncache-control: public,max-age=604800\r\nexpires: Wed, 01 Apr 2026 00:02:40 GMT\r\nlast-modified: Tue, 24 Mar 2026 23:38:11 GMT\r\naccept-ranges: bytes\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nage: 294714\r\nx-served-by: cache-bma-essb1270042-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 388\r\nx-timer: S1788174191.784490,VS0,VE0\r\ncontent-length: 13336\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13336,"size_decoded":15325,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"a8b3aeb86fd4760850e21b79cf244ab3","sha1":"038081e2f9ae1a33cd2ea400ad725ed85094e161","sha256":"69b805aeadaea14c26adfb57a9d711774f2357bc5e65b372371ee7c07d84afc4","sha512":"9cde35009f33697e36dfd77431847b9e73d71b3d9c9b9f61e740590dedca4b5cf8141f06b9420eb5eb6447a2d46fb1a9b12a5653afec71efb9580aedfa2f9d5a","ssdeep":"384:BsnIdXsouDimmf/dWRG8YOL8jTZTz2pyZG/u2ytHJrsVGI:BsnC2iPtU0VvFZNRf0GI","tlshash":"7352d1dce9bfb6004273c6d5225e4c514a9f6be1f36f287d697d54f0be893a06024492","first_seen":"2026-08-13T08:30:02.635849Z","last_seen":"2026-08-31T12:17:02.525799Z","times_seen":14,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":214,"dns":0,"connect":0,"send":0,"wait":42,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH-XExsm1J37Y9kZw95Pm72bmUx7wkJev7jJe7Oa8bZtsMvOSAGavyet3tK8wTHCykRt34WSDyIqvIi7GagZ1D8F4F-5bs0a-wNziYujktgDd349E02yg2WCvb30Y/96fx96f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.128","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.517Z","timestamp":1788174190517,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH-XExsm1J37Y9kZw95Pm72bmUx7wkJev7jJe7Oa8bZtsMvOSAGavyet3tK8wTHCykRt34WSDyIqvIi7GagZ1D8F4F-5bs0a-wNziYujktgDd349E02yg2WCvb30Y/96fx96f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 23 Jun 2021 22:39:52 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 14515\r\nCache-Control: public, max-age=409072\r\nExpires: Sat, 05 Sep 2026 04:41:02 GMT\r\nDate: Mon, 31 Aug 2026 11:03:10 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14515,"size_decoded":16344,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"355af14c7469c98fac6e525d2da801a6","sha1":"36d40b324b6a302427b48f2ec607037a510082fa","sha256":"01dcca8b87c44cbbb87b76f95759983e7d2110461775f8d9357cf4557f8b36e6","sha512":"8f17883d53f896cc7906c26abc574079c37a8bd534faeebbe10761eef6410ee934579ca088388a6f3891544e2d7a36e2280bf70a1ca397240646714cced8ec64","ssdeep":"192:B8f1yYhBSVjmFsM6yPtHsCXJSmiyOjXx4wSlla9fgQHYK3+8kKwsdarjUEsGB2Jj:yhOZmiOdQjh84fhHYKuR2dEuNJ4wObS1","tlshash":"4052d033d679d13b4aea631b2b6de811047da02b71cf77c2687b2e441bc1eb95b09498","first_seen":"2025-11-26T00:23:13.886654Z","last_seen":"2026-08-31T12:17:02.499851Z","times_seen":40,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/images/btn_header_installsteam_download.png","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.726Z","timestamp":1788174190726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft/images/btn_header_installsteam_download.png HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/p/sst-cgj/lctwghft/css/shared_global.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 28 Aug 2026 10:23:28 GMT\r\npriority: u=4,i\r\netag: \"6a9161a0-123\"\r\nexpires: Tue, 01 Sep 2026 10:04:47 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 3503\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gNx%2Fm01zcGdOlYUSPbYCbU9dzmyoFzX16MNfzvu8UUHCZp7TPSGiuh7ZkydRxvK76uZu1tg6%2FKxp351pc6fEDz7w4CWsLV40Sj%2F6bkQ%2BVLhM0xS%2Bw2omQMzUB32ioDXL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33b8c140a3323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 291\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":291,"size_decoded":1025,"mime_type":"image/png","magic":"PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced","md5":"a2796187c58c7e948159e37d6990ecc2","sha1":"4209cd85add507247f9ce5a87a8c9095b54ee417","sha256":"23341256db7f44b1f3811880fa2bae6b7748bbf6b62c544a162e38cf0d5c5082","sha512":"5ef103b8398507495c2708df8fcd82bdb763b1d580aaaa6cacfb805614764277c19e8ece5d890a8aafc004fc8c25e3ab2e67d6fbf373c432a9a0d7c36fa0890f","ssdeep":"","tlshash":"83d0ebf3a3e86d79fb52fe97d10180e0465fcaeb6004877889c3880447a81f880f2996","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-08-31T12:17:02.49201Z","times_seen":7577,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tbnoviytatic.com/752180f7a/0b9aa/47ff61b.png","fqdn":"tbnoviytatic.com","domain":"tbnoviytatic.com","tld":"com"},"ip":{"addr":"172.67.166.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tbnoviytatic.com/abbc8b926","date":"2026-08-31T11:03:11.827Z","timestamp":1788174191827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tbnoviytatic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 14:37:22 GMT","end":"Fri, 27 Nov 2026 15:35:55 GMT"},"fingerprint":{"sha1":"B8:09:FE:61:80:08:81:A1:08:26:A4:17:F7:07:46:07:50:46:B1:17","sha256":"3A:B2:B9:EB:2C:E3:AB:48:5B:6B:B3:79:A3:62:50:09:4E:96:93:AA:E0:B9:3C:87:62:A0:CE:EF:CC:07:70:EB"}}},"request":{"raw":"GET /752180f7a/0b9aa/47ff61b.png HTTP/1.1\r\nHost: tbnoviytatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tbnoviytatic.com/abbc8b926\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:11 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nage: 3503\r\nlast-modified: Mon, 31 Aug 2026 10:04:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fi4SyiQRvwQtoUKhyZLvBTYmAFQxVcIMbuPqe8weoNJfTO8ON9GJkvvHkmpV5G8HVuyd%2BVGH7kF7Bzoub1rUN8IZgXoDRdQXwLbxvlJ2q0q3kn19JwIxtdtswubssh0WIyjz\"}]}\r\ncf-ray: a33b8c1ae89b56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34034,"size_decoded":34659,"mime_type":"image/png","magic":"PNG image data, 772 x 528, 8-bit/color RGBA, non-interlaced","md5":"4f7ebbf0be0fff24be03a177c95b0808","sha1":"692ec41d4203c6c912f602c33a699451a2ca7a44","sha256":"6ba3974310d3ed788598cf7e2f6c9c7a1b64e1d26744a9066b4c32b0cec124c2","sha512":"4668d88d75ec235ee11b7593d9e461ff290f8aa1de61774ecf93ed01edd300f1edd7cfec2e346ccdc309db0af134d40a6f592a5c0d582cdc562051d5e62899ed","ssdeep":"768:p1a5IGjCYg+vDM9fTNme5JkHneocGmHM9XZ/By4kPoE:La5IGjCYFvQ9f5mwJV5utZ/BtE","tlshash":"70e2c0270ff8d9d39bdff7345a79704d56a982118a4e6d3985f80caad24bc21b43f209","first_seen":"2026-08-31T10:05:42.58161Z","last_seen":"2026-08-31T12:17:02.523548Z","times_seen":3,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH_zBxM2kJ3WW8EI69ZX361fmDhfkmZHl7yxa-uaRabZuIf6SMWCCxOt4_rMxGSqwkRh04GmGmIusIn6WbgJ1XJYlEOJZu0K8k4e0MLnm4Q3Wj9hbjXKpF3HkZ_M/96fx96f","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.488Z","timestamp":1788174190488,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH_zBxM2kJ3WW8EI69ZX361fmDhfkmZHl7yxa-uaRabZuIf6SMWCCxOt4_rMxGSqwkRh04GmGmIusIn6WbgJ1XJYlEOJZu0K8k4e0MLnm4Q3Wj9hbjXKpF3HkZ_M/96fx96f HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\ncache-control: public,max-age=604800\r\nexpires: Tue, 27 May 2025 22:34:32 GMT\r\nlast-modified: Tue, 09 Jul 2024 22:41:14 GMT\r\naccept-ranges: bytes\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nage: 575951\r\nx-served-by: cache-bma-essb1270042-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 13\r\nx-timer: S1788174191.796419,VS0,VE0\r\ncontent-length: 14355\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14355,"size_decoded":16310,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"f2f5f71174cdd7858fc29a8ec834fdfd","sha1":"9b13388b95923099b5a71bc963ac609f9e53995e","sha256":"4f071b24082fccae464cd7d72366ea3949e13a81428388ddb428896caab99d8e","sha512":"338db61b9b4b0e3ba59652579ae58c4c6411ba671140866025d721c966e2b61db49802e5bc11a723d767014332cef655736b613ca4ea29c61002f2075ef087d3","ssdeep":"384:kcU1jeR0x6IfA4jo/DayKGDZjXZY3ycebqFsZZ4Tee4sUTd1:kcU8o8/GKZjX0ebqFsZiNXUf","tlshash":"8252cff863c4db220bde5b50897d3b42f65c458a8fb36d0217cac64b87590843de9b29","first_seen":"2025-11-26T00:23:13.839892Z","last_seen":"2026-08-31T12:17:02.497205Z","times_seen":18,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":55,"receive":19,"ssl":263},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGJG51EejH_fRxMOyPXSb4VNny5P9uwmpGBv0n8a3rXZZ7KCvaqBueKTACzLBl750tOBoHH_gx0Ult23VyN2gJGXXMFFQpYs3Vg/96fx96f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.128","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.521Z","timestamp":1788174190521,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGJG51EejH_fRxMOyPXSb4VNny5P9uwmpGBv0n8a3rXZZ7KCvaqBueKTACzLBl750tOBoHH_gx0Ult23VyN2gJGXXMFFQpYs3Vg/96fx96f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 25 May 2020 18:36:53 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 14828\r\nCache-Control: public, max-age=209061\r\nExpires: Wed, 02 Sep 2026 21:07:31 GMT\r\nDate: Mon, 31 Aug 2026 11:03:10 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14828,"size_decoded":16657,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"984cce5b69d3bef6df91a67c3cdd480f","sha1":"c6a4e80502c1ccc5ed5c5856a6c6876f15b40bad","sha256":"a7fc8aa731942de8f27c814c73f1df0cf5afaabbdc6e6454b68876283f8c6e2e","sha512":"b63e0cb65b71d09f8affb668f8dfb7e0d5827a2f8214bd45add9c7e778a76c98137362b4b4949b60cce247751dab2f14513c7c85ffc8467a44b4a8c5a8cc9b19","ssdeep":"384:inZ+2Hjkk6LFVxsSNvV1he83X5428Zvxmnzpj:s88jkk6RcSto83pcxs","tlshash":"3962e0c8bb6148e357242d1e1d6061ff73fb1e2e6246ce1fa1619a10fa0ad3765b144f","first_seen":"2025-10-05T05:51:20.348913Z","last_seen":"2026-08-31T12:17:02.485741Z","times_seen":41,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tbnoviytatic.com/752180f7a/0b9aa/c52ef85.ttf","fqdn":"tbnoviytatic.com","domain":"tbnoviytatic.com","tld":"com"},"ip":{"addr":"172.67.166.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tbnoviytatic.com/abbc8b926","date":"2026-08-31T11:03:14.034Z","timestamp":1788174194034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tbnoviytatic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 14:37:22 GMT","end":"Fri, 27 Nov 2026 15:35:55 GMT"},"fingerprint":{"sha1":"B8:09:FE:61:80:08:81:A1:08:26:A4:17:F7:07:46:07:50:46:B1:17","sha256":"3A:B2:B9:EB:2C:E3:AB:48:5B:6B:B3:79:A3:62:50:09:4E:96:93:AA:E0:B9:3C:87:62:A0:CE:EF:CC:07:70:EB"}}},"request":{"raw":"GET /752180f7a/0b9aa/c52ef85.ttf HTTP/1.1\r\nHost: tbnoviytatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tbnoviytatic.com/752180f7a/0b9aa/655ef78.css?v=eisHsuZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:14 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 3501\r\nlast-modified: Mon, 31 Aug 2026 10:04:52 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YS6%2B8PQGsD0AjKhS7LjZIl6tKUvkp4UULGanCiVfVLPmwMiRWx4gCRaf8QI7Xzzr6u4T0oO3d8PoMZYqvIBQKFxczntIr%2FL9HG4LtLGvQlDVAX0mwZv5TUfGW2ibfPoNWLDI\"}]}\r\ncf-ray: a33b8c28b94556bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118736,"size_decoded":119381,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansThin4.015;Plau;MotivaSans-T","md5":"ce6bda6643b662a41b9fb570bdf72f83","sha1":"87bcf1d2820b476aaeaea91dc7f6dbedd73c1cb8","sha256":"0adf4d5edbc82d28879fdfaaf7274ba05162ff8cbbda816d69ed52f1dae547f6","sha512":"8023da9f9619d34d4e5f7c819a96356485f73fddcb8adb452f3ceefa8c969c16ca78a8c8d02d8e7a213eb9c5bbe5c50745ba7602e0ee2fe36d2742fb3e979c86","ssdeep":"1536:GAAAAAAAgsAAAYgIAAAAsAuErzzzz6mfzzVCA9zzzzzzdp/koLAGXImE98YfgNi9:kErZDE9BfgNiX9k3SDHewStfNwS0fj9","tlshash":"b5c34b06f702eb4add691e7ca59163c5b728f4a13b1ec30f95c66d5afc8e1a60d022c9","first_seen":"2023-04-05T04:16:14Z","last_seen":"2026-08-31T12:17:02.501894Z","times_seen":4999,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/images/header_menu_hamburger.png","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.420Z","timestamp":1788174190420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft/images/header_menu_hamburger.png HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/p/sst-cgj/lctwghft/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 28 Aug 2026 10:23:28 GMT\r\npriority: u=5,i\r\netag: \"6a9161a0-ec1\"\r\nexpires: Tue, 01 Sep 2026 10:04:47 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 3503\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zn%2BVHTI45mPv7W7%2FpPRuVaag4ZiywwbkaOey6AlSsskIhOPWqsw7mpI5hzakt6%2BE6hUz2g3SmXlzPqT7Vtd%2BxPxQ9IyWTNDosOoHV%2B5EPLfbkQd%2Ff4RMSMfzUOILSWBK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33b8c1229d723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3777\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3777,"size_decoded":4514,"mime_type":"image/png","magic":"PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced","md5":"eabc76eb57feae44add7faead028521e","sha1":"4e3e53938fad15661d2d046a868338841a95db19","sha256":"fc9e6260a2706ae146282d77e67bc1b74688435f8912ab4c1932641eec28bffa","sha512":"5c6da6eeefddf321c2bc7e39a134e0a3140a9f93ad1560b2e102ef60ec218c29aae14ed344c79e25cc5493cd15551040d8c909de28dcab02034d787563104e07","ssdeep":"","tlshash":"eb717ce7323e5456e1f056c6015b52f69eb1a1080d2b4e09f224b77831ac63be38333d","first_seen":"2023-04-05T21:31:08Z","last_seen":"2026-08-31T12:17:02.523085Z","times_seen":7644,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH_Xb1tioMGnY5Ft04ILm60ryDhz8n4Ll7yNI-rz4a6JscqbEDDOWwrsvtuI6TXrnkUpw5WvVmdmoI32fOgEgWcAlTOIKrFDmxfIGj4-q/96fx96f","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.493Z","timestamp":1788174190493,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH_Xb1tioMGnY5Ft04ILm60ryDhz8n4Ll7yNI-rz4a6JscqbEDDOWwrsvtuI6TXrnkUpw5WvVmdmoI32fOgEgWcAlTOIKrFDmxfIGj4-q/96fx96f HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\ncache-control: public,max-age=604800\r\nexpires: Fri, 30 May 2025 01:37:23 GMT\r\nlast-modified: Tue, 12 Dec 2017 21:09:44 GMT\r\naccept-ranges: bytes\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nage: 575463\r\nx-served-by: cache-bma-essb1270042-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 6\r\nx-timer: S1788174191.783135,VS0,VE0\r\ncontent-length: 11619\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":11619,"size_decoded":13606,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"7e1ba3e9ccfd6129994d81efc618090d","sha1":"cbe15d2b724e331e4fedaf3bcc6a3d5db70a4c42","sha256":"635ff99b0f9a70f09a26efc49701f320e6a1c828e04f7bc3845a459b69443b8a","sha512":"387a0327b4ea2fb4a5f281582ed32bdd3e73c8b64ffd14e3d129c939ccbe797a9cb3b61746683241adc8f9df5d8b9a7983fe06965d5641f52f753b9ebe10690b","ssdeep":"192:GC0OTujDQ3wsndV9Jg8fazXeyXqDvV1MW5+9lvyA/VlLroTDEkG:/ujcvnNJJajfo91JAvhlLIDo","tlshash":"b432bfba725201bcc1478e3502bfbbf53659daf85cbe90cb32e944dd7119e8e44605e2","first_seen":"2026-08-13T08:30:02.597934Z","last_seen":"2026-08-31T12:17:02.497881Z","times_seen":13,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":213,"dns":0,"connect":0,"send":0,"wait":10,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/loyalty/reactions/still/10.png?v=5","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.480Z","timestamp":1788174190480,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 12:18:32 GMT","end":"Thu, 19 Nov 2026 12:18:31 GMT"},"fingerprint":{"sha1":"73:3D:80:BA:FF:E1:7B:1D:0E:6E:9A:40:E5:15:C7:6D:FE:46:B9:44","sha256":"F6:FC:99:1F:A8:9D:10:F1:85:36:C6:51:C1:BD:A3:BE:67:18:DC:98:E2:29:22:39:6F:84:4F:11:66:3A:2B:B8"}}},"request":{"raw":"GET /public/images/loyalty/reactions/still/10.png?v=5 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:18 GMT\r\netag: \"649bb1f6-41cc\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nage: 41068\r\nx-served-by: cache-bma-essb1270023-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 298\r\nx-timer: S1788174191.788707,VS0,VE0\r\ncontent-length: 16844\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16844,"size_decoded":17248,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit/color RGBA, non-interlaced","md5":"594d5680989e3d63194ae3a7c5039643","sha1":"3596d780cc489ac467f112d13725a05babd05167","sha256":"56dbfb551f3b4712f5f2281d92ba29eb8e8b74fe2d4ae2127f6946f0330f8775","sha512":"7b294edf0685fe98aa48f34ce2345347ab84daceff35446f17f22e89bc5c01e2c41e253c1fd889e495a5e0ed52576862d42e401ee82a2d4f0deb2c2f62b030a3","ssdeep":"384:i2d9240+OWa3QEOuVArWTHARsElvEFuUgeDbXksjcYYY7xC1R/sbfr:bH240+OWrFqTQ1VeDlAY39CXQr","tlshash":"2172c04ba71ec49da85de2ef94924bb1090698ad0460f1012d7b7e0dbace1d53d73fb4","first_seen":"2023-05-10T18:55:19Z","last_seen":"2026-08-31T12:17:02.538869Z","times_seen":548,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":10,"receive":4,"ssl":265},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH_LGzN3uMWmS5FJK5oLg-FDlVAn4kZiv-TBU-M2veqdsLvGsGWKR0eF4_rZoTH7iwhtyt2zdzo34cCqWZgd0A8d0E7MMtxK8w4XkZOjq4FPW34lbjXKp-LVY1U8/96fx96f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.128","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.515Z","timestamp":1788174190515,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH_LGzN3uMWmS5FJK5oLg-FDlVAn4kZiv-TBU-M2veqdsLvGsGWKR0eF4_rZoTH7iwhtyt2zdzo34cCqWZgd0A8d0E7MMtxK8w4XkZOjq4FPW34lbjXKp-LVY1U8/96fx96f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 18 Dec 2021 01:54:02 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 14170\r\nCache-Control: public, max-age=553654\r\nExpires: Sun, 06 Sep 2026 20:50:44 GMT\r\nDate: Mon, 31 Aug 2026 11:03:10 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14170,"size_decoded":15999,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"423bc2c5848f15d7fda2549c765f3233","sha1":"87c695c29730e4266b47b7ea9a6e72c017577f52","sha256":"bf2dd7e5d21f86658ec651ac845440e0f926d920ac77d89f51ddc5e0899bc24c","sha512":"778140727e895644c91e00c24c9f256750e577034bfb894a9183ca786d3decfa8b819e84f169c6bac8fb1488b076ceca010d43eaf8ac4f4d28f827dab2cc5501","ssdeep":"384:1F5oF1cRcV/gFtSrHML+DFuCnfiqoX4cRK8IcHC36Dcee:1Fig0/gFeHML+DoCnRoo+KtcCKcee","tlshash":"7352d0cf725802bb6dafbe3e7734148a95d977b66b184b4ec0b1a4ec400283cd858f15","first_seen":"2025-11-26T00:23:13.881859Z","last_seen":"2026-08-31T12:17:02.530941Z","times_seen":40,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared.fastly.steamstatic.com/community_assets/images/items/357070/2e27be55ea4697a5c4bcd72b594b13db4e17b0e2.png","fqdn":"shared.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.487Z","timestamp":1788174190487,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shared.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:58:18 GMT","end":"Thu, 22 Oct 2026 11:58:17 GMT"},"fingerprint":{"sha1":"59:6E:44:DB:60:B8:08:2F:C4:C0:CA:E3:A8:65:4B:A2:C0:A6:8F:1B","sha256":"0F:54:E6:A4:07:BE:72:20:E7:77:62:F4:1B:44:B3:0F:21:AC:98:97:72:CC:6B:CA:7E:D7:27:DE:A5:AA:AB:75"}}},"request":{"raw":"GET /community_assets/images/items/357070/2e27be55ea4697a5c4bcd72b594b13db4e17b0e2.png HTTP/1.1\r\nHost: shared.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 05 Aug 2015 23:23:06 GMT\r\netag: \"55c29ada-958\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nage: 904746\r\nx-served-by: cache-bma-essb1270045-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 9\r\nx-timer: S1788174191.791873,VS0,VE0\r\ncontent-length: 2392\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2392,"size_decoded":2875,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"e1974c9962a87bc417f6449285793652","sha1":"2e27be55ea4697a5c4bcd72b594b13db4e17b0e2","sha256":"c1fa8f365e3aff0d65770fa48d81206d6e72db66eac79424f7cbd7110d22de69","sha512":"8e98388389fdefa2295bd5dbd1bde954f71c47cb0c07bcbae3c9dd6a98e592ef3ee436e1c719747901acada0ebb03fcd2427da4e2315a06f4cc03b88e3024657","ssdeep":"","tlshash":"7c411a544521ff27a9ec348104d8ae2a9c3e33c6abd5c0f724a3987401161e54f0ca6b","first_seen":"2026-08-13T08:30:02.645043Z","last_seen":"2026-08-31T12:17:02.491347Z","times_seen":13,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":9,"receive":0,"ssl":270},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/images/footerLogo_valve.png","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.541Z","timestamp":1788174190541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft/images/footerLogo_valve.png HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/p/sst-cgj/lctwghft/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 28 Aug 2026 10:23:28 GMT\r\npriority: u=5,i\r\netag: \"6a9161a0-e99\"\r\nexpires: Tue, 01 Sep 2026 10:04:47 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 3503\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fakckk6s2AUx3SwUDjzdy%2BLWaLNV6COwEjs%2B4yn9xcg%2FD3wFNYCP%2BVYbL97SPBKAVIVfaI%2Fx420hyiVYOUD6Da12zP8WiEfZSDKW%2FsqKcLtX7dYcWsoDLKq%2FkMoe2b3N\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33b8c12e9f523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3737\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3737,"size_decoded":4476,"mime_type":"image/png","magic":"PNG image data, 96 x 26, 8-bit/color RGBA, non-interlaced","md5":"1626f52addb7c56fe3679d82108c62e9","sha1":"2b414092d66ecff528950093a655f755c3c7f3b5","sha256":"ae9f6c61e25d15882bf57bde193d10d375bd315c9741cabda11d700fd1bb7dd1","sha512":"05548831477cc421556c404f3411f581e98a84ff2e699882cb4f5dca17d1c5f77b55ed2b8211eec32d0a4317be1c4ebc636277f840262491b753415f6f198276","ssdeep":"","tlshash":"0e718e669660b49e18cd70910dce2581eb543268c5673b3865d236cea8a1d179f2d071","first_seen":"2023-04-16T19:19:52Z","last_seen":"2026-08-31T12:17:02.501235Z","times_seen":3373,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/first-logo-1.png","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.542Z","timestamp":1788174190542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft/first-logo-1.png HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/p/sst-cgj/lctwghft/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 28 Aug 2026 10:23:28 GMT\r\npriority: u=5,i\r\netag: \"6a9161a0-fb90\"\r\nexpires: Tue, 01 Sep 2026 10:04:47 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 3503\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZxaHoiIy9qSTBq%2FWpITzbzmr5qBfW8swTyVuSrzBfw7eApxEsfO2j5gEeJyvWHg4EYHMAGSEuCm8nGXcAJras8RMkFmWzgaWlLUxmvck2ZnZRNAeOvYcQgVd2k6LTKbd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33b8c12e9f623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 64400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64400,"size_decoded":65129,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"7ff90b07752572a132fe8b392b0e57cb","sha1":"49f980604007f61267720f25cc21cd41f1980bf4","sha256":"588870126f329a1e5f83b9b1cc14782f7ebf1f4dd85e412781be56d617a2e7c5","sha512":"95e90ba3c6babf66d523539d61e472903d15d4aae188fda05ae9a5568b9ad8059ab37ac9359e07b1f672f6b33e24d6d8992f4e60f3f30f830af11c1542320a6d","ssdeep":"1536:FoWh+B/udMQEU8AzVB2U8ckH2caZoYBCiqTpp:mWyuuQ782VBTOwuDVp","tlshash":"ee530249dcd19cc2e7e867b31605aa8ab7ea23f333c489016b715dd77b16790b34b904","first_seen":"2025-04-21T12:22:25.060132Z","last_seen":"2026-08-31T12:17:02.487548Z","times_seen":82,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/css/header.css","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.109Z","timestamp":1788174190109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft/css/header.css HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/p/sst-cgj/lctwghft/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Aug 2026 10:23:28 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a9161a0-2fbf\"\r\nexpires: Tue, 01 Sep 2026 10:04:47 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 3502\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UzmGAyTY2g79rQrk39bwoc1nVkkoXFm4C010DIgwzGxNmID%2FPM9dHUGEqqH4LArs4GwsPVEo4j%2BOID8rsQXA1VY8chxy37htY6cspCg6i0BMCj18hClYg9myjpYx%2FKye\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33b8c10399623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12223,"size_decoded":4400,"mime_type":"text/css","magic":"ASCII text, with very long lines (629), with CRLF line terminators","md5":"3bfa069dbdabe8457fb1b9ab6ab73bd9","sha1":"3e6d9cba4db955630bd23ef65a677f81153eaac1","sha256":"19def77fb68c6008294c48f576fc793d80f2ffda9ddb23bc18944be2e7d885ab","sha512":"58380e47b5b0653f97460b1b4ea4e5335406e1120a9ece2f43c8c9ece1db67771e648805750e500bf0d21e6eeb840ab78d1e4b269066a9ac79d970e66f2738ab","ssdeep":"192:CdBmFvo/MXMXIeIHNYgsayBgKGd/f2+Rcmp4sc8duvuoyx46l5JutE8h5spoK8e8:CDmFvVcXIeIHNYgsaSg1RfrpJc8dIG4n","tlshash":"ec428474ca92304eb21b65aafbb1536a5e0400a2de0f476df0aa7774e2944e875336c8","first_seen":"2026-06-26T02:14:11.669663Z","last_seen":"2026-08-31T12:17:02.519067Z","times_seen":15,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.413Z","timestamp":1788174190413,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 31 Aug 2026 11:03:10 GMT\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4887,"size_decoded":1390,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3fd96ba77783845730c343cf00ac7a93","sha1":"bc4f7f4f71aeae387232155c55c4f031c5f3f769","sha256":"27b95b2fcbc857ba25f7e5a707c5c4c06c5cf93415519b7669c19f4045edca37","sha512":"20b137cf9c61842c7bad62dd6c36125833022552379ad97324dbee2c2e9cb0303b17a9aee813ea2bcdbb68541c8c6edbfecfcfb2858cf27c2cff480d756d80cd","ssdeep":"96:aYg4aMzqYg4aybFZHYg4agkYg4aUJ3vYg4aERYg4aYGJc+uTYg4aR6NDO4a3qO4L:vywfydyGy63gy/yFVyR73xpmj3U8fHN","tlshash":"37a1ed91006f9104ea431dd627cf7e32ad8e51956082e27d6ffd2dca6cdbd23122874c","first_seen":"2025-09-10T21:50:06.177565Z","last_seen":"2026-08-31T15:38:00.401153Z","times_seen":21413,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":33,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH_Xb1tioMGnY9l589oLL7lbgfh7witnz9StZ6s2qZ6NSI_GHQGOVmLpw5bk6SSu1xU4l4D7Sz479d3OWaQMmXsNyEOAD5BnqwNPnY778p1uJhk_AKwA/96fx96f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.128","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.523Z","timestamp":1788174190523,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH_Xb1tioMGnY9l589oLL7lbgfh7witnz9StZ6s2qZ6NSI_GHQGOVmLpw5bk6SSu1xU4l4D7Sz479d3OWaQMmXsNyEOAD5BnqwNPnY778p1uJhk_AKwA/96fx96f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nLast-Modified: Fri, 03 Jun 2016 20:45:45 GMT\r\nContent-Length: 10481\r\nCache-Control: public, max-age=390131\r\nExpires: Fri, 04 Sep 2026 23:25:21 GMT\r\nDate: Mon, 31 Aug 2026 11:03:10 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10481,"size_decoded":12310,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"093735b908372cd6c9a4e36e32a4f987","sha1":"4fef439147daaa66929c5b3a712b9431eb5f67f3","sha256":"14c10e6ea31568fe3a9ffdb43ec435f7863cbb09e96d1c0330d9d46d217c9fb7","sha512":"5bcbf54aef4d6b2a3b5fe0dc55fe5f58cab621ab5f182726308744e036c868cccf1cdc5a2cc4138b87aaf0264ee44e4b8f4014667a5561c4ebba0d2842f82645","ssdeep":"192:VUkosRUiCMxZvA47SfBG8XDcuZQRW9Qm5aAKWFMSVVgkAAs:VVBpZ72XDcuyRW9ZKWBOd","tlshash":"0622d0cf60939767e197956390e410221617b01bbc36a5fb5c33812fb51cfee0a136e6","first_seen":"2026-06-11T00:49:01.059156Z","last_seen":"2026-08-31T12:17:02.535504Z","times_seen":36,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":94,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/fonts/MotivaSans-Medium.ttf","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.665Z","timestamp":1788174190665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft/fonts/MotivaSans-Medium.ttf HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/p/sst-cgj/lctwghft/css/motiva_sans.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\ncontent-type: font/ttf\r\netag: W/\"1e490-65a18d7e4ad22\"\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 28 Aug 2026 10:23:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=et%2Bnw8qKWv5zSCNLN0DnvKqjeJ1%2FbMVu6K5j3jTpOe4fd5apfGE%2BM8OnQjRgN2rAfhSs5dnlpouA0ctAB46m6tXsqPHn34evdd2DM0G9ANfAaGdEhkJLJtQvFaTDSCMG\"}]}\r\nage: 3502\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a33b8c13aa2223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124048,"size_decoded":58670,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansMedium4.015;Plau;MotivaSans","md5":"2d64caa5ecbf5e42cbb766ca4d85e90e","sha1":"147420abceb4a7fd7e486dddcfe68cda7ebb3a18","sha256":"045b433f94502cfa873a39e72d616c73ec1b4c567b7ee0f847f442651683791f","sha512":"c96556ec57dac504919e806c7df536c4f86892b8525739289b2f2dbbf475de883a4824069dbdd4bb1770dd484f321563a00892e6c79d48818a4b95406bf1af96","ssdeep":"1536:v4Kkq/szjKJRIDCnR96guXgECINo28BZZDhpkemOXaxq4jKea8GyFLaE0Af0ffL9:vf/fxn7ElXxE0wS0fj9","tlshash":"86c35c06f706d709dd240e3df9a1a3a9b358f8a57b1fcb0fa6856d65fc8e0852a441cc","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-08-31T12:17:02.514272Z","times_seen":7117,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tbnoviytatic.com/abbc8b926","fqdn":"tbnoviytatic.com","domain":"tbnoviytatic.com","tld":"com"},"ip":{"addr":"172.67.166.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:11.176Z","timestamp":1788174191176,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tbnoviytatic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 14:37:22 GMT","end":"Fri, 27 Nov 2026 15:35:55 GMT"},"fingerprint":{"sha1":"B8:09:FE:61:80:08:81:A1:08:26:A4:17:F7:07:46:07:50:46:B1:17","sha256":"3A:B2:B9:EB:2C:E3:AB:48:5B:6B:B3:79:A3:62:50:09:4E:96:93:AA:E0:B9:3C:87:62:A0:CE:EF:CC:07:70:EB"}}},"request":{"raw":"GET /abbc8b926 HTTP/1.1\r\nHost: tbnoviytatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=us6mPadtq%2FuY8cMSgkcyhyKVJ8FHW33GTLSCO75qtcW82s%2BArpn1LZPcEQO0zxKHKZILMopUxlGm6zeHqtqW5O3Hwzhz7sFxO53UsYcvWsSczdyWLxcGJ%2B9SbEiO5ZOMIrf6\"}]}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a33b8c17384756bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":135626,"size_decoded":12157,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43956)","md5":"c2df2ff8dc194164bdb4fc4d1173769e","sha1":"0069fb18e39d889b1a7b86059bc22b35b4c9e9c3","sha256":"60a23e2e0a1c5c8d047800398aab3c1caa2ebbde04d5b52efc38b0b4079cba56","sha512":"e98b3cad3b0855b0e83ec6c9f3e508328b4567a6428ed1354aed9bae48f4bf76d9adfce6387c740471b5646adfc0c760f85e9f9916a4518ce8b2dbc75eb14112","ssdeep":"1536:RWULF4H56hLDNhb7MrD+ULF4H56hLDNhm7YACnJaIMnM6ohYxuWXY0P7uETAcGb0:l","tlshash":"9cd395b26c2cd5f3704b4d8529296b6e32e6b5ede833455b32fd37912bd1c80a94c88d","first_seen":"2026-08-31T11:03:57.084613Z","last_seen":"2026-08-31T11:03:57.084613Z","times_seen":1,"resource_available":false,"data":null}},"time_used":646,"timings":{"blocked":-1,"dns":33,"connect":19,"send":0,"wait":347,"receive":246,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tbnoviytatic.com/abbc8b926","fqdn":"tbnoviytatic.com","domain":"tbnoviytatic.com","tld":"com"},"ip":{"addr":"172.67.166.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tbnoviytatic.com/abbc8b926","date":"2026-08-31T11:03:15.075Z","timestamp":1788174195075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tbnoviytatic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 14:37:22 GMT","end":"Fri, 27 Nov 2026 15:35:55 GMT"},"fingerprint":{"sha1":"B8:09:FE:61:80:08:81:A1:08:26:A4:17:F7:07:46:07:50:46:B1:17","sha256":"3A:B2:B9:EB:2C:E3:AB:48:5B:6B:B3:79:A3:62:50:09:4E:96:93:AA:E0:B9:3C:87:62:A0:CE:EF:CC:07:70:EB"}}},"request":{"raw":"POST /abbc8b926 HTTP/1.1\r\nHost: tbnoviytatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 14\r\nOrigin: https://tbnoviytatic.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tbnoviytatic.com/abbc8b926\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":14,"data":"doqr=1\u0026qrdata="}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=omJdNqF5PhMy5eo7H%2FAMq%2F3ALzsa8%2FEN8mN%2Bn4Qs6n%2BBo4WLOZbVlffa4yu%2BQN3h5plPoPFNOauMDGwYQSonJO8DqKZVk4uS5zJrNO09zOYxxRYCviWyIUR45ndXKx69irNQ\"}]}\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a33b8c2f39f056bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75,"size_decoded":678,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"4f003ac06710a69486e8d4fe9e9eadb0","sha1":"d6a52ea9274bba364cc946d9aac721b220c31aaa","sha256":"62a60b2d209418b723ea3c6e201e8ae2dde8cc2059c8f576c461d0f090902f17","sha512":"78d379d88400e64c25981e5f234e97ad968ebbc7dc5afd8481153f00844b866c12d755c1b7b42ad939e1a630fc91d6db3155c8c3e413cd08b3adec0c6bf3ca9b","ssdeep":"","tlshash":"83a012d251cd4050418012a050122012f994050b8430224ad46c0034246b3402208851","first_seen":"2026-08-31T11:03:57.087287Z","last_seen":"2026-08-31T11:03:57.087287Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1352,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH_rR0MKzNHjY8Vln-YL6_lzjfg7ln5DmsjZU_f-rZrBoJM-AGmaWx7844OMwTn3izRlw4miEmd-odXPBbQ51W8FyFrFetEXqk4CyY-3msVfe3pUFk3u8CZE_jA/96fx96f","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.495Z","timestamp":1788174190495,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH_rR0MKzNHjY8Vln-YL6_lzjfg7ln5DmsjZU_f-rZrBoJM-AGmaWx7844OMwTn3izRlw4miEmd-odXPBbQ51W8FyFrFetEXqk4CyY-3msVfe3pUFk3u8CZE_jA/96fx96f HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\ncache-control: public,max-age=604800\r\nexpires: Fri, 19 Dec 2025 08:57:34 GMT\r\nlast-modified: Tue, 01 Sep 2015 00:26:36 GMT\r\naccept-ranges: bytes\r\nage: 337904\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270042-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1788174191.795646,VS0,VE1\r\ncontent-length: 11671\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":11671,"size_decoded":13658,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"b34fa90e48a7562bec770b26d26523e2","sha1":"b3550afe87df132767f15b6d6d10e5deea425ffb","sha256":"d4a7d699c1d41c2d9e0356e4df05b587ea7e4d49601f8e3960fc73ed738658d8","sha512":"e0eb4811043f6de16a602cbc61f3442d05f0d0fcf2f81281bb3c3e11f243796347a455f24351960e21c85fc925dad0472c6df19f72aee62fdd9582320ed58aaf","ssdeep":"192:0cWL4TrzeyW9TDkCHFGB2rRA4tAd2ffF4eOdFZTVAYbsYWk+wAHUXDIx9esCKbST:CKeyW9TvlGqRzAMn0dPT9bszxQDIifKk","tlshash":"1232d03dc0096c2bc7af314e1eb01fc88974f27bad8944e591dd0866398a3a21686337","first_seen":"2026-08-13T08:30:02.610711Z","last_seen":"2026-08-31T12:17:02.519554Z","times_seen":13,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":56,"receive":18,"ssl":265},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/css/globalv2.css","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.100Z","timestamp":1788174190100,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft/css/globalv2.css HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/p/sst-cgj/lctwghft/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Aug 2026 10:23:28 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a9161a0-9ade\"\r\nexpires: Tue, 01 Sep 2026 10:04:47 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 3502\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hnBAbAqtphFcivn781UCgPyzwGjueEc9yRK8SKrO8QRQ6FCXHIcAtM6YzgWecdYQGdyo28w9cyMiF28xnzyypfwpsiA7irdzh2%2Bl5Uo%2Bmaanb409uaL%2FdJWvoJeRaW7i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33b8c10298f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39646,"size_decoded":13519,"mime_type":"text/css","magic":"ASCII text, with very long lines (4009), with CRLF line terminators","md5":"873d87f45bc7f1361b6ede1fc5a66b67","sha1":"bbdeb71b79521302ccefcdbe6efa47f1abed7529","sha256":"52618cebd684ba82be7057d6e78cdca46f612de6c829db3fb307650fc65408ce","sha512":"441cde329a3ea5bedd5ecbd62292f00d2cc83467b232b095f241a259038cef1e1fb34b32e5a197c0c85ae986ff030f20aff3dd227911a49ca07f6d2bd0bb3aa6","ssdeep":"768:RmOZyrY6dKV7syaFVwoa5cBt45KqFUevSQNZKJb4Ud4xh5VgI0NC:6vkFM0o4Ud4xn","tlshash":"1d03c75cde96214e7327bd54fbb1ab115f2282725a0f46bef1e8611493c8a6c38327cd","first_seen":"2026-06-26T02:14:11.737396Z","last_seen":"2026-08-31T12:17:02.524878Z","times_seen":15,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/loyalty/reactions/still/13.png?v=5","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.478Z","timestamp":1788174190478,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 12:18:32 GMT","end":"Thu, 19 Nov 2026 12:18:31 GMT"},"fingerprint":{"sha1":"73:3D:80:BA:FF:E1:7B:1D:0E:6E:9A:40:E5:15:C7:6D:FE:46:B9:44","sha256":"F6:FC:99:1F:A8:9D:10:F1:85:36:C6:51:C1:BD:A3:BE:67:18:DC:98:E2:29:22:39:6F:84:4F:11:66:3A:2B:B8"}}},"request":{"raw":"GET /public/images/loyalty/reactions/still/13.png?v=5 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:18 GMT\r\netag: \"649bb1f6-20ab\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nage: 57986\r\nx-served-by: cache-bma-essb1270023-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 933\r\nx-timer: S1788174191.787389,VS0,VE0\r\ncontent-length: 8363\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":8363,"size_decoded":8766,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit/color RGBA, non-interlaced","md5":"e4df185653d4da061a3c04947400a145","sha1":"40111b1db3df8c5515adfcd5a30a071eb9c70378","sha256":"fb7a3b6638f12a82d3da616a742f4fdd551eb9e4054a0dc6ef174db090c7ab6e","sha512":"774da7fa61cea60e354da9bf1c357b40a91b4f5c4b04521b76139330db79bebf292c2fa7a74b774c2fabaa1d939e1a58bd5d026bdc81b54159d19be7c45f57af","ssdeep":"192:i9wMRQiWRODCb0zRb0F4VrDTUZ4ofNlnd2LLSkpResVF:ipQi9DdzR64VvTHofbILLnpResVF","tlshash":"e1029fdcdd38a09c7fe60e3f90151ba842712c579b81066c15a53babcd8c83d5f5a8eb","first_seen":"2023-05-03T21:37:58Z","last_seen":"2026-08-31T12:17:02.534338Z","times_seen":984,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":9,"receive":2,"ssl":262},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/images/bg_dots.png","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.725Z","timestamp":1788174190725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft/images/bg_dots.png HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/p/sst-cgj/lctwghft/css/profilev2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 28 Aug 2026 10:23:28 GMT\r\npriority: u=4,i\r\netag: \"6a9161a0-122e45\"\r\nexpires: Tue, 01 Sep 2026 10:04:47 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 3503\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xc1lEdYRsLHlRlGENElVL5YYBKDFsGWO18pFOLeOwvyNc5ggpo73xCBrbbgzvGdhqGarShKh%2Fc7c0QpIAcc8JOC9J14kv%2BaZcd12TV1AyzzK61h5jP8QWOSyZrZ2WR7O\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33b8c140a2f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1191493\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1191493,"size_decoded":1192228,"mime_type":"image/png","magic":"PNG image data, 1769 x 905, 8-bit/color RGB, non-interlaced","md5":"4fe8a786d8fb37ef60b51486a88931b4","sha1":"d78c63bcea6307b425bc060d34fec5ee8660ff39","sha256":"c2f8febfa6827266692357cb15dca4f3ff230435a844d8fc0b4b7fe7a8042377","sha512":"28000f564ba37e60e2ce11896df201cc4ea0268b6ba1510208bfb8d15172d88ffac64dc2cbbad137dc1c5b4be01370eea79e93ce5f65740ac11add793dd88cae","ssdeep":"24576:wf31nm7yQy8yb7FpiM/cPgGUREaZ9gtn3BOdYMf:wvZmeD8ytpk/UyaEtodVf","tlshash":"1f2533c9bb855420550a99f9078723ed2fe003e6ebd17b99033fd364890a19786db2df","first_seen":"2023-05-08T01:28:26Z","last_seen":"2026-08-31T12:17:02.531599Z","times_seen":78,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tbnoviytatic.com/752180f7a/0b9aa/b69aa58.woff2","fqdn":"tbnoviytatic.com","domain":"tbnoviytatic.com","tld":"com"},"ip":{"addr":"172.67.166.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tbnoviytatic.com/abbc8b926","date":"2026-08-31T11:03:14.038Z","timestamp":1788174194038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tbnoviytatic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 14:37:22 GMT","end":"Fri, 27 Nov 2026 15:35:55 GMT"},"fingerprint":{"sha1":"B8:09:FE:61:80:08:81:A1:08:26:A4:17:F7:07:46:07:50:46:B1:17","sha256":"3A:B2:B9:EB:2C:E3:AB:48:5B:6B:B3:79:A3:62:50:09:4E:96:93:AA:E0:B9:3C:87:62:A0:CE:EF:CC:07:70:EB"}}},"request":{"raw":"GET /752180f7a/0b9aa/b69aa58.woff2 HTTP/1.1\r\nHost: tbnoviytatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tbnoviytatic.com/752180f7a/0b9aa/655ef78.css?v=eisHsuZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:14 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 3501\r\nlast-modified: Mon, 31 Aug 2026 10:04:52 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dhxjcq%2BEtBrICwFSqwnU4kua%2B8EvrZA03yxuNmAhcSDrXy3DV0Q%2BjaAl7%2BgfVslBcaDBJUMflO%2B2tArn3l4qPuSsWPAQkR1ICvdZ6XyIBP6IltgDvt%2BNnKSC%2FEYfdhAFEbLY\"}]}\r\ncf-ray: a33b8c28b94756bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15016,"size_decoded":15671,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 15016, version 1.0","md5":"ba310d7242d2b12ea5d769a79b55d975","sha1":"6808a778ef9d8aa896ed86856f0396fc8e9b9526","sha256":"4675a8ce063f9f5885a692f7a273acf7eeb800abca14aac75b6707b689532f04","sha512":"dc4d52564c4a7d54f1f021e2005b7520024b91359f47adbb029f3125539c42ff5d323e1264e5b500cb632b194baef620ae1cfdf0e57efded1175b201225be767","ssdeep":"384:ijn0/6PcBvW962uvJPaLc73VMYQyxRM8inXa6Bjgre:Kn0/A+W962uxSLW3VMCjfCXbWre","tlshash":"9562bf2e53f21195d3db177028ea7113916ade48a23fca4ca216f9df52c66c3188b51d","first_seen":"2025-09-27T06:36:03.69501Z","last_seen":"2026-08-31T12:17:02.516294Z","times_seen":26,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/js/manifest.js","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.114Z","timestamp":1788174190114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft/js/manifest.js HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/p/sst-cgj/lctwghft/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c52XniJ1JQGxBF4aplMo1KbefZlPdZfe3z4aVB3UA%2FZ1CZPJuRRZVot3NG%2Bk8nZH1%2F5Vt7MgHyWcYlIgY7nI7VaP5%2BdrDhyyQ5m2pd%2FeVq%2BEPjYUP%2BO9Hv%2BUUaYloQNa\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33b8c10399923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196,"size_decoded":820,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"62962daa1b19bbcc2db10b7bfd531ea6","sha1":"d64bae91091eda6a7532ebec06aa70893b79e1f8","sha256":"80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880","sha512":"9002a0475fdb38541e78048709006926655c726e93e823b84e2dbf5b53fd539a5342e7266447d23db0e5528e27a19961b115b180c94f2272ff124c7e5c8304e7","ssdeep":"","tlshash":"c0d0129e9183638b442225907ac211d2654d13a6b87645e82d82a48a951857dc5ca69d","first_seen":"2023-03-07T12:06:54Z","last_seen":"2026-08-31T15:17:32.886724Z","times_seen":112563,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/images/badges/generic/Replay2022_80.png","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.461Z","timestamp":1788174190461,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/images/badges/generic/Replay2022_80.png HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-8def\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nage: 54722\r\nx-served-by: cache-bma-essb1270042-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 589\r\nx-timer: S1788174191.784533,VS0,VE0\r\ncontent-length: 36335\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36335,"size_decoded":36739,"mime_type":"image/png","magic":"PNG image data, 184 x 184, 8-bit/color RGBA, non-interlaced","md5":"1fbd32e9f20ede9a107bca889ef59d74","sha1":"62e7aae7a2f940fd61f9a57bdc4cecf5b402b299","sha256":"c270f660ee700a6ea93978e80f16c803675f268810fc3857fe1a13565e7cf0bb","sha512":"6bf5b3b91dad7ed118507746552d3e2eeda00c5502c587dfeba17b089ff84f729e45b36e291d8107844735edc765a87d0573d00ed3275599a8a7e5f20ee41894","ssdeep":"768:BnwQoQ9gRnWNYxYDsS0wmk77asrKLncuBE8cfP14HiHPU:BnwvxRWNYYms2LnHcft4H2U","tlshash":"86f2f18cd5b97456cb9712770b53302e503e8bf1089ed657bdece126644bbe88ecd608","first_seen":"2024-01-24T04:28:32Z","last_seen":"2026-08-31T12:17:02.495444Z","times_seen":70,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":217,"dns":0,"connect":0,"send":0,"wait":42,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH-TBwcOiPjSQ6lpx8YnL5UvpSAn5kZvh8yFe_c2jaap5LPXcCWicxet4j-57QSCnnRIqsjOGn53GLCrJKlp1FMchRO4Nt0S9kYXmPuzmtFbZgowTny34iy5I5i046u5XU_Yt_afQ2g_fcepqAzL9IIg/96fx96f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.128","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.533Z","timestamp":1788174190533,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH-TBwcOiPjSQ6lpx8YnL5UvpSAn5kZvh8yFe_c2jaap5LPXcCWicxet4j-57QSCnnRIqsjOGn53GLCrJKlp1FMchRO4Nt0S9kYXmPuzmtFbZgowTny34iy5I5i046u5XU_Yt_afQ2g_fcepqAzL9IIg/96fx96f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 30 Aug 2016 20:35:26 GMT\r\nServer: nginx\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Type: image/png\r\nContent-Length: 8403\r\nCache-Control: public, max-age=519977\r\nExpires: Sun, 06 Sep 2026 11:29:27 GMT\r\nDate: Mon, 31 Aug 2026 11:03:10 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8403,"size_decoded":10231,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"63001f8bc635858250d9b28fbbeb7014","sha1":"5ebac1fdb001e12ed1fd2fd09a1f77d1df8db32c","sha256":"c9b43d10b412919227dcc90454b22ab808841aa436772cd5a9c68da29f53aec5","sha512":"1f6564900e88988b37eba8563edafa0fef5efd869fb6e8eeac03b16dc0768beb49edcfa33a44c368085b19c618068a69365a51929656f2ba79dfb447aaedeed5","ssdeep":"192:UZ9CuE3rTFwEEnhruucaMpN1hucGxhy0oPt:wCh6RuucPpN1hzIUF","tlshash":"1302afe07201e1e1db0a73e482882ea0769d98c7463b380d17f92c766f3d01cf21229b","first_seen":"2026-06-11T00:49:01.080737Z","last_seen":"2026-08-31T12:17:02.527223Z","times_seen":36,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":5,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/images/profile/achievementIcon.svg","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.536Z","timestamp":1788174190536,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/images/profile/achievementIcon.svg HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-ef3\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nage: 5517\r\nx-served-by: cache-bma-essb1270042-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 75\r\nx-timer: S1788174191.791922,VS0,VE0\r\ncontent-length: 3827\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3827,"size_decoded":4231,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64c37d82a62497077624a0bccbaa18cc","sha1":"3fb8c4ab3ad795404704368d9786f0b193c4bf6e","sha256":"2b48eeb02622aec150ac0ffe32fb7cda94c49f68b16fb7d7cbb7073594678c18","sha512":"091968e83124626d7c1aee24ce924e223f20728d8f7e1213d0b0372d4b83aa2d0eb4493e566de1ad12bd81cd1e860550069ed0a8f71aa9c38c9fa493e20f1753","ssdeep":"","tlshash":"5c811fe5b69978eca85642a8fb985471277e7072b780460d8c2f2631904bdcdde7f780","first_seen":"2025-01-07T09:17:26.360609Z","last_seen":"2026-08-31T12:17:02.508665Z","times_seen":27,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":188,"dns":0,"connect":0,"send":0,"wait":60,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/css/stickers.css","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.105Z","timestamp":1788174190105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft/css/stickers.css HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/p/sst-cgj/lctwghft/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Aug 2026 10:23:28 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a9161a0-20e7\"\r\nexpires: Tue, 01 Sep 2026 10:04:47 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 3502\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GgM4WaY%2F%2FQQ4Fhz6X8RfO2ezDxJqjEoF6H%2FXX1IuMiHrLqZCcr9KTU8m9iw%2BT6P8SF1f6RwqYCnPHwBZv4uPdosdGi%2F6Jya7KyfdazbSgSKNUMx%2BNHUUGmghACBiOunM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33b8c10299223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8423,"size_decoded":2869,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8a62c866da0959885705546bd52f8e5a","sha1":"6f3e099083145f09c692511cd9841e05a7c562d1","sha256":"5b6eb5e229668ede597b45bd835911165850b00e29bba16a50367b1064f4a9e4","sha512":"de08e8474aebd548d827c05d1550ce317be7b3dd8c5a3182be671ece432fdca38f3c8aabbb6fe03e2c3021369a677ebb6c97c20206cfd4d8afdea27e9c0362c9","ssdeep":"96:I1NuOg5HJo0IHOVpLBZ1SLScuYFdHYJsAUPULtD/nL4YyypeoVR6fQjyhlEnWNkz:fppR7bUY6A7D/kY9gyyQWN2lXB","tlshash":"6a0240999b1b300fb21b76553bf11ba54da5c423ea0f0badb4a52254d3cd87827732ce","first_seen":"2026-06-26T02:14:11.712759Z","last_seen":"2026-08-31T12:17:02.52106Z","times_seen":15,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/images/header_logo.png","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.422Z","timestamp":1788174190422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft/images/header_logo.png HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/p/sst-cgj/lctwghft/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 28 Aug 2026 10:23:28 GMT\r\npriority: u=5,i\r\netag: \"6a9161a0-2a6f\"\r\nexpires: Tue, 01 Sep 2026 10:04:47 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 3503\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xdxxp4iUZVbYYS3NSpUqhoPdA%2BinFjf2RoSBtJj2lBNTPZtZazeubnInE6Yg45hTKdfe4c8k6KYk3Xo%2BPUHS3pHwqtFsDZ5lcQTUG7yw40JaYdBbpilape6JTpfPM0yz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33b8c1229d923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10863\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10863,"size_decoded":11594,"mime_type":"image/png","magic":"PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced","md5":"a4e79c73ee13cb25b60fc4b0ba1f690c","sha1":"b690c31b2eb1b0eb085e91aaae7e79f03debe7c1","sha256":"6cb869df089146c12efb5e9c968e911c314842624ba6f052a11346ac734cadc8","sha512":"aad423119f410a655f0aa475d2fe692087d7262c3986ce71347981c5b60f6a10031d7050bf9b9aee4e7d84d814f0b8883c964028fcbe14ed3464602f3ba6cec3","ssdeep":"192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM","tlshash":"4722c06cfcc0c875958352ba3e27fb7043f93e10c44b86b86960e5a5365c8f4959d137","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-08-31T12:17:02.512718Z","times_seen":7610,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/images/badges/01_community/community03_80.png","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.482Z","timestamp":1788174190482,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/images/badges/01_community/community03_80.png HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-2dad\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nage: 27820\r\nx-served-by: cache-bma-essb1270042-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 429\r\nx-timer: S1788174191.797649,VS0,VE0\r\ncontent-length: 11693\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11693,"size_decoded":12097,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"0296c81baa7b0d04b74990f082fe9475","sha1":"912da7013e7c02e84f84a2b94f082eded8cac71c","sha256":"4371f0821d4fa5edd74f63951ed305acabc482ccb1382e1b06ef81eaf96dd803","sha512":"a20de1c614b9bb1b77b7b884ddd5ac5c6599aa9a1346cc991fcf9bf4c0b28c854e2411d26f172af8f6a267e00766f5908f75b4a115c9e9da57eeebff6ec4ff13","ssdeep":"192:n0c4cI3A2yf7Ab3ND+iqyGMT9qYjnNIogkt4b5nK/VfpVGYKjPu3X9IO1Z20:0cNI3MEbD1GliIoftiK/VfpV9KzaPM0","tlshash":"c932bf0c4f5113e6909d91ce08f29c32e52ba5c18691ea35e58fce873f507941e862ef","first_seen":"2023-05-10T19:23:13Z","last_seen":"2026-08-31T12:17:02.537828Z","times_seen":132,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":54,"receive":21,"ssl":262},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/css/shared_global.css","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.098Z","timestamp":1788174190098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft/css/shared_global.css HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/p/sst-cgj/lctwghft/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Aug 2026 10:23:28 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a9161a0-14987\"\r\nexpires: Tue, 01 Sep 2026 10:04:47 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 3502\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t7nY3uQRx3EL3O63l2ngRu25qkeLhBwX0m0T2xrMO6ujmdKLCNyPU2EPn%2Bi%2B%2F%2B3yENt3DvizvnOnYbgaGrsfpruNKnY9O2Aoa%2BjlVLgCYmAknx5qfX3cCY3gwEfXrHif\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33b8c10198e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84359,"size_decoded":19768,"mime_type":"text/css","magic":"ASCII text, with very long lines (1819), with CRLF line terminators","md5":"e94b42c40505a74da6dfb96d1a0a0deb","sha1":"117596e970491debe4203f0d133abf2ee42a6e26","sha256":"1dc0542f08da719710dbd0587331b129043c09a8e59cac4b319791cc4f861415","sha512":"406e12079f038163156aaecf9dc855e76e9e88a4c096cf2435841e80669763bd121a637e189a297f8c35ba4341e83d79201d07a7564821843e3cf1377d953409","ssdeep":"768:QvMiH60JA7oMzLWnhW6gNPasqxNRK8uWQMJ3JHKiiUaEpxfsN/WCcZZb98cxbYFI:OjKi+Ev5CovR+FGO9ErUnweoQn6MI","tlshash":"ca83d57ae587308b732b9964f3725b569e7800578b0e4bbcb1f4652ce2d40e836732c9","first_seen":"2026-06-26T02:14:11.643841Z","last_seen":"2026-08-31T12:17:02.502644Z","times_seen":15,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/loyalty/reactions/still/17.png?v=5","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.475Z","timestamp":1788174190475,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 12:18:32 GMT","end":"Thu, 19 Nov 2026 12:18:31 GMT"},"fingerprint":{"sha1":"73:3D:80:BA:FF:E1:7B:1D:0E:6E:9A:40:E5:15:C7:6D:FE:46:B9:44","sha256":"F6:FC:99:1F:A8:9D:10:F1:85:36:C6:51:C1:BD:A3:BE:67:18:DC:98:E2:29:22:39:6F:84:4F:11:66:3A:2B:B8"}}},"request":{"raw":"GET /public/images/loyalty/reactions/still/17.png?v=5 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:18 GMT\r\netag: \"649bb1f6-2b50\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nage: 57047\r\nx-served-by: cache-bma-essb1270023-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 916\r\nx-timer: S1788174191.538857,VS0,VE0\r\ncontent-length: 11088\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11088,"size_decoded":11492,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit/color RGBA, non-interlaced","md5":"bdaed13dbee68cb1c8232a8ade368174","sha1":"1a0105d01e3bd328b9db82fb9aab7cbb7e678f62","sha256":"d11e9d24e9c0c3400475015f9259beae630060090b6d7fe6268f8c046a08c332","sha512":"1eb18101420c67a8470c2013606a887a638b254422c31da2c7d8b84f376c69998f2d54a4baa2394cadc3f611ee1168045409cde6960a6907ec12207490def1d1","ssdeep":"192:i5/V2aCnh/xXnUa3236eUF1sScrBxi40dHl5qJMNmrregJC/RZhkqhe4rEfFWIOh:ia9NxXUTq11ABxIK1mgQ5nkqUsY2k1bK","tlshash":"ca329e9da8b7253ec6fe303fc420051da3b515636f0a598c85a37cbad295a316f3a01f","first_seen":"2023-05-01T10:24:44Z","last_seen":"2026-08-31T12:17:02.503881Z","times_seen":1059,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":9,"receive":1,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/js/libraries~b28b7af69.js","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.798Z","timestamp":1788174190798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft/js/libraries~b28b7af69.js HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/p/sst-cgj/lctwghft/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qavJPaIe%2B2lOCxedqbsGnViiFr%2FUXvjI4%2BxNVAGpsRLV9c6YiGFDTNKm%2B8bUc%2FMrTbZJIxmnUXpQM%2Bx1MiRoE1d3bX8bxdHqjmpcKpUMPw%2Ff9tG2ZxgF1k8UaGLISGV3\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33b8c148a4723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196,"size_decoded":822,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"62962daa1b19bbcc2db10b7bfd531ea6","sha1":"d64bae91091eda6a7532ebec06aa70893b79e1f8","sha256":"80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880","sha512":"9002a0475fdb38541e78048709006926655c726e93e823b84e2dbf5b53fd539a5342e7266447d23db0e5528e27a19961b115b180c94f2272ff124c7e5c8304e7","ssdeep":"","tlshash":"c0d0129e9183638b442225907ac211d2654d13a6b87645e82d82a48a951857dc5ca69d","first_seen":"2023-03-07T12:06:54Z","last_seen":"2026-08-31T15:17:32.886724Z","times_seen":112563,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/css/profilev2.css","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.103Z","timestamp":1788174190103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft/css/profilev2.css HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/p/sst-cgj/lctwghft/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Aug 2026 10:23:28 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a9161a0-15faa\"\r\nexpires: Tue, 01 Sep 2026 10:04:47 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 3502\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0h4kMijQO5zrAecTeSRwLtFlSrGU6eyydXuyQOAlaCCVJ%2BlC3By%2BiJL2pkr9JScNR3VziIw2CODCDlP5hoJn0G1QGqKIMFHmZdZ2AvMCIXnHZd1gix%2B54ojO39iNPW1g\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33b8c10299123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90026,"size_decoded":18826,"mime_type":"text/css","magic":"ASCII text, with very long lines (1627), with CRLF line terminators","md5":"1ef706870f94d3a850a76738eb9c660f","sha1":"3a8ca616ba0790548f593cb642fd21e786182424","sha256":"aabbb69739184796d7073098f3c8ea08f5551642ea34fac885ac536bd61adb28","sha512":"29dcc3dc1bb2b307abc7d6776f4a09f888ddd97ccb24a41839b54794a29ff542ec980a948fd99a05d956134d970b1b65aecffbdb01f5986a97c89cda055ebf4c","ssdeep":"768:VV/pSskuA0HO0HyHTgJR+8P5JlIkTKDT9kzh6ruT5LOJHkvqnFnOePv+5n9IAjOH:rpWHT4RJBTET6dOMA2Q9GseXr4","tlshash":"9b93a559e95b701fb337b9f6fbf16b468e204026e70a0779b4d4746c9ac446c22b32c6","first_seen":"2026-06-26T02:14:11.667444Z","last_seen":"2026-08-31T12:17:02.480734Z","times_seen":15,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/images/skin_1/notification_icon_flag.png","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.474Z","timestamp":1788174190474,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/images/skin_1/notification_icon_flag.png HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-46c\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nage: 51805\r\nx-served-by: cache-bma-essb1270042-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 1435\r\nx-timer: S1788174191.782984,VS0,VE0\r\ncontent-length: 1132\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1132,"size_decoded":1535,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"c16c711ef60ca0c08b2491375e085adf","sha1":"8c43a6de3a2b11502477e1671d9a145da9001743","sha256":"aee447b0f589300598aeca0216f3e29458f0869fca5bbfea34f02183aa460cca","sha512":"1870c7327e4783caacb2349e5526a83476cf3e99002c37032b32f7903b5f3536efa7c24532e057c367624562139e0ab9a7a47bc64ecbaf94327abf3391c7383b","ssdeep":"","tlshash":"c521964efa262880455ce54528eac057eb17050096f1e93a7ceccc278c706f1649d2c7","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-08-31T12:17:02.525265Z","times_seen":502,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":10,"receive":20,"ssl":265},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/fonts/MotivaSans-Thin.ttf","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:11.157Z","timestamp":1788174191157,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft/fonts/MotivaSans-Thin.ttf HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/p/sst-cgj/lctwghft/css/motiva_sans.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:11 GMT\r\ncontent-type: font/ttf\r\netag: W/\"1cfd0-65a18d7e4b4f2\"\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 28 Aug 2026 10:23:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ny5%2B2cUcbthCxeUIqsxops7iqp%2FRJEF2R3GpJ5DW7h5HfvAEwQIznuSIUB%2B6QJorma8czkC7u2k%2F1uoPhcmghFe6Gu9y0vxw9HxYCzhOrHQ%2B7wAk3RPMviCNaTLaIuFw\"}]}\r\nage: 3503\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a33b8c16babd23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118736,"size_decoded":55026,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansThin4.015;Plau;MotivaSans-T","md5":"ce6bda6643b662a41b9fb570bdf72f83","sha1":"87bcf1d2820b476aaeaea91dc7f6dbedd73c1cb8","sha256":"0adf4d5edbc82d28879fdfaaf7274ba05162ff8cbbda816d69ed52f1dae547f6","sha512":"8023da9f9619d34d4e5f7c819a96356485f73fddcb8adb452f3ceefa8c969c16ca78a8c8d02d8e7a213eb9c5bbe5c50745ba7602e0ee2fe36d2742fb3e979c86","ssdeep":"1536:GAAAAAAAgsAAAYgIAAAAsAuErzzzz6mfzzVCA9zzzzzzdp/koLAGXImE98YfgNi9:kErZDE9BfgNiX9k3SDHewStfNwS0fj9","tlshash":"b5c34b06f702eb4add691e7ca59163c5b728f4a13b1ec30f95c66d5afc8e1a60d022c9","first_seen":"2023-04-05T04:16:14Z","last_seen":"2026-08-31T12:17:02.501894Z","times_seen":4999,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tbnoviytatic.com/752180f7a/0b9aa/0b90af0.png","fqdn":"tbnoviytatic.com","domain":"tbnoviytatic.com","tld":"com"},"ip":{"addr":"172.67.166.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tbnoviytatic.com/abbc8b926","date":"2026-08-31T11:03:11.669Z","timestamp":1788174191669,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tbnoviytatic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 14:37:22 GMT","end":"Fri, 27 Nov 2026 15:35:55 GMT"},"fingerprint":{"sha1":"B8:09:FE:61:80:08:81:A1:08:26:A4:17:F7:07:46:07:50:46:B1:17","sha256":"3A:B2:B9:EB:2C:E3:AB:48:5B:6B:B3:79:A3:62:50:09:4E:96:93:AA:E0:B9:3C:87:62:A0:CE:EF:CC:07:70:EB"}}},"request":{"raw":"GET /752180f7a/0b9aa/0b90af0.png HTTP/1.1\r\nHost: tbnoviytatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tbnoviytatic.com/abbc8b926\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:11 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nage: 3503\r\nlast-modified: Mon, 31 Aug 2026 10:04:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BG8dOHtsBK4cvuHeeIU1HuPnDIcMsGagHdF8ASD1MM7nBMYKLRYn5HQgGpiLaoYw6kWb1hrTat%2BAM6MW7llUEmvZvnZXfeTRRXBq5%2B%2B21cypuScSSxzyK4QGynJ2E5OzQdqD\"}]}\r\ncf-ray: a33b8c19f88a56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3860,"size_decoded":4489,"mime_type":"image/png","magic":"PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced","md5":"34c3a2b86789c9547d1ba61e8b0b88bc","sha1":"b8145ab7f778872f780b01fb2c29c16ee0722ec0","sha256":"e4069fcb524769e017cd8663687cbb5f8248f2641bd1f4d992fb6d1b3c49a65e","sha512":"d29e0b06ba89a7829cd0244af6bc08afde816b11a7923ffd19347f6361c9efbe6f21b5916cf4776f6c94dcc7b0a6e0c111e843e5cccd5edba8b184874bb8b1d4","ssdeep":"","tlshash":"f1812a72f444d8eaa10fbcd8e9f4e7df59832806d55528bf8d1b5d27aa4b3434508341","first_seen":"2025-06-12T19:11:04.995282Z","last_seen":"2026-08-31T12:17:02.488132Z","times_seen":8,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tbnoviytatic.com/752180f7a/0b9aa/2b63dd6.jpg","fqdn":"tbnoviytatic.com","domain":"tbnoviytatic.com","tld":"com"},"ip":{"addr":"172.67.166.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tbnoviytatic.com/abbc8b926","date":"2026-08-31T11:03:13.999Z","timestamp":1788174193999,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tbnoviytatic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 14:37:22 GMT","end":"Fri, 27 Nov 2026 15:35:55 GMT"},"fingerprint":{"sha1":"B8:09:FE:61:80:08:81:A1:08:26:A4:17:F7:07:46:07:50:46:B1:17","sha256":"3A:B2:B9:EB:2C:E3:AB:48:5B:6B:B3:79:A3:62:50:09:4E:96:93:AA:E0:B9:3C:87:62:A0:CE:EF:CC:07:70:EB"}}},"request":{"raw":"GET /752180f7a/0b9aa/2b63dd6.jpg HTTP/1.1\r\nHost: tbnoviytatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tbnoviytatic.com/752180f7a/0b9aa/655ef78.css?v=eisHsuZU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:14 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nage: 3501\r\nlast-modified: Mon, 31 Aug 2026 10:04:52 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vEwAghghQbwiAF7h96pJR5%2FANARkuBFYrIQt%2FzRCjMpdUTdPzIbntjgWQxx6Morb2eqGiqD3Kyn4eII9i%2BnXawSXkMksoHtQWP6PQ%2FmamaGySgkm3qVUR4wpKJ00ltEt1mvZ\"}]}\r\ncf-ray: a33b8c28893f56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21894,"size_decoded":22526,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 700x650, components 3","md5":"706af5b11493b9489697f1ce95d0dbad","sha1":"6f7b4eb9f39f4396569851303d7dfe761b47d25e","sha256":"15f006b87a3225b0cb949d2be7bf782ceeb0ed6da7ebe651f254dc8f84a979ce","sha512":"517816ea80c64b0da100db4fd0695a6e668ebb74935c4bc7ef13dab153dd23b7077c7de2141829dd02aa51e23e3e48148d591156dfb8235fb4fedc87283c4e73","ssdeep":"384:pLQp/dI0wdNqQy4Tvrn8LOFR2R40y/QgUTQ2w0a7W1uLXhxG:pLQkty4TvokR2S3MVwHEuLhw","tlshash":"9ea24b38f3c3d3954b0716ae713c3e33078912c166d80a174a676c449998f7ada2bb7d","first_seen":"2026-08-31T10:05:42.569953Z","last_seen":"2026-08-31T12:17:02.532684Z","times_seen":3,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/images/footerLogo_valve_new.png","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.418Z","timestamp":1788174190418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft/images/footerLogo_valve_new.png HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/p/sst-cgj/lctwghft/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 28 Aug 2026 10:23:28 GMT\r\npriority: u=5,i\r\netag: \"6a9161a0-8ed\"\r\nexpires: Tue, 01 Sep 2026 10:04:47 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 3503\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MEmKSC%2F2RNpzllq8%2B174qNrqJwD05WkNdkT0xn%2BqXhTvWviu8lzDEbkWGflBRE3jdxeyZ54ZZFaSvbjo8lJZkKl2SYwtqbA1DapfSiwdj2M7bSuLEdNwAvxkrsPtiS53\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33b8c1219d523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2285\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2285,"size_decoded":3016,"mime_type":"image/png","magic":"PNG image data, 184 x 52, 8-bit/color RGBA, non-interlaced","md5":"5cba6abf67ac92684a4782b891a69c9d","sha1":"d560912d1fecebbed7b18b1c472c70f70080bcee","sha256":"ff991cd769572478cdc67d22980851f2f4f028b009445f8e9251e84f0a2aa41c","sha512":"0393790799dd0b93b565c763fde339a6a66e462d72cb82ba8867c6c2fe19c10fd436d339a14287b7fd62c297dd2dd44cdcb8e6125e2eb2193c2c90281a360e2f","ssdeep":"","tlshash":"bf4139cec08ea41678fba99358546eec2a16d29bd8d158f00d98288d3561c7d57fc224","first_seen":"2025-10-15T17:17:10.867018Z","last_seen":"2026-08-31T12:17:02.536047Z","times_seen":1050,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.fastly.steamstatic.com/steamcommunity/public/assets/profile/equipped_items_icon.svg","fqdn":"cdn.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.467Z","timestamp":1788174190467,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:58:31 GMT","end":"Thu, 22 Oct 2026 11:58:30 GMT"},"fingerprint":{"sha1":"A9:E4:56:36:05:6B:98:FC:FB:85:DD:E1:BF:86:A7:59:33:3E:9E:4B","sha256":"54:8A:1D:1B:EA:C3:38:54:F2:41:A1:A8:14:FE:27:D9:EE:8E:BB:B7:45:A3:17:7B:D9:12:B4:04:09:F4:8E:27"}}},"request":{"raw":"GET /steamcommunity/public/assets/profile/equipped_items_icon.svg HTTP/1.1\r\nHost: cdn.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 22 Nov 2024 18:31:37 GMT\r\netag: \"6740ce09-305\"\r\naccept-ranges: bytes\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nage: 58016\r\nx-served-by: cache-bma-essb1270067-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1577\r\nx-timer: S1788174191.538852,VS0,VE0\r\ncontent-length: 773\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":773,"size_decoded":1141,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"07e68f4a8fccf445de013ae272dbfd37","sha1":"9bd297e604b1b47cf5e2539b4e98daeb71926bfa","sha256":"37ae68e419904f5deac7f3b6ef9b0b800f12ac0f0ad26afbedaa583384a38c78","sha512":"f034317ac3e38a9583ed281b6dc014cc30ee76e20879264b08262903278fb99f9b44bcecd166a36f9c13d0e9bbc31d24ff2d64f2fa9994b1d430a30e311cf1a4","ssdeep":"","tlshash":"a80190bff01d5d2d50819358558dac029086f843b21764c1a7d3361cbd918b3c536f65","first_seen":"2024-11-28T05:35:24.168488Z","last_seen":"2026-08-31T12:17:02.52157Z","times_seen":191,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":9,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH-Xf2t2zNG-f2lt084K7-VL-Vg_wip7f6SsC0PujZat_NPGfMWWRwuU5o-pwWDuygRUYpzTcpYb0LCTVKld8ZcAhFrwUthO8mtWyP-O3sVOIiooUyHqqhiod7ylr5OoEUaAjrKzXjAzIMrJr545DeqgWuQz1qw/96fx96f","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.504Z","timestamp":1788174190504,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH-Xf2t2zNG-f2lt084K7-VL-Vg_wip7f6SsC0PujZat_NPGfMWWRwuU5o-pwWDuygRUYpzTcpYb0LCTVKld8ZcAhFrwUthO8mtWyP-O3sVOIiooUyHqqhiod7ylr5OoEUaAjrKzXjAzIMrJr545DeqgWuQz1qw/96fx96f HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\ncache-control: public,max-age=604800\r\nexpires: Sun, 21 Dec 2025 05:48:31 GMT\r\nlast-modified: Tue, 07 May 2019 20:47:10 GMT\r\naccept-ranges: bytes\r\nage: 578193\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270042-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1788174191.791982,VS0,VE1\r\ncontent-length: 10947\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":10947,"size_decoded":12934,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"80bb67d3204521a474f9ab4a6a8fdcea","sha1":"850769a7da2abead3dfbfd252f22e218b1c4fc90","sha256":"e0b76514fccb0815a10bea6c954a6920ad60a72f692d0ad948d8f2ddf068f693","sha512":"dcc184ff3abe3c77474239ed6134be0b90415c58ccc8d25a3f722cad4bb1c27668e057c282f63b30268728863d8d0b2745788ede91a399d57c1b813a26867b09","ssdeep":"192:8v393BnXY+Jc6L4HFbBGOkLAQyY+jH2LxNiFoc2oSkg+33x:8139Y+G6LskDMbRG4","tlshash":"0832bf9c658032f8740c534caddb8da56611c3850f9b6db49f9be5742de0ada3e183dc","first_seen":"2026-08-13T08:30:02.62948Z","last_seen":"2026-08-31T12:17:02.515315Z","times_seen":13,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":198,"dns":0,"connect":0,"send":0,"wait":61,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH_HN0cWiOmuD4EQ6857m5WbzSEyhoZ_t8C1J-_OiV6lkM-OaAmLfxvdkv959RnjjqhQqvjKXjo71HibOLUV5VsdxW-4Dthe9ltDgMry251DXj4xCyXj7jihP7CdstukGBPUgqfHfj16UZOYjoc5UpmVWL9s/96fx96f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.128","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.528Z","timestamp":1788174190528,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH_HN0cWiOmuD4EQ6857m5WbzSEyhoZ_t8C1J-_OiV6lkM-OaAmLfxvdkv959RnjjqhQqvjKXjo71HibOLUV5VsdxW-4Dthe9ltDgMry251DXj4xCyXj7jihP7CdstukGBPUgqfHfj16UZOYjoc5UpmVWL9s/96fx96f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 11 Oct 2022 01:17:25 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 6926\r\nCache-Control: public, max-age=58381\r\nExpires: Tue, 01 Sep 2026 03:16:11 GMT\r\nDate: Mon, 31 Aug 2026 11:03:10 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6926,"size_decoded":8753,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"a09570a2c0b474fcfe2c75774abe2018","sha1":"53b5a5638c87b66ae5c0cdd89b9de3419c1932cc","sha256":"ed5843b8fa1ab0542b17f2da647a5aaaf1c4262e9346fc9272573f863581882d","sha512":"ac10a8f55e5e49bda0934cbf8e1b94d2e24f9d5fc4e597692cb9e57415e5384c65d1d11c691787b70e765b20f64f6c992698828805aca4c0595a55c9f2e12496","ssdeep":"96:/QRgQOjU47uPRWf8OFz4IbEBiL4X5vzUkpY7pVpTmp+kR02lxNRYFIG8/hHOmxc:/QRkuJW/Ci0X57p6BZn6I2GEnxc","tlshash":"51e19e703c8a9484b48ddd340d89b169fabd2e4d180261c5cd3fb7ab821457caa5c7f9","first_seen":"2026-06-11T00:49:01.12037Z","last_seen":"2026-08-31T12:17:02.50544Z","times_seen":36,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":131,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared.fastly.steamstatic.com/store_item_assets/steam/apps/105600/header.jpg?t=1769844435","fqdn":"shared.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.535Z","timestamp":1788174190535,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shared.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:58:18 GMT","end":"Thu, 22 Oct 2026 11:58:17 GMT"},"fingerprint":{"sha1":"59:6E:44:DB:60:B8:08:2F:C4:C0:CA:E3:A8:65:4B:A2:C0:A6:8F:1B","sha256":"0F:54:E6:A4:07:BE:72:20:E7:77:62:F4:1B:44:B3:0F:21:AC:98:97:72:CC:6B:CA:7E:D7:27:DE:A5:AA:AB:75"}}},"request":{"raw":"GET /store_item_assets/steam/apps/105600/header.jpg?t=1769844435 HTTP/1.1\r\nHost: shared.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 28 Sep 2022 20:44:16 GMT\r\netag: \"6334b220-f2e1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nage: 1583747\r\nx-served-by: cache-bma-essb1270045-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 4837\r\nx-timer: S1788174191.792496,VS0,VE0\r\ncontent-length: 62177\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62177,"size_decoded":62667,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 460x215, components 3","md5":"d78880fd195bd5c296f7a409097c4cc1","sha1":"b1a22bdf0b1f4f7fa8796a04b50072c80fbd59d7","sha256":"866a45d030cf6af1fe06fd311a57cb472cb12411b2cdfe78391fd8b8ce4ab4bd","sha512":"1cce0315f4b472f5c7d4dfd93fadce8b4ee6c51304be463f1b63279386a97b8f0ba0eb20fb2cbd0e8d0e9c096ae281421b87703cf0aa25cac4e10fbe0a0b0818","ssdeep":"768:+DhkbiXq8q09twIqk1bHHDeLG21cXXgdtCCPfIEtJewi+Au5Y9EsFjRfvmXQIEaS:+1I+q70/nHjeLxCCHpAfSCjzIN0PeZMT","tlshash":"5e53024766b4cce0fec68b3144c6a8dd4cdfaca4c5ab945b75d8132680a28deae44d3d","first_seen":"2023-08-01T22:13:33Z","last_seen":"2026-08-31T12:17:02.507092Z","times_seen":47,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":160,"dns":14,"connect":0,"send":0,"wait":63,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/fonts/MotivaSans-Light.ttf","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.666Z","timestamp":1788174190666,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft/fonts/MotivaSans-Light.ttf HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/p/sst-cgj/lctwghft/css/motiva_sans.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\ncontent-type: font/ttf\r\netag: W/\"1df24-65a18d7e4a93a\"\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 28 Aug 2026 10:23:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yl7dAkkOzJDAA%2FtL53fiEancBWUwZcZ0X5RSgIKuxGDt0Y%2B8e312aIQP%2FLfCiMfCKo23leZw8GVeTBFPn%2Ft2aRP0k%2FhY7AWkq73arrrz%2BBLdg%2BEmRlijYrKGWbDx39nx\"}]}\r\nage: 3502\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a33b8c13aa2323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122660,"size_decoded":57935,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansLight4.015;Plau;MotivaSans-","md5":"d45f521dba72b19a4096691a165b1990","sha1":"2a08728fbb9229acccbf907efdf4091f9b9a232f","sha256":"6b7a3177485c193a2e80be6269b6b12880e695a8b4349f49fccf87f9205badcc","sha512":"9262847972a50f0cf8fc4225c6e9a72dbf2c55ccbcc2a098b7f1a5bd9ea87502f3c495a0431373a3c20961439d2dae4af1b1da5b9fade670d7fcaed486831d8c","ssdeep":"3072:XnN/O/ceJkGwg/MOAibD2hPfX4HYhDhudcvObkSafj9:9/O/ceJkGwg/MOAib6nX44NhIWOb8fh","tlshash":"70c32a46f712eb4adc554e3d6162a3d5b348f9f53b2f830ba2856e55fc8f0c90e46288","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-08-31T12:17:02.528886Z","times_seen":4098,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH-zR1tnuIX6a9VNm4Lj871XqDgf0i4Xf_DBY7vyvJqE1d6eWWzWUw-outeI-Tn3lk0lz6m3Qn9iteHPDOFUoA8MhEO5f5hCm0oqw1pH0Fe0/96fx96f","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.490Z","timestamp":1788174190490,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH-zR1tnuIX6a9VNm4Lj871XqDgf0i4Xf_DBY7vyvJqE1d6eWWzWUw-outeI-Tn3lk0lz6m3Qn9iteHPDOFUoA8MhEO5f5hCm0oqw1pH0Fe0/96fx96f HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\ncache-control: public,max-age=604800\r\nexpires: Fri, 30 May 2025 01:25:06 GMT\r\nlast-modified: Wed, 16 Dec 2015 20:33:31 GMT\r\naccept-ranges: bytes\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nage: 571999\r\nx-served-by: cache-bma-essb1270042-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 8\r\nx-timer: S1788174191.784529,VS0,VE0\r\ncontent-length: 9203\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9203,"size_decoded":11189,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"57067ad52b715bb3fe59c80a0a91ec99","sha1":"f34761572d327c5095638bf4785f64030365e814","sha256":"bc9ab5d84760b60dc957bdc787e486b19692b077da818c2c793e035f0d36006d","sha512":"cf6dab0b1187b8466703fed50e75f1a43ea4dff498f9ade646d02a5e81d6fe9be26dc96ff76f05c98c16c70c65c0eaf38b027f4af585419d6e4d3148553c3a96","ssdeep":"192:HzP1z1DjrTFMi6i93Fm4Rt7hkjUz4DAk8mavsR/osgxSga+Jpwz43q:HTrDjrTFlbVkjpa8Q5S5+Juz46","tlshash":"de12af1ac36a099cc61e66eb187c2fdcf42366e0b7470ff53d2a5992961087bc5e9091","first_seen":"2025-11-26T00:23:13.844776Z","last_seen":"2026-08-31T12:17:02.514774Z","times_seen":34,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":214,"dns":0,"connect":0,"send":0,"wait":42,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH__a1cWqMGnY6Fdy4ZTL60niWVL8n5H17h1a__e2Ouo8caDEWzGVlLt36bk8Gy_rxB91sGWHm9uucCmWOwMpWJIhQuUN4BC6jJS5YCaXRkJ7/96fx96f","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.502Z","timestamp":1788174190502,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH__a1cWqMGnY6Fdy4ZTL60niWVL8n5H17h1a__e2Ouo8caDEWzGVlLt36bk8Gy_rxB91sGWHm9uucCmWOwMpWJIhQuUN4BC6jJS5YCaXRkJ7/96fx96f HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\ncache-control: public,max-age=604800\r\nexpires: Fri, 30 May 2025 03:55:57 GMT\r\nlast-modified: Tue, 01 Sep 2015 00:26:03 GMT\r\naccept-ranges: bytes\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nage: 582606\r\nx-served-by: cache-bma-essb1270042-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 3\r\nx-timer: S1788174191.791967,VS0,VE0\r\ncontent-length: 10585\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10585,"size_decoded":12572,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"b2e59f3ae7d0dd50b355c669d7d3bd15","sha1":"e8be7f35c26137dee72179f7d6d6a1c8f71dd472","sha256":"a4ad75e764b407caf38e9300081e9f11550cffd8ecc4aadb41744d1504c8745a","sha512":"963b18616d29a85a3a7fe551d5ac87e990207b6b29973f5a9e76f8373f875157edc75d7201fe155ae65b5f00159d6543ad8087d0ae8874a4515a8caed71e716f","ssdeep":"192:uzMNSRJcAEnJfqh+qXSxAdgui5mHMbtenXHywJDwSN3eEsJSshDgSG/V2Sto:uESRJcBIwWu3ms5SHJsSNOEGSk+8Sto","tlshash":"d122bfbdcb09552652dad7f89fa78d0a0ac47413e0064fc827239f7246921ec8f1fd5a","first_seen":"2026-08-13T08:30:02.646047Z","last_seen":"2026-08-31T12:17:02.510793Z","times_seen":13,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":197,"dns":0,"connect":0,"send":0,"wait":62,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tbnoviytatic.com/752180f7a/0b9aa/a35adf7.png","fqdn":"tbnoviytatic.com","domain":"tbnoviytatic.com","tld":"com"},"ip":{"addr":"172.67.166.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tbnoviytatic.com/abbc8b926","date":"2026-08-31T11:03:11.829Z","timestamp":1788174191829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tbnoviytatic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 14:37:22 GMT","end":"Fri, 27 Nov 2026 15:35:55 GMT"},"fingerprint":{"sha1":"B8:09:FE:61:80:08:81:A1:08:26:A4:17:F7:07:46:07:50:46:B1:17","sha256":"3A:B2:B9:EB:2C:E3:AB:48:5B:6B:B3:79:A3:62:50:09:4E:96:93:AA:E0:B9:3C:87:62:A0:CE:EF:CC:07:70:EB"}}},"request":{"raw":"GET /752180f7a/0b9aa/a35adf7.png HTTP/1.1\r\nHost: tbnoviytatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tbnoviytatic.com/abbc8b926\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:11 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nage: 3503\r\nlast-modified: Mon, 31 Aug 2026 10:04:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NmlYiPs0dZ2wsChtCu1nT%2BIZOyerMdtI%2B3bAehYQVOrxlmLZw3CJBuFGMpiSojEfi0phcddJl4f7P50Yx%2BrTq%2FIyliwSsK2cohYnM0nhgA1kTJon3UAR5PmB0f4DYfevVU4p\"}]}\r\ncf-ray: a33b8c1af89c56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":988,"size_decoded":1619,"mime_type":"image/png","magic":"PNG image data, 96 x 26, 8-bit/color RGBA, non-interlaced","md5":"90796bf2f8c660ea94d84a75fb88e9ad","sha1":"9c8361c868c5f152359a8cbc98d452b71a2c15ee","sha256":"8200e01a40486e5ec85b1e000aa229b83421eb9f0a9c576df00a23eadc56dfaf","sha512":"ec97a47afb0ca53b08adb43fe215f567e0e4b1f19e177b4aa0b39bd460c8646a866f81ed457631480dbb7c4d9020e7adb2b0fc2d37f8b91457e0a45856e0ee1a","ssdeep":"","tlshash":"2311c4a4a8f7020964b580e49de99b28edb22836235ae920d22c2f1ac55634ce042a13","first_seen":"2025-10-29T20:02:16.119374Z","last_seen":"2026-08-31T12:17:02.509658Z","times_seen":7,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/css/modalContent.css","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.101Z","timestamp":1788174190101,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft/css/modalContent.css HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/p/sst-cgj/lctwghft/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Aug 2026 10:23:28 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a9161a0-9a1\"\r\nexpires: Tue, 01 Sep 2026 10:04:47 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 3503\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4kLq2mnyiZ6H6HDgiDZutVURt7Qy%2B9tKOKweB8rS4sIgYaW%2B48463FCLgBPMwj%2BBEPRwPTBmsRdvlXGIE6qjjPcrXraGekSOFfIn6wrDOcA1tzOMG08uoSTgiOV6G69x\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33b8c10299023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2465,"size_decoded":1593,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1df30e5a486708ab14bc8d0fb8df325d","sha1":"bcd22e35fdb83b5fef49408d6dd0f119c4454af5","sha256":"4363879b5802df5057005b652601c797ecc8412abc3510930e98263e7bc4696e","sha512":"4c04a86f78c2c0af98697bf902b041f15cd5bfa31b14a1afaa74e76899179320f6924351f26700cc23637011a71a93dbf18e7bd83b2e1ce8ecdf1ceb758a465d","ssdeep":"","tlshash":"715110a6556e304ef37bb9fdb3b57314af4400174f0b5ac9b4e8758a86c42f8102b4c9","first_seen":"2026-06-11T00:49:01.042813Z","last_seen":"2026-08-31T12:17:02.499214Z","times_seen":25,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGI2zyUS1Q7nAxtizOmmV6Vdx8cj1-FrmTxzOipPy7y1J7f6vbKEjdqWRWDHIk7wv57A7Gy_iwk1_4j6Gwt-ocimWPQF2CMByELIMukO_m8qnab2kEPA3ZA/96fx96f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.128","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.509Z","timestamp":1788174190509,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGI2zyUS1Q7nAxtizOmmV6Vdx8cj1-FrmTxzOipPy7y1J7f6vbKEjdqWRWDHIk7wv57A7Gy_iwk1_4j6Gwt-ocimWPQF2CMByELIMukO_m8qnab2kEPA3ZA/96fx96f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 01 Sep 2015 00:22:35 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 8837\r\nCache-Control: public, max-age=209673\r\nExpires: Wed, 02 Sep 2026 21:17:43 GMT\r\nDate: Mon, 31 Aug 2026 11:03:10 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8837,"size_decoded":10665,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"3d4bb15861311825fb4c942f1681324a","sha1":"e2e6ba511458c4bfafb5e96b3b8112c1aa445a08","sha256":"74a4b0dea3e4e80380fb135bba0c1b969d50e81311aa16ee431afc989418df4f","sha512":"5c4fb80456ffd47726cf2b14a07790b4133d7069cc747fa41aa66c15eaabf9f7485c3206526ff73a3d041d305f01f8408251b2671c930c4bde6387a0e510a161","ssdeep":"192:4nTj5xhMruSAoisn1NKsZEUZu4slesMtdT4keQUtlaVH2prNrvtInte:anhMySAorqKpZT7sKRlIcVHeNke","tlshash":"c602b03ce086f932bb09ced53e264ab1e4cf99fcd655447136085e2764012cf1ae87a2","first_seen":"2025-11-26T00:23:13.891036Z","last_seen":"2026-08-31T12:17:02.498549Z","times_seen":40,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":2,"connect":3,"send":0,"wait":8,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tbnoviytatic.com/752180f7a/0b9aa/df97703.js?v=eisHsuZU","fqdn":"tbnoviytatic.com","domain":"tbnoviytatic.com","tld":"com"},"ip":{"addr":"172.67.166.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tbnoviytatic.com/abbc8b926","date":"2026-08-31T11:03:11.662Z","timestamp":1788174191662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tbnoviytatic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 14:37:22 GMT","end":"Fri, 27 Nov 2026 15:35:55 GMT"},"fingerprint":{"sha1":"B8:09:FE:61:80:08:81:A1:08:26:A4:17:F7:07:46:07:50:46:B1:17","sha256":"3A:B2:B9:EB:2C:E3:AB:48:5B:6B:B3:79:A3:62:50:09:4E:96:93:AA:E0:B9:3C:87:62:A0:CE:EF:CC:07:70:EB"}}},"request":{"raw":"GET /752180f7a/0b9aa/df97703.js?v=eisHsuZU HTTP/1.1\r\nHost: tbnoviytatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tbnoviytatic.com/abbc8b926\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:11 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h%2B%2B1pIbdg7swxnqUpQ9wbmjAXoaxgxN5LeTx4gMUMVLLd7RoHkY6xA%2BFVTu9o2Z%2BU818cD7o9KbxNyT5R%2BxhlY%2FWyshhaMzLyPhLv47mr%2FoPWibVZ5MhuKsYhtXplU0FWhkp\"}]}\r\npriority: u=2,i=?0\r\nage: 3503\r\nlast-modified: Mon, 31 Aug 2026 10:04:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a33b8c19e88656bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95701,"size_decoded":35812,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32086)","md5":"eba51a61894a773df5cab2a18e499c0b","sha1":"e028428f4f367af2660a66e976f223695020e732","sha256":"225edf54855697e6207ba9bded4d041d824e44c7c842f2803ede51764a9e54ab","sha512":"a57c4b5a43b3b629737c98ca9fb0cd549bc35c300208c23690bf9f04312d2aaca179d6cf523f031f2d6dcd42b4e8156a149b0ae676cc09737a6615c8d7119cfc","ssdeep":"1536:DPEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzmQ:oNMyqhJvN32cBC7M6Whca98Hrp","tlshash":"bd93d8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","first_seen":"2023-03-07T12:27:03Z","last_seen":"2026-08-31T12:17:02.509184Z","times_seen":242,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/js/libraries~b28b7af69.js","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.116Z","timestamp":1788174190116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft/js/libraries~b28b7af69.js HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/p/sst-cgj/lctwghft/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ome32AgubmaSOLocHzTgyNrtpnrW7K91NDNgqmnH204SqC6sAlGCxyXl%2FJZ5HUKXtn%2F9Gwe1GvhDvVkuSNxacUh1SK4Ppxn55SbKhoSuARTxk9Jrhib%2Fc%2F3AlEPC6xx\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33b8c10399a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196,"size_decoded":812,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"62962daa1b19bbcc2db10b7bfd531ea6","sha1":"d64bae91091eda6a7532ebec06aa70893b79e1f8","sha256":"80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880","sha512":"9002a0475fdb38541e78048709006926655c726e93e823b84e2dbf5b53fd539a5342e7266447d23db0e5528e27a19961b115b180c94f2272ff124c7e5c8304e7","ssdeep":"","tlshash":"c0d0129e9183638b442225907ac211d2654d13a6b87645e82d82a48a951857dc5ca69d","first_seen":"2023-03-07T12:06:54Z","last_seen":"2026-08-31T15:17:32.886724Z","times_seen":112563,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/images/profile/icon_invitegroup.png","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.469Z","timestamp":1788174190469,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/images/profile/icon_invitegroup.png HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-529\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nage: 7015\r\nx-served-by: cache-bma-essb1270042-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 293\r\nx-timer: S1788174191.794899,VS0,VE0\r\ncontent-length: 1321\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1321,"size_decoded":1722,"mime_type":"image/png","magic":"PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced","md5":"2481d71a1ce5140f622ed92009262144","sha1":"a2b475d874e55a2c971c606bd2fbdf7b1caccd34","sha256":"804246b92f1abfaccd87549bcd1be88693f0b9647071eb0019f26361ba1ed5ae","sha512":"7ba66a3a1f350cffc85d62f0882ebc9192bffc213794f5b7b4ca1492286b104fb38a54b21d19ff58fb91c219f34608e93217154ff10bc4f773d20048a3d2e637","ssdeep":"","tlshash":"1f2153a8e6006892b149eac314ff5027ac024885a5e0f56ad5cfdc2318b62f8a55d6d7","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-08-31T12:17:02.526274Z","times_seen":449,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":55,"receive":16,"ssl":265},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/js/main_1.js","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:11.084Z","timestamp":1788174191084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft/js/main_1.js HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/p/sst-cgj/lctwghft/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:11 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=746%2BmcZaYYFzfGOPFf8XiWIMIU5%2FV616jQrB0rfENbrp3Tzl4xX7O%2FDFgOhjTHtnXRl3SNL%2B1S4WxJdfr%2F3%2Fp43y33FpfMe7PTAiZ0YW%2F88DFCPf8L6kJjm8v9yGBfj5\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33b8c164aa023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196,"size_decoded":822,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"62962daa1b19bbcc2db10b7bfd531ea6","sha1":"d64bae91091eda6a7532ebec06aa70893b79e1f8","sha256":"80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880","sha512":"9002a0475fdb38541e78048709006926655c726e93e823b84e2dbf5b53fd539a5342e7266447d23db0e5528e27a19961b115b180c94f2272ff124c7e5c8304e7","ssdeep":"","tlshash":"c0d0129e9183638b442225907ac211d2654d13a6b87645e82d82a48a951857dc5ca69d","first_seen":"2023-03-07T12:06:54Z","last_seen":"2026-08-31T15:17:32.886724Z","times_seen":112563,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/images/badges/13_gamecollector/10_80.png?v=4","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.485Z","timestamp":1788174190485,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/images/badges/13_gamecollector/10_80.png?v=4 HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-c7e\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nage: 53987\r\nx-served-by: cache-bma-essb1270042-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 841\r\nx-timer: S1788174191.783327,VS0,VE0\r\ncontent-length: 3198\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3198,"size_decoded":3600,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"5d84a030e9a003729b1fdf7302ed30ef","sha1":"b2ee6b1f4eb7cdd86b13033f655f8f08ddf12a6e","sha256":"109ff754cd8a3fc62e4bbf0d9fd246d4c73833e5afcccc8afed5b823dc8599d7","sha512":"686747137704cd358f63a6acf9187c2ec9395bc3f66b25800c76969f1e4071dcf8776fc16b09eb04fb45e21a633643fe33449c319b0994600cd276ca6e6af626","ssdeep":"","tlshash":"74616dae6e4669e891aa7ce530267cec1d47cc81f03d63fe96c746712f1f6141146be0","first_seen":"2024-08-20T09:57:11.992973Z","last_seen":"2026-08-31T12:17:02.504574Z","times_seen":57,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":214,"dns":0,"connect":0,"send":0,"wait":30,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH-LRwMKoMGjY519y54_7_hblSBrilpn0sycPvPOoOKVpeKbFWzDHmOonsbg4GnDlxEt0t2WHz938JHmQbFQgCZFuBbldaRfPTHY/96fx96f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.128","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.507Z","timestamp":1788174190507,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH-LRwMKoMGjY519y54_7_hblSBrilpn0sycPvPOoOKVpeKbFWzDHmOonsbg4GnDlxEt0t2WHz938JHmQbFQgCZFuBbldaRfPTHY/96fx96f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 01 Sep 2015 00:29:40 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 9570\r\nCache-Control: public, max-age=311893\r\nExpires: Fri, 04 Sep 2026 01:41:23 GMT\r\nDate: Mon, 31 Aug 2026 11:03:10 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9570,"size_decoded":11398,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"4b3058862057a15a6fd4a10ae34a739c","sha1":"c999f8b94f803902375faa10dc0bd094a0c38ac5","sha256":"d8dacc481872984491f3830ac24b0e7ed91408377469362db309b28444adf58c","sha512":"40f29c17e60ca70f48a07407d6fb2b1ab53c4d3c538f4a8ca3a7ad43034e5c5518d110445c94b97835e9441c8270d73f619e8babcca5be3f5ba15cd62e96c780","ssdeep":"192:VpmRiy6YFtJeGvn9yVh+o55w/2OiKKf+3rz5RdRFOZpGMjYyGaKSl:Vply5OH+O+/b8+X/QZpTYyGMl","tlshash":"9812af19ddbe602ecfb16325585b8fbd8fcb0462523551b84ce1707aa7035ae2562718","first_seen":"2026-01-20T14:23:28.576311Z","last_seen":"2026-08-31T12:17:02.489643Z","times_seen":38,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tbnoviytatic.com/752180f7a/0b9aa/8609a82.png","fqdn":"tbnoviytatic.com","domain":"tbnoviytatic.com","tld":"com"},"ip":{"addr":"172.67.166.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tbnoviytatic.com/abbc8b926","date":"2026-08-31T11:03:11.668Z","timestamp":1788174191668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tbnoviytatic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 14:37:22 GMT","end":"Fri, 27 Nov 2026 15:35:55 GMT"},"fingerprint":{"sha1":"B8:09:FE:61:80:08:81:A1:08:26:A4:17:F7:07:46:07:50:46:B1:17","sha256":"3A:B2:B9:EB:2C:E3:AB:48:5B:6B:B3:79:A3:62:50:09:4E:96:93:AA:E0:B9:3C:87:62:A0:CE:EF:CC:07:70:EB"}}},"request":{"raw":"GET /752180f7a/0b9aa/8609a82.png HTTP/1.1\r\nHost: tbnoviytatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tbnoviytatic.com/abbc8b926\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:11 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nage: 3503\r\nlast-modified: Mon, 31 Aug 2026 10:04:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mCYE%2F%2FEd9cB2LxdDcMn9PW%2BplHKNxaMev%2BG0mrQHiCFZn%2B0k27hNOEyJS9j07RLxP%2BK5peQw9oQ26E5w5PbCy5mhgTtiztObccG5u%2B2rHLHVgaRyi6g3h%2FYCMgwmqw0Idhzm\"}]}\r\ncf-ray: a33b8c19e88856bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":975,"size_decoded":1614,"mime_type":"image/png","magic":"PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced","md5":"9de038f80311659937c46e622aca467b","sha1":"0f8ca5bce4d2f6a430fe898bd6c598a1dd7ffd9d","sha256":"b5abcec28fe976e4cd2f03f7d8ef258eaf568e3406241c8313131971e24bc85b","sha512":"39bce306a31fd1386207fab411ef59c01052985e73741a63a01be2a52adc29eeda8d7f192f4552156affb2e784bf22b28f6b621c603610579877824c6743dc1c","ssdeep":"","tlshash":"5b11a586e34eba1a79e9d12041f2bbb3a77262e38421082b950771550b3636e50462ad","first_seen":"2025-06-28T12:23:07.675084Z","last_seen":"2026-08-31T12:17:02.50051Z","times_seen":8,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/images/profile/profile_action_dropdown.png","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.463Z","timestamp":1788174190463,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/images/profile/profile_action_dropdown.png HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-411\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nage: 52806\r\nx-served-by: cache-bma-essb1270042-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 1201\r\nx-timer: S1788174191.792280,VS0,VE0\r\ncontent-length: 1041\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1041,"size_decoded":1444,"mime_type":"image/png","magic":"PNG image data, 12 x 8, 8-bit/color RGBA, non-interlaced","md5":"f7c7f00de9db4d93388c0836074ab2bd","sha1":"94ff6b8f6ec79de3ec2ec28ab13205870b63d2f4","sha256":"75511559130d0525f23dab49d6fd331727b3911a52e54bd95d4db76b79df980a","sha512":"8a17f7cd6cedfdfcea30205afddcdfb53ed46243dfbb8ef4fbdc90ab91c3b98701552831ec791a1e6b3f8cd880779dd27ffb84b89faab3ff59f3d83955b43990","ssdeep":"","tlshash":"0a1175cdef40b901a069e75118e35407bd2604d4e5e2e0627a89cd03a8742b28809aef","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-08-31T12:17:02.496175Z","times_seen":531,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":217,"dns":0,"connect":0,"send":0,"wait":66,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/fonts/MotivaSans-Regular.ttf","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.664Z","timestamp":1788174190664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft/fonts/MotivaSans-Regular.ttf HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/p/sst-cgj/lctwghft/css/motiva_sans.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\ncontent-type: font/ttf\r\netag: W/\"1df3c-65a18d7e4b10a\"\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 28 Aug 2026 10:23:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wntiq6oGjaSSaaLjXRtnkBkxn%2FNJFCp0u4cQmVGC8DVOIv8teBj9S0dJGerW5Csh7O5PwePh2%2B5Tpgr5qWEDhjI4RiXG38vpia8xTE3ojisexcBFlheGMu2jjS4Xrhnp\"}]}\r\nage: 3502\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a33b8c13aa2123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122684,"size_decoded":58313,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 22 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansRegular4.015;Plau;MotivaSan","md5":"57613e143ff3dae10f282e84a066de28","sha1":"88756cc8c6db645b5f20aa17b14feefb4411c25f","sha256":"19b8db163bcc51732457efa40911b4a422f297ff3cd566467d87eab93cef0c14","sha512":"94f045e71b9276944609ca69fc4b8704e4447f9b0fc2b80789cc012235895c50ef9ecb781a3ed901a0c989bed26caa37d4d4a9baffcce2cb19606dbb16a17176","ssdeep":"3072:lpsQ7l3T64Z1lKcDqttEPBWVNwZ+e222pKKSxfj9:Yg3T64Z19DqtkWbu/222kZfh","tlshash":"82c34b06f316e70aec614e3c66769399b358f8a53f2fcb0b95857d60bcad0d51e8128c","first_seen":"2023-04-05T04:16:14Z","last_seen":"2026-08-31T12:17:02.484092Z","times_seen":7357,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGJG51EejH_fRxMOyPXSb4VNny5P9uwipREyhxs_k-3pdt_D4bPA4dvPFX2OTmOgu4-VsTivqxkt242zdy4uvJGXXMFHM3yG_rA/96fx96f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.128","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.525Z","timestamp":1788174190525,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGJG51EejH_fRxMOyPXSb4VNny5P9uwipREyhxs_k-3pdt_D4bPA4dvPFX2OTmOgu4-VsTivqxkt242zdy4uvJGXXMFHM3yG_rA/96fx96f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 01 Sep 2022 20:34:20 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 14877\r\nCache-Control: public, max-age=367670\r\nExpires: Fri, 04 Sep 2026 17:11:00 GMT\r\nDate: Mon, 31 Aug 2026 11:03:10 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14877,"size_decoded":16706,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"8c3726c642e7504ccb416f3da1dee101","sha1":"a00dc269d1d11f2eee5c9e20a6368cecac175fd0","sha256":"8d1b21170e616bca3e93f4e8d90ba05eee602c8df5a4c9e8ef097aa1b22538cd","sha512":"055ba40bbcbe5682ec2690f6be8c27fccdb6d0c10899bbf2b3b0c2baf0a9c281a99319b56ead40df8c7bba335a95be09dac3da24280cd6634ebf627a883a1b03","ssdeep":"384:yLPMO4NSIHCDnazgFqKKH/fMFX6tqBZalYk/rbBzC:y7MHSIHG8gF9Kf63aCk/5e","tlshash":"5862c058c8aa236f444cf07fa7867463e450672ff12c687c17af7bf571a90899319b80","first_seen":"2026-06-11T00:49:01.111395Z","last_seen":"2026-08-31T12:17:02.513762Z","times_seen":36,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":107,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T11:03:09.736Z","timestamp":1788174189736,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft/ HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:09 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1EGVL5yyYe9RhqulJ%2BFpzi8GkRFbfYb1D6k807X7NbYSWQj3lZ2YcyAVpGCFDJO%2FP%2BDs%2FE1YBB1nfFqop7%2FA56TnW0fB3x%2BbXgS2jKRACV2uZz0rKBiMfFBG0cvlfEdW\"}]}\r\npriority: u=0,i\r\nlast-modified: Sat, 29 Aug 2026 15:35:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a33b8c0dd94023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104301,"size_decoded":23453,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (609), with CRLF line terminators","md5":"bd5318602e8552308d8de4f1e734ad67","sha1":"c1154ea1380e7461a56fd942949354552f858195","sha256":"635d5134ed411f5704d491545ee39f4c79589616f1f50a0fbfdd5a4a81f4d136","sha512":"325ee13e38d482a9040dbe2e62c3ab3032d90f418d7e5720e6924e7c35f661d4f10f08e9591d2575e172112a360b27254e0a6139e8cb9774531576b265a2a8b0","ssdeep":"1536:A4YqQm2UiaMAyPDb6e7RAjNpr2lPcAPvI/a/sK:A48pma/sK","tlshash":"48a3086668c0403302bbe2d0a6661f4ffe92522bca014a25f7fd1bd76ff5d529a2341d","first_seen":"2026-08-31T10:05:42.509944Z","last_seen":"2026-08-31T12:17:02.492742Z","times_seen":3,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH-bcwsS1Onao5EVm9ZTn41eoTBz_l5Dv8SZk__O8aaBiOL-SHGSRz-9JoOAnSirkkx9-5D7Tw4v9cXiUbwAmDZR3TONbs0W4kdOzMezhtFTYjohCnzK-0H1hMCTDUg/96fx96f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.128","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.511Z","timestamp":1788174190511,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH-bcwsS1Onao5EVm9ZTn41eoTBz_l5Dv8SZk__O8aaBiOL-SHGSRz-9JoOAnSirkkx9-5D7Tw4v9cXiUbwAmDZR3TONbs0W4kdOzMezhtFTYjohCnzK-0H1hMCTDUg/96fx96f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 01 Sep 2015 00:27:49 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 8231\r\nCache-Control: public, max-age=29769\r\nExpires: Mon, 31 Aug 2026 19:19:19 GMT\r\nDate: Mon, 31 Aug 2026 11:03:10 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8231,"size_decoded":10058,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"12be8ab82719b7cbf299be0a63483f7c","sha1":"10379b81e1626d42fc6ed98a255b1ce2518a15f1","sha256":"3a9993ebd9978a990240a5ae0bb50799c86762edb2481d63221bf9e498b9b800","sha512":"ce252010fb60767849b24c0a167e16241b6586d2068f8973ffb129603c5952e5170e5af95b0c5e577adb83a998a7003243da5ea787e56d1f6a02e4cc1057317c","ssdeep":"192:wleOjdjQlXIgFPl/f0OtMhBRQnmFEdvShJNq1Kr3VwlE:wJLgF5fwQnm2dvSAMp","tlshash":"2402afd1d68f78cfc6f17c0e63000499c938479fa19a63b0d528adb934c2b45f622e97","first_seen":"2026-06-11T00:49:01.087688Z","last_seen":"2026-08-31T12:17:02.527696Z","times_seen":36,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared.fastly.steamstatic.com/community_assets/images/items/573210/666974d94dc7e370f8cb279fd986ff477f00ccb7.jpg","fqdn":"shared.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:11.144Z","timestamp":1788174191144,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shared.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:58:18 GMT","end":"Thu, 22 Oct 2026 11:58:17 GMT"},"fingerprint":{"sha1":"59:6E:44:DB:60:B8:08:2F:C4:C0:CA:E3:A8:65:4B:A2:C0:A6:8F:1B","sha256":"0F:54:E6:A4:07:BE:72:20:E7:77:62:F4:1B:44:B3:0F:21:AC:98:97:72:CC:6B:CA:7E:D7:27:DE:A5:AA:AB:75"}}},"request":{"raw":"GET /community_assets/images/items/573210/666974d94dc7e370f8cb279fd986ff477f00ccb7.jpg HTTP/1.1\r\nHost: shared.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 22 Dec 2016 23:19:04 GMT\r\netag: \"585c5f68-42d07\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 907704\r\ndate: Mon, 31 Aug 2026 11:03:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270045-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1788174191.149307,VS0,VE1\r\ncontent-length: 273671\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":273671,"size_decoded":274159,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=714, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1118], baseline, precision 8, 1920x1226, components 3","md5":"8719fad93c2dc176f845284adb75bd13","sha1":"666974d94dc7e370f8cb279fd986ff477f00ccb7","sha256":"efb72e75bfbcadfcb414395676559e569cb427810ff87d667d38b2ed7dfc7e1c","sha512":"a6d77a0349368bd549030c3fa11cf18c9485a6e1eeb199166971d89b4ad5a1630e11157b0ea9a4acce630d5019fbd2a0f22ad089d71d09e7875d9b7770ff21cd","ssdeep":"6144:YbI/o1hOcXWnzIaYpMEzyn/Z6AnrN/zl6/ab/PGoA:7edcz+y/jrN/zl6/e/hA","tlshash":"e3449e606d599a8099cd746796ecd861cbf31fc00e3211afbfec6a190f19d8d4ce05ab","first_seen":"2026-08-13T08:30:02.613906Z","last_seen":"2026-08-31T12:17:02.520573Z","times_seen":12,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/css/buttons.css","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.096Z","timestamp":1788174190096,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft/css/buttons.css HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/p/sst-cgj/lctwghft/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Aug 2026 10:23:28 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a9161a0-92da\"\r\nexpires: Tue, 01 Sep 2026 10:04:47 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 3502\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8M4vls5WzzdStEbL4Pv%2BDc8MY%2BV7MVa2K7aXkXLfkKt1kd1FdbzApycx6eerKmUl0Ovglbx%2BHy3b66T%2FQUdCFF0TlHFOX0XBd%2BZ5EgE5XOPKZ7zn2U1NzVzt%2BM7PxusD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33b8c10198d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37594,"size_decoded":4675,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"d702c96f0f926fa3c9e1c1e670e07d9d","sha1":"f02ab380f12b41693f7176947c6181e90dc229bb","sha256":"8b8a6867a1cad59cf47c8a8ab28256f6867d9a59b8f0efc74e64ab827908281c","sha512":"005be4035c075a0ffc778e01d17bfd9fbf0d409aea277e976f9d212a3191baac8192c1d382ad244762198816a414998da6029d3a63f39c0520bfdfa7841e4c4f","ssdeep":"768:1G2yYDO6XUvWEQU9H8TOzuWOMqWZRhcJhJ/J8:2ulMvZR7","tlshash":"83f2f09d728e70793727e2e0a2335fa4ae6550ad84670fdfb2f5f1bc43a60dc1521816","first_seen":"2026-06-26T02:14:11.65254Z","last_seen":"2026-08-31T12:17:02.533779Z","times_seen":15,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/images/skin_1/arrowDn9x5.gif","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.459Z","timestamp":1788174190459,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/images/skin_1/arrowDn9x5.gif HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/gif\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-44d\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nage: 22820\r\nx-served-by: cache-bma-essb1270042-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 889\r\nx-timer: S1788174191.783327,VS0,VE0\r\ncontent-length: 1101\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1101,"size_decoded":1503,"mime_type":"image/gif","magic":"GIF image data, version 89a, 9 x 5","md5":"ef8ee66b9461c0317eaab1827eac53bc","sha1":"24cf37bea83d4357c8481218f4c2c2acd74bc73c","sha256":"f2cc9ee07ca40866b840f1a4d780c4ab75d91bfdbe215c0f7251c0d76cfbad7c","sha512":"6386f06d466b9722ac3ba0e5224225032682c43de7d6fb096630d6ba54adba8fe7450d236ffd14b4fa2b481481ea98623c919b49e507c22912877e9476bfcded","ssdeep":"","tlshash":"6c1130cdbad2f841315cefc62cfb502b9a16484248f4e895f8da8c2e4d245b5951a6cb","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-08-31T12:17:02.513282Z","times_seen":1298,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":217,"dns":0,"connect":0,"send":0,"wait":30,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/loyalty/reactions/still/11.png?v=5","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.477Z","timestamp":1788174190477,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 12:18:32 GMT","end":"Thu, 19 Nov 2026 12:18:31 GMT"},"fingerprint":{"sha1":"73:3D:80:BA:FF:E1:7B:1D:0E:6E:9A:40:E5:15:C7:6D:FE:46:B9:44","sha256":"F6:FC:99:1F:A8:9D:10:F1:85:36:C6:51:C1:BD:A3:BE:67:18:DC:98:E2:29:22:39:6F:84:4F:11:66:3A:2B:B8"}}},"request":{"raw":"GET /public/images/loyalty/reactions/still/11.png?v=5 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:18 GMT\r\netag: \"649bb1f6-490f\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nage: 24691\r\nx-served-by: cache-bma-essb1270023-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 251\r\nx-timer: S1788174191.784806,VS0,VE0\r\ncontent-length: 18703\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18703,"size_decoded":19107,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit/color RGBA, non-interlaced","md5":"a7e1ba3f01b0047696e3ff18227ecd04","sha1":"73d20ce1e79861739516def4a6232ba3162b7402","sha256":"53c5971753a66562e7d2f9e186dd64b70d9ed4fe33562d6642e3751588dbe477","sha512":"c3d111aeb0d0fd7a77bde889b2d51579b255115a53674ccafdbd74dd86694c7095317d5f7559e314fb6b40f65b7ed41df924ea812645b17184e0fff273493025","ssdeep":"384:iEzA4RI/04grbi+MNaGfD+K7FaEKN7OWQl2HO2BRLMyZyKcoawa00n:+4XXi+MNPL17G0WlLMBSawa08","tlshash":"9682bfeafdc6fd21fcb8102a62159c08f0c5f10bf1c2a67e968610877f7f6466699924","first_seen":"2023-05-02T15:32:05Z","last_seen":"2026-08-31T12:17:02.536562Z","times_seen":815,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":9,"receive":2,"ssl":263},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/images/profile/icon_block.png","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.472Z","timestamp":1788174190472,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/images/profile/icon_block.png HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-54c\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nage: 63142\r\nx-served-by: cache-bma-essb1270042-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 2122\r\nx-timer: S1788174191.783967,VS0,VE0\r\ncontent-length: 1356\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1356,"size_decoded":1759,"mime_type":"image/png","magic":"PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced","md5":"af6956710c76a4e84f255ca37a74d690","sha1":"3efc932ff4a921169c8f34537c16fa2f7f475869","sha256":"88847ba203d8c859877e3b6d95646dc46b35bacbc2935d71a5a87b52511afb8f","sha512":"831fccf7ceaf133dda8e1ef3a07d66efb899c4e37bbc2e57744a15fe81286fc465f2fb7bf9ee28227f6783acaa497604296e70a27e00f40fe833e8c53c27f6e7","ssdeep":"","tlshash":"6121d8e5e9506401c25ee5c604f3a023aa32c6c8c9f4e891eaefc4195cb43fa441edfb","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-08-31T12:17:02.516776Z","times_seen":449,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":215,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared.fastly.steamstatic.com/store_item_assets/steam/apps/860510/header.jpg?t=1730127763","fqdn":"shared.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.540Z","timestamp":1788174190540,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shared.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:58:18 GMT","end":"Thu, 22 Oct 2026 11:58:17 GMT"},"fingerprint":{"sha1":"59:6E:44:DB:60:B8:08:2F:C4:C0:CA:E3:A8:65:4B:A2:C0:A6:8F:1B","sha256":"0F:54:E6:A4:07:BE:72:20:E7:77:62:F4:1B:44:B3:0F:21:AC:98:97:72:CC:6B:CA:7E:D7:27:DE:A5:AA:AB:75"}}},"request":{"raw":"GET /store_item_assets/steam/apps/860510/header.jpg?t=1730127763 HTTP/1.1\r\nHost: shared.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 30 Aug 2022 13:24:41 GMT\r\netag: \"630e0f99-9042\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nage: 333529\r\nx-served-by: cache-bma-essb1270045-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 67\r\nx-timer: S1788174191.791999,VS0,VE0\r\ncontent-length: 36930\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":36930,"size_decoded":37417,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 460x215, components 3","md5":"c551d9aec2b7e73d9aabe31bfed84ade","sha1":"30b10634cb7b596a0cb7c355d916a3039a2d35a0","sha256":"2370fefd429f17838acb0c672805527aa24e6b0750de6b8bc3780f29f5b9a967","sha512":"7b95d2e9f9ab9bc7d9128d27311662801d21c37e94a87ac3408d7ff9125c6b3b861abb75cdf1f65707a60f7fae9cbc0449fa1bda4ca16d821969a6308f9d51db","ssdeep":"768:xoC7/8QCveDe54eS1DnkH9SstVlrUdLyqjG0OseWvDSIYPfFQ954xC41:xr7/8QCv/r6Y9Sc2CRWv2BK9id","tlshash":"75f2f1b0669f74cc7238f6e4149f28a7a0e87af5116fd094d79ca4f1075f0d39ea6212","first_seen":"2024-06-30T11:06:24Z","last_seen":"2026-08-31T12:17:02.507642Z","times_seen":16,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":174,"dns":0,"connect":0,"send":0,"wait":13,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/images/favicon.ico","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:11.185Z","timestamp":1788174191185,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft/images/favicon.ico HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/p/sst-cgj/lctwghft/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:11 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\netag: W/\"969a-65a18d7e4e3d2\"\r\npriority: u=6,i=?0\r\nlast-modified: Fri, 28 Aug 2026 10:23:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zlq01qZqWyQc%2BnSfFEOD5aqLWq0N%2FtLw7dXC2X%2BJ4WsZGLZy2cfK9OF0X%2FZgAgVFdo%2BYUO%2BX5YB0rxUvSz7kMgzaYZuxgQBrChENICgc7igRX%2Fb5C84F1k%2FmhrbAQ%2FuO\"}]}\r\nage: 3503\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a33b8c16eac523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38554,"size_decoded":29683,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"231913fdebabcbe65f4b0052372bde56","sha1":"553909d080e4f210b64dc73292f3a111d5a0781f","sha256":"9f890a9debcdfccc339149a7943be9aff9e4c9203c2fa37d5671a5b2c88503ad","sha512":"7b11b709968c5a52b9b60189fb534f5df56912417243820e9d1c00c97f4bd6d0835f2cdf574d0c36ecb32dbbf5fc397324df54f7fdf9e1b062b5dbda2c02e919","ssdeep":"768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh","tlshash":"70038de82e4917aee9e2cf324adb6716237b4f88c0bc169742b07f193175a51c6d78c1","first_seen":"2023-04-05T07:02:49Z","last_seen":"2026-08-31T12:17:02.522554Z","times_seen":6962,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tbnoviytatic.com/752180f7a/0b9aa/655ef78.css?v=eisHsuZU","fqdn":"tbnoviytatic.com","domain":"tbnoviytatic.com","tld":"com"},"ip":{"addr":"172.67.166.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tbnoviytatic.com/abbc8b926","date":"2026-08-31T11:03:11.660Z","timestamp":1788174191660,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tbnoviytatic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 14:37:22 GMT","end":"Fri, 27 Nov 2026 15:35:55 GMT"},"fingerprint":{"sha1":"B8:09:FE:61:80:08:81:A1:08:26:A4:17:F7:07:46:07:50:46:B1:17","sha256":"3A:B2:B9:EB:2C:E3:AB:48:5B:6B:B3:79:A3:62:50:09:4E:96:93:AA:E0:B9:3C:87:62:A0:CE:EF:CC:07:70:EB"}}},"request":{"raw":"GET /752180f7a/0b9aa/655ef78.css?v=eisHsuZU HTTP/1.1\r\nHost: tbnoviytatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tbnoviytatic.com/abbc8b926\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:11 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vFSqqN6OuHE%2FPmP7s2JDyz9akrMm%2F64A7DHBZceKkgsLfZ%2BrtQ%2FpzT2YJxdgfcflXqrIBciFSarlIFlL%2FnM3pf%2BqLNwZBfCE7A%2FxBgULiT%2BxBiDFwS5W1mLLRzeeVIrqwKXg\"}]}\r\npriority: u=2,i=?0\r\nage: 3503\r\nlast-modified: Mon, 31 Aug 2026 10:04:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a33b8c19e88456bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42251,"size_decoded":14014,"mime_type":"text/css","magic":"ASCII text, with very long lines (42251), with no line terminators","md5":"0d4eeb8aac380cfeb6b21a70558bbb36","sha1":"a16f87e2eaa235179d994037286cb8eb8097015e","sha256":"961171c5dc6d4c17b74efb3a76d0cc4f1b9db7ccb3a0c588518c03aef10accd6","sha512":"881489516a5e4c07b2c0f3558c33bc664378830b0f3a905de27d6c04e8e31024ceac1646da82e98eed79cdf2cf8467301b7913b61506afec2a83497044ee35c4","ssdeep":"768:lrB0SBzdBQzbeVNFEisLFOeM2JDfZYs16:lriUQUFrg9JDfZa","tlshash":"be131931a984302db437d9aaf0e13add712a800bc567077ee66a71bac9c35e6137334d","first_seen":"2026-08-31T10:05:42.584713Z","last_seen":"2026-08-31T12:17:02.506097Z","times_seen":3,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tbnoviytatic.com/752180f7a/0b9aa/ec5850b.ttf","fqdn":"tbnoviytatic.com","domain":"tbnoviytatic.com","tld":"com"},"ip":{"addr":"172.67.166.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tbnoviytatic.com/abbc8b926","date":"2026-08-31T11:03:14.032Z","timestamp":1788174194032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tbnoviytatic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 14:37:22 GMT","end":"Fri, 27 Nov 2026 15:35:55 GMT"},"fingerprint":{"sha1":"B8:09:FE:61:80:08:81:A1:08:26:A4:17:F7:07:46:07:50:46:B1:17","sha256":"3A:B2:B9:EB:2C:E3:AB:48:5B:6B:B3:79:A3:62:50:09:4E:96:93:AA:E0:B9:3C:87:62:A0:CE:EF:CC:07:70:EB"}}},"request":{"raw":"GET /752180f7a/0b9aa/ec5850b.ttf HTTP/1.1\r\nHost: tbnoviytatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tbnoviytatic.com/752180f7a/0b9aa/655ef78.css?v=eisHsuZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:14 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 3501\r\nlast-modified: Mon, 31 Aug 2026 10:04:52 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=plAjK9z0f1goeYtsYva741zhBiSm8e6FY%2FmCnijMhfIB79eg7gdmFS21JSRdTJ1h3VxfK3teEm7da6BlLNXKByTH1F%2FnTXo8MRxSTiGG99eg7hnYnDp5U%2F0CliWABNxwsoEz\"}]}\r\ncf-ray: a33b8c28b94456bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122684,"size_decoded":123331,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 22 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansRegular4.015;Plau;MotivaSan","md5":"57613e143ff3dae10f282e84a066de28","sha1":"88756cc8c6db645b5f20aa17b14feefb4411c25f","sha256":"19b8db163bcc51732457efa40911b4a422f297ff3cd566467d87eab93cef0c14","sha512":"94f045e71b9276944609ca69fc4b8704e4447f9b0fc2b80789cc012235895c50ef9ecb781a3ed901a0c989bed26caa37d4d4a9baffcce2cb19606dbb16a17176","ssdeep":"3072:lpsQ7l3T64Z1lKcDqttEPBWVNwZ+e222pKKSxfj9:Yg3T64Z19DqtkWbu/222kZfh","tlshash":"82c34b06f316e70aec614e3c66769399b358f8a53f2fcb0b95857d60bcad0d51e8128c","first_seen":"2023-04-05T04:16:14Z","last_seen":"2026-08-31T12:17:02.484092Z","times_seen":7357,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T11:03:09.539Z","timestamp":1788174189539,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:09 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nlocation: http://s.team-zi.com/p/sst-cgj/lctwghft/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DIlYTWJNAN4A%2BOi9LhgKulYEa7MAlON45JY7rxAdR6QDsm0L3Sb7IkVB2l2VcwPqH7%2B4lSQtdMV%2B3h%2B32BqKe9jeMymplvxNoQF9qcXsoqs0SmevB8lMtkyAg9goD4ZC\"}]}\r\ncf-ray: a33b8c0ce92323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T15:32:37.664767Z","times_seen":18204324,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":14,"connect":27,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/css/motiva_sans.css","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.092Z","timestamp":1788174190092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft/css/motiva_sans.css HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/p/sst-cgj/lctwghft/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Aug 2026 10:23:28 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a9161a0-85c\"\r\nexpires: Tue, 01 Sep 2026 10:04:47 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 3502\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P1xXKKRm7KNqxly2KF1nKbifIDo28jyiktPDBAWvNo6x%2FGAMDaBes4zUQLTPZZH%2Fjadeg6iJsao55zy3JFRmt5UINonYitZmpiMdcSm9dvsK4QNpR%2F8FTOPJ44gIlpBR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33b8c10198c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2140,"size_decoded":1335,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"085f956b8fff871eea292803338c5f44","sha1":"dfc4f5cb572e204daebef79876284048e666434b","sha256":"9d330a23d96091e6df549a92d26cbb46f5764cb12d9d7771c16eac08d3cea353","sha512":"94409cfefc7cea1284578d12f7970cb106004d6dbce492eaf429caa41fd739d495d5021d45f0911426d491ccd9b78b75ee0ddd388bd23f794978298f57b2d7cc","ssdeep":"","tlshash":"ab418044255db4378ba00c47f3fa2e058e5f3418621681aab4f51ba46fda879437079f","first_seen":"2026-06-26T02:14:11.715988Z","last_seen":"2026-08-31T12:17:02.490766Z","times_seen":15,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/css/shared_responsive.css","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.107Z","timestamp":1788174190107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft/css/shared_responsive.css HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/p/sst-cgj/lctwghft/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Aug 2026 10:23:28 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a9161a0-568b\"\r\nexpires: Tue, 01 Sep 2026 10:04:47 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 3502\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LiTzGym5Gw3UHMZDTHK23l5ifOCPfloPHLbIlZu0vzUHJ6TExyE%2BaxiN4h2JXNXyPq9fG2MTkJRh7ZRXguVxhnF16dVEuPqR9WH7QrfSUGIkFS5Ol9R16BGHyWUVW8po\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33b8c10299323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22155,"size_decoded":7348,"mime_type":"text/css","magic":"ASCII text, with very long lines (1673), with CRLF line terminators","md5":"6ed90f63ed407ade364f3899b323ba68","sha1":"673e8e1b5b418866c249e50fecf4812f60c4cc58","sha256":"28b1af69b330e2ac6bf23eeb821b5577cab10ea6f608441b3332fa310d001c7e","sha512":"93bc7be1fb008deeef2012166966f91325b09995907f87d09d0c44731596b89c5b8005475dcb68baf6940086e9d41b115026c3cfebaa73327ae5bb7334ba6d87","ssdeep":"384:f2pVdp7TYb2zCN9cE+W7y7HiuKiNleHv7xTLsPDpUbIrw6GNNZhwePByI:fmjpvFzCN9cE+W7SHiufEHv7xvsPDpUd","tlshash":"c0a2605aad27a10aa3177345fb750f612f2581647f0e42aab7f8312862d536c61a33cf","first_seen":"2026-06-26T02:14:11.724475Z","last_seen":"2026-08-31T12:17:02.537036Z","times_seen":15,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.steamusercontent.com/ugc/1856052392802292844/96301CEBAB074ACA46F5142B2B92FB9DFA2C6554/","fqdn":"images.steamusercontent.com","domain":"steamusercontent.com","tld":"com"},"ip":{"addr":"23.36.76.155","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.483Z","timestamp":1788174190483,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.akamai.steamusercontent.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 16:23:22 GMT","end":"Thu, 29 Oct 2026 16:23:21 GMT"},"fingerprint":{"sha1":"E8:3F:C8:EA:51:DE:B6:4B:8F:27:32:63:7F:1D:AE:C8:14:AC:6E:77","sha256":"62:65:AF:35:33:A8:EB:96:D3:83:DB:F5:9E:D8:C7:D5:97:06:29:7C:B1:DE:4E:E5:6D:85:13:5C:66:4C:EA:04"}}},"request":{"raw":"GET /ugc/1856052392802292844/96301CEBAB074ACA46F5142B2B92FB9DFA2C6554/ HTTP/1.1\r\nHost: images.steamusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nX-GUploader-UploadID: AKhXX7Iw3LMlatIDcTtMq16XJyd1E43miPgD-FeEWO-9I_xZ85hFFGVMUY_ng0RQcVCxpIG7sdla2K0\r\nLast-Modified: Mon, 21 Mar 2022 06:29:13 GMT\r\nETag: \"0f739cf4be57cb1aa3bf9d0931ebbdf2\"\r\nx-goog-generation: 1647844153411774\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 8706\r\nContent-Disposition: inline; filename*=UTF-8''2782419458_preview_2092984732_preview_steamyears12_80.png;\r\nx-goog-hash: crc32c=3Igibg==, md5=D3Oc9L5Xyxqjv50JMeu98g==\r\nx-goog-storage-class: REGIONAL\r\nAccept-Ranges: bytes\r\nContent-Length: 8706\r\nAccess-Control-Expose-Headers: Authorization, Content-Length, Content-MD5, Content-Disposition, Date, Accept, Content-Type, origin\r\nServer: UploadServer\r\nCache-Control: private, max-age=544471\r\nExpires: Sun, 06 Sep 2026 18:17:41 GMT\r\nDate: Mon, 31 Aug 2026 11:03:10 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":8706,"size_decoded":9651,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"0f739cf4be57cb1aa3bf9d0931ebbdf2","sha1":"96301cebab074aca46f5142b2b92fb9dfa2c6554","sha256":"4fdf83b3d08693d6b9b26590930790ea5e5f1dc0b8c2cad99abdf41e7e8564ed","sha512":"d98d98d52af1978d14bca6cb3e7562723188d9ae8c095d996061770d4d8d44cba7b4d71a9732443b44688cfd72c14ed599e54ee3e05b16eb9926bcd887f58799","ssdeep":"192:nntLOwBfp3t/GgFgOD1ASgTzPqaM344blZrX/2EeyLX6vJ+vCkQU:nAwVp9+5OD1l4O344n7eyLc+aQ","tlshash":"3002afedf2593b83135c89262cfa0e85af13180945e6d583eaf1e1c88ac01d78a9f1d5","first_seen":"2024-02-22T04:19:18Z","last_seen":"2026-08-31T12:17:02.538361Z","times_seen":70,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":6,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH_Xb1tioMGnY6lh89o7L5k_rfk2h0Znu9CBS0P64ZJs9cL7KCjSTx-tytLhoGX7qzEt34WnVz9qsJ3yTPwZ0XJF1EbYPsBTtktexKaq8sIGYOJt-/96fx96f","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.501Z","timestamp":1788174190501,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH_Xb1tioMGnY6lh89o7L5k_rfk2h0Znu9CBS0P64ZJs9cL7KCjSTx-tytLhoGX7qzEt34WnVz9qsJ3yTPwZ0XJF1EbYPsBTtktexKaq8sIGYOJt-/96fx96f HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\ncache-control: public,max-age=604800\r\nexpires: Thu, 01 Jan 2026 02:37:07 GMT\r\nlast-modified: Mon, 16 May 2016 22:33:31 GMT\r\naccept-ranges: bytes\r\nage: 306672\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270042-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1788174191.792271,VS0,VE1\r\ncontent-length: 7328\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7328,"size_decoded":9314,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"fbb955cb51e1d02a01f873babcf900c6","sha1":"4b0fec80d104fb97627c1d105aa4b3fd873c71b5","sha256":"60227fc12d8a9919a736f9bfd48202de9d8bb245954b0474d599012762f3a4ee","sha512":"b3ef2cdbf788da4dc059de1549742c1cbc0f10f9716f5b9fcfa38bc9c350416c38d418d51bdea846320893d86e24d4a591d340c326b943c3ca9f277963eb116a","ssdeep":"192:9R1ZLzIkNWbCyd+9HqUW5GFOCdWJ62iTR/O:9R1ZQ7+9HscZm62iw","tlshash":"a1e1bf23b2da1b3fdbdd70078eac4506fc28136803fa3bca55ea3e589d992754860c71","first_seen":"2026-08-13T08:30:02.713173Z","last_seen":"2026-08-31T12:17:02.485236Z","times_seen":13,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":197,"dns":0,"connect":0,"send":0,"wait":62,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH_rVzcu4NDSD5GknpNWm1VDqTBLjipfssjZa0KD-OvZSKf2eAXWEwOI45Lg8F37hx0x0sm3Wz9mheHPFbQJyDcEiEbNbsRDtk9PlY-O051SL35UFk3uhQk7WcA/96fx96f","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.505Z","timestamp":1788174190505,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH_rVzcu4NDSD5GknpNWm1VDqTBLjipfssjZa0KD-OvZSKf2eAXWEwOI45Lg8F37hx0x0sm3Wz9mheHPFbQJyDcEiEbNbsRDtk9PlY-O051SL35UFk3uhQk7WcA/96fx96f HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\ncache-control: public,max-age=604800\r\nexpires: Fri, 30 May 2025 04:54:23 GMT\r\nlast-modified: Thu, 01 Sep 2022 20:34:09 GMT\r\naccept-ranges: bytes\r\nage: 573009\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270042-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1788174191.791930,VS0,VE3\r\ncontent-length: 12213\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":12213,"size_decoded":14200,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"3d40bf488f4b001efadea76d005a65eb","sha1":"a988ff26749939f19ed80a83366c7a0330819105","sha256":"5e277de41d77022f47a86e6cab0e7086d59f4916208575fadf249d8857adc5d5","sha512":"ae0799f4868178a6dcdabfe40dd3c330c4946d23e53984578631a3a62fc4f370996081c64982db475ace9f08852ee0482e43b1431da838df80931dd2f3f01839","ssdeep":"192:1xl3NDNywOgZODzjaD4EDCEgmj/f1ZCNW4K9TJ8vdK3bni5F0rWnSeuDbYcVG:flVNywN4DzjEDHgK/fbkK9TyqninN64","tlshash":"f342cfc890cdc41785d0a14b512b4174ab6fee5f0a2ad31332b1f024ea3a4f9c67c6c4","first_seen":"2026-08-13T08:30:02.649313Z","last_seen":"2026-08-31T12:17:02.481369Z","times_seen":13,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":199,"dns":0,"connect":0,"send":0,"wait":60,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGJG51EejH-Tb0MKgO3OY6VJw5rjg4w6pFEmjx5W4-SFevaX2PqI8danKWWHCkrwns-Q_SnDrxE9wtzjSmYyuImXXMFFN6VEcFA/96fx96f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.128","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.513Z","timestamp":1788174190513,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGJG51EejH-Tb0MKgO3OY6VJw5rjg4w6pFEmjx5W4-SFevaX2PqI8danKWWHCkrwns-Q_SnDrxE9wtzjSmYyuImXXMFFN6VEcFA/96fx96f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 26 Jul 2017 01:22:48 GMT\r\nServer: nginx\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Type: image/png\r\nContent-Length: 12993\r\nCache-Control: public, max-age=482483\r\nExpires: Sun, 06 Sep 2026 01:04:33 GMT\r\nDate: Mon, 31 Aug 2026 11:03:10 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12993,"size_decoded":14822,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"8f5e041f28dbfbd40ef7ebebfb373b30","sha1":"e7ba89a3175ab2da817f29e7194e0e8ce26d0b65","sha256":"ecdf8a87cc4380008f59d4510cd02da9059c78cd9ca1545d73de5318fcf1df03","sha512":"bbf28ac338cb6e5561d011877f53477ac9e98804f9c06a1a16fc381b5297b06a3f1396d4164bc10d4bce10b2c6e1e8c422a0220a2970a6b80279ebb3fd990505","ssdeep":"384:fbC+aMQXC/zaYvmuPWL3HonBGWqrYptjUgX:fW+abSbVWM8s","tlshash":"2642c057372eeb63d7fd226b09e45d2792c8442cc025600478db1f36a93dac8e927ad2","first_seen":"2025-10-05T05:51:20.385323Z","last_seen":"2026-08-31T12:17:02.522069Z","times_seen":40,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH-LGxsuvITSe6Ft65pP15mb0SRLkkpLl721P_fevZrBSNPnEMW6dzOFkpOBlcDq7mggrtziXy8H7cS6RPFNyDZNxReNetBWwm9PjNeLh4gGNjY5Dy32vhygY7i866-oBT-N7rRZH1XR4/96fx96f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.128","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.526Z","timestamp":1788174190526,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH-LGxsuvITSe6Ft65pP15mb0SRLkkpLl721P_fevZrBSNPnEMW6dzOFkpOBlcDq7mggrtziXy8H7cS6RPFNyDZNxReNetBWwm9PjNeLh4gGNjY5Dy32vhygY7i866-oBT-N7rRZH1XR4/96fx96f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 05 Aug 2017 23:38:33 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 10767\r\nCache-Control: public, max-age=94339\r\nExpires: Tue, 01 Sep 2026 13:15:29 GMT\r\nDate: Mon, 31 Aug 2026 11:03:10 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10767,"size_decoded":12595,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"92095ccc38e9fb927ccc94c5cfef7153","sha1":"3bc54149b4eb2542ee8181c3a9f0708d017d8389","sha256":"4cb449fb4874a1d272dc9a3aa1ecced5cc0328913f26a7084591f1793e0f9132","sha512":"5db94f1e8d02b1755887e669dc01ca50080eaa6d2bfa9f1e3e50a4062507aa0a162807e8681c7c7a95382f18f0ffeacb6f418c2bc94c808b80bd48f2842610ec","ssdeep":"192:+g9Qbhu6W7KzRaloTSyTYQIx1Ezj5qNON+iLIXpgDUaWEWMdJ5JzAyViJumjutjq:8bhu6W7KIllyTYKY4NImxWLMj5RpViJR","tlshash":"0d22be7e58202e292eca2413df1fb5b4afe7ce1c823ca71c3d19618622407963747636","first_seen":"2026-06-11T00:49:01.113397Z","last_seen":"2026-08-31T12:17:02.534867Z","times_seen":35,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":118,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/js/shared_responsive_adapter.js","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.112Z","timestamp":1788174190112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft/js/shared_responsive_adapter.js HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/p/sst-cgj/lctwghft/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tOMenXzKQtdqCKivSmQX0Zo%2FjX3hRVSurKi66P3TH6U7KRgh7AszUZJ3c6HlQqKaIJdAysOWA3iApjsBE%2B2WcDJH%2FG5A7BY9h5OcAODVD3ka646%2F6hRkqDwqB%2FhY89fV\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33b8c10399723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196,"size_decoded":814,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"62962daa1b19bbcc2db10b7bfd531ea6","sha1":"d64bae91091eda6a7532ebec06aa70893b79e1f8","sha256":"80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880","sha512":"9002a0475fdb38541e78048709006926655c726e93e823b84e2dbf5b53fd539a5342e7266447d23db0e5528e27a19961b115b180c94f2272ff124c7e5c8304e7","ssdeep":"","tlshash":"c0d0129e9183638b442225907ac211d2654d13a6b87645e82d82a48a951857dc5ca69d","first_seen":"2023-03-07T12:06:54Z","last_seen":"2026-08-31T15:17:32.886724Z","times_seen":112563,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH-TBwcOiPjSR6kR28bjn_ljhR1L3kYTj-B1I-_OobvUjc6KWCmPDmegl6bdoS3q2whkj4W7VnIuhdn-eb1N1XMdwF-UN5hLtk8qnab2BsSPrLQ/96fx96f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.128","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.531Z","timestamp":1788174190531,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH-TBwcOiPjSR6kR28bjn_ljhR1L3kYTj-B1I-_OobvUjc6KWCmPDmegl6bdoS3q2whkj4W7VnIuhdn-eb1N1XMdwF-UN5hLtk8qnab2BsSPrLQ/96fx96f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 24 Mar 2016 21:03:36 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 9543\r\nCache-Control: public, max-age=339111\r\nExpires: Fri, 04 Sep 2026 09:15:01 GMT\r\nDate: Mon, 31 Aug 2026 11:03:10 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9543,"size_decoded":11371,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"8e6be2b765d30ed3a67301f720d573da","sha1":"ec8403dd2ed5cb49ebed093b37b6758691f4af5a","sha256":"7d51b0a0d842f2e22eccbaacfad87dde1b28255bfc4e030237cc8b09c9ff67dd","sha512":"5d17f50e193a9831c8bbaaa9d66aa593dd612b387ddbf6a0bd25452c7eafb1b90392a48ef1c77761a13a746338708ea9fbd40420eadacd2ef340f0e939c2c165","ssdeep":"192:Togpw0/H0GR1/WqDD4PRos9xWvpUH6V99jXVk9+GFT5aq/bBBBBBBBBBI:5witRxWaD4N9xkHFkUGFT5aq/bBBBBBY","tlshash":"d012afb096681e82ba6590a9b84444bb4769c1e0fe7f5ed48e3d5e8834d94130687b42","first_seen":"2026-06-11T00:49:01.121761Z","last_seen":"2026-08-31T12:17:02.528192Z","times_seen":36,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":143,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared.fastly.steamstatic.com/store_item_assets/steam/apps/1588550/header_schinese.jpg?t=1782391789","fqdn":"shared.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.539Z","timestamp":1788174190539,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shared.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:58:18 GMT","end":"Thu, 22 Oct 2026 11:58:17 GMT"},"fingerprint":{"sha1":"59:6E:44:DB:60:B8:08:2F:C4:C0:CA:E3:A8:65:4B:A2:C0:A6:8F:1B","sha256":"0F:54:E6:A4:07:BE:72:20:E7:77:62:F4:1B:44:B3:0F:21:AC:98:97:72:CC:6B:CA:7E:D7:27:DE:A5:AA:AB:75"}}},"request":{"raw":"GET /store_item_assets/steam/apps/1588550/header_schinese.jpg?t=1782391789 HTTP/1.1\r\nHost: shared.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 05 Dec 2024 14:31:33 GMT\r\netag: \"6751b945-db98\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nage: 1204444\r\nx-served-by: cache-bma-essb1270045-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 3\r\nx-timer: S1788174191.792470,VS0,VE0\r\ncontent-length: 56216\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56216,"size_decoded":56703,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 460x215, components 3","md5":"864290ded87100acb9e01b81afccf163","sha1":"8c5e3d1ae2b84304c07824537497511661d908f8","sha256":"15b39a45ecc8415edde3bdf5661303ad1a0f0cd447fdd425b67273959aed42ac","sha512":"0c30a63a87c9da28c107e4b5e7f30ab1869137e4a246d1702bf7a9bf69558ea2e252dd7a70a344ced7554d9840fdc1ddaeeffff5df5e0a69952af6f1eeba4894","ssdeep":"1536:qtciOfKNuSusQNTTVPBvqYPPqo2qS/wIwri1/TGLOHekPAICxd:iLOfKNuOQdVPhpP/SopihGLO+kPA7X","tlshash":"e7430293b156748d9442893b7c8abfa193fde4ab0ba7245186d013c5ee9a7c4a0207fd","first_seen":"2026-08-13T08:30:02.647682Z","last_seen":"2026-08-31T12:17:02.490226Z","times_seen":13,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":189,"dns":0,"connect":0,"send":0,"wait":63,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/images/logo_steam.svg","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.424Z","timestamp":1788174190424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft/images/logo_steam.svg HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/p/sst-cgj/lctwghft/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 28 Aug 2026 10:23:28 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a9161a0-e3e\"\r\nexpires: Tue, 01 Sep 2026 10:04:47 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 3503\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C22I0GHk3vuFN8I50yg8XRS1WJ2cGOga72PgNg76FMFUarfM7FXb1SPldRb%2BZHQvuHTy%2FMT0Kl4x%2BIl%2Fcyk2TMHG0v54BL6mk704TYZaA5AhhMji5XmLAC66%2BEWZjRYz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33b8c1229da23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3646,"size_decoded":2475,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"31aabe1e01f27b3b9b47d7265807afc2","sha1":"a430f5a8a81145215c41c3ba80929627e570d81e","sha256":"3a4d08139646d567a612f75b8179641c570d490f8013478d131266ed21f3d453","sha512":"60dfb140295124b3f6b57592504ca6006c22988bba82bf63c5559fa7f8da2aab7e163265abb2a312034875f95fa850bbacb620ecca6c56ea8e79689963cd31c4","ssdeep":"","tlshash":"f971b4cc17338be06595c27e1e7476d223b365a9e8b001e8a3920c202c0bfe69a64d75","first_seen":"2023-10-31T01:09:47Z","last_seen":"2026-08-31T12:17:02.494781Z","times_seen":3006,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.pinimg.com/736x/82/c8/cb/82c8cb3c68172c57b154bbe66e13ede7.jpg","fqdn":"i.pinimg.com","domain":"pinimg.com","tld":"com"},"ip":{"addr":"23.36.77.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.457Z","timestamp":1788174190457,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pinimg.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 22 Jun 2026 00:00:00 GMT","end":"Wed, 06 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"03:2F:E9:01:9E:15:9F:A5:12:E0:EE:CB:5A:7C:F0:03:FD:BD:CC:37","sha256":"DB:DC:2D:A8:5B:C1:BE:90:65:EF:17:93:CC:6E:63:87:6A:2D:ED:D8:BB:B8:C5:76:2F:C9:0B:47:51:20:63:0A"}}},"request":{"raw":"GET /736x/82/c8/cb/82c8cb3c68172c57b154bbe66e13ede7.jpg HTTP/1.1\r\nHost: i.pinimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\netag: \"ad5d9383b73085d15a67981dbaa7cdf7\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\ncontent-length: 89792\r\nakamai-request-bc: on\r\nakamai-grn: 0.4e4d2417.1788174191.1d02707f\r\nvary: Origin\r\ncache-control: immutable, max-age=31536000\r\nserver-timing: cdn;desc=\"akamai\", cdn-cache;desc=\"Hit\", cdn-edge-time;dur=6\r\nx-cdn: akamai\r\nalt-svc: h3=\":443\"; ma=604800\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":89792,"size_decoded":90226,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 736x736, components 3","md5":"ad5d9383b73085d15a67981dbaa7cdf7","sha1":"715cf93003b965c03ce08dc5f1cd0feccb10daaa","sha256":"2e532efeed01b44e05caebe2291e051ba5b8b64bf914142eae128b27026b569c","sha512":"8955553c54801d22eeb68f27607e9b44e7c3b4daa15fec27ff414a79880fcafa4f84d73a6bd90fd49610ec5648e532299401d23409603afc96669684cc4724f5","ssdeep":"1536:lrJcA5FOIRWiCPzQtf7rMJqZiA8zU/KIWrHEIK2iPMFqajHmeKK/qQBj3T6O:l7ZR0lqYA8zQaTEIWMFJCLlQBj3T6O","tlshash":"569302c5ca50306be6c1d3f30f32c33ebc16e9d92043e86a5e6190b526184fd5b5e7aa","first_seen":"2026-08-14T17:25:40.586716Z","last_seen":"2026-08-31T11:03:57.150123Z","times_seen":6,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":9,"receive":1,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/images/sharedfiles/add_fav_ico_default.png","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.471Z","timestamp":1788174190471,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/images/sharedfiles/add_fav_ico_default.png HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-44f\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nage: 40371\r\nx-served-by: cache-bma-essb1270042-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 783\r\nx-timer: S1788174191.783950,VS0,VE0\r\ncontent-length: 1103\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1103,"size_decoded":1505,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"b5c472ea5c08fb55f8be89eeb9a540e8","sha1":"f93f242fa79115c1380a02c6d9dc8e63e62550a4","sha256":"1706a3ce38720f841d95fc0b5033b10c496ac568ecb04a0339719cbfa9995553","sha512":"803b86fa8e48ab3d0c523fa0da80fee1c52c1db58bce8a5a8815db0f8c93b79c2889a83f632c05a71f7cac5902fa5adb5e07b3b4af86d7a9f99ab2e53f8f1d79","ssdeep":"","tlshash":"aa11635ef6806c044108cb9918e6503bda164400e8d4eea7bdcaec1a5e321f884096e7","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-08-31T12:17:02.518546Z","times_seen":448,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":216,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared.fastly.steamstatic.com/store_item_assets/steam/apps/275850/ae0fad4a07367c6f3e66dc9c7a170b8e270a4ea1/header_schinese.jpg?t=1779908213","fqdn":"shared.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.537Z","timestamp":1788174190537,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shared.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 11:58:18 GMT","end":"Thu, 22 Oct 2026 11:58:17 GMT"},"fingerprint":{"sha1":"59:6E:44:DB:60:B8:08:2F:C4:C0:CA:E3:A8:65:4B:A2:C0:A6:8F:1B","sha256":"0F:54:E6:A4:07:BE:72:20:E7:77:62:F4:1B:44:B3:0F:21:AC:98:97:72:CC:6B:CA:7E:D7:27:DE:A5:AA:AB:75"}}},"request":{"raw":"GET /store_item_assets/steam/apps/275850/ae0fad4a07367c6f3e66dc9c7a170b8e270a4ea1/header_schinese.jpg?t=1779908213 HTTP/1.1\r\nHost: shared.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AKhXX7Jmgd4bwAvw_YgdLR2hgCj1sVuYdYP_eEksiin4rN1I8MpbSqIKT-XW2YIAnyuqCqJ5tlXKN3s\r\nlast-modified: Wed, 27 Aug 2025 12:31:06 GMT\r\netag: \"570f23ca00d86dffdac619df94f44888\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\nvia: 1.1 varnish\r\nage: 1581528\r\nx-served-by: cache-bma-essb1270045-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 3\r\nx-timer: S1788174191.792031,VS0,VE0\r\ncontent-length: 52588\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52588,"size_decoded":53197,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 118x118, segment length 16, baseline, precision 8, 460x215, components 3","md5":"570f23ca00d86dffdac619df94f44888","sha1":"f4f57aeaaee7e99e512f10539056ebf62348d0eb","sha256":"bc8234a1cc6bb77b82255a13f9036c28e8c7aefa249f546c566d7b6408662c63","sha512":"9793d73cebaa04f5b52a0defecb08a0295dff216a3f9c9b1f56b0a58d8d0acd039e4e0d8355bcfd8556a84e07d0ae6ce32b0a63db3f70ab2ed5af69bdd5f2ae6","ssdeep":"1536:xYunI0u53k/WrKs7RSYAPNHy1lYbh+xyvMiPFjRa:xbk50/WRcpSMv7PF0","tlshash":"7833f1a6302075dee06c32eda8564c7f466609d1b1d362c3afe6694fd768e0402f3d9b","first_seen":"2026-08-13T08:30:02.654512Z","last_seen":"2026-08-31T12:17:02.515802Z","times_seen":13,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":189,"dns":3,"connect":0,"send":0,"wait":13,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tbnoviytatic.com/752180f7a/0b9aa/d5dcaeb.js?v=eisHsuZU","fqdn":"tbnoviytatic.com","domain":"tbnoviytatic.com","tld":"com"},"ip":{"addr":"172.67.166.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tbnoviytatic.com/abbc8b926","date":"2026-08-31T11:03:11.664Z","timestamp":1788174191664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tbnoviytatic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 14:37:22 GMT","end":"Fri, 27 Nov 2026 15:35:55 GMT"},"fingerprint":{"sha1":"B8:09:FE:61:80:08:81:A1:08:26:A4:17:F7:07:46:07:50:46:B1:17","sha256":"3A:B2:B9:EB:2C:E3:AB:48:5B:6B:B3:79:A3:62:50:09:4E:96:93:AA:E0:B9:3C:87:62:A0:CE:EF:CC:07:70:EB"}}},"request":{"raw":"GET /752180f7a/0b9aa/d5dcaeb.js?v=eisHsuZU HTTP/1.1\r\nHost: tbnoviytatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tbnoviytatic.com/abbc8b926\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:11 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fKNSAm%2FG9ZgAuZvBFTlZvafOU6ui3GgmA9LNDqZmx4PO%2FJxHMv0irDFZpJfd%2Br0XXr67f4469l%2BCMVquQgJwGrezhmArRkdwCkY1AotEhs44F1Ilu5%2FYMGU9AC4bHDXwPi7a\"}]}\r\npriority: u=2,i=?0\r\nage: 3503\r\nlast-modified: Mon, 31 Aug 2026 10:04:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a33b8c19e88756bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1460580,"size_decoded":505318,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65501), with no line terminators","md5":"96935738f1693de50ab4f12986ae8079","sha1":"319e73b4f48bc8ee43696616c09435d5d6d78140","sha256":"e0a76e7c384280caa6f215bc24708023a3d4a572f53e8520897ac9153b1a8383","sha512":"38dcaca4176969279bd45f85ed1f162a89a2e7527fdc57741331e2cbffe8a7cede5c0712ac52bd48c3b1825fd28a21f2bd524d51bbc93956158516afed580331","ssdeep":"12288:DBXJ72eiOPzFkvKy37zi46dldgk/ftFir1LeseoPF7c+L:VF/hkvDHDM7i0seopc+L","tlshash":"30251ed53e44e72d44c2e7fb633de390f89ed1664b9f0a43b06aad48e169602cd27970","first_seen":"2026-08-31T10:05:42.518493Z","last_seen":"2026-08-31T12:17:02.5113Z","times_seen":3,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tbnoviytatic.com/752180f7a/0b9aa/ecdcea5.png","fqdn":"tbnoviytatic.com","domain":"tbnoviytatic.com","tld":"com"},"ip":{"addr":"172.67.166.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tbnoviytatic.com/abbc8b926","date":"2026-08-31T11:03:11.670Z","timestamp":1788174191670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tbnoviytatic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 14:37:22 GMT","end":"Fri, 27 Nov 2026 15:35:55 GMT"},"fingerprint":{"sha1":"B8:09:FE:61:80:08:81:A1:08:26:A4:17:F7:07:46:07:50:46:B1:17","sha256":"3A:B2:B9:EB:2C:E3:AB:48:5B:6B:B3:79:A3:62:50:09:4E:96:93:AA:E0:B9:3C:87:62:A0:CE:EF:CC:07:70:EB"}}},"request":{"raw":"GET /752180f7a/0b9aa/ecdcea5.png HTTP/1.1\r\nHost: tbnoviytatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tbnoviytatic.com/abbc8b926\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:11 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nage: 3503\r\nlast-modified: Mon, 31 Aug 2026 10:04:48 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zQaG0lUC%2BfDrF3Vjd9azq4UogPJlMEMWstS5CBwzdGGlgzW2cL3%2FNB1gIgzvVjPSk46TZ619k43SlRcGw9mdRivER9ELY9tQGd1vB6QwhmV6%2Fx3X%2BuSuGo2oaNeFr0GCHgRw\"}]}\r\ncf-ray: a33b8c19f88c56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8552,"size_decoded":9183,"mime_type":"image/png","magic":"PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced","md5":"fd67cb7bbc8b269a3da874bd46a8194c","sha1":"cd4971306ee390ec0c8915950eb677debe12518a","sha256":"fe227b35c5ad0e7f785adc6e51a90ee961ad2606a9dac1db7f34429ffd3f4d41","sha512":"e7d128b0596b54d5fc5ac61894322a085645a03a965dbf74a5bb8a3a346f5e47c244758bb96abfb45958486bd1a077b8d1f2277023d57e19b129835d258f353a","ssdeep":"192:/WiHv4hH+0Q9hKiGDcbIao9AUsFPKD9rASDkSy9/ywmtGz1ygX:/WN+XTXBUgQU9qwGe1B","tlshash":"0302af8fd271f1cf8ea8491dd707aa5fbe1a23d21a7724b95dc0142a320f78146fe859","first_seen":"2024-06-13T10:36:03Z","last_seen":"2026-08-31T12:17:02.512229Z","times_seen":28,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-zi.com/p/sst-cgj/lctwghft/js/manifest.js","fqdn":"s.team-zi.com","domain":"team-zi.com","tld":"com"},"ip":{"addr":"172.67.133.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://s.team-zi.com/p/sst-cgj/lctwghft/","date":"2026-08-31T11:03:10.662Z","timestamp":1788174190662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-zi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 09:25:44 GMT","end":"Thu, 26 Nov 2026 10:23:20 GMT"},"fingerprint":{"sha1":"12:58:C5:A5:36:56:DA:2F:C6:82:6B:16:EC:68:63:02:82:9D:37:DB","sha256":"8F:F3:EC:A4:80:5E:6D:91:69:67:A4:0B:7B:C8:66:D8:BF:4B:72:A0:FA:05:76:42:42:DB:9A:F8:0E:AE:66:76"}}},"request":{"raw":"GET /p/sst-cgj/lctwghft/js/manifest.js HTTP/1.1\r\nHost: s.team-zi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-zi.com/p/sst-cgj/lctwghft/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:10 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Li%2FkGrxkqg9%2BnoGIWNh1%2BHGsC6iOm1brOUjhYCBT5e5RVhyJY9yxZyjAoFNxjqutKClO95m9DsoZ%2BoVxjN0ZOcYtSBEYqO5s1jxWz3AtmQHtdT2GhqgSxmwMc5jbsl8f\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33b8c13aa2023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196,"size_decoded":816,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"62962daa1b19bbcc2db10b7bfd531ea6","sha1":"d64bae91091eda6a7532ebec06aa70893b79e1f8","sha256":"80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880","sha512":"9002a0475fdb38541e78048709006926655c726e93e823b84e2dbf5b53fd539a5342e7266447d23db0e5528e27a19961b115b180c94f2272ff124c7e5c8304e7","ssdeep":"","tlshash":"c0d0129e9183638b442225907ac211d2654d13a6b87645e82d82a48a951857dc5ca69d","first_seen":"2023-03-07T12:06:54Z","last_seen":"2026-08-31T15:17:32.886724Z","times_seen":112563,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"s.team-zi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"s.team-zi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tbnoviytatic.com/752180f7a/0b9aa/f99fb6a.ttf","fqdn":"tbnoviytatic.com","domain":"tbnoviytatic.com","tld":"com"},"ip":{"addr":"172.67.166.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tbnoviytatic.com/abbc8b926","date":"2026-08-31T11:03:14.036Z","timestamp":1788174194036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tbnoviytatic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 14:37:22 GMT","end":"Fri, 27 Nov 2026 15:35:55 GMT"},"fingerprint":{"sha1":"B8:09:FE:61:80:08:81:A1:08:26:A4:17:F7:07:46:07:50:46:B1:17","sha256":"3A:B2:B9:EB:2C:E3:AB:48:5B:6B:B3:79:A3:62:50:09:4E:96:93:AA:E0:B9:3C:87:62:A0:CE:EF:CC:07:70:EB"}}},"request":{"raw":"GET /752180f7a/0b9aa/f99fb6a.ttf HTTP/1.1\r\nHost: tbnoviytatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tbnoviytatic.com/752180f7a/0b9aa/655ef78.css?v=eisHsuZU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 11:03:14 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 3501\r\nlast-modified: Mon, 31 Aug 2026 10:04:52 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g1yg5rFYCchHSa60ENNTvTSIz2qH7lPnm16HPXzdNAg2jshNHs0FT3wuG4zS1Sv5Sij%2FIsmTufyWmfrMlw27iv8ZEBDAluJWaynUrew8fnFuNBuQPH6O8v9X79J84687aFMw\"}]}\r\ncf-ray: a33b8c28b94656bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124048,"size_decoded":124691,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansMedium4.015;Plau;MotivaSans","md5":"2d64caa5ecbf5e42cbb766ca4d85e90e","sha1":"147420abceb4a7fd7e486dddcfe68cda7ebb3a18","sha256":"045b433f94502cfa873a39e72d616c73ec1b4c567b7ee0f847f442651683791f","sha512":"c96556ec57dac504919e806c7df536c4f86892b8525739289b2f2dbbf475de883a4824069dbdd4bb1770dd484f321563a00892e6c79d48818a4b95406bf1af96","ssdeep":"1536:v4Kkq/szjKJRIDCnR96guXgECINo28BZZDhpkemOXaxq4jKea8GyFLaE0Af0ffL9:vf/fxn7ElXxE0wS0fj9","tlshash":"86c35c06f706d709dd240e3df9a1a3a9b358f8a57b1fcb0fa6856d65fc8e0852a441cc","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-08-31T12:17:02.514272Z","times_seen":7117,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
