{"report_id":"50fbec88-900f-46ad-933c-1a47ff10833f","version":6,"status":"done","tags":[],"date":"2026-06-07T00:00:28Z","url":{"schema":"http","addr":"startgift.click","fqdn":"startgift.click","domain":"startgift.click","tld":"click"},"ip":{"addr":"104.21.86.217","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"startgift.click/","fqdn":"startgift.click","domain":"startgift.click","tld":"click"},"title":"Welcome autumn! Get a $50 gift card!","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"startgift.click","fqdn":"startgift.click","domain":"startgift.click","tld":"click"},"ip":{"addr":"104.21.86.217","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-12T00:00:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"startgift.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-07","alert":"Phishing Block","trigger":"startgift.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"startgift.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"startgift.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"startgift.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"startgift.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"store.steampowered.com","ip":{"addr":"2.18.173.205","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2000-08-09","domain_rank":1091,"first_seen":"2012-05-22T22:09:28Z","last_seen":"2026-06-03T12:57:28.772164Z","alert_count":0,"request_count":1,"received_data":452,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"steamcdn-a.akamaihd.net","ip":{"addr":"95.101.11.113","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2009-09-14","domain_rank":222323,"first_seen":"2013-12-27T11:30:12Z","last_seen":"2026-05-31T20:50:54.971934Z","alert_count":0,"request_count":1,"received_data":353256,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"store.akamai.steamstatic.com","ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"domain_registered":"2013-11-07","domain_rank":150652,"first_seen":"2014-03-27T00:59:34Z","last_seen":"2026-06-06T10:57:38.915541Z","alert_count":0,"request_count":27,"received_data":1684896,"sent_data":12970,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.cloudflare.steamstatic.com","ip":{"addr":"23.214.96.91","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"domain_registered":"2013-11-07","domain_rank":239946,"first_seen":"2020-06-12T06:10:44Z","last_seen":"2026-06-01T10:57:33.463943Z","alert_count":0,"request_count":4,"received_data":7057,"sent_data":1730,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"store.steamstatic.com","ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-11-07","domain_rank":257445,"first_seen":"2024-10-15T21:07:30.154485Z","last_seen":"2026-05-30T07:48:19.220576Z","alert_count":0,"request_count":2,"received_data":503078,"sent_data":885,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"startgift.click","ip":{"addr":"104.21.86.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-18","domain_rank":0,"first_seen":"2026-06-06T02:39:06.722461Z","last_seen":"2026-06-06T02:39:06.722461Z","alert_count":30,"request_count":5,"received_data":462629,"sent_data":4659,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Prototype:1.7","description":"Prototype is a JavaScript Framework that aims to ease development of web applications.","website":"https://www.prototypejs.org","common_platform_enumeration":"cpe:2.3:a:prototypejs:prototype:*:*:*:*:*:*:*:*","icon":"Prototype.png","categories":["JavaScript frameworks"]},{"name":"script.aculo.us","description":"","website":"https://script.aculo.us","common_platform_enumeration":"","icon":"script.aculo.us.png","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]}]},{"fqdn":"store.cloudflare.steamstatic.com","ip":{"addr":"23.214.96.87","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"domain_registered":"2013-11-07","domain_rank":258260,"first_seen":"2020-06-20T20:45:01Z","last_seen":"2026-06-04T04:15:02.178566Z","alert_count":0,"request_count":2,"received_data":502889,"sent_data":907,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/javascript/rellax/rellax.min.js?v=.KbIxshHXB6Um","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc9959a1d329e83b76f447a817e2d974","sha1":"8cd3b4f592057f4999e325aae48b48ce6ac72e05","sha256":"5617dae33f066bd9a2bc7f8567481e69fa5b4cec817975e2477db0354d3109ca","sha512":"2d224c4bb2a23f593ccf026fc79ad102d4033996a66fe9b1ae81f8d51e69cb6d6e5980c88c63ad1c821bd7f1f521d628822336584656d1454d760326e8e21930","ssdeep":"","tlshash":"b07185b839b0633a01a716afa19b5b483479d3317a0370a9f11cc4ed53a4d8782d7fe6","size":3527,"data":"","first_seen":"2023-03-09T03:37:50Z","last_seen":"2026-06-12T01:08:17.372704Z","times_seen":1448,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/javascript/dynamicstore.js?v=lVaX0vVVmhcl\u0026l=russian","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d823533c785df1473ce855dc2885078c","sha1":"6af30d45dd0f15e38d74357223694f86f973f680","sha256":"7d09fde44a20b526d2148166044be95124ca27237635d95ff1b884c39d776420","sha512":"579d8398f9c4856c6502ead97ccea082f4dfba6e20faf4951558ec40a2d34632b4ab4b2940cfcdb9f262de5a9b9c27b6a0c5e257237083a03705a79580331341","ssdeep":"1536:fZ/cXRZyjTDWWN+6D/3QA4LlxM8c3ZTb1hZELocvneK32c6kCZRWXN8pxHf4YuMS:R3MA44hoeK32cOJNqIc","tlshash":"75931ab4a72e532e67b221fcad69a1cdf3bc48b535468850bce4221874e4c5f93b5e1c","size":91049,"data":"","first_seen":"2026-06-06T02:39:13.504662Z","last_seen":"2026-06-12T01:08:17.366655Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/javascript/main.js?v=wZOkh5CBgIrx\u0026l=russian","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f01f1f7d57bb7a46bfe6525bb4a6b7c3","sha1":"eb3df99dfe324ee3ab0082e70a6d286d79b80565","sha256":"59190111b494ea1284ccd9b1054b507e071d81646a495365183b32f52a86961a","sha512":"4323ae2b8558f328748b013513f304e170f6939b61bde67bd1547911f77fbde2fec1f900f4b5c00b0659c127802f06f905c6df0d21045d7bf1f4f8d8c70c4335","ssdeep":"1536:UqB6CK7hnWxGfF0iRdQ6DUf9zESSw4ZRxwKOLWxLm46m8PeW3bKif7ydQHxvrVrz:bBuVnWW1i/NVr1","tlshash":"5793f9d4f79d01399479203ced2f948d3a7e4871b900a8627d5e8a9874d092f43baf7e","size":91156,"data":"","first_seen":"2026-06-06T02:39:13.503774Z","last_seen":"2026-06-12T01:08:17.365477Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"startgift.click/701f7e51790802","fqdn":"startgift.click","domain":"startgift.click","tld":"click"},"ip":{"addr":"104.21.86.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6004c14868a256e4cae4dec3db42e6d7","sha1":"48b9c9cef4ebb49a77da2a00b57c3b2c9d86472b","sha256":"2c550300a61671a67a72219fc89acad93ea8c8cb54d5468ec6f891eda7f30e96","sha512":"eeec39668ab9b64c61070b321a6a5817755c8817268263e5091fef5889ac13dcf9171b8e144f08fd5e85db9200bd6726eb1e0dd47b9481b3ed1d76170a27c044","ssdeep":"","tlshash":"b6e072bafb261838e9b0c4afe10c959c01310126c48e7630a02c92141cc2a08e382f80","size":295,"data":"","first_seen":"2023-06-21T01:00:33Z","last_seen":"2026-06-07T02:17:16.261652Z","times_seen":3599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=Me1IBxzktiwk\u0026l=russian\u0026load=effects,controls,slider","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"973ffdf6f722db9bb1e350b4c673f365","sha1":"a6c7d4331056cd37569fac3ee5f4b4e0e09b38cb","sha256":"658b209483f3b09ceabfab105ce9f15078138d646ca0e9abee2033606c852b19","sha512":"28ec015dd5dd389a56008983d64c69fbedf4c091e4478c8cf25c34db310516bc8cd1e0804fb554e26dfffe9b724b24b91df8ee1a5ed68153bc6bead655de0311","ssdeep":"1536:Ek3m7kQD+mlspqh2NrFIei4f9wiIVWaLcrZmKw1wF/IS58H1nRtW460kfR+U:zr4gO4f9wiJucrZE1xUJ5P","tlshash":"8183850d37ab262580dbb06a5f5f454db238411b1806dc58b8ad83d48fa9f3861f7fb9","size":87011,"data":"","first_seen":"2024-12-13T15:16:33.754695Z","last_seen":"2026-06-12T02:11:36.072316Z","times_seen":1632,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"startgift.click/701f7e51790802","fqdn":"startgift.click","domain":"startgift.click","tld":"click"},"ip":{"addr":"104.21.86.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"11c50b8634a87a034070664fb4c7eb0e","sha1":"44e3b500417425994105fe1d25a527046f8bebb6","sha256":"a54933cd0576f5259c98ed9ffe8a7b3b40b1922f3f3540c783fe95d6d3e4e132","sha512":"576f0596bcb08fb626782387351e3b233ce99c145af1ad3213627e54e2a89dc708fa9e841c3e261cec9c35911ef193962d311ccd7feba0237c31e180c9daade2","ssdeep":"","tlshash":"f421233193960e0fb732f46995eeb1ef5b5c0cb72506dcba909c4b181df19910221b1a","size":1323,"data":"","first_seen":"2023-12-02T03:41:17Z","last_seen":"2026-06-07T00:03:28.051885Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"startgift.click/701f7e51790802","fqdn":"startgift.click","domain":"startgift.click","tld":"click"},"ip":{"addr":"104.21.86.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d7a216a01322434ec1e0a1e715249342","sha1":"33b0755fa91de71315dfd4aac9ea633f87077999","sha256":"ec74b3fe0b1224174d1724fd23854867e2feb2940ebf14f9f8c7a5524cf19f63","sha512":"518292a25139ffc3e850d3ded38248f6cb57f030bbe9ab28cdd233eb4f30cea6932a692cbd25e1f4c727c87ee90ce0349ae2925ff6b05954e7038270dd0bbb04","ssdeep":"","tlshash":"9701d6c9e79e134906cb700ae9be4685af3a88fa194070bb7c3430a97171f6431dcf69","size":679,"data":"","first_seen":"2023-12-02T03:41:17Z","last_seen":"2026-06-07T00:03:28.052488Z","times_seen":331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"startgift.click/701f7e51790802","fqdn":"startgift.click","domain":"startgift.click","tld":"click"},"ip":{"addr":"104.21.86.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a8368a244303b9dffafc561191d07b9b","sha1":"d047e1bde381e5cbad55c8ea3102d6af05a6e9fb","sha256":"f24dcbfce70f66e1aedc4b4c468d0f0a83d83e73138a5918da8a4385a46759bf","sha512":"49d9ea182ae00ecbbd988b54e61332eddb8203ddc0b99a96f8bcbff62d0e9a39602ada892c57d9f6e6f4ad72b6494b2d09b6429897e16debfff5d6ff322ed95b","ssdeep":"","tlshash":"b131126e309304440c89917ea6cb1618b430727bb733c51e752e8e196ff3539a749bae","size":1567,"data":"","first_seen":"2024-02-06T11:02:46Z","last_seen":"2026-06-07T00:03:28.053036Z","times_seen":200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3576a6e73c9dccdbbc4a2cf8ff544ad7","sha1":"06e872300088b9ba8a08427d28ed0efcdf9c6ff5","sha256":"61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf","sha512":"27d41f6cfb8596a183d8261509aeb39fcffb3c48199c6a4ce6ab45381660c2e8e30e71b9c39163c78e98ceabc887f391b2d723ee5b92b6fbc81e48ac422e522b","ssdeep":"1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:O+vIklosn/BLXjxzMhsSQ","tlshash":"b393f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","size":93636,"data":"","first_seen":"2023-03-07T01:02:53Z","last_seen":"2026-06-13T09:34:04.088115Z","times_seen":35523,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/javascript/about.js?v=T9HhtJ81mJgN\u0026l=russian","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6103fe77a3657bf73d7c44a0fff4051f","sha1":"de925abaab475be75a8ab890d686c81cf687b7bc","sha256":"dd87178fa21a4c30e10603dcefc64b59b69a709baa707c25b24179ef7201a5ce","sha512":"6a59ded4e5811ed0481b1233ffed8271523c134e460ae5f920fe74202a51b0ef87cecaa13065d677010aad58794e6870443a2c7080d5ffb30bbd2d940b0f27d7","ssdeep":"","tlshash":"1541ac8def0d201f407d216d0a3e65cd60ae98b3080504f6bd956b24f5e962f53edce8","size":2097,"data":"","first_seen":"2024-11-25T11:09:43.901673Z","last_seen":"2026-06-12T01:08:17.372215Z","times_seen":877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/javascript/slick/slick.js?v=.UvbXNQdQm-AJ","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9003ce006332652ca6790949af7c4c9d","sha1":"a7a2fe3a7f0064ba259862d9a5aa0907a7babd23","sha256":"57d77c8ca1ef7313363b200848555760678e8e85cf356248f5c67180212022c5","sha512":"126fdacf49d4a689f83b4b12dbb609718020ba8c73fd4c81923252ae1896b3720c1506cef18df7b467ca8bfc061af6da230340a9a59c63e4c5dccf6cadc97da6","ssdeep":"1536:7BezcHmrlGI2R8mhNibroDyFDJAlqCIWglOo:FezcHgGI2R8mhNibroDyFDJAl9o","tlshash":"39630e0b55f1132694a731b96bdf8028b3ba90275504ed9dbccc43c5afd45288feabe4","size":70274,"data":"","first_seen":"2023-06-11T05:59:46Z","last_seen":"2026-06-12T01:08:17.360113Z","times_seen":1494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"startgift.click/701f7e517908025c5c51524d.js","fqdn":"startgift.click","domain":"startgift.click","tld":"click"},"ip":{"addr":"104.21.86.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3595b5e7a3442b4581540f9e3b603beb","sha1":"e0d904b8fd9ef69d60106c82188642ea8bde99bc","sha256":"bd4843cccb4bdc4f1a8939b453fe4d7f0aca7a660eeb2c41102160a15c53aede","sha512":"a9c64bd7f710542219bb741add5f93393cc14b8605880d71bf87c6921afa5c568a49eda298e73e58fe4dea24c879b36f94f1fb7a78147d1f9925708b4d3cbfcf","ssdeep":"3072:BmDr5RbmIwmyYH9JxNbqD5DNSbqYv2Voj2JBnNqvuJVEClo2bvOSZ:aVtwmyYH9JxQDdNSbq7Vojwzxok","tlshash":"2844a54067c0a85c234b8f7a731bb1e5f16e0daf3988498be105fc60a5e6217f9f9931","size":260430,"data":"","first_seen":"2026-05-22T02:56:22.021908Z","last_seen":"2026-06-12T02:11:36.071252Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"93995e3bb315bc0695254d745e88d5e1","sha1":"206782432cbbafa347e32cd5c19775a701faef83","sha256":"39cbe8d0785370b4ebda08f844727ac3a6fc5cab10bd26cbeda5dc36ff4166d0","sha512":"b6e8c9675e186e53a54a40e45ee78f6025b0ddc3f067f6f0bef67fef3ce5f30cce2d0be18b7457e05ff397ef8c301ab5bb07fe53fcf61e11f65de9f872f361d0","ssdeep":"192:h3ug34ZknOPADCO0izmla3uCXDJiC7ZEb9k9Hdqyo0WPn4PRP/4PaP34Pjc+8ubK:h3ug4R4svlBEJpocOFJ2eu+i9","tlshash":"ec826591f73d20ae407ab3be896d2388b33e40b65161f8757d7886743a4e4970392fe4","size":17568,"data":"","first_seen":"2026-02-18T02:21:57.511284Z","last_seen":"2026-06-12T16:11:51.557963Z","times_seen":588,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=G8Emg1Eyd6ZZ\u0026l=russian","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed6c15f6072f14164b4a3cef39592022","sha1":"52d9b857bc11424ef5b23461cc525f88bce62e11","sha256":"723989615bf120e2379b891691497dfe5d57bdf51a0ea53276b9608c6e9d3a7f","sha512":"c15c2bb0302a577d49d0d94cc32fc38a8a8d7f2c65deba48c0f7438b97a0a86fb6cf0257d18c641bb3497ff7eed30cb3e5303ccec4a53346d2dbb670fe1f66ab","ssdeep":"1536:0v99zRdDp2hNJRNhjmciMQzovXmDecTVbiqD3YHI1Sp6D3QgQDrMTAQam8XkwCMb:3/5jmciZov2DeclP7YHNgOVXRt","tlshash":"def318d5eb7c112a897a302edd2f544d367e1832b00469297c5e94d86ae0c6e43bbf7c","size":157847,"data":"","first_seen":"2026-06-06T02:39:13.492207Z","last_seen":"2026-06-12T01:08:17.361516Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"startgift.click/","fqdn":"startgift.click","domain":"startgift.click","tld":"click"},"ip":{"addr":"104.21.86.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bec6a3790a4db5ac0262a4425d9818e2","sha1":"95c69951570e2eadfc3f21e5ba24ecb254aa36a5","sha256":"1b8d3105316be4d688fdd5d43de84e4650556a36350ef9f4db3181d00181560f","sha512":"18cdc55a8660e9f0c7cae06956a4df85f2f6732e3d78bb48c228941fbb63b8d483c6d961274b468adeac46192761cd043b6410d5c9c39b25c5c8b9adb4dbec96","ssdeep":"768:2a6T0UPuWZ48OmWbDLPV+iagSVfcsIg717hEUfNn1NJekGR13aDf17Pp+k5I:t6XuWZ4vmWbDLPVtagucw717WUfN1NJq","tlshash":"97e21fa8b547a86493f2a030790ffa0f8652d40d074c57d8fad3e4d236dc682adde636","size":32560,"data":"","first_seen":"2026-05-22T02:56:22.075247Z","last_seen":"2026-06-12T02:11:36.098978Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/javascript/prototype-1.7.js?v=.a38iP7Khdmyy","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e92449419eb10ee96c56d803d2baa43","sha1":"5a2be7055866b8f35bd852d466ff590251a56d89","sha256":"a655fc19da796630bcf37112ccf749898e98c99e1b25bccef0bf3573665195e5","sha512":"19d0c715d50abf41cccf0a96bf9c4673c5059d8a0a9edddc00c243ae44e403e1b3641c8e7c3e57b58746423b0679af216398648a6a1a4f50f394a9c15104fb32","ssdeep":"1536:Pe/hr8bCUSFPlpV7N+XS+st304cM9FmKZFDlYUo7pKMaV/6FzKKVA8MjjOH2X1Ix:PIr8bCBPlp0u9F6UodjaVbX1oYVpwxA8","tlshash":"99f3309c7de66035822bf13e5a9f418cf27980171408ed55b89c85a46fb0d3896fafec","size":163315,"data":"","first_seen":"2023-10-31T01:09:46Z","last_seen":"2026-06-13T07:15:45.526209Z","times_seen":2362,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=cxQV9f417bc5\u0026l=russian","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"15addec289a89408ca46b9b15797149e","sha1":"7004276fab8e3c4ae33f1c8919d102eed1084955","sha256":"5edcb9726fdc97f8a01d5948f7eccfb279a51de6c0e610e38d2225434b0f34b4","sha512":"e7021e8f334cb7816ecd258ff9a72ca76db8214abb96b208b58397c193a602049f07073173930e37bbed09b4c05d314a8d6318f3df0e33b55d12e10c96a766b3","ssdeep":"384:0GUcz6olWst4anMMY5erCGgxEQx/kjHBc2gdXf7h6oq:0G7z7Wst4wYkuBEosjHCNZ7A","tlshash":"f7b2b5a9f75e12768179331c6e5b348e32bd84f8710aac827d60255c3aca54e43e6f4f","size":23695,"data":"","first_seen":"2026-05-14T04:43:00.991826Z","last_seen":"2026-06-12T01:08:17.351528Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/css/promo/newstore2016.css?v=Lv_hriLyrQ5z\u0026l=russian","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:04.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/css/promo/newstore2016.css?v=Lv_hriLyrQ5z\u0026l=russian HTTP/1.1\r\nHost: store.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: text/css;charset=UTF-8\r\nContent-Length: 1432\r\nETag: \"MMbEZfjLCQeA\"\r\nX-Integrity: \"sha384-VFTWaZrgR8GspZ96GwjQCnxwhiitqv5viIMFmySsCzjXxCHBxfOM0hEqEg25bpKG\"\r\nLast-Modified: Tue, 05 May 1970 00:49:56 GMT\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=63072000\r\nVary: Accept-Encoding\r\nCache-Control: public, must-revalidate, max-age=0\r\nExpires: Sun, 07 Jun 2026 00:00:05 GMT\r\nDate: Sun, 07 Jun 2026 00:00:05 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4499,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"30c6c465f8cb0907801701139096003c","sha1":"c6a3078a1352c3938c5bbe3a62d69efeca1bb6c1","sha256":"3f4987d033716b742b68c6ec7798ad6a02bc6edfceb5e540b5f0f07f8423e9b6","sha512":"cbd96842be38cffcb9ece199d490649e9b4e4aaab1beb837c9855587d23d383a0165f69949506fcdbd7f542d427b542b8fc4c21f4b942fd8cf1677161cdef9f6","ssdeep":"96:8KY3SP2S62Sr78K3Mvu4P57pGDk+DMS/m:0SOS9jPtpcu","tlshash":"0b9142d781632809b52ab1d47f5df9a5525a80cbba1fcd18bfc5b19c9f809c48023bc5","first_seen":"2024-12-05T13:31:00.174459Z","last_seen":"2026-06-12T01:08:17.371608Z","times_seen":132,"resource_available":false,"data":null}},"time_used":709,"timings":{"blocked":26,"dns":5,"connect":3,"send":0,"wait":641,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cloudflare.steamstatic.com/store//about/logo_steam.svg","fqdn":"cdn.cloudflare.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.91","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:04.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflare.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 12:34:34 GMT","end":"Mon, 27 Jul 2026 12:34:33 GMT"},"fingerprint":{"sha1":"86:90:F9:A6:06:CC:49:42:66:07:1C:23:99:F4:25:FC:AD:99:4E:DB","sha256":"FF:42:FC:CD:04:A3:7D:7E:69:61:34:B6:F5:C8:E4:CA:03:D3:73:8E:70:6C:93:76:2A:33:E6:CB:78:B5:07:31"}}},"request":{"raw":"GET /store//about/logo_steam.svg HTTP/1.1\r\nHost: cdn.cloudflare.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/svg+xml\r\ncontent-length: 2522\r\nlast-modified: Thu, 14 Nov 2024 00:19:00 GMT\r\netag: \"673541f4-9da\"\r\naccept-ranges: bytes\r\ndate: Sun, 07 Jun 2026 00:00:04 GMT\r\nakamai-grn: 0.4286d517.1780790404.7feb445a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2522,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ba1eadfd02abb260074971789870ce10","sha1":"e329edad609b0c2b7a567ff1964f59833d401c66","sha256":"9720a2b19519e0d51f44f91d7dd0cd57ccee7347efe38f5815acc6d984f79a8b","sha512":"063843a5043e832af172fc6609a288adb98bbb1da1fe82f8bb370c314b04748f5d50e2ed75400e8a653ef40761e64687a8eb99e8f4f613f879a109dcfffa7d22","ssdeep":"","tlshash":"de51f1150309ebfea9c90658962925c171d8dcefb074b0d0b7ff2817e15ccd0a68c6ea","first_seen":"2025-01-01T12:10:22.113504Z","last_seen":"2026-06-12T02:11:36.075063Z","times_seen":779,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":86,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016","fqdn":"store.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:04.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.steamstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 07:37:49 GMT","end":"Fri, 24 Jul 2026 07:37:48 GMT"},"fingerprint":{"sha1":"4F:2F:75:65:7A:BA:DE:1E:13:67:11:A9:CD:40:5F:98:7E:1F:96:5F","sha256":"B2:93:8F:20:C3:4B:73:01:56:17:1C:16:4B:90:73:F0:EA:89:16:B0:19:E7:45:CD:90:FC:A9:60:B7:AA:92:44"}}},"request":{"raw":"GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1\r\nHost: store.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 14 Nov 2024 00:18:58 GMT\r\netag: \"673541f2-e3e\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Sun, 07 Jun 2026 00:00:04 GMT\r\nvia: 1.1 varnish\r\nage: 78832\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 1624\r\nx-timer: S1780790405.812433,VS0,VE0\r\ncontent-length: 3646\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3646,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"31aabe1e01f27b3b9b47d7265807afc2","sha1":"a430f5a8a81145215c41c3ba80929627e570d81e","sha256":"3a4d08139646d567a612f75b8179641c570d490f8013478d131266ed21f3d453","sha512":"60dfb140295124b3f6b57592504ca6006c22988bba82bf63c5559fa7f8da2aab7e163265abb2a312034875f95fa850bbacb620ecca6c56ea8e79689963cd31c4","ssdeep":"","tlshash":"f971b4cc17338be06595c27e1e7476d223b365a9e8b001e8a3920c202c0bfe69a64d75","first_seen":"2023-10-31T01:09:47Z","last_seen":"2026-06-13T07:15:45.461181Z","times_seen":2770,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/shared/images/popups/btn_arrow_down_padded.png","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:06.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/shared/images/popups/btn_arrow_down_padded.png HTTP/1.1\r\nHost: store.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=z199r3iqKbyb\u0026l=russian\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nContent-Length: 161\r\nLast-Modified: Wed, 28 Jun 2023 04:07:12 GMT\r\nETag: \"649bb1f0-a1\"\r\nStrict-Transport-Security: max-age=10368000\r\nAccept-Ranges: bytes\r\nDate: Sun, 07 Jun 2026 00:00:06 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":161,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 19 x 12, 8-bit/color RGBA, non-interlaced","md5":"f2dae37acac6b9d5a91caf1885c2f7d0","sha1":"5f80fdde9f702a1d7589bc5faf88c14066e26c32","sha256":"93b1fbe4f6245b62bfd4c8c3347abe0fe67ed711315e59bfadaebc9873d8d9b5","sha512":"8d7ff7133ab97d81985c50fa8fd93916b42b1ce812af21bc732dcae45d59b9154fcc965857235d925c471db191dfb79c0753c70c7a4d5b0285b908e396216805","ssdeep":"","tlshash":"95c08cc1bb64ed58dad20363a596802084a30a844a53836ca9a6c875023aa01c8d1f46","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-06-12T22:36:24.472176Z","times_seen":3556,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"startgift.click/","fqdn":"startgift.click","domain":"startgift.click","tld":"click"},"ip":{"addr":"104.21.86.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-07T00:00:03.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"startgift.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 15:28:29 GMT","end":"Mon, 10 Aug 2026 16:28:16 GMT"},"fingerprint":{"sha1":"59:B1:53:05:0E:BC:E8:71:1F:87:94:0B:6C:23:EC:55:0E:FB:C5:1A","sha256":"28:94:DF:14:21:A7:0E:0A:DF:0F:A3:1E:93:62:AF:F8:C7:76:87:50:09:28:FA:2B:68:75:80:EB:71:E7:4D:C6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: startgift.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Jun 2026 00:00:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=60, s-maxage=60, stale-while-revalidate=30\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nset-cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.daGIT24sZgbwO2ai0L-s5sThs_WDImtw.AR8v-eyAPK8RGa4Z.qLCo33hgCipe2S8xbG4EfRMwvQ64FZTCmNL7durfBpUpGgtjbiIjd-MfaPGyvmLdiHPHMyp1hCkN4pAMgMaajA5yDk4G4RBq2-WYD6kZX2pDhffjNup2en9LG7uow_TwQBaqRPs9xF1B332pCaLGsgdzwj0_lyMClx0TzCkFmBhJEPlfh_nGmj3uKz7zFBrnbdMe7f6FsGTX-4qr5eOvpobNGwndKkkCPE2UUdHPlHi7MnkYaL39cuL9fl8p1MVR5teJGyX_Uej2Rw.CxtWKXvtO49fUfWevMiGlg; Max-Age=21600; Path=/; Expires=Sun, 07 Jun 2026 06:00:04 GMT; SameSite=Lax\ntoken=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTQwNCwic2VjcmV0IjoiNGYwMDQ5YTUyNTc1NjljYjAxOTg5MWJjZjUxMjA2MTQiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.KiFZPCg4E2m_D7l6gOuQlbclZS31rZjZdKKsKj_KW1o; Max-Age=21600; Path=/; Expires=Sun, 07 Jun 2026 06:00:04 GMT; SameSite=Lax\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K7RmUMGUE2VEbAeHXRvVpNSxqLmD2bDLifyW38G%2BS8vzVYW0VVgZcwhUjna9E7XBI5Qj06EUTCeNGMhRI8qlOlnaB%2FDsGVgRNTpw%2FbaAGvAux9SCbCtxal%2F4%2BWAW94falIs%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a07b5fd8d920120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36002,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (32577)","md5":"63f8537d6a389119130166999f822110","sha1":"5fa7658d9caf9a2ca54272f8f29224fc0af81610","sha256":"8a648743e01e88a4466454c8c6cd478aea05d434a6c1acb8b4a2a922c5a5c0c5","sha512":"f12d8efdddf0e735a4af6f0c86d724d12d204a00cd80f5fd998c158b8f636ecc2b96e5be8b80074d7e4e84359716046d77d6270d0b9e303e1ba891a879faa2a3","ssdeep":"768:6dEbUja6T0UPuWZ48OmWbDLPV+iagSVfcsIg717hEUfNn1NJekGR13aDf17Pp+k9:qhu6XuWZ4vmWbDLPVtagucw717WUfN1d","tlshash":"41f221a8b543a86493f26070391ffa0f8652d409474c57d8fad3e4d236dc782adde636","first_seen":"2026-06-06T02:39:13.489838Z","last_seen":"2026-06-07T00:03:28.034449Z","times_seen":3,"resource_available":true,"data":null}},"time_used":473,"timings":{"blocked":187,"dns":167,"connect":1,"send":0,"wait":99,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"startgift.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-07","alert":"Phishing Block","trigger":"startgift.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"startgift.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"startgift.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"startgift.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"startgift.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T\u0026l=russian","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:04.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T\u0026l=russian HTTP/1.1\r\nHost: store.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: text/css;charset=UTF-8\r\nContent-Length: 641\r\nETag: \"4Vj7bvhvv_UL\"\r\nX-Integrity: \"sha384-EUrUXpuzzicCV5/agbvqTQq0B/86iv3mD2mYADf9PusDsa8+Sn8Cwa0ugIrDwiJh\"\r\nLast-Modified: Tue, 05 May 1970 00:49:56 GMT\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=63072000\r\nVary: Accept-Encoding\r\nCache-Control: public, must-revalidate, max-age=0\r\nExpires: Sun, 07 Jun 2026 00:00:04 GMT\r\nDate: Sun, 07 Jun 2026 00:00:04 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2568,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"e158fb6ef86fbff50b419b937ad42de1","sha1":"687ab323ac1d3f78b904202e31456b34c3e524fc","sha256":"c05879f484048e391c124e0895133a7b12523b39f2ac9717249bb2b1860ede43","sha512":"bc60631bed87c65aede9ce476d7d2964d6384094326d5e4ef452efe8be6003a1cf49368189d9b6ec7d7a00ab23133b3b7c1a1b22892e998037e3704649ceb913","ssdeep":"","tlshash":"8d51c141565cd13f5fa00c83f3cb6d16be0b342a301ac971c9a61d94afa983a0375b5a","first_seen":"2025-04-08T10:55:22.234768Z","last_seen":"2026-06-12T01:08:17.355112Z","times_seen":99,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":36,"dns":6,"connect":1,"send":0,"wait":190,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:04.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0 HTTP/1.1\r\nHost: store.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: text/javascript;charset=UTF-8\r\nContent-Length: 4923\r\nETag: \"k5leO7MVvAaV\"\r\nX-Integrity: \"sha384-rc1rbWHthsreW3AQ0ZcjHfFF0HDbAtcPxoiduABkNRCzrUT+UHgX7OCf2yda9SqG\"\r\nLast-Modified: Tue, 05 May 1970 00:49:56 GMT\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=63072000\r\nVary: Accept-Encoding\r\nCache-Control: public, must-revalidate, max-age=0\r\nExpires: Sun, 07 Jun 2026 00:00:05 GMT\r\nDate: Sun, 07 Jun 2026 00:00:05 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17568,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"93995e3bb315bc0695254d745e88d5e1","sha1":"206782432cbbafa347e32cd5c19775a701faef83","sha256":"39cbe8d0785370b4ebda08f844727ac3a6fc5cab10bd26cbeda5dc36ff4166d0","sha512":"b6e8c9675e186e53a54a40e45ee78f6025b0ddc3f067f6f0bef67fef3ce5f30cce2d0be18b7457e05ff397ef8c301ab5bb07fe53fcf61e11f65de9f872f361d0","ssdeep":"192:h3ug34ZknOPADCO0izmla3uCXDJiC7ZEb9k9Hdqyo0WPn4PRP/4PaP34Pjc+8ubK:h3ug4R4svlBEJpocOFJ2eu+i9","tlshash":"ec826591f73d20ae407ab3be896d2388b33e40b65161f8757d7886743a4e4970392fe4","first_seen":"2026-02-18T02:21:57.511284Z","last_seen":"2026-06-12T16:11:51.557963Z","times_seen":588,"resource_available":true,"data":null}},"time_used":671,"timings":{"blocked":464,"dns":0,"connect":0,"send":0,"wait":206,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/javascript/dynamicstore.js?v=lVaX0vVVmhcl\u0026l=russian","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:04.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/javascript/dynamicstore.js?v=lVaX0vVVmhcl\u0026l=russian HTTP/1.1\r\nHost: store.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: text/javascript;charset=UTF-8\r\nContent-Length: 24042\r\nETag: \"2CNTPHhd8Uc8\"\r\nX-Integrity: \"sha384-os/71+L72typxQMUWszZ9NwoNd+mGNOH6JlSfDCp87X7suHertrLh5eGUon3KsrQ\"\r\nLast-Modified: Tue, 05 May 1970 00:49:56 GMT\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=63072000\r\nVary: Accept-Encoding\r\nCache-Control: public, must-revalidate, max-age=0\r\nExpires: Sun, 07 Jun 2026 00:00:05 GMT\r\nDate: Sun, 07 Jun 2026 00:00:05 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91049,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d823533c785df1473ce855dc2885078c","sha1":"6af30d45dd0f15e38d74357223694f86f973f680","sha256":"7d09fde44a20b526d2148166044be95124ca27237635d95ff1b884c39d776420","sha512":"579d8398f9c4856c6502ead97ccea082f4dfba6e20faf4951558ec40a2d34632b4ab4b2940cfcdb9f262de5a9b9c27b6a0c5e257237083a03705a79580331341","ssdeep":"1536:fZ/cXRZyjTDWWN+6D/3QA4LlxM8c3ZTb1hZELocvneK32c6kCZRWXN8pxHf4YuMS:R3MA44hoeK32cOJNqIc","tlshash":"75931ab4a72e532e67b221fcad69a1cdf3bc48b535468850bce4221874e4c5f93b5e1c","first_seen":"2026-06-06T02:39:13.504662Z","last_seen":"2026-06-12T01:08:17.366655Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1126,"timings":{"blocked":642,"dns":0,"connect":0,"send":0,"wait":483,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.cloudflare.steamstatic.com/public/images/gift/steamcards_cards_02.png","fqdn":"store.cloudflare.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.87","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:04.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflare.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 12:34:34 GMT","end":"Mon, 27 Jul 2026 12:34:33 GMT"},"fingerprint":{"sha1":"86:90:F9:A6:06:CC:49:42:66:07:1C:23:99:F4:25:FC:AD:99:4E:DB","sha256":"FF:42:FC:CD:04:A3:7D:7E:69:61:34:B6:F5:C8:E4:CA:03:D3:73:8E:70:6C:93:76:2A:33:E6:CB:78:B5:07:31"}}},"request":{"raw":"GET /public/images/gift/steamcards_cards_02.png HTTP/1.1\r\nHost: store.cloudflare.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: nginx\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://store.steamstatic.com/public/images/gift/steamcards_cards_02.png\r\ndate: Sun, 07 Jun 2026 00:00:04 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-grn: 0.5886d517.1780790404.21c3ea9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":498627,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T09:48:57.028044Z","times_seen":16383237,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":84,"dns":44,"connect":1,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"startgift.click/701f7e51790802525741645c425c200d5e57505f","fqdn":"startgift.click","domain":"startgift.click","tld":"click"},"ip":{"addr":"104.21.86.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:04.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"startgift.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 15:28:29 GMT","end":"Mon, 10 Aug 2026 16:28:16 GMT"},"fingerprint":{"sha1":"59:B1:53:05:0E:BC:E8:71:1F:87:94:0B:6C:23:EC:55:0E:FB:C5:1A","sha256":"28:94:DF:14:21:A7:0E:0A:DF:0F:A3:1E:93:62:AF:F8:C7:76:87:50:09:28:FA:2B:68:75:80:EB:71:E7:4D:C6"}}},"request":{"raw":"GET /701f7e51790802525741645c425c200d5e57505f HTTP/1.1\r\nHost: startgift.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.daGIT24sZgbwO2ai0L-s5sThs_WDImtw.AR8v-eyAPK8RGa4Z.qLCo33hgCipe2S8xbG4EfRMwvQ64FZTCmNL7durfBpUpGgtjbiIjd-MfaPGyvmLdiHPHMyp1hCkN4pAMgMaajA5yDk4G4RBq2-WYD6kZX2pDhffjNup2en9LG7uow_TwQBaqRPs9xF1B332pCaLGsgdzwj0_lyMClx0TzCkFmBhJEPlfh_nGmj3uKz7zFBrnbdMe7f6FsGTX-4qr5eOvpobNGwndKkkCPE2UUdHPlHi7MnkYaL39cuL9fl8p1MVR5teJGyX_Uej2Rw.CxtWKXvtO49fUfWevMiGlg; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTQwNCwic2VjcmV0IjoiNGYwMDQ5YTUyNTc1NjljYjAxOTg5MWJjZjUxMjA2MTQiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.KiFZPCg4E2m_D7l6gOuQlbclZS31rZjZdKKsKj_KW1o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:00:04 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7MLgIMlL28am0al2ewBDChMGw9yuaW92Qvy7Qq2vjPCgoIlnI3A8ZMe88QwToL%2FrFfcuTbOMREkAjibMaT6gdPvmZy9kGSdiJAbtxKLjlrvJLE6BYeBJwFAg4gJUxp%2BiVbg%3D\"}]}\r\npriority: u=4,i=?0\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"11f-Dwuo4YqUL0LCTwFeRCSLyTU4udE\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a07b5fddbb08120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":287,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b3c1e88512b8e03ea4687dacff88a149","sha1":"0f0ba8e18a942f42c24f015e44248bc93538b9d1","sha256":"bf85243b8479c2f56845c8aab61fc3155c439e208af004a8b38f2c6828476155","sha512":"59164670b48579fc166571cefd55fd201c1762ea32bb94125297a3eb6b35a0c76e359b0e1d175214d73355bf8919acb8e30f08fdeeaf3698e0ec62140b509b3b","ssdeep":"","tlshash":"97d0c25204ac906adb006200405b7f0ae6bd2a2304c8b81ea5bc473299fc6da2409daf","first_seen":"2026-06-07T00:00:34.125411Z","last_seen":"2026-06-07T00:00:34.125411Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"startgift.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"startgift.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-07","alert":"Phishing Block","trigger":"startgift.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"startgift.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"startgift.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"startgift.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"startgift.click/701f7e51790802","fqdn":"startgift.click","domain":"startgift.click","tld":"click"},"ip":{"addr":"104.21.86.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://startgift.click/","date":"2026-06-07T00:00:04.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"startgift.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 15:28:29 GMT","end":"Mon, 10 Aug 2026 16:28:16 GMT"},"fingerprint":{"sha1":"59:B1:53:05:0E:BC:E8:71:1F:87:94:0B:6C:23:EC:55:0E:FB:C5:1A","sha256":"28:94:DF:14:21:A7:0E:0A:DF:0F:A3:1E:93:62:AF:F8:C7:76:87:50:09:28:FA:2B:68:75:80:EB:71:E7:4D:C6"}}},"request":{"raw":"POST /701f7e51790802 HTTP/1.1\r\nHost: startgift.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 45\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.daGIT24sZgbwO2ai0L-s5sThs_WDImtw.AR8v-eyAPK8RGa4Z.qLCo33hgCipe2S8xbG4EfRMwvQ64FZTCmNL7durfBpUpGgtjbiIjd-MfaPGyvmLdiHPHMyp1hCkN4pAMgMaajA5yDk4G4RBq2-WYD6kZX2pDhffjNup2en9LG7uow_TwQBaqRPs9xF1B332pCaLGsgdzwj0_lyMClx0TzCkFmBhJEPlfh_nGmj3uKz7zFBrnbdMe7f6FsGTX-4qr5eOvpobNGwndKkkCPE2UUdHPlHi7MnkYaL39cuL9fl8p1MVR5teJGyX_Uej2Rw.CxtWKXvtO49fUfWevMiGlg; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTQwNCwic2VjcmV0IjoiNGYwMDQ5YTUyNTc1NjljYjAxOTg5MWJjZjUxMjA2MTQiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.KiFZPCg4E2m_D7l6gOuQlbclZS31rZjZdKKsKj_KW1o\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":45,"data":"pathname=%2F\u0026search=\u0026hostname=startgift.click"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:00:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=60, s-maxage=0\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xDum9vl8XPNAHg%2Fcjkyh30SyRpvlPk1M%2FhV2geHtfWUtrbXwOlwkR9HN10A1W%2FYbFEyixqyRJz2jrosjJcmnMB3voxsbvth2NVUXFtkVZERjIbOtYTe4tBBrasswa9SSE%2Fw%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a07b5fdadac8120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Prototype:1.7","description":"Prototype is a JavaScript Framework that aims to ease development of web applications.","website":"https://www.prototypejs.org","common_platform_enumeration":"cpe:2.3:a:prototypejs:prototype:*:*:*:*:*:*:*:*","icon":"Prototype.png","categories":["JavaScript frameworks"]},{"name":"script.aculo.us","description":"","website":"https://script.aculo.us","common_platform_enumeration":"","icon":"script.aculo.us.png","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":159706,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2409)","md5":"00b8fdff6e23a038d8171695807f72e4","sha1":"17c7d940398ee1b2bf9cb685e0601dbdb74e7a8e","sha256":"e0b9667f6751f70e0e9138cc240b5c6d47c2ed59349e9587ec682ff18df84672","sha512":"629336ad595fc1cb8149557ae4a4c69b39490af58ea118888ee96df2241ba652f0e6b66c4bb398dcc8f8d956546a42cf94030ebead6a85eac50dce08d62217b8","ssdeep":"3072:H8dp981uhUPu4EX+2u5wOzyzs0F5QAC9h4uDvVWFs8tYtxtVyqCyLgSlWCZC6Sev:c3X+2u+Ozyzs0F5QAC9euDvVWC8tYt3t","tlshash":"67f30a225b416405b60ba0d8fe99eb55532f40b7eb0e8daaf5fa746cd7c41c41233b8e","first_seen":"2026-06-07T00:00:34.128195Z","last_seen":"2026-06-07T00:00:34.128195Z","times_seen":1,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"startgift.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"startgift.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"startgift.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"startgift.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-07","alert":"Phishing Block","trigger":"startgift.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"startgift.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/javascript/about.js?v=T9HhtJ81mJgN\u0026l=russian","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:04.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/javascript/about.js?v=T9HhtJ81mJgN\u0026l=russian HTTP/1.1\r\nHost: store.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: text/javascript;charset=UTF-8\r\nContent-Length: 815\r\nETag: \"YQP-d6Nle_c9\"\r\nX-Integrity: \"sha384-6iKZQfIqMwlFilSrpE9FQ/C37ngUlZaj5K+wixaU9hXEtTILpMq3ypp4/8Gyx9E1\"\r\nLast-Modified: Tue, 05 May 1970 00:49:56 GMT\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=63072000\r\nVary: Accept-Encoding\r\nCache-Control: public, must-revalidate, max-age=0\r\nExpires: Sun, 07 Jun 2026 00:00:05 GMT\r\nDate: Sun, 07 Jun 2026 00:00:05 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2097,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text","md5":"6103fe77a3657bf73d7c44a0fff4051f","sha1":"de925abaab475be75a8ab890d686c81cf687b7bc","sha256":"dd87178fa21a4c30e10603dcefc64b59b69a709baa707c25b24179ef7201a5ce","sha512":"6a59ded4e5811ed0481b1233ffed8271523c134e460ae5f920fe74202a51b0ef87cecaa13065d677010aad58794e6870443a2c7080d5ffb30bbd2d940b0f27d7","ssdeep":"","tlshash":"1541ac8def0d201f407d216d0a3e65cd60ae98b3080504f6bd956b24f5e962f53edce8","first_seen":"2024-11-25T11:09:43.901673Z","last_seen":"2026-06-12T01:08:17.372215Z","times_seen":877,"resource_available":true,"data":null}},"time_used":931,"timings":{"blocked":730,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cloudflare.steamstatic.com/store/about/icon-macos.svg","fqdn":"cdn.cloudflare.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.91","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:04.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflare.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 12:34:34 GMT","end":"Mon, 27 Jul 2026 12:34:33 GMT"},"fingerprint":{"sha1":"86:90:F9:A6:06:CC:49:42:66:07:1C:23:99:F4:25:FC:AD:99:4E:DB","sha256":"FF:42:FC:CD:04:A3:7D:7E:69:61:34:B6:F5:C8:E4:CA:03:D3:73:8E:70:6C:93:76:2A:33:E6:CB:78:B5:07:31"}}},"request":{"raw":"GET /store/about/icon-macos.svg HTTP/1.1\r\nHost: cdn.cloudflare.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 14 Nov 2024 00:19:00 GMT\r\netag: \"673541f4-4ac\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 664\r\ndate: Sun, 07 Jun 2026 00:00:04 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-grn: 0.4286d517.1780790404.7feb4457\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1196,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"204dd244cb3943172c9fc0b4cd26934b","sha1":"a7ab714e22a8950762bbbb4a2f8844b917f6bb8c","sha256":"a8f67eb0aee3d58bb70293466744088c2ac93154e5aa26c2bf2c5d5366d1d89f","sha512":"335389f4d01c0c94faff0fe46127fc39419d775b1b985197d3fe26de2e529fdb62839436206fa9ad61d4966f6718f57db4ac077e99204eae9beb1ef258365278","ssdeep":"","tlshash":"ed218e0f4301caadba6c4518f968644d6760eccbe0b4aac4bb971416d28c5f0a64d7fc","first_seen":"2024-12-15T15:29:49.48305Z","last_seen":"2026-06-12T01:08:17.358657Z","times_seen":649,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":85,"dns":51,"connect":1,"send":0,"wait":3,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:06.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1\r\nHost: store.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=z199r3iqKbyb\u0026l=russian\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nContent-Length: 291\r\nLast-Modified: Wed, 28 Jun 2023 04:07:11 GMT\r\nETag: \"649bb1ef-123\"\r\nStrict-Transport-Security: max-age=10368000\r\nAccept-Ranges: bytes\r\nDate: Sun, 07 Jun 2026 00:00:06 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":291,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced","md5":"a2796187c58c7e948159e37d6990ecc2","sha1":"4209cd85add507247f9ce5a87a8c9095b54ee417","sha256":"23341256db7f44b1f3811880fa2bae6b7748bbf6b62c544a162e38cf0d5c5082","sha512":"5ef103b8398507495c2708df8fcd82bdb763b1d580aaaa6cacfb805614764277c19e8ece5d890a8aafc004fc8c25e3ab2e67d6fbf373c432a9a0d7c36fa0890f","ssdeep":"","tlshash":"83d0ebf3a3e86d79fb52fe97d10180e0465fcaeb6004877889c3880447a81f880f2996","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-06-13T07:15:45.461894Z","times_seen":7172,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Thin.ttf?v=4.015","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:06.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/shared/fonts/MotivaSans-Thin.ttf?v=4.015 HTTP/1.1\r\nHost: store.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://startgift.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://store.akamai.steamstatic.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/octet-stream\r\nContent-Length: 118736\r\nLast-Modified: Tue, 28 Jul 2020 23:16:24 GMT\r\nETag: \"5f20b1c8-1cfd0\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nDate: Sun, 07 Jun 2026 00:00:06 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":118736,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansThin4.015;Plau;MotivaSans-T","md5":"ce6bda6643b662a41b9fb570bdf72f83","sha1":"87bcf1d2820b476aaeaea91dc7f6dbedd73c1cb8","sha256":"0adf4d5edbc82d28879fdfaaf7274ba05162ff8cbbda816d69ed52f1dae547f6","sha512":"8023da9f9619d34d4e5f7c819a96356485f73fddcb8adb452f3ceefa8c969c16ca78a8c8d02d8e7a213eb9c5bbe5c50745ba7602e0ee2fe36d2742fb3e979c86","ssdeep":"1536:GAAAAAAAgsAAAYgIAAAAsAuErzzzz6mfzzVCA9zzzzzzdp/koLAGXImE98YfgNi9:kErZDE9BfgNiX9k3SDHewStfNwS0fj9","tlshash":"b5c34b06f702eb4add691e7ca59163c5b728f4a13b1ec30f95c66d5afc8e1a60d022c9","first_seen":"2023-04-05T04:16:14Z","last_seen":"2026-06-13T02:35:13.027161Z","times_seen":4853,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":63,"dns":1,"connect":8,"send":0,"wait":2,"receive":3,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Bold.ttf?v=4.015","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:06.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/shared/fonts/MotivaSans-Bold.ttf?v=4.015 HTTP/1.1\r\nHost: store.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://startgift.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://store.akamai.steamstatic.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/octet-stream\r\nContent-Length: 123884\r\nLast-Modified: Tue, 28 Jul 2020 23:16:24 GMT\r\nETag: \"5f20b1c8-1e3ec\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nDate: Sun, 07 Jun 2026 00:00:06 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":123884,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 22 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansBold4.015;Plau;MotivaSans-B","md5":"6168553bef8c73ba623d6fe16b25e3e9","sha1":"4a31273b6f37f1f39b855edd0b764ec1b7b051e0","sha256":"d5692b785e18340807d75f1a969595bc8b1c408fb6fd63947775705e6d6baa66","sha512":"0246cee85a88068ca348694d38e63d46c753b03afadf8be76eca18d21e3de77b495215ed2384d62658a391104f9e00df8605edb77339366df332c75691928efb","ssdeep":"1536:M+s43BGZsrolB21EJ4q+GIbdSW7VvCtQXjPM3mz1yxvjWRVIoFMe1V13836GKCnY:T1GZXlB2SUbxVv/zM3mZyxLUZGrSDfj9","tlshash":"a7c35b46b302e745fe754e3d62a69396b318f4a93b1fc30ba5857e75fc8a0a60d841cc","first_seen":"2023-04-05T18:36:18Z","last_seen":"2026-06-13T07:15:45.481293Z","times_seen":3800,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":60,"dns":1,"connect":8,"send":0,"wait":2,"receive":6,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=z199r3iqKbyb\u0026l=russian","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:04.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/shared/css/shared_global.css?v=z199r3iqKbyb\u0026l=russian HTTP/1.1\r\nHost: store.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: text/css;charset=UTF-8\r\nContent-Length: 21536\r\nETag: \"B_RwPjE-qFkA\"\r\nX-Integrity: \"sha384-y8gpXUtaM3ow0QkHxLrRn8buOQBC6AizjFl4fFc7o18uYIHd46Jx2zCoTlIPWD8i\"\r\nLast-Modified: Tue, 05 May 1970 00:49:56 GMT\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=63072000\r\nVary: Accept-Encoding\r\nCache-Control: public, must-revalidate, max-age=0\r\nExpires: Sun, 07 Jun 2026 00:00:04 GMT\r\nDate: Sun, 07 Jun 2026 00:00:04 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87958,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1819)","md5":"07f4703e313ea85900d4e13fef0b30a2","sha1":"33f5f60a33562605551852c7869d910f1a99ce34","sha256":"fe4ec6357db3c9fb83b62b6a6479409e8b585ad2b9b13713b1ab7575fa8bd73e","sha512":"030e28fb1cdaeab2462c7daf23e8401d13e0c04eced04b6dca7c7917a0e886f02acb88e73e8e54e6d6ce5b58a0df6e1a3ee3171bd41246c3fb7c9f1b96cd22cf","ssdeep":"1536:+hksHeX5Czk16lE/9E92cAFvH1XhWytAj8pAD6ILIl6TslqTtvc5ObrNDR7Oaqev:tQ+vWYZCix3wBJSTcK2JLwHAfnnCC","tlshash":"06830933a691714a772b8495fa47af5bb33f004bab0d8fb9f5a5386cd2881c41373649","first_seen":"2026-06-06T02:39:13.507982Z","last_seen":"2026-06-07T00:03:28.035905Z","times_seen":5,"resource_available":false,"data":null}},"time_used":547,"timings":{"blocked":36,"dns":1,"connect":9,"send":0,"wait":464,"receive":1,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/css/styles_about.css?v=i6LprAjCXlha\u0026l=russian","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:04.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/css/styles_about.css?v=i6LprAjCXlha\u0026l=russian HTTP/1.1\r\nHost: store.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: text/css;charset=UTF-8\r\nContent-Length: 6282\r\nETag: \"liKgivaDlNnl\"\r\nX-Integrity: \"sha384-VrEepsKFXmJASyvSW3d6HqLUsuM464FUzDkwH3Era4sfEU6U78e1LjpOIsRqjJ24\"\r\nLast-Modified: Tue, 05 May 1970 00:49:56 GMT\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=63072000\r\nVary: Accept-Encoding\r\nCache-Control: public, must-revalidate, max-age=0\r\nExpires: Sun, 07 Jun 2026 00:00:04 GMT\r\nDate: Sun, 07 Jun 2026 00:00:04 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30566,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"9622a08af68394d9e5ab48f7ed0d50f3","sha1":"05ef638553a76a492e232be2db1670dcf1937164","sha256":"ecf815f9825af5ff706fe52350c609e834bf6ee324c5c78c9de38ee6cfbc2f1c","sha512":"c0a3c6509f2792f93539959e8d9509a5359f871b960786bd12c8132f5c230d96467211889aeb3d41a46a4577f64c1816a27c21d72bf447658db110f3cac1f8ce","ssdeep":"768:0+qwWLbeFSvseLoly//mhkjYSeySSivbPU:lqwWLb+Zly/4kjYSeySSivbPU","tlshash":"d1d2424adf056109761bb046bdad63e807291487af8f5eabf586a51ca7cd2c10133fce","first_seen":"2024-12-15T12:48:28.923979Z","last_seen":"2026-06-12T01:08:17.364958Z","times_seen":130,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":29,"dns":4,"connect":2,"send":0,"wait":196,"receive":1,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/javascript/prototype-1.7.js?v=.a38iP7Khdmyy","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:04.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/javascript/prototype-1.7.js?v=.a38iP7Khdmyy HTTP/1.1\r\nHost: store.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: text/javascript;charset=UTF-8\r\nContent-Length: 42857\r\nETag: \"npJElBnrEO6W\"\r\nX-Integrity: \"sha384-YAoVVYkeHRpvvpvjRNZKi3AQxIO+hBZtpxGVOlZ4znfcRalb6uUpKX7XvCg9FgiS\"\r\nLast-Modified: Tue, 05 May 1970 00:49:56 GMT\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=63072000\r\nVary: Accept-Encoding\r\nCache-Control: public, must-revalidate, max-age=0\r\nExpires: Sun, 07 Jun 2026 00:00:05 GMT\r\nDate: Sun, 07 Jun 2026 00:00:05 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":163315,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"9e92449419eb10ee96c56d803d2baa43","sha1":"5a2be7055866b8f35bd852d466ff590251a56d89","sha256":"a655fc19da796630bcf37112ccf749898e98c99e1b25bccef0bf3573665195e5","sha512":"19d0c715d50abf41cccf0a96bf9c4673c5059d8a0a9edddc00c243ae44e403e1b3641c8e7c3e57b58746423b0679af216398648a6a1a4f50f394a9c15104fb32","ssdeep":"1536:Pe/hr8bCUSFPlpV7N+XS+st304cM9FmKZFDlYUo7pKMaV/6FzKKVA8MjjOH2X1Ix:PIr8bCBPlp0u9F6UodjaVbX1oYVpwxA8","tlshash":"99f3309c7de66035822bf13e5a9f418cf27980171408ed55b89c85a46fb0d3896fafec","first_seen":"2023-10-31T01:09:46Z","last_seen":"2026-06-13T07:15:45.526209Z","times_seen":2362,"resource_available":true,"data":null}},"time_used":1543,"timings":{"blocked":666,"dns":0,"connect":0,"send":0,"wait":708,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=Me1IBxzktiwk\u0026l=russian\u0026load=effects,controls,slider","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:04.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/javascript/scriptaculous/_combined.js?v=Me1IBxzktiwk\u0026l=russian\u0026load=effects,controls,slider HTTP/1.1\r\nHost: store.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: text/javascript;charset=UTF-8\r\nContent-Length: 24100\r\nETag: \"lz_99vci25ux\"\r\nX-Integrity: \"sha384-ypv8apRisCy5MbfVW/xJQC0n6ooV6krjmoShQQ8SJNZ3Q5Z+m92YpP2BXkzevTqz\"\r\nLast-Modified: Tue, 05 May 1970 00:49:56 GMT\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=63072000\r\nVary: Accept-Encoding\r\nCache-Control: public, must-revalidate, max-age=0\r\nExpires: Sun, 07 Jun 2026 00:00:05 GMT\r\nDate: Sun, 07 Jun 2026 00:00:05 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87011,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"HTML document, ASCII text","md5":"973ffdf6f722db9bb1e350b4c673f365","sha1":"a6c7d4331056cd37569fac3ee5f4b4e0e09b38cb","sha256":"658b209483f3b09ceabfab105ce9f15078138d646ca0e9abee2033606c852b19","sha512":"28ec015dd5dd389a56008983d64c69fbedf4c091e4478c8cf25c34db310516bc8cd1e0804fb554e26dfffe9b724b24b91df8ee1a5ed68153bc6bead655de0311","ssdeep":"1536:Ek3m7kQD+mlspqh2NrFIei4f9wiIVWaLcrZmKw1wF/IS58H1nRtW460kfR+U:zr4gO4f9wiJucrZE1xUJ5P","tlshash":"8183850d37ab262580dbb06a5f5f454db238411b1806dc58b8ad83d48fa9f3861f7fb9","first_seen":"2024-12-13T15:16:33.754695Z","last_seen":"2026-06-12T02:11:36.072316Z","times_seen":1632,"resource_available":true,"data":null}},"time_used":865,"timings":{"blocked":701,"dns":0,"connect":0,"send":0,"wait":163,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:04.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1\r\nHost: store.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nContent-Length: 1846\r\nLast-Modified: Wed, 28 Jun 2023 04:07:12 GMT\r\nETag: \"649bb1f0-736\"\r\nStrict-Transport-Security: max-age=63072000\r\nAccept-Ranges: bytes\r\nDate: Sun, 07 Jun 2026 00:00:06 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1846,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced","md5":"574c350c7b23ae794d5276f8580e0838","sha1":"235c7b35c3468f8915eca01f7abdb43d34079609","sha256":"8b97ba0dac22fe6704c1f6d95fe79613f33017804f256abb9006df0442491787","sha512":"f1f2d7b6fa49e9241f2b88560127eb2871f66123c2f9de45b257750cf13e6ebb32a9d85d87aada6a99838a2f3c5412540065cbab398760a50f15aae3a759f9f7","ssdeep":"","tlshash":"7631d905eba0794086999ae271fb943bd9564095c7e07585b0cfdd294e704ac086d8cb","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-06-12T05:31:51.075505Z","times_seen":6413,"resource_available":false,"data":null}},"time_used":1527,"timings":{"blocked":1522,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:04.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/shared/images/responsive/header_logo.png HTTP/1.1\r\nHost: store.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nContent-Length: 10863\r\nLast-Modified: Fri, 05 Jan 2018 22:31:56 GMT\r\nETag: \"5a4ffcdc-2a6f\"\r\nStrict-Transport-Security: max-age=300\r\nAccept-Ranges: bytes\r\nDate: Sun, 07 Jun 2026 00:00:06 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10863,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced","md5":"a4e79c73ee13cb25b60fc4b0ba1f690c","sha1":"b690c31b2eb1b0eb085e91aaae7e79f03debe7c1","sha256":"6cb869df089146c12efb5e9c968e911c314842624ba6f052a11346ac734cadc8","sha512":"aad423119f410a655f0aa475d2fe692087d7262c3986ce71347981c5b60f6a10031d7050bf9b9aee4e7d84d814f0b8883c964028fcbe14ed3464602f3ba6cec3","ssdeep":"192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM","tlshash":"4722c06cfcc0c875958352ba3e27fb7043f93e10c44b86b86960e5a5365c8f4959d137","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-06-13T07:15:45.474709Z","times_seen":7209,"resource_available":false,"data":null}},"time_used":1526,"timings":{"blocked":1520,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.steampowered.com/dynamicstore/saledata/?cc=BY","fqdn":"store.steampowered.com","domain":"steampowered.com","tld":"com"},"ip":{"addr":"2.18.173.205","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:06.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.steampowered.com","organization":"Valve Corp"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 15 Aug 2025 00:00:00 GMT","end":"Mon, 17 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3B:1F:97:4C:57:53:85:A1:42:88:40:A2:1D:AF:27:40:33:E2:7B:08","sha256":"A9:B7:9D:E9:47:02:F1:AC:FC:2A:C1:89:46:F8:86:23:A0:AF:A5:E2:44:1E:3C:43:B1:EB:89:5E:64:E3:10:86"}}},"request":{"raw":"GET /dynamicstore/saledata/?cc=BY HTTP/1.1\r\nHost: store.steampowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://startgift.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/json; charset=utf-8\r\nX-Frame-Options: DENY\r\nCache-Control: public,max-age=300\r\nExpires: Sun, 07 Jun 2026 00:05:06 GMT\r\nLast-Modified: Sun, 07 Jun 2026 00:00:00 GMT\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding, Origin, Accept-Encoding\r\nStrict-Transport-Security: max-age=63072000\r\nContent-Length: 49\r\nDate: Sun, 07 Jun 2026 00:00:06 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7d8e35afa8792b923f4e6c5906e7c4b5","sha1":"32168fbcd8a98b424f566046d3680648b49ac633","sha256":"d5c8f5fb29ca010ec4c6e11774d17b0cc27b21304811521e29141f581c061e87","sha512":"6c77e16cc85801e0d6732876b7a1b59f48cd19fe5ffbcf081c6ec96d496be48421a92a4c0258aed151b922515b48553069b7188107b62ad0ab80b421b8d7cbb3","ssdeep":"","tlshash":"258000328c2a23b08008822c0f303a38c3a0022230a2080a280c200002282002a03203","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-06-13T02:35:13.112149Z","times_seen":2399,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":56,"dns":11,"connect":1,"send":0,"wait":170,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Light.ttf?v=4.015","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:06.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/shared/fonts/MotivaSans-Light.ttf?v=4.015 HTTP/1.1\r\nHost: store.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://startgift.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://store.akamai.steamstatic.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/octet-stream\r\nContent-Length: 122660\r\nLast-Modified: Tue, 28 Jul 2020 23:16:24 GMT\r\nETag: \"5f20b1c8-1df24\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nDate: Sun, 07 Jun 2026 00:00:06 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":122660,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansLight4.015;Plau;MotivaSans-","md5":"d45f521dba72b19a4096691a165b1990","sha1":"2a08728fbb9229acccbf907efdf4091f9b9a232f","sha256":"6b7a3177485c193a2e80be6269b6b12880e695a8b4349f49fccf87f9205badcc","sha512":"9262847972a50f0cf8fc4225c6e9a72dbf2c55ccbcc2a098b7f1a5bd9ea87502f3c495a0431373a3c20961439d2dae4af1b1da5b9fade670d7fcaed486831d8c","ssdeep":"3072:XnN/O/ceJkGwg/MOAibD2hPfX4HYhDhudcvObkSafj9:9/O/ceJkGwg/MOAib6nX44NhIWOb8fh","tlshash":"70c32a46f712eb4adc554e3d6162a3d5b348f9f53b2f830ba2856e55fc8f0c90e46288","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-06-13T02:35:13.084751Z","times_seen":3876,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":55,"dns":8,"connect":2,"send":0,"wait":5,"receive":4,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/javascript/main.js?v=wZOkh5CBgIrx\u0026l=russian","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:04.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/javascript/main.js?v=wZOkh5CBgIrx\u0026l=russian HTTP/1.1\r\nHost: store.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: text/javascript;charset=UTF-8\r\nContent-Length: 24041\r\nETag: \"8B8ffVe7eka_\"\r\nX-Integrity: \"sha384-FzTFO85Jq8CjtJmUpWdMBVJtCJ4VLJMHeASQKXgN3xfhuX6NB5+zmAoOP2dSQIDM\"\r\nLast-Modified: Tue, 05 May 1970 00:49:56 GMT\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=63072000\r\nVary: Accept-Encoding\r\nCache-Control: public, must-revalidate, max-age=0\r\nExpires: Sun, 07 Jun 2026 00:00:05 GMT\r\nDate: Sun, 07 Jun 2026 00:00:05 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91156,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (536)","md5":"f01f1f7d57bb7a46bfe6525bb4a6b7c3","sha1":"eb3df99dfe324ee3ab0082e70a6d286d79b80565","sha256":"59190111b494ea1284ccd9b1054b507e071d81646a495365183b32f52a86961a","sha512":"4323ae2b8558f328748b013513f304e170f6939b61bde67bd1547911f77fbde2fec1f900f4b5c00b0659c127802f06f905c6df0d21045d7bf1f4f8d8c70c4335","ssdeep":"1536:UqB6CK7hnWxGfF0iRdQ6DUf9zESSw4ZRxwKOLWxLm46m8PeW3bKif7ydQHxvrVrz:bBuVnWW1i/NVr1","tlshash":"5793f9d4f79d01399479203ced2f948d3a7e4871b900a8627d5e8a9874d092f43baf7e","first_seen":"2026-06-06T02:39:13.503774Z","last_seen":"2026-06-12T01:08:17.365477Z","times_seen":5,"resource_available":true,"data":null}},"time_used":735,"timings":{"blocked":547,"dns":0,"connect":0,"send":0,"wait":187,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:06.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/shared/fonts/MotivaSans-Regular.ttf?v=4.015 HTTP/1.1\r\nHost: store.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://startgift.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://store.akamai.steamstatic.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/octet-stream\r\nContent-Length: 122684\r\nLast-Modified: Tue, 28 Jul 2020 23:16:24 GMT\r\nETag: \"5f20b1c8-1df3c\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nDate: Sun, 07 Jun 2026 00:00:06 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":122684,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 22 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansRegular4.015;Plau;MotivaSan","md5":"57613e143ff3dae10f282e84a066de28","sha1":"88756cc8c6db645b5f20aa17b14feefb4411c25f","sha256":"19b8db163bcc51732457efa40911b4a422f297ff3cd566467d87eab93cef0c14","sha512":"94f045e71b9276944609ca69fc4b8704e4447f9b0fc2b80789cc012235895c50ef9ecb781a3ed901a0c989bed26caa37d4d4a9baffcce2cb19606dbb16a17176","ssdeep":"3072:lpsQ7l3T64Z1lKcDqttEPBWVNwZ+e222pKKSxfj9:Yg3T64Z19DqtkWbu/222kZfh","tlshash":"82c34b06f316e70aec614e3c66769399b358f8a53f2fcb0b95857d60bcad0d51e8128c","first_seen":"2023-04-05T04:16:14Z","last_seen":"2026-06-13T07:15:45.48432Z","times_seen":6979,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":64,"dns":5,"connect":1,"send":0,"wait":5,"receive":5,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:06.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/shared/fonts/MotivaSans-Medium.ttf?v=4.015 HTTP/1.1\r\nHost: store.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://startgift.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://store.akamai.steamstatic.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/octet-stream\r\nContent-Length: 124048\r\nLast-Modified: Tue, 28 Jul 2020 23:16:24 GMT\r\nETag: \"5f20b1c8-1e490\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nDate: Sun, 07 Jun 2026 00:00:06 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124048,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansMedium4.015;Plau;MotivaSans","md5":"2d64caa5ecbf5e42cbb766ca4d85e90e","sha1":"147420abceb4a7fd7e486dddcfe68cda7ebb3a18","sha256":"045b433f94502cfa873a39e72d616c73ec1b4c567b7ee0f847f442651683791f","sha512":"c96556ec57dac504919e806c7df536c4f86892b8525739289b2f2dbbf475de883a4824069dbdd4bb1770dd484f321563a00892e6c79d48818a4b95406bf1af96","ssdeep":"1536:v4Kkq/szjKJRIDCnR96guXgECINo28BZZDhpkemOXaxq4jKea8GyFLaE0Af0ffL9:vf/fxn7ElXxE0wS0fj9","tlshash":"86c35c06f706d709dd240e3df9a1a3a9b358f8a57b1fcb0fa6856d65fc8e0852a441cc","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-06-13T07:15:45.537578Z","times_seen":6750,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":57,"dns":9,"connect":1,"send":0,"wait":5,"receive":6,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"startgift.click/701f7e5179080245535252635f4a0a16","fqdn":"startgift.click","domain":"startgift.click","tld":"click"},"ip":{"addr":"104.21.86.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:10.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"startgift.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 15:28:29 GMT","end":"Mon, 10 Aug 2026 16:28:16 GMT"},"fingerprint":{"sha1":"59:B1:53:05:0E:BC:E8:71:1F:87:94:0B:6C:23:EC:55:0E:FB:C5:1A","sha256":"28:94:DF:14:21:A7:0E:0A:DF:0F:A3:1E:93:62:AF:F8:C7:76:87:50:09:28:FA:2B:68:75:80:EB:71:E7:4D:C6"}}},"request":{"raw":"POST /701f7e5179080245535252635f4a0a16 HTTP/1.1\r\nHost: startgift.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://startgift.click\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.daGIT24sZgbwO2ai0L-s5sThs_WDImtw.AR8v-eyAPK8RGa4Z.qLCo33hgCipe2S8xbG4EfRMwvQ64FZTCmNL7durfBpUpGgtjbiIjd-MfaPGyvmLdiHPHMyp1hCkN4pAMgMaajA5yDk4G4RBq2-WYD6kZX2pDhffjNup2en9LG7uow_TwQBaqRPs9xF1B332pCaLGsgdzwj0_lyMClx0TzCkFmBhJEPlfh_nGmj3uKz7zFBrnbdMe7f6FsGTX-4qr5eOvpobNGwndKkkCPE2UUdHPlHi7MnkYaL39cuL9fl8p1MVR5teJGyX_Uej2Rw.CxtWKXvtO49fUfWevMiGlg; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTQwNCwic2VjcmV0IjoiNGYwMDQ5YTUyNTc1NjljYjAxOTg5MWJjZjUxMjA2MTQiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.KiFZPCg4E2m_D7l6gOuQlbclZS31rZjZdKKsKj_KW1o; timezoneOffset=0,0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 201 Created\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:00:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"10-oV4hJxRVSENxc/wX8+mA4/Pe4tA\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FHBO6TpeWWBcfjThwXZ0ZGq8%2FYaiPRrktOB685ezbYUpsLwnlQJJZxlQHHSTlDsELwZYo5qlYM2e2KLB1TPSfWVfUPVzzu2hbvuCCB9UDDVSKZFYrT2RNYzGtFyDfjeTrV4%3D\"}]}\r\ncontent-length: 16\r\ncf-ray: a07b5fff9fbf120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-06-13T09:45:41.087177Z","times_seen":157490,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"startgift.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"startgift.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"startgift.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-07","alert":"Phishing Block","trigger":"startgift.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"startgift.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"startgift.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"startgift.click/701f7e517908025c5c51524d.js","fqdn":"startgift.click","domain":"startgift.click","tld":"click"},"ip":{"addr":"104.21.86.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:04.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"startgift.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 15:28:29 GMT","end":"Mon, 10 Aug 2026 16:28:16 GMT"},"fingerprint":{"sha1":"59:B1:53:05:0E:BC:E8:71:1F:87:94:0B:6C:23:EC:55:0E:FB:C5:1A","sha256":"28:94:DF:14:21:A7:0E:0A:DF:0F:A3:1E:93:62:AF:F8:C7:76:87:50:09:28:FA:2B:68:75:80:EB:71:E7:4D:C6"}}},"request":{"raw":"GET /701f7e517908025c5c51524d.js HTTP/1.1\r\nHost: startgift.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.daGIT24sZgbwO2ai0L-s5sThs_WDImtw.AR8v-eyAPK8RGa4Z.qLCo33hgCipe2S8xbG4EfRMwvQ64FZTCmNL7durfBpUpGgtjbiIjd-MfaPGyvmLdiHPHMyp1hCkN4pAMgMaajA5yDk4G4RBq2-WYD6kZX2pDhffjNup2en9LG7uow_TwQBaqRPs9xF1B332pCaLGsgdzwj0_lyMClx0TzCkFmBhJEPlfh_nGmj3uKz7zFBrnbdMe7f6FsGTX-4qr5eOvpobNGwndKkkCPE2UUdHPlHi7MnkYaL39cuL9fl8p1MVR5teJGyX_Uej2Rw.CxtWKXvtO49fUfWevMiGlg; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MTQwNCwic2VjcmV0IjoiNGYwMDQ5YTUyNTc1NjljYjAxOTg5MWJjZjUxMjA2MTQiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.KiFZPCg4E2m_D7l6gOuQlbclZS31rZjZdKKsKj_KW1o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 07 Jun 2026 00:00:04 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-disposition: inline\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nlast-modified: Sat, 09 May 2026 11:51:25 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g8Xn8HnVnBHJhklxwsY3jcFhRnaCKO80WFiqoTDIqxCNq7H6%2FH34Qh1TFT%2Ff0WBWNTzpdt1yk91H5LTjnkHlNfY2jqEfQVohmAzSNmtlGEHIaVniB5EtxFJHdXZ4YJ5pTVs%3D\"}]}\r\ncf-ray: a07b5fdb9ae1120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":260430,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3595b5e7a3442b4581540f9e3b603beb","sha1":"e0d904b8fd9ef69d60106c82188642ea8bde99bc","sha256":"bd4843cccb4bdc4f1a8939b453fe4d7f0aca7a660eeb2c41102160a15c53aede","sha512":"a9c64bd7f710542219bb741add5f93393cc14b8605880d71bf87c6921afa5c568a49eda298e73e58fe4dea24c879b36f94f1fb7a78147d1f9925708b4d3cbfcf","ssdeep":"3072:BmDr5RbmIwmyYH9JxNbqD5DNSbqYv2Voj2JBnNqvuJVEClo2bvOSZ:aVtwmyYH9JxQDdNSbq7Vojwzxok","tlshash":"2844a54067c0a85c234b8f7a731bb1e5f16e0daf3988498be105fc60a5e6217f9f9931","first_seen":"2026-05-22T02:56:22.021908Z","last_seen":"2026-06-12T02:11:36.071252Z","times_seen":36,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"startgift.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"startgift.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"startgift.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"startgift.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"startgift.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-07","alert":"Phishing Block","trigger":"startgift.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"store.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016","fqdn":"store.cloudflare.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.87","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:04.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflare.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 12:34:34 GMT","end":"Mon, 27 Jul 2026 12:34:33 GMT"},"fingerprint":{"sha1":"86:90:F9:A6:06:CC:49:42:66:07:1C:23:99:F4:25:FC:AD:99:4E:DB","sha256":"FF:42:FC:CD:04:A3:7D:7E:69:61:34:B6:F5:C8:E4:CA:03:D3:73:8E:70:6C:93:76:2A:33:E6:CB:78:B5:07:31"}}},"request":{"raw":"GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1\r\nHost: store.cloudflare.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: nginx\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://store.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016\r\ndate: Sun, 07 Jun 2026 00:00:04 GMT\r\nakamai-grn: 0.5886d517.1780790404.21c3eae\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3646,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T09:48:57.028044Z","times_seen":16383237,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:04.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1\r\nHost: store.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nContent-Length: 3777\r\nLast-Modified: Fri, 05 Jan 2018 22:31:56 GMT\r\nETag: \"5a4ffcdc-ec1\"\r\nStrict-Transport-Security: max-age=300\r\nAccept-Ranges: bytes\r\nDate: Sun, 07 Jun 2026 00:00:06 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3777,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced","md5":"eabc76eb57feae44add7faead028521e","sha1":"4e3e53938fad15661d2d046a868338841a95db19","sha256":"fc9e6260a2706ae146282d77e67bc1b74688435f8912ab4c1932641eec28bffa","sha512":"5c6da6eeefddf321c2bc7e39a134e0a3140a9f93ad1560b2e102ef60ec218c29aae14ed344c79e25cc5493cd15551040d8c909de28dcab02034d787563104e07","ssdeep":"","tlshash":"eb717ce7323e5456e1f056c6015b52f69eb1a1080d2b4e09f224b77831ac63be38333d","first_seen":"2023-04-05T21:31:08Z","last_seen":"2026-06-13T07:15:45.487687Z","times_seen":7234,"resource_available":false,"data":null}},"time_used":1526,"timings":{"blocked":1521,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cloudflare.steamstatic.com/store/about/icon-chromeos.svg","fqdn":"cdn.cloudflare.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.91","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:04.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflare.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 12:34:34 GMT","end":"Mon, 27 Jul 2026 12:34:33 GMT"},"fingerprint":{"sha1":"86:90:F9:A6:06:CC:49:42:66:07:1C:23:99:F4:25:FC:AD:99:4E:DB","sha256":"FF:42:FC:CD:04:A3:7D:7E:69:61:34:B6:F5:C8:E4:CA:03:D3:73:8E:70:6C:93:76:2A:33:E6:CB:78:B5:07:31"}}},"request":{"raw":"GET /store/about/icon-chromeos.svg HTTP/1.1\r\nHost: cdn.cloudflare.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/svg+xml\r\ncontent-length: 922\r\nlast-modified: Thu, 14 Nov 2024 00:19:00 GMT\r\netag: \"673541f4-39a\"\r\naccept-ranges: bytes\r\ndate: Sun, 07 Jun 2026 00:00:04 GMT\r\nakamai-grn: 0.4286d517.1780790404.7feb4459\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":922,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a206062481949321a8191bcefc62c1cd","sha1":"afe5a283be63c9bd124af1bb9d88a3328759cbe3","sha256":"f4e1aa6e2128b6ea4609d99e768454da845a41a838da677a9fa4b4410d296cbf","sha512":"0164284532add07c9c08d3ea57b6335c1c25da9cd421ca2b4edec5ef3633d58349cfbd9a0c4f6997e6a2cda5ef2b3f04f88c670d428ac81c6a8297b65c3eba30","ssdeep":"","tlshash":"1f1140a842fa0832890a87100ffc69c6797081c3e36440e8bcae16b0df15cc548236c9","first_seen":"2024-12-23T12:54:34.454026Z","last_seen":"2026-06-12T01:08:17.35253Z","times_seen":647,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.steamstatic.com/public/images/gift/steamcards_cards_02.png","fqdn":"store.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:04.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.steamstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 07:37:49 GMT","end":"Fri, 24 Jul 2026 07:37:48 GMT"},"fingerprint":{"sha1":"4F:2F:75:65:7A:BA:DE:1E:13:67:11:A9:CD:40:5F:98:7E:1F:96:5F","sha256":"B2:93:8F:20:C3:4B:73:01:56:17:1C:16:4B:90:73:F0:EA:89:16:B0:19:E7:45:CD:90:FC:A9:60:B7:AA:92:44"}}},"request":{"raw":"GET /public/images/gift/steamcards_cards_02.png HTTP/1.1\r\nHost: store.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:18 GMT\r\netag: \"649bb1f6-79bc3\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 46977\r\ndate: Sun, 07 Jun 2026 00:00:04 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1780790405.812155,VS0,VE1\r\ncontent-length: 498627\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":498627,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 558 x 575, 8-bit/color RGBA, non-interlaced","md5":"e289838f7a141a36e9751fd49200cba6","sha1":"51773b7c2ee543281e49f3c9ee33a21586234b2f","sha256":"1b742f628cbe7bf577c82994d01f4a25312c3ba38e01232197f8b282fc48c833","sha512":"bbd532ec7190a24a46375b55d7eb48bb3524c4d8952a0217fd01e03a703f752e58fe4cc00ddc44a14659abbafc301ff601b882da6a1449d5c8ce997819aeb7a6","ssdeep":"12288:pYLTp9P8g78m06YGq0Ttgx4hpSN+iAOH4OgXpQGmjjs0qwk:pY3j82RDbS6hpS4i3Halajshwk","tlshash":"ffb4235c65e30e5ce6fde98af67214b2d4a58305ab7780e497f62901c01bebf05bce48","first_seen":"2023-05-08T13:30:38Z","last_seen":"2026-06-12T01:08:17.376459Z","times_seen":665,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":48,"dns":18,"connect":15,"send":0,"wait":14,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/css/v6/store.css?v=PXV1ojhYIGrP\u0026l=russian","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:04.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/css/v6/store.css?v=PXV1ojhYIGrP\u0026l=russian HTTP/1.1\r\nHost: store.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: text/css;charset=UTF-8\r\nContent-Length: 31065\r\nETag: \"yMKjnh9kCiOn\"\r\nX-Integrity: \"sha384-eaMczF5y180CBY/ofhyC00ZQJL/ec+MM/6aIuBY/NLsMUm07Ltk6cNVVuMZZRPef\"\r\nLast-Modified: Tue, 05 May 1970 00:49:56 GMT\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=63072000\r\nVary: Accept-Encoding\r\nCache-Control: public, must-revalidate, max-age=0\r\nExpires: Sun, 07 Jun 2026 00:00:04 GMT\r\nDate: Sun, 07 Jun 2026 00:00:04 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":132734,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (391)","md5":"c8c2a39e1f640a23a7bd3a0cf6caad64","sha1":"9b2c91878f9b6edcee0eddcdad6b43450a25994e","sha256":"e28bbbe6dea333157415e343df6aa57ae20d70025a52c1c96ae340a22d070612","sha512":"cfe4fa979a7ea3f0bdad7f4c4bf4e147b1e54eeb64745c3420273c3821ba22761b24ccc9ebc08a204412cd5d0e765f914f63b5f122e1a13367567ca334259579","ssdeep":"3072:XGA2u5+OzBzROQAD+glu2vVWF18tytxtizqWyEbilRCZC6SeSH3ki/0Gzbhkja1/:XGA2uAOzBzROQAD+Wu2vVWH8tyt3izqF","tlshash":"53d3b7226b516445ba1ba0d8ff98eb45572f4087eb0e4e9ab4f5746cd3c81c81273f8e","first_seen":"2026-04-23T02:56:15.850548Z","last_seen":"2026-06-07T00:03:28.048115Z","times_seen":28,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":31,"dns":4,"connect":2,"send":0,"wait":465,"receive":1,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:04.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU HTTP/1.1\r\nHost: store.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: text/javascript;charset=UTF-8\r\nContent-Length: 36578\r\nETag: \"NXam5zydzNu8\"\r\nX-Integrity: \"sha384-lifoBlbdwizTl3Yoe612uhI3AcOam/QtWkozF7SuiACaf5UJl5reOYu4MigVxrCH\"\r\nLast-Modified: Tue, 05 May 1970 00:49:56 GMT\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=63072000\r\nVary: Accept-Encoding\r\nCache-Control: public, must-revalidate, max-age=0\r\nExpires: Sun, 07 Jun 2026 00:00:05 GMT\r\nDate: Sun, 07 Jun 2026 00:00:05 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93636,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65483)","md5":"3576a6e73c9dccdbbc4a2cf8ff544ad7","sha1":"06e872300088b9ba8a08427d28ed0efcdf9c6ff5","sha256":"61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf","sha512":"27d41f6cfb8596a183d8261509aeb39fcffb3c48199c6a4ce6ab45381660c2e8e30e71b9c39163c78e98ceabc887f391b2d723ee5b92b6fbc81e48ac422e522b","ssdeep":"1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:O+vIklosn/BLXjxzMhsSQ","tlshash":"b393f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","first_seen":"2023-03-07T01:02:53Z","last_seen":"2026-06-13T09:34:04.088115Z","times_seen":35523,"resource_available":true,"data":null}},"time_used":558,"timings":{"blocked":375,"dns":0,"connect":0,"send":0,"wait":182,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=cxQV9f417bc5\u0026l=russian","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:04.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/shared/javascript/shared_responsive_adapter.js?v=cxQV9f417bc5\u0026l=russian HTTP/1.1\r\nHost: store.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: text/javascript;charset=UTF-8\r\nContent-Length: 6999\r\nETag: \"Fa3ewomolAjK\"\r\nX-Integrity: \"sha384-WbygzTv/2xtMfoFH9elZtPQtUzV5SLCzvZbRhd4TTufxgLmPfNrPsaCESXRsV59o\"\r\nLast-Modified: Tue, 05 May 1970 00:49:56 GMT\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=63072000\r\nVary: Accept-Encoding\r\nCache-Control: public, must-revalidate, max-age=0\r\nExpires: Sun, 07 Jun 2026 00:00:05 GMT\r\nDate: Sun, 07 Jun 2026 00:00:05 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23695,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"15addec289a89408ca46b9b15797149e","sha1":"7004276fab8e3c4ae33f1c8919d102eed1084955","sha256":"5edcb9726fdc97f8a01d5948f7eccfb279a51de6c0e610e38d2225434b0f34b4","sha512":"e7021e8f334cb7816ecd258ff9a72ca76db8214abb96b208b58397c193a602049f07073173930e37bbed09b4c05d314a8d6318f3df0e33b55d12e10c96a766b3","ssdeep":"384:0GUcz6olWst4anMMY5erCGgxEQx/kjHBc2gdXf7h6oq:0G7z7Wst4wYkuBEosjHCNZ7A","tlshash":"f7b2b5a9f75e12768179331c6e5b348e32bd84f8710aac827d60255c3aca54e43e6f4f","first_seen":"2026-05-14T04:43:00.991826Z","last_seen":"2026-06-12T01:08:17.351528Z","times_seen":16,"resource_available":true,"data":null}},"time_used":1375,"timings":{"blocked":864,"dns":0,"connect":0,"send":0,"wait":511,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cloudflare.steamstatic.com/store/about/icon-steamos.svg","fqdn":"cdn.cloudflare.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.91","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:04.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflare.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 12:34:34 GMT","end":"Mon, 27 Jul 2026 12:34:33 GMT"},"fingerprint":{"sha1":"86:90:F9:A6:06:CC:49:42:66:07:1C:23:99:F4:25:FC:AD:99:4E:DB","sha256":"FF:42:FC:CD:04:A3:7D:7E:69:61:34:B6:F5:C8:E4:CA:03:D3:73:8E:70:6C:93:76:2A:33:E6:CB:78:B5:07:31"}}},"request":{"raw":"GET /store/about/icon-steamos.svg HTTP/1.1\r\nHost: cdn.cloudflare.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/svg+xml\r\ncontent-length: 1223\r\nlast-modified: Thu, 14 Nov 2024 00:19:00 GMT\r\netag: \"673541f4-4c7\"\r\naccept-ranges: bytes\r\ndate: Sun, 07 Jun 2026 00:00:04 GMT\r\nakamai-grn: 0.4286d517.1780790404.7feb4458\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1223,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f40a10b31b66814a8310af480adcf798","sha1":"966e6c5b4f9c1eb8dc6c2554491e0dc574c70687","sha256":"461851729579abba20d60c33530d3d03ab7b2ea28d532af6df09a91e15ff52cf","sha512":"392a3eae035a9c5bcba13fe216ae0559872063b41bbc96362c2dc767a2cd7c839bf8abf097553ab3decd20ba8b49fb2473ed544d0b613350bab3b4a5150f7326","ssdeep":"","tlshash":"80210fbf030adedeb5984718ad6c0581b264ec87b17470d4b3632827e94c8e29d8c3a6","first_seen":"2024-12-30T01:14:22.852186Z","last_seen":"2026-06-12T01:08:17.36056Z","times_seen":646,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/css/slick/slick.css?v=ZSVHTEnT3WNW\u0026l=russian","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:04.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/css/slick/slick.css?v=ZSVHTEnT3WNW\u0026l=russian HTTP/1.1\r\nHost: store.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: text/css;charset=UTF-8\r\nContent-Length: 594\r\nETag: \"uqiGdl10uMJZ\"\r\nX-Integrity: \"sha384-r2s/exMbJhA9azjy5zpNyjK0NrIbLCgbdH4OqRFHdi3+iOxt/48h3T22CHRln6Ix\"\r\nLast-Modified: Tue, 05 May 1970 00:49:56 GMT\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=63072000\r\nVary: Accept-Encoding\r\nCache-Control: public, must-revalidate, max-age=0\r\nExpires: Sun, 07 Jun 2026 00:00:04 GMT\r\nDate: Sun, 07 Jun 2026 00:00:04 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1724,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"baa886765d74b8c259e6519baead32bd","sha1":"be439b85f12aa93d268e41622abbf3cbe57c22b7","sha256":"56aa5c51f7c443f6655da210f0264c48772661d4527a873608324585483a7075","sha512":"8a97b4015868504e5133a58d0717793eba01c30211ea5fa873f874199bb5dbbb1b9ccf49f0e1b29ac5276f81b496ef2af5369aac5dca21a271a9e8ce1be650ba","ssdeep":"","tlshash":"1d31285845b389464516818c5fd7ca6d2ffff0130c28a198bacd53068fce7e8a9c16b3","first_seen":"2025-01-17T01:51:16.289543Z","last_seen":"2026-06-12T01:08:17.351001Z","times_seen":513,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":202,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/shared/css/shared_responsive.css?v=cuGNP1dzetug\u0026l=russian","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:04.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/shared/css/shared_responsive.css?v=cuGNP1dzetug\u0026l=russian HTTP/1.1\r\nHost: store.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: text/css;charset=UTF-8\r\nContent-Length: 7021\r\nETag: \"MJC5p3LQkuXQ\"\r\nX-Integrity: \"sha384-LL5QQGHe/GA/+YM/3bhmghR+3N+6Zfwjz9cj9D/ePqMPZ8tJF+MBwELd7LpWy2li\"\r\nLast-Modified: Tue, 05 May 1970 00:49:56 GMT\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=63072000\r\nVary: Accept-Encoding\r\nCache-Control: public, must-revalidate, max-age=0\r\nExpires: Sun, 07 Jun 2026 00:00:05 GMT\r\nDate: Sun, 07 Jun 2026 00:00:05 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20767,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1673)","md5":"3090b9a772d092e5d068898d94fb2e35","sha1":"9b3609b54805d58aff10ef5d74f5a76741c0f5d1","sha256":"4098d2baab6a73b117c04d50bfd5575e55e291ff73da5e5915365b1dcfecd2b5","sha512":"047655c2a6d1b0d8a05e35b25730a2fca2a5b3750e918b1986be53ccd4f5ee3ecd218d24d48f8fd707bcd6f581b75529330ba9d66f8409bd9635fe077bad9486","ssdeep":"384:hl5qYb2mQXrNYgCYezhmVJzeQj/H0+pKgojylO60:j5qFmQX5XCczeQjv0+tOb","tlshash":"919285176e206102b30e7359fe569f25272f81597f0d8e6ab7b9316862c539d00a3bcf","first_seen":"2026-06-04T04:15:08.570096Z","last_seen":"2026-06-12T01:08:17.367828Z","times_seen":11,"resource_available":false,"data":null}},"time_used":940,"timings":{"blocked":217,"dns":0,"connect":0,"send":0,"wait":721,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=G8Emg1Eyd6ZZ\u0026l=russian","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:04.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/shared/javascript/shared_global.js?v=G8Emg1Eyd6ZZ\u0026l=russian HTTP/1.1\r\nHost: store.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: text/javascript;charset=UTF-8\r\nContent-Length: 44760\r\nETag: \"7WwV9gcvFBZL\"\r\nX-Integrity: \"sha384-H9T5hAHQCPxea6WZrd/TZF+Ux/62juh6/AyvhaaIvthU8EWnRI4bF+HivfKobv7i\"\r\nLast-Modified: Tue, 05 May 1970 00:49:56 GMT\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=63072000\r\nVary: Accept-Encoding\r\nCache-Control: public, must-revalidate, max-age=0\r\nExpires: Sun, 07 Jun 2026 00:00:05 GMT\r\nDate: Sun, 07 Jun 2026 00:00:05 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":157847,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4310)","md5":"ed6c15f6072f14164b4a3cef39592022","sha1":"52d9b857bc11424ef5b23461cc525f88bce62e11","sha256":"723989615bf120e2379b891691497dfe5d57bdf51a0ea53276b9608c6e9d3a7f","sha512":"c15c2bb0302a577d49d0d94cc32fc38a8a8d7f2c65deba48c0f7438b97a0a86fb6cf0257d18c641bb3497ff7eed30cb3e5303ccec4a53346d2dbb670fe1f66ab","ssdeep":"1536:0v99zRdDp2hNJRNhjmciMQzovXmDecTVbiqD3YHI1Sp6D3QgQDrMTAQam8XkwCMb:3/5jmciZov2DeclP7YHNgOVXRt","tlshash":"def318d5eb7c112a897a302edd2f544d367e1832b00469297c5e94d86ae0c6e43bbf7c","first_seen":"2026-06-06T02:39:13.492207Z","last_seen":"2026-06-12T01:08:17.361516Z","times_seen":5,"resource_available":true,"data":null}},"time_used":1517,"timings":{"blocked":468,"dns":0,"connect":0,"send":0,"wait":884,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamcdn-a.akamaihd.net/steamcommunity/public/images/items/927890/231ba60d281e3c0b01a5064234dbd290b7afb1fd.jpg","fqdn":"steamcdn-a.akamaihd.net","domain":"steamcdn-a.akamaihd.net","tld":"akamaihd.net"},"ip":{"addr":"95.101.11.113","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:06.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:B2:9F:CE:36:F7:1B:99:CD:BB:71:38:B2:10:7D:02:2D:47:8A:F9","sha256":"79:2C:E7:17:B6:65:CA:8A:0A:ED:F9:F7:A3:BA:68:BD:15:B7:BF:81:DA:35:4E:2C:7D:C4:86:9B:F9:F2:2E:62"}}},"request":{"raw":"GET /steamcommunity/public/images/items/927890/231ba60d281e3c0b01a5064234dbd290b7afb1fd.jpg HTTP/1.1\r\nHost: steamcdn-a.akamaihd.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncontent-length: 352943\r\nlast-modified: Thu, 03 Jan 2019 14:31:22 GMT\r\netag: \"5c2e1cba-562af\"\r\naccept-ranges: bytes\r\ncache-control: public, max-age=315087212\r\nexpires: Sat, 31 May 2036 20:13:38 GMT\r\ndate: Sun, 07 Jun 2026 00:00:06 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":352943,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1920x1200, components 3","md5":"fb41bfd5b7c8e9f06f4562e93da726a5","sha1":"231ba60d281e3c0b01a5064234dbd290b7afb1fd","sha256":"c78e94818d811b4eb7a6cdc80280e2387c256c688241a6a2162fc402b2d0fc4e","sha512":"b0a791ac471309564cbd8eab57edf8c79285665f405ffea5d04c715bc78cda7ec5def4b4bbb664d1999208d80bde4583a3f7dace2faee02beedab5b6a0407c5f","ssdeep":"6144:aJVrVjiEo/y7nWpKQuQnboX609qO7rsTA6wrRA7RcPhBw1scru665nXlo03z7:orVjiFAikNK0zsRuDw1sE85Xlo03z7","tlshash":"71742245d6636790544c4fcf39138e8005e4afd32016efe105b5f76eaa47e1a8a6f83e","first_seen":"2025-09-19T07:37:48.416377Z","last_seen":"2026-06-07T00:03:28.0214Z","times_seen":4,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":91,"dns":35,"connect":1,"send":0,"wait":11,"receive":15,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/shared/css/buttons.css?v=6PFqex5UPprb\u0026l=russian","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.157","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://startgift.click/701f7e51790802","date":"2026-06-07T00:00:04.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /public/shared/css/buttons.css?v=6PFqex5UPprb\u0026l=russian HTTP/1.1\r\nHost: store.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: text/css;charset=UTF-8\r\nContent-Length: 4429\r\nETag: \"u7ItYmj40jWH\"\r\nX-Integrity: \"sha384-W5hjBVd+iCzh04ufTOJsoWzVv1x0Ohr30kK9w+CA36KWUr/tvy2AEH1DsivOJTGb\"\r\nLast-Modified: Tue, 05 May 1970 00:49:56 GMT\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=63072000\r\nVary: Accept-Encoding\r\nCache-Control: public, must-revalidate, max-age=0\r\nExpires: Sun, 07 Jun 2026 00:00:05 GMT\r\nDate: Sun, 07 Jun 2026 00:00:05 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36501,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"bbb22d6268f8d2358787ec213f89f025","sha1":"624d9714fe8feda590ccc1e1e251c6b597aa0fa2","sha256":"5c96f375ac2ffb4bd0a6a2873950384f80b9ca77235a5b05b2b6e3d543050a0c","sha512":"a62a8f3d48183883eef7c336c7677c8948f363403a19ae782f585e31b934b0602e37fd683d9a3bde8f25ada71a583834f2dd93ac2a58e669474ff6222d05caef","ssdeep":"384:l5/z6bJaBhSdbiabUo7aZaKj6vvZfGW/zsW:rj6vvZfGW/zsW","tlshash":"dff2ce99b38c70753237e1e065175fe86a7a109e88670f9efab5b2bc13da0ec1535813","first_seen":"2025-06-16T11:01:36.812288Z","last_seen":"2026-06-12T01:08:17.363426Z","times_seen":117,"resource_available":false,"data":null}},"time_used":796,"timings":{"blocked":31,"dns":11,"connect":1,"send":0,"wait":708,"receive":1,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}