{"report_id":"5fc98a10-9991-4e56-8f35-9174423f2a1f","version":0,"status":"done","tags":[],"date":"2026-10-13T03:49:49Z","url":{"schema":"http","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"title":"Sign In","dom":{"size":79447,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2130)","md5":"e1de6c3286b573adf20b974d14bdde58","sha1":"01d9f1a71616bccdab6dd8b14cee1b7e58d868b3","sha256":"cf11a7c34b628f1315208888fbc8241258c497db171e654511cab1cec0de75df","sha512":"08dea68bab16551b9d9e23236bedb99e2ab964c8a6304ab27785714bab07b4ca43a321bba8282a60e88bd852bc7ce7eac2a08608dcdf7259d6856b0cda0d962b","ssdeep":"1536:hj4NBSeavvJR0eVAHSHbTNwJ8b+48TPcAPvIunMDMMQn:hj10xnMDMMQn","tlshash":"28731a6594f140331287f1d0b7aa1f1b7e92f61bd9058a21bbbc0be85fe6dd29a5300d","dom_hash":"domhashb243b79ada6f04fedf3c8582e4b489e2","first_seen":"2026-10-13T03:49:57.191642Z","last_seen":"2026-10-13T04:37:16.866427Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-17T03:49:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"ggg.team-ke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.fastly.steamstatic.com","ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-11-07","domain_rank":93505,"first_seen":"2024-10-16T05:53:45Z","last_seen":"2026-10-08T22:04:10.762664Z","alert_count":0,"request_count":1,"received_data":1141,"sent_data":598,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-11T22:47:21.405407Z","alert_count":0,"request_count":1,"received_data":5571,"sent_data":559,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"images.steamusercontent.com","ip":{"addr":"23.214.96.146","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"domain_registered":"2014-12-04","domain_rank":202284,"first_seen":"2023-12-07T13:39:19Z","last_seen":"2026-10-13T03:35:16.177945Z","alert_count":0,"request_count":1,"received_data":9673,"sent_data":604,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}]},{"fqdn":"ggg.team-ke.com","ip":{"addr":"172.67.191.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-10","domain_rank":0,"first_seen":"2026-10-13T03:36:59.362653Z","last_seen":"2026-10-13T03:36:59.362653Z","alert_count":17,"request_count":17,"received_data":2133236,"sent_data":9365,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"shared.fastly.steamstatic.com","ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-11-07","domain_rank":78219,"first_seen":"2024-10-15T21:07:30.155663Z","last_seen":"2026-10-09T13:11:42.828581Z","alert_count":0,"request_count":5,"received_data":212864,"sent_data":3082,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"i.pinimg.com","ip":{"addr":"151.101.64.84","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2010-05-29","domain_rank":5120,"first_seen":"2015-10-15T00:21:29Z","last_seen":"2026-10-10T00:59:46.897164Z","alert_count":0,"request_count":1,"received_data":71845,"sent_data":574,"comment":"","tags":null,"fingerprints":null},{"fqdn":"shared.steamstatic.com","ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-11-07","domain_rank":55543,"first_seen":"2022-12-12T22:52:46Z","last_seen":"2026-10-07T02:07:38.948936Z","alert_count":0,"request_count":1,"received_data":327675,"sent_data":615,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s.team-gu.com","ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-10-05","domain_rank":0,"first_seen":"2026-10-10T01:34:19.135993Z","last_seen":"2026-10-10T01:34:19.135993Z","alert_count":30,"request_count":30,"received_data":2214529,"sent_data":15663,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"community.akamai.steamstatic.com","ip":{"addr":"23.214.96.134","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"domain_registered":"2013-11-07","domain_rank":177446,"first_seen":"2021-01-05T18:54:34Z","last_seen":"2026-10-12T16:49:32.973788Z","alert_count":0,"request_count":12,"received_data":160581,"sent_data":9010,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"community.fastly.steamstatic.com","ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-11-07","domain_rank":159922,"first_seen":"2024-10-31T18:27:03Z","last_seen":"2026-10-13T03:36:40.90495Z","alert_count":0,"request_count":11,"received_data":68920,"sent_data":6467,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"store.fastly.steamstatic.com","ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-11-07","domain_rank":81796,"first_seen":"2024-10-31T18:26:40Z","last_seen":"2026-10-13T03:36:40.55789Z","alert_count":0,"request_count":4,"received_data":56610,"sent_data":2352,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ggg.team-ke.com/496361c95","fqdn":"ggg.team-ke.com","domain":"team-ke.com","tld":"com"},"ip":{"addr":"172.67.191.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-10-13T06:04:06.825143Z","times_seen":96186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ggg.team-ke.com/496361c95","fqdn":"ggg.team-ke.com","domain":"team-ke.com","tld":"com"},"ip":{"addr":"172.67.191.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-10-13T06:30:33.691982Z","times_seen":771690,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a078c8ce55f83199dacae7b7b2bf85e8","sha1":"0e263663be2bcc374e1613945ac9ae520c98c18c","sha256":"e76565f284d8343efeffc29349d1ef7b47495a657cd16ea21227611e20be6131","sha512":"d8bd2f7efd3c8c674e107b7c8d257e2c15958e7e3da436bcaad5bc51eec94a3614938d203365c080319640d622bddaa12b8fcd70692eab0c314bcd118cb0bfa2","ssdeep":"","tlshash":"28d0273a1c54c110557d58c51cb1913dfc7d3b3b4459dc45f24f44e41140bf40b09854","size":291,"data":"","first_seen":"2026-06-26T02:14:11.760042Z","last_seen":"2026-10-13T04:37:16.957599Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6dc0136a4747bbbb35450c83e8fa60c2","sha1":"59bd75021b172b0474f23d7c528d8ddf8be68206","sha256":"97feb15d1aa6dd4080118effd700213fd949327a73bb34db9606759b97218d76","sha512":"7caaeacc35169b1e96281d6263df51b63fa9467fa102283491624c2f3ac795575fa43026c5f872d78bda4fbbae776d14c3124336848449a31fe0733ddc450302","ssdeep":"","tlshash":"d8c02b23457b20700123e018120ff704217200431182dc3a3e0c09cc0f6c708076088c","size":145,"data":"","first_seen":"2026-06-09T13:58:31.609365Z","last_seen":"2026-10-13T04:37:16.958621Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d91de63be5a393c235625c6803da424b","sha1":"856d7c80623a2a97dfbae4649c64a0e46b62e976","sha256":"69a6bc22c5d056c7df0b56fd9d2e32b71493e21508cf75df6de781b88a16ad08","sha512":"1e32c0c4aaaed2932d88fce393f7bf0739ed190e44b66c108f2d9a13f2c373de62572de78ca4cc6cac9df04b222aa5393f28b141ab0c154e79e5afd8ffcb339a","ssdeep":"","tlshash":"40e0cdbbfb771038e961c4afd11dd55815354117c45eb530782c92542f86658d742fd0","size":342,"data":"","first_seen":"2026-06-08T00:24:27.100605Z","last_seen":"2026-10-13T04:37:16.974477Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7958aae2d70493ce09fbb45d27e1dbb9","sha1":"4be9dae37f247824a4976c126e70a3df1f0ea8ac","sha256":"8520c3b299c64208e6905e6256dff980ad666536d9959d03c7ff7519355cee4f","sha512":"94ad322808b2a48d6cad05dc68d8c2a1966611c2588e630993c896f9bfe3d56aaf39c76130057e6ff2e1ff18817ca399f63c410d714573be449c899099ae2097","ssdeep":"","tlshash":"8e11006a7d37815aa49e4ce047aba41ff1192e772882c843778d01908fd07f10b1cc5e","size":1038,"data":"","first_seen":"2026-06-26T02:14:11.762699Z","last_seen":"2026-10-13T04:37:16.976562Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7e1475b9f1ca2b2e3e52051a6f5d7613","sha1":"d9cf80f73bf0bc09f3a48aef5ec2499438fb3bac","sha256":"d26605adcedc7e20b369431c0c1e012003d22a1ec4c8ae4029a9d1f4a277d9dd","sha512":"2439bd151ebd70012cbd86b23300799c632e4aca62ebe787593aa296f1cf2a1b2fa70909e12108846edce5f5c709268f46f283080cb3f8f5b305de16c938d211","ssdeep":"","tlshash":"ecf0ab1138df100b676a38cc66774a19331026ab379cc5017b1c96092f0dbcf8c5b39b","size":529,"data":"","first_seen":"2026-10-13T03:37:03.126517Z","last_seen":"2026-10-13T04:37:16.977284Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a06850cdc4fca8077520540dad8d1a57","sha1":"6fb5ad8cf0aaf2ea82949b1f80aaf4df0554c79c","sha256":"b802e2f03a9d32cfc3991d49e89ac795a469711dd933e02904b553cd089f64c0","sha512":"58ad8d4dbd51eab47e668a5e3b570a77a9bc323a99422c233189f9b0968e4911efe563dcb1a974b0c4300eeae1c162afb68a4634b4a8de2acc615f922199cde9","ssdeep":"","tlshash":"eba0220f000c20030af2bf80f03f80f20082202c008b08020c08002a2b2a028a2c2028","size":68,"data":"","first_seen":"2026-06-11T00:49:01.169566Z","last_seen":"2026-10-13T04:37:16.978092Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b46809204d8cd5b8186cd4f61bed86c1","sha1":"815467ba59825e0fbc4ac950d81f22342861a17a","sha256":"accffacaed1a1a6f23ea2bf181282bbdb69575a3d47b05ead4a9208a4f370fd4","sha512":"4d6f8934761241724a46690dd7b3d37aee1370e159d68f41600c3df1ab3184293a8d866617556b1e516ec83131b296402a008e6ce88c54f68adb53bfb4188a32","ssdeep":"","tlshash":"78e02619ade200b6089fa4a9d37b87c032f03097e483c110381d88c54f3c96020207cc","size":387,"data":"","first_seen":"2026-06-11T00:49:01.170794Z","last_seen":"2026-10-13T04:37:16.979634Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"40deebb4f364611ad6732e7d59940e09","sha1":"c89fc95a81f228cc385c8a68b34b2c4b18bfc6e5","sha256":"dd53e3f7645e20af0b6f4a68c3721ae09b8c5156d08c412e11c6763d297f783b","sha512":"d3f89faf79d2cd14c46a6e189a40a2d5a9eb9345de0e89e2d1e4a66cf629c3b045f1bcf1fd079e7fb961840977d3b1b948775232a67ac9abfc98ae606d4e1282","ssdeep":"","tlshash":"a9012897927d077203e7961a6bdb561ab730404756808e0c3f5c42c20fbde5505f51f6","size":668,"data":"","first_seen":"2026-08-13T09:02:03.765885Z","last_seen":"2026-10-13T04:37:16.980802Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8ec65138bae60b9a4cf7af5d92695a98","sha1":"4551f5b14412c96773a5e8d03c3eaa1e27845d09","sha256":"7233416468e11be6efe7515ce80483377ddf63a5b321416fd2f23eb2b34794d5","sha512":"b088227d870a98e3c7189507026238d64d5cb798fdcf6afa5c3fe331c952349723e9627af75372ba96fa6bb10a1525be6826a0d557231d71e8d84c2d6865d8f9","ssdeep":"","tlshash":"a5219e296f66553e401a826e4b98e6807574008b018fd1287a7c1fde3fc3c54c5bb6f2","size":1377,"data":"","first_seen":"2026-06-26T02:14:11.767766Z","last_seen":"2026-10-13T04:37:16.981783Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ggg.team-ke.com/496361c95","fqdn":"ggg.team-ke.com","domain":"team-ke.com","tld":"com"},"ip":{"addr":"172.67.191.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-10-13T05:33:28.624821Z","times_seen":240957,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ggg.team-ke.com/d93bac209/39460/15c3044.js?v=Z96TPTHh5g","fqdn":"ggg.team-ke.com","domain":"team-ke.com","tld":"com"},"ip":{"addr":"172.67.191.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eba51a61894a773df5cab2a18e499c0b","sha1":"e028428f4f367af2660a66e976f223695020e732","sha256":"225edf54855697e6207ba9bded4d041d824e44c7c842f2803ede51764a9e54ab","sha512":"a57c4b5a43b3b629737c98ca9fb0cd549bc35c300208c23690bf9f04312d2aaca179d6cf523f031f2d6dcd42b4e8156a149b0ae676cc09737a6615c8d7119cfc","ssdeep":"1536:DPEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzmQ:oNMyqhJvN32cBC7M6Whca98Hrp","tlshash":"bd93d8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","size":95701,"data":"","first_seen":"2023-03-07T12:27:03Z","last_seen":"2026-10-13T04:37:16.925772Z","times_seen":276,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ggg.team-ke.com/496361c95","fqdn":"ggg.team-ke.com","domain":"team-ke.com","tld":"com"},"ip":{"addr":"172.67.191.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"474a2ed8afbbea370e670b4dddc2fd0e","sha1":"93049654a92f43332e283a0c5321530d07af72d2","sha256":"ad840d6832176f684671403ed3d424dae3fb87a776026bffa1a4155d5d918dc7","sha512":"fb537a673ce748e5286d068e0cb4dff3b5ef31b2f6dd9b1fbd76bff5c87a18f6189a3f158b4186df75011084fbac9c7170cee9068ac4e896bf992c09856a65b4","ssdeep":"","tlshash":"b2e07d020a3732cee80dd30246ec181e239688c13aa9405fd704dc57fc0568ff13f6a6","size":302,"data":"","first_seen":"2026-10-13T03:37:03.134613Z","last_seen":"2026-10-13T04:37:16.98312Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ggg.team-ke.com/d93bac209/39460/df6d17e.js?v=Z96TPTHh5g","fqdn":"ggg.team-ke.com","domain":"team-ke.com","tld":"com"},"ip":{"addr":"172.67.191.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"12348ef9587be724a17ecd9645b63c63","sha1":"02f8f1d006b1d58624d5bb7ac518f15822f94afa","sha256":"b55e550674d87b25c92e9da80e6b933b336ab16c7bb88ec351c4c94084617dbf","sha512":"2bf4552062a92fbdb64813cebb3776aeeabc072ddc97570ad08794fa11a6f708a5a58b9bb1a8cff916d920c81a6fe9bee18c9b1b04d03445c4323f61e2b8377a","ssdeep":"24576:yf5HfNhb573Z6sgsJtbbE4q9x8ogP4571O9dFrv:ylN/ssgoXv","tlshash":"3b5540e0e78068a40e5f673e73575cf9f116247893871acca431acecb6ea61b5714c2b","size":1392038,"data":"","first_seen":"2026-10-13T03:49:57.332238Z","last_seen":"2026-10-13T04:37:16.983997Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.496Z","timestamp":1791863352496,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 13 Oct 2026 03:49:12 GMT\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4887,"size_decoded":1390,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a9c505989beae39b2b4acd69790edbf8","sha1":"7fc09e5116a9d1351d7d1b52c76c790250bbf28f","sha256":"98c7383bf34fe5b6e36fe044d2ad34d9749bdd8c06012d460187ee93e60acda8","sha512":"59e4b52e7b47577faa18c41c4b3dfb678d706f40d277cbac58a35f8907c74ef2c4058e2a226b4e85d90ef83d90e291ea6b9cdfae9a23a4bafd2c59bc5ac6b517","ssdeep":"96:aYg4aMzqYg4aybFZHYg4agkYg4aUJ3vYg4aERYg4aYGJc+qTYg4aR6NDO4a3qO4f:vywfydyGy63gy/yFhyR73xpmj3U8f7N","tlshash":"b5a1ed91006f9104ea431dd627cf7e32ad8e51856082e27d6ffd2dca6cdbd23122874c","first_seen":"2026-10-05T19:34:14.213729Z","last_seen":"2026-10-13T06:43:19.247305Z","times_seen":505,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":33,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/images/header_menu_hamburger.png?v=8","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.497Z","timestamp":1791863352497,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-gu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 11:35:29 GMT","end":"Sun, 03 Jan 2027 11:35:28 GMT"},"fingerprint":{"sha1":"AC:93:FE:9C:B5:FA:4B:AB:ED:B1:C1:FC:93:B3:32:B7:53:2D:A7:E3","sha256":"D1:6F:2F:6E:59:C8:E6:06:2C:61:70:94:40:17:01:A1:20:E9:E4:24:DF:09:16:49:A5:19:32:86:BF:3F:B8:D4"}}},"request":{"raw":"GET /p/rpt-bvj/ozjybtpc/images/header_menu_hamburger.png?v=8 HTTP/1.1\r\nHost: s.team-gu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/p/rpt-bvj/ozjybtpc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 23 Sep 2026 07:35:31 GMT\r\npriority: u=5,i\r\netag: \"6ab38143-ec1\"\r\naccept-ranges: bytes\r\nage: 786\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g9hH5QPMSclBEuHKTF2mSin9O3LUr5SnWWk0kmguT4BbVQjPGB%2FnCLvOed9F%2BKeOzN%2Fbmk4yIihZ3nx3fOEsLBhRVzjvPVpFAhWM4PjmP4HGCZKIjGbpmUSGk%2FAbtS6n\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f81182b712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3777\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3777,"size_decoded":4469,"mime_type":"image/png","magic":"PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced","md5":"eabc76eb57feae44add7faead028521e","sha1":"4e3e53938fad15661d2d046a868338841a95db19","sha256":"fc9e6260a2706ae146282d77e67bc1b74688435f8912ab4c1932641eec28bffa","sha512":"5c6da6eeefddf321c2bc7e39a134e0a3140a9f93ad1560b2e102ef60ec218c29aae14ed344c79e25cc5493cd15551040d8c909de28dcab02034d787563104e07","ssdeep":"","tlshash":"eb717ce7323e5456e1f056c6015b52f69eb1a1080d2b4e09f224b77831ac63be38333d","first_seen":"2023-04-05T21:31:08Z","last_seen":"2026-10-13T04:37:16.874544Z","times_seen":7781,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/css/shared_responsive.css?v=8","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.230Z","timestamp":1791863352230,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-gu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 11:35:29 GMT","end":"Sun, 03 Jan 2027 11:35:28 GMT"},"fingerprint":{"sha1":"AC:93:FE:9C:B5:FA:4B:AB:ED:B1:C1:FC:93:B3:32:B7:53:2D:A7:E3","sha256":"D1:6F:2F:6E:59:C8:E6:06:2C:61:70:94:40:17:01:A1:20:E9:E4:24:DF:09:16:49:A5:19:32:86:BF:3F:B8:D4"}}},"request":{"raw":"GET /p/rpt-bvj/ozjybtpc/css/shared_responsive.css?v=8 HTTP/1.1\r\nHost: s.team-gu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/p/rpt-bvj/ozjybtpc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Sep 2026 07:34:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ljQ3bKV7aOcD5fYNyu97QcPoQUnpIEfwxGFgc91bdHmZ%2BBMBnwugSfoGMx9lIupxOkl8hXibqcsdu9DXHsD%2Fou17%2F0iiZ4dww5lIXN67rcOfGy%2B5VVblytR5Rvvsr7jc\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6ab38112-568b\"\r\ncontent-encoding: gzip\r\nage: 786\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f7f6805712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22155,"size_decoded":7313,"mime_type":"text/css","magic":"ASCII text, with very long lines (1673), with CRLF line terminators","md5":"6ed90f63ed407ade364f3899b323ba68","sha1":"673e8e1b5b418866c249e50fecf4812f60c4cc58","sha256":"28b1af69b330e2ac6bf23eeb821b5577cab10ea6f608441b3332fa310d001c7e","sha512":"93bc7be1fb008deeef2012166966f91325b09995907f87d09d0c44731596b89c5b8005475dcb68baf6940086e9d41b115026c3cfebaa73327ae5bb7334ba6d87","ssdeep":"384:f2pVdp7TYb2zCN9cE+W7y7HiuKiNleHv7xTLsPDpUbIrw6GNNZhwePByI:fmjpvFzCN9cE+W7SHiufEHv7xvsPDpUd","tlshash":"c0a2605aad27a10aa3177345fb750f612f2581647f0e42aab7f8312862d536c61a33cf","first_seen":"2026-06-26T02:14:11.724475Z","last_seen":"2026-10-13T04:37:16.956101Z","times_seen":41,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.steamusercontent.com/ugc/1856052392802292844/96301CEBAB074ACA46F5142B2B92FB9DFA2C6554/","fqdn":"images.steamusercontent.com","domain":"steamusercontent.com","tld":"com"},"ip":{"addr":"23.214.96.146","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.539Z","timestamp":1791863352539,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.akamai.steamusercontent.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 15:27:02 GMT","end":"Thu, 07 Jan 2027 15:27:01 GMT"},"fingerprint":{"sha1":"1E:9B:96:89:3E:03:79:C4:66:5A:85:05:4E:AA:87:29:54:12:C8:23","sha256":"63:B5:2A:C0:FE:ED:7D:91:BF:56:8B:A3:B7:6F:56:9A:88:43:C8:05:28:78:43:06:D8:08:15:5E:97:46:E0:02"}}},"request":{"raw":"GET /ugc/1856052392802292844/96301CEBAB074ACA46F5142B2B92FB9DFA2C6554/ HTTP/1.1\r\nHost: images.steamusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nX-GUploader-UploadID: AP6rU802SU5wFraUNjeuZ_wzNDEh_z8qi0NTGcdvWOiRHy0ueCQvv3DFmCn-7Tsp3xnbka5N\r\nLast-Modified: Mon, 21 Mar 2022 06:29:13 GMT\r\nETag: \"0f739cf4be57cb1aa3bf9d0931ebbdf2\"\r\nx-goog-generation: 1647844153411774\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 8706\r\nContent-Disposition: inline; filename*=UTF-8''2782419458_preview_2092984732_preview_steamyears12_80.png;\r\nx-goog-hash: crc32c=3Igibg==, md5=D3Oc9L5Xyxqjv50JMeu98g==\r\nx-goog-storage-class: REGIONAL\r\nAccept-Ranges: bytes\r\nContent-Length: 8706\r\nAccess-Control-Expose-Headers: Authorization, Content-Length, Content-MD5, Content-Disposition, Date, Accept, Content-Type, origin, x-goog-content-length-range\r\nServer: UploadServer\r\nCache-Control: private, max-age=237337\r\nExpires: Thu, 15 Oct 2026 21:44:49 GMT\r\nDate: Tue, 13 Oct 2026 03:49:12 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":8706,"size_decoded":9673,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"0f739cf4be57cb1aa3bf9d0931ebbdf2","sha1":"96301cebab074aca46f5142b2b92fb9dfa2c6554","sha256":"4fdf83b3d08693d6b9b26590930790ea5e5f1dc0b8c2cad99abdf41e7e8564ed","sha512":"d98d98d52af1978d14bca6cb3e7562723188d9ae8c095d996061770d4d8d44cba7b4d71a9732443b44688cfd72c14ed599e54ee3e05b16eb9926bcd887f58799","ssdeep":"192:nntLOwBfp3t/GgFgOD1ASgTzPqaM344blZrX/2EeyLX6vJ+vCkQU:nAwVp9+5OD1l4O344n7eyLc+aQ","tlshash":"3002afedf2593b83135c89262cfa0e85af13180945e6d583eaf1e1c88ac01d78a9f1d5","first_seen":"2024-02-22T04:19:18Z","last_seen":"2026-10-13T04:37:16.902583Z","times_seen":82,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":7,"dns":0,"connect":3,"send":0,"wait":7,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGJG51EejH_fRxMOyPXSb4VNny5P9uwipREyhxs_k-3pdt_D4bPA4dvPFX2OTmOgu4-VsTivqxkt242zdy4uvJGXXMFHM3yG_rA/96fx96f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.134","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.547Z","timestamp":1791863352547,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 19:33:34 GMT","end":"Thu, 31 Dec 2026 19:33:33 GMT"},"fingerprint":{"sha1":"60:75:6C:3B:7D:C2:BD:27:D4:14:61:F7:5A:0E:49:55:D8:9A:80:C5","sha256":"35:24:FF:98:2A:26:11:7D:16:58:6C:EB:48:BF:FA:AA:A1:98:08:B6:11:67:91:3D:4C:C1:D1:74:09:7B:95:CE"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGJG51EejH_fRxMOyPXSb4VNny5P9uwipREyhxs_k-3pdt_D4bPA4dvPFX2OTmOgu4-VsTivqxkt242zdy4uvJGXXMFHM3yG_rA/96fx96f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nLast-Modified: Thu, 01 Sep 2022 20:34:20 GMT\r\nContent-Type: image/png\r\nContent-Length: 14877\r\nCache-Control: public, max-age=493231\r\nExpires: Sun, 18 Oct 2026 20:49:43 GMT\r\nDate: Tue, 13 Oct 2026 03:49:12 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14877,"size_decoded":16706,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"8c3726c642e7504ccb416f3da1dee101","sha1":"a00dc269d1d11f2eee5c9e20a6368cecac175fd0","sha256":"8d1b21170e616bca3e93f4e8d90ba05eee602c8df5a4c9e8ef097aa1b22538cd","sha512":"055ba40bbcbe5682ec2690f6be8c27fccdb6d0c10899bbf2b3b0c2baf0a9c281a99319b56ead40df8c7bba335a95be09dac3da24280cd6634ebf627a883a1b03","ssdeep":"384:yLPMO4NSIHCDnazgFqKKH/fMFX6tqBZalYk/rbBzC:y7MHSIHG8gF9Kf63aCk/5e","tlshash":"5862c058c8aa236f444cf07fa7867463e450672ff12c687c17af7bf571a90899319b80","first_seen":"2026-06-11T00:49:01.111395Z","last_seen":"2026-10-13T04:37:16.945071Z","times_seen":47,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":5,"dns":1,"connect":4,"send":0,"wait":6,"receive":0,"ssl":224},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/images/footerLogo_valve.png?v=8","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.559Z","timestamp":1791863352559,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-gu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 11:35:29 GMT","end":"Sun, 03 Jan 2027 11:35:28 GMT"},"fingerprint":{"sha1":"AC:93:FE:9C:B5:FA:4B:AB:ED:B1:C1:FC:93:B3:32:B7:53:2D:A7:E3","sha256":"D1:6F:2F:6E:59:C8:E6:06:2C:61:70:94:40:17:01:A1:20:E9:E4:24:DF:09:16:49:A5:19:32:86:BF:3F:B8:D4"}}},"request":{"raw":"GET /p/rpt-bvj/ozjybtpc/images/footerLogo_valve.png?v=8 HTTP/1.1\r\nHost: s.team-gu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/p/rpt-bvj/ozjybtpc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 23 Sep 2026 07:35:26 GMT\r\npriority: u=5,i\r\netag: \"6ab3813e-e99\"\r\naccept-ranges: bytes\r\nage: 786\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wddcqvajlPmACGX02BUBUvQRucjro%2BbL%2B%2FrZE7wZ2scFDBFFbCCXjvfLnsE7XBDAoWsF8x3ZsZcYtT7cymgigiCAzJwCuCwxjwTT7d1PLn4P3PA7rLkd%2FTHzkLhoq1Sr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f817831712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3737\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3737,"size_decoded":4429,"mime_type":"image/png","magic":"PNG image data, 96 x 26, 8-bit/color RGBA, non-interlaced","md5":"1626f52addb7c56fe3679d82108c62e9","sha1":"2b414092d66ecff528950093a655f755c3c7f3b5","sha256":"ae9f6c61e25d15882bf57bde193d10d375bd315c9741cabda11d700fd1bb7dd1","sha512":"05548831477cc421556c404f3411f581e98a84ff2e699882cb4f5dca17d1c5f77b55ed2b8211eec32d0a4317be1c4ebc636277f840262491b753415f6f198276","ssdeep":"","tlshash":"0e718e669660b49e18cd70910dce2581eb543268c5673b3865d236cea8a1d179f2d071","first_seen":"2023-04-16T19:19:52Z","last_seen":"2026-10-13T04:37:16.918524Z","times_seen":3426,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ggg.team-ke.com/496361c95","fqdn":"ggg.team-ke.com","domain":"team-ke.com","tld":"com"},"ip":{"addr":"172.67.191.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.959Z","timestamp":1791863352959,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-ke.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 15:30:48 GMT","end":"Wed, 06 Jan 2027 15:30:47 GMT"},"fingerprint":{"sha1":"95:B1:94:32:42:5B:C0:C3:E6:45:99:14:4B:8D:78:EF:5E:8A:B7:37","sha256":"4F:9D:2F:44:76:0D:E1:C8:C7:2A:E7:CE:A7:70:3D:07:A5:99:C6:28:61:FF:FE:C6:71:22:10:CB:51:83:25:CB"}}},"request":{"raw":"GET /496361c95 HTTP/1.1\r\nHost: ggg.team-ke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FYof2jOpYyvUbXyUPqvXwBe9LcSZmAeOAIBlnXAHY4675QPYgaC%2BfCohKS4sWySFpV%2FuPXkYF5z9S0akfV4mj7Zx%2FQ04V0A%2FA90jmrlffK%2BdvvBI81Spsli070VqzBIpoxE%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a49b5f841ee50731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134700,"size_decoded":13403,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43930)","md5":"5ea1f72cf5f0681a77075501978914b2","sha1":"bcfbc7e7ca50c7eeefa8f05be64093866a1d8a65","sha256":"d9c78814d0bb9599fd65f5ad90bf6ba144808d78c57d8cd4c4d2a544dbd913d2","sha512":"d23c4e9ba7b6f67b142aad8634e05289d33e500b568a9bb340c3437c1fe0a74b230f31aa44d57ed74e87cf36e51b1f79827b8eedddb34c68b64008946980ccae","ssdeep":"1536:4p+XUe5ASK6Uc2qB7MgLDRXUe5ASK6Uc2qPTYhWZD8SbSIkm/kyXURiuH7YQLiM4:4g/l","tlshash":"a1d382742a2982aba24f7dd56464d71f75b6f309ca03100b7afc02c2ebd7d6e9d54a30","first_seen":"2026-10-13T03:49:57.218949Z","last_seen":"2026-10-13T03:49:57.218949Z","times_seen":1,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":0,"dns":5,"connect":14,"send":0,"wait":192,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"ggg.team-ke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/images/bg_dots.png","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.632Z","timestamp":1791863352632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-gu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 11:35:29 GMT","end":"Sun, 03 Jan 2027 11:35:28 GMT"},"fingerprint":{"sha1":"AC:93:FE:9C:B5:FA:4B:AB:ED:B1:C1:FC:93:B3:32:B7:53:2D:A7:E3","sha256":"D1:6F:2F:6E:59:C8:E6:06:2C:61:70:94:40:17:01:A1:20:E9:E4:24:DF:09:16:49:A5:19:32:86:BF:3F:B8:D4"}}},"request":{"raw":"GET /p/rpt-bvj/ozjybtpc/images/bg_dots.png HTTP/1.1\r\nHost: s.team-gu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/p/rpt-bvj/ozjybtpc/css/profilev2.css?v=8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 23 Sep 2026 07:35:07 GMT\r\npriority: u=4,i\r\netag: \"6ab3812b-122e45\"\r\naccept-ranges: bytes\r\nage: 786\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UusYDZQCrDm0DES4XCIPIo0qug12MQZ48I1P8sW0od90zlNDOfGrbvcNmrxdRKLhizhiAYoFXVd3Gr0TIeI%2FnOrIbAHgqQ2HsU3TU0QKjGf9s8jDtLPpwCNZdCSuJuiF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f81e840712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1191493\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1191493,"size_decoded":1192185,"mime_type":"image/png","magic":"PNG image data, 1769 x 905, 8-bit/color RGB, non-interlaced","md5":"4fe8a786d8fb37ef60b51486a88931b4","sha1":"d78c63bcea6307b425bc060d34fec5ee8660ff39","sha256":"c2f8febfa6827266692357cb15dca4f3ff230435a844d8fc0b4b7fe7a8042377","sha512":"28000f564ba37e60e2ce11896df201cc4ea0268b6ba1510208bfb8d15172d88ffac64dc2cbbad137dc1c5b4be01370eea79e93ce5f65740ac11add793dd88cae","ssdeep":"24576:wf31nm7yQy8yb7FpiM/cPgGUREaZ9gtn3BOdYMf:wvZmeD8ytpk/UyaEtodVf","tlshash":"1f2533c9bb855420550a99f9078723ed2fe003e6ebd17b99033fd364890a19786db2df","first_seen":"2023-05-08T01:28:26Z","last_seen":"2026-10-13T04:37:16.942914Z","times_seen":91,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ggg.team-ke.com/d93bac209/39460/b9ef411.png","fqdn":"ggg.team-ke.com","domain":"team-ke.com","tld":"com"},"ip":{"addr":"172.67.191.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ggg.team-ke.com/496361c95","date":"2026-10-13T03:49:13.238Z","timestamp":1791863353238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-ke.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 15:30:48 GMT","end":"Wed, 06 Jan 2027 15:30:47 GMT"},"fingerprint":{"sha1":"95:B1:94:32:42:5B:C0:C3:E6:45:99:14:4B:8D:78:EF:5E:8A:B7:37","sha256":"4F:9D:2F:44:76:0D:E1:C8:C7:2A:E7:CE:A7:70:3D:07:A5:99:C6:28:61:FF:FE:C6:71:22:10:CB:51:83:25:CB"}}},"request":{"raw":"GET /d93bac209/39460/b9ef411.png HTTP/1.1\r\nHost: ggg.team-ke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ggg.team-ke.com/496361c95\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:13 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s0Asz9B5qeVe4v4IoUBvX7MMEq0qY7Qe5D0DwYzJQaGgkYWaauBDyALM1y9ZGcsPmKayTqbnOPhruFDQHK0QItZTjtki1LumTKwNewAPWtPkwWzVeCConuNp0Py88loxLB8%3D\"}]}\r\npriority: u=5,i\r\nage: 786\r\nlast-modified: Tue, 13 Oct 2026 03:36:07 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f85bf390731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8553,"size_decoded":9177,"mime_type":"image/png","magic":"PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced","md5":"4896428fab65fa2c8d256a89497ca30e","sha1":"7e165167906c718a613e133aecd3e37a822108b1","sha256":"e60aaaa6e7068e5a54ef0e2594561a9194ddca986041741fa2f0550ca00c5d9f","sha512":"242aefb4aa65da5d1c149495a72913762a152f5205baa01de27561963a9f10a4e4bbe45aec189060a5296c29536d6479d6b753e46e8d3d9350372a0e2b737498","ssdeep":"192:KPrlkwqvXWhf3Q/hqdowIacP6hVHjBMoaN2sGmZRyoq6t5ifje:Orqwqvmfg/hkowa6Dj0NHRyoqrf6","tlshash":"a902ae02c252d81c6f48befe1be5331df584062309a0f0f227c1199b3a5df69b26bd4a","first_seen":"2023-11-15T21:48:23Z","last_seen":"2026-10-13T04:37:16.92393Z","times_seen":37,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"ggg.team-ke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ggg.team-ke.com/496361c95","fqdn":"ggg.team-ke.com","domain":"team-ke.com","tld":"com"},"ip":{"addr":"172.67.191.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ggg.team-ke.com/496361c95","date":"2026-10-13T03:49:15.821Z","timestamp":1791863355821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-ke.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 15:30:48 GMT","end":"Wed, 06 Jan 2027 15:30:47 GMT"},"fingerprint":{"sha1":"95:B1:94:32:42:5B:C0:C3:E6:45:99:14:4B:8D:78:EF:5E:8A:B7:37","sha256":"4F:9D:2F:44:76:0D:E1:C8:C7:2A:E7:CE:A7:70:3D:07:A5:99:C6:28:61:FF:FE:C6:71:22:10:CB:51:83:25:CB"}}},"request":{"raw":"POST /496361c95 HTTP/1.1\r\nHost: ggg.team-ke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 14\r\nOrigin: https://ggg.team-ke.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ggg.team-ke.com/496361c95\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":14,"data":"doqr=1\u0026qrdata="}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OuPjesbYmU9lKGQajI1vwEGt8F9hYW4osytYysfER0Do0dBmRiTVn%2B1WeIuTShZTiTQyb3%2BQVOYsNep3hwyfumtJRWcZMZkGi1EhlI07UoN9oiPTLUoYlEvZvyV03S4WH1A%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a49b5f95da2d0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73,"size_decoded":670,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"5a67ef11d9d0a409d2a2cd1c2d6374bd","sha1":"2a0cd78c0b263910e994be98250183ad1e004c94","sha256":"5454834b41840f59d6ebc8afbffd759f2f55d412501caada040a27e6851622eb","sha512":"06d22bf8ee67049d628e775f70d6f777abb532afdb28fd9a04067716e476c5775480462664a255eb1ef5bdf5242bbc28a4bcd5254997aadb0d472b5abdc59903","ssdeep":"","tlshash":"bea024c331cdc400405443d040113015f5f00443c0317040f45c0030745f370331dc53","first_seen":"2026-10-13T03:49:57.226434Z","last_seen":"2026-10-13T03:49:57.226434Z","times_seen":1,"resource_available":true,"data":null}},"time_used":831,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":831,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"ggg.team-ke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/js/libraries~b28b7af69.js?v=8","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.590Z","timestamp":1791863352590,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-gu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 11:35:29 GMT","end":"Sun, 03 Jan 2027 11:35:28 GMT"},"fingerprint":{"sha1":"AC:93:FE:9C:B5:FA:4B:AB:ED:B1:C1:FC:93:B3:32:B7:53:2D:A7:E3","sha256":"D1:6F:2F:6E:59:C8:E6:06:2C:61:70:94:40:17:01:A1:20:E9:E4:24:DF:09:16:49:A5:19:32:86:BF:3F:B8:D4"}}},"request":{"raw":"GET /p/rpt-bvj/ozjybtpc/js/libraries~b28b7af69.js?v=8 HTTP/1.1\r\nHost: s.team-gu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/p/rpt-bvj/ozjybtpc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yMdY%2FHaqKR5gEAA3QxXJ5a5u4cJ35FwVBwwd8lhPIc%2BY%2Fy3mKb86982vXYLqf8%2F6yZPffrAn5eSZBe2gTCKue7bp1Qcvv%2BlooNC08LrsV67hRyxt%2BoNYMVbF5OQYUXJR\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncache-control: no-cache, no-store, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a49b5f81b838712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3,"size_decoded":676,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"4f4adcbf8c6f66dcfc8a3282ac2bf10a","sha1":"c35a9fc52bb556c79f8fa540df587a2bf465b940","sha256":"6b3c238ebcf1f3c07cf0e556faa82c6b8fe96840ff4b6b7e9962a2d855843a0b","sha512":"0d15d65c1a988dfc8cc58f515a9bb56cbaf1ff5cb0a5554700bc9af20a26c0470a83c8eb46e16175154a6bcaad7e280bbfd837a768f9f094da770b7bd3849f88","ssdeep":"","tlshash":"c72000000000000000000000000000000000c0000000000000000000c0000000000000","first_seen":"2023-03-14T15:28:33Z","last_seen":"2026-10-13T04:37:16.901048Z","times_seen":3676,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/css/profilev2.css?v=8","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.225Z","timestamp":1791863352225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-gu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 11:35:29 GMT","end":"Sun, 03 Jan 2027 11:35:28 GMT"},"fingerprint":{"sha1":"AC:93:FE:9C:B5:FA:4B:AB:ED:B1:C1:FC:93:B3:32:B7:53:2D:A7:E3","sha256":"D1:6F:2F:6E:59:C8:E6:06:2C:61:70:94:40:17:01:A1:20:E9:E4:24:DF:09:16:49:A5:19:32:86:BF:3F:B8:D4"}}},"request":{"raw":"GET /p/rpt-bvj/ozjybtpc/css/profilev2.css?v=8 HTTP/1.1\r\nHost: s.team-gu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/p/rpt-bvj/ozjybtpc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Sep 2026 07:34:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mRwfGD9X%2BC85oDPTb0w6P%2FHSvLhU3WxcBhd5v1hVWhAsqqBVv7UzRKMQlxC3uRds7Q96XtjnT%2FCrNVsJNGHwaBxoMtBqWoC7x4qxIhwg7PoRuE15ZUcGXLSNqlM%2Fh1wV\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6ab38110-15faa\"\r\ncontent-encoding: gzip\r\nage: 786\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f7f6803712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90026,"size_decoded":18787,"mime_type":"text/css","magic":"ASCII text, with very long lines (1627), with CRLF line terminators","md5":"1ef706870f94d3a850a76738eb9c660f","sha1":"3a8ca616ba0790548f593cb642fd21e786182424","sha256":"aabbb69739184796d7073098f3c8ea08f5551642ea34fac885ac536bd61adb28","sha512":"29dcc3dc1bb2b307abc7d6776f4a09f888ddd97ccb24a41839b54794a29ff542ec980a948fd99a05d956134d970b1b65aecffbdb01f5986a97c89cda055ebf4c","ssdeep":"768:VV/pSskuA0HO0HyHTgJR+8P5JlIkTKDT9kzh6ruT5LOJHkvqnFnOePv+5n9IAjOH:rpWHT4RJBTET6dOMA2Q9GseXr4","tlshash":"9b93a559e95b701fb337b9f6fbf16b468e204026e70a0779b4d4746c9ac446c22b32c6","first_seen":"2026-06-26T02:14:11.667444Z","last_seen":"2026-10-13T04:37:16.944334Z","times_seen":41,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/images/badges/generic/Replay2022_80.png","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.524Z","timestamp":1791863352524,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/images/badges/generic/Replay2022_80.png HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-8def\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\nvia: 1.1 varnish\r\nage: 21637\r\nx-served-by: cache-bma-essb1270073-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 134\r\nx-timer: S1791863353.872643,VS0,VE0\r\ncontent-length: 36335\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":36335,"size_decoded":36739,"mime_type":"image/png","magic":"PNG image data, 184 x 184, 8-bit/color RGBA, non-interlaced","md5":"1fbd32e9f20ede9a107bca889ef59d74","sha1":"62e7aae7a2f940fd61f9a57bdc4cecf5b402b299","sha256":"c270f660ee700a6ea93978e80f16c803675f268810fc3857fe1a13565e7cf0bb","sha512":"6bf5b3b91dad7ed118507746552d3e2eeda00c5502c587dfeba17b089ff84f729e45b36e291d8107844735edc765a87d0573d00ed3275599a8a7e5f20ee41894","ssdeep":"768:BnwQoQ9gRnWNYxYDsS0wmk77asrKLncuBE8cfP14HiHPU:BnwvxRWNYYms2LnHcft4H2U","tlshash":"86f2f18cd5b97456cb9712770b53302e503e8bf1089ed657bdece126644bbe88ecd608","first_seen":"2024-01-24T04:28:32Z","last_seen":"2026-10-13T04:37:16.876513Z","times_seen":83,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":9,"dns":0,"connect":12,"send":0,"wait":9,"receive":3,"ssl":263},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/loyalty/reactions/still/13.png?v=5","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.534Z","timestamp":1791863352534,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 12:18:32 GMT","end":"Thu, 19 Nov 2026 12:18:31 GMT"},"fingerprint":{"sha1":"73:3D:80:BA:FF:E1:7B:1D:0E:6E:9A:40:E5:15:C7:6D:FE:46:B9:44","sha256":"F6:FC:99:1F:A8:9D:10:F1:85:36:C6:51:C1:BD:A3:BE:67:18:DC:98:E2:29:22:39:6F:84:4F:11:66:3A:2B:B8"}}},"request":{"raw":"GET /public/images/loyalty/reactions/still/13.png?v=5 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:18 GMT\r\netag: \"649bb1f6-20ab\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\nvia: 1.1 varnish\r\nage: 75052\r\nx-served-by: cache-bma-essb1270033-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 1457\r\nx-timer: S1791863353.874448,VS0,VE0\r\ncontent-length: 8363\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8363,"size_decoded":8767,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit/color RGBA, non-interlaced","md5":"e4df185653d4da061a3c04947400a145","sha1":"40111b1db3df8c5515adfcd5a30a071eb9c70378","sha256":"fb7a3b6638f12a82d3da616a742f4fdd551eb9e4054a0dc6ef174db090c7ab6e","sha512":"774da7fa61cea60e354da9bf1c357b40a91b4f5c4b04521b76139330db79bebf292c2fa7a74b774c2fabaa1d939e1a58bd5d026bdc81b54159d19be7c45f57af","ssdeep":"192:i9wMRQiWRODCb0zRb0F4VrDTUZ4ofNlnd2LLSkpResVF:ipQi9DdzR64VvTHofbILLnpResVF","tlshash":"e1029fdcdd38a09c7fe60e3f90151ba842712c579b81066c15a53babcd8c83d5f5a8eb","first_seen":"2023-05-03T21:37:58Z","last_seen":"2026-10-13T04:37:16.948676Z","times_seen":1012,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":8,"dns":0,"connect":10,"send":0,"wait":58,"receive":4,"ssl":269},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared.fastly.steamstatic.com/store_item_assets/steam/apps/860510/header.jpg?t=1730127763","fqdn":"shared.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.558Z","timestamp":1791863352558,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shared.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:03:00 GMT","end":"Mon, 21 Dec 2026 11:02:59 GMT"},"fingerprint":{"sha1":"35:27:95:F1:7A:87:90:C8:D5:F1:A9:04:B3:07:6D:A6:FD:D3:2C:C7","sha256":"D8:4F:7F:70:8F:7A:7E:8B:84:AD:3C:28:69:F1:A7:43:EA:B9:82:9E:88:6C:DF:63:E3:60:FB:48:13:0F:C3:63"}}},"request":{"raw":"GET /store_item_assets/steam/apps/860510/header.jpg?t=1730127763 HTTP/1.1\r\nHost: shared.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 30 Aug 2022 13:24:41 GMT\r\netag: \"630e0f99-9042\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\nvia: 1.1 varnish\r\nage: 1697023\r\nx-served-by: cache-bma-essb1270050-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 448\r\nx-timer: S1791863353.871285,VS0,VE0\r\ncontent-length: 36930\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36930,"size_decoded":37419,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 460x215, components 3","md5":"c551d9aec2b7e73d9aabe31bfed84ade","sha1":"30b10634cb7b596a0cb7c355d916a3039a2d35a0","sha256":"2370fefd429f17838acb0c672805527aa24e6b0750de6b8bc3780f29f5b9a967","sha512":"7b95d2e9f9ab9bc7d9128d27311662801d21c37e94a87ac3408d7ff9125c6b3b861abb75cdf1f65707a60f7fae9cbc0449fa1bda4ca16d821969a6308f9d51db","ssdeep":"768:xoC7/8QCveDe54eS1DnkH9SstVlrUdLyqjG0OseWvDSIYPfFQ954xC41:xr7/8QCv/r6Y9Sc2CRWv2BK9id","tlshash":"75f2f1b0669f74cc7238f6e4149f28a7a0e87af5116fd094d79ca4f1075f0d39ea6212","first_seen":"2024-06-30T11:06:24Z","last_seen":"2026-10-13T04:37:16.950789Z","times_seen":25,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":4,"dns":1,"connect":11,"send":0,"wait":16,"receive":0,"ssl":262},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/fonts/MotivaSans-Regular.ttf","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.592Z","timestamp":1791863352592,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-gu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 11:35:29 GMT","end":"Sun, 03 Jan 2027 11:35:28 GMT"},"fingerprint":{"sha1":"AC:93:FE:9C:B5:FA:4B:AB:ED:B1:C1:FC:93:B3:32:B7:53:2D:A7:E3","sha256":"D1:6F:2F:6E:59:C8:E6:06:2C:61:70:94:40:17:01:A1:20:E9:E4:24:DF:09:16:49:A5:19:32:86:BF:3F:B8:D4"}}},"request":{"raw":"GET /p/rpt-bvj/ozjybtpc/fonts/MotivaSans-Regular.ttf HTTP/1.1\r\nHost: s.team-gu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/p/rpt-bvj/ozjybtpc/css/motiva_sans.css?v=8\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 23 Sep 2026 07:34:54 GMT\r\npriority: u=3,i=?0\r\netag: \"6ab3811e-1df3c\"\r\naccept-ranges: bytes\r\nage: 786\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CwlEGBrosjuVAycTHoP09jGP3HlKCuv5RmWCmN74Gx%2F0XnLFtCPfF5iFseRUlA4vrb5d%2Bax7fLIbSBao%2F%2FrM6fDPcKbOtBW0yH%2Bd9LX9gQtBd%2BHaLXINlbapL%2Fcv7kAS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f81b839712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 122684\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122684,"size_decoded":123404,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 22 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansRegular4.015;Plau;MotivaSan","md5":"57613e143ff3dae10f282e84a066de28","sha1":"88756cc8c6db645b5f20aa17b14feefb4411c25f","sha256":"19b8db163bcc51732457efa40911b4a422f297ff3cd566467d87eab93cef0c14","sha512":"94f045e71b9276944609ca69fc4b8704e4447f9b0fc2b80789cc012235895c50ef9ecb781a3ed901a0c989bed26caa37d4d4a9baffcce2cb19606dbb16a17176","ssdeep":"3072:lpsQ7l3T64Z1lKcDqttEPBWVNwZ+e222pKKSxfj9:Yg3T64Z19DqtkWbu/222kZfh","tlshash":"82c34b06f316e70aec614e3c66769399b358f8a53f2fcb0b95857d60bcad0d51e8128c","first_seen":"2023-04-05T04:16:14Z","last_seen":"2026-10-13T05:13:14.427351Z","times_seen":7503,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ggg.team-ke.com/d93bac209/39460/af5c53b.png","fqdn":"ggg.team-ke.com","domain":"team-ke.com","tld":"com"},"ip":{"addr":"172.67.191.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ggg.team-ke.com/496361c95","date":"2026-10-13T03:49:13.240Z","timestamp":1791863353240,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-ke.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 15:30:48 GMT","end":"Wed, 06 Jan 2027 15:30:47 GMT"},"fingerprint":{"sha1":"95:B1:94:32:42:5B:C0:C3:E6:45:99:14:4B:8D:78:EF:5E:8A:B7:37","sha256":"4F:9D:2F:44:76:0D:E1:C8:C7:2A:E7:CE:A7:70:3D:07:A5:99:C6:28:61:FF:FE:C6:71:22:10:CB:51:83:25:CB"}}},"request":{"raw":"GET /d93bac209/39460/af5c53b.png HTTP/1.1\r\nHost: ggg.team-ke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ggg.team-ke.com/496361c95\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:13 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fi4ToyIdw%2BFTq4HmK07UFE92mpZijaEFV1ehmBXruGAkMbsHr5im49E0g5143u6pk6Cf6KLjI8U%2FzzaYx56WgftnuBKrf8mgSfHeaeTS1aIdf6pn%2FcvIh%2BsIIApPz%2BNVuoc%3D\"}]}\r\npriority: u=5,i\r\nage: 786\r\nlast-modified: Tue, 13 Oct 2026 03:36:07 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f85bf3a0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7868,"size_decoded":8502,"mime_type":"image/png","magic":"PNG image data, 356 x 89, 8-bit/color RGBA, non-interlaced","md5":"213341bec0ca1bbf83d7895d23c79044","sha1":"fed0dcc0aaa52f1ae33b7e035173641ebdc6ecc9","sha256":"e832abe2b396b619987db9f6474dea8145c682d0b19ff65839331c6e80472357","sha512":"aa421d5f8000b5e655464c2806c40ffabb1706b3f64cd8cccd6c6dfc2078741a798bcbee4f6541bbdcd65003a45ac919d444788490765d2c21d7d358785e3fea","ssdeep":"192:QUWKagL0LDBhvnIHhuzxmTRi9mpQlq/mV9c75LTr72P:QkagODBFNzxmTcoqA/E9c92P","tlshash":"1ef1bf833425fa9f40971f30c2773831d138c6775b8b8bd29414aaa18a07dcf4eb5596","first_seen":"2026-03-19T12:19:52.923316Z","last_seen":"2026-10-13T04:37:16.916996Z","times_seen":9,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"ggg.team-ke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/images/profile/profile_action_dropdown.png","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.525Z","timestamp":1791863352525,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/images/profile/profile_action_dropdown.png HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-411\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\nvia: 1.1 varnish\r\nage: 59148\r\nx-served-by: cache-bma-essb1270073-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 2164\r\nx-timer: S1791863353.624441,VS0,VE0\r\ncontent-length: 1041\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1041,"size_decoded":1444,"mime_type":"image/png","magic":"PNG image data, 12 x 8, 8-bit/color RGBA, non-interlaced","md5":"f7c7f00de9db4d93388c0836074ab2bd","sha1":"94ff6b8f6ec79de3ec2ec28ab13205870b63d2f4","sha256":"75511559130d0525f23dab49d6fd331727b3911a52e54bd95d4db76b79df980a","sha512":"8a17f7cd6cedfdfcea30205afddcdfb53ed46243dfbb8ef4fbdc90ab91c3b98701552831ec791a1e6b3f8cd880779dd27ffb84b89faab3ff59f3d83955b43990","ssdeep":"","tlshash":"0a1175cdef40b901a069e75118e35407bd2604d4e5e2e0627a89cd03a8742b28809aef","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-10-13T04:37:16.895408Z","times_seen":562,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":9,"dns":0,"connect":10,"send":0,"wait":10,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/images/profile/icon_invitegroup.png","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.528Z","timestamp":1791863352528,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/images/profile/icon_invitegroup.png HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-529\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\nvia: 1.1 varnish\r\nage: 60382\r\nx-served-by: cache-bma-essb1270073-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 2211\r\nx-timer: S1791863353.873623,VS0,VE0\r\ncontent-length: 1321\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1321,"size_decoded":1724,"mime_type":"image/png","magic":"PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced","md5":"2481d71a1ce5140f622ed92009262144","sha1":"a2b475d874e55a2c971c606bd2fbdf7b1caccd34","sha256":"804246b92f1abfaccd87549bcd1be88693f0b9647071eb0019f26361ba1ed5ae","sha512":"7ba66a3a1f350cffc85d62f0882ebc9192bffc213794f5b7b4ca1492286b104fb38a54b21d19ff58fb91c219f34608e93217154ff10bc4f773d20048a3d2e637","ssdeep":"","tlshash":"1f2153a8e6006892b149eac314ff5027ac024885a5e0f56ad5cfdc2318b62f8a55d6d7","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-10-13T04:37:16.922682Z","times_seen":479,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":9,"dns":0,"connect":12,"send":0,"wait":12,"receive":0,"ssl":261},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/images/sharedfiles/add_fav_ico_default.png","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.529Z","timestamp":1791863352529,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/images/sharedfiles/add_fav_ico_default.png HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-44f\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\nvia: 1.1 varnish\r\nage: 60116\r\nx-served-by: cache-bma-essb1270073-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 2186\r\nx-timer: S1791863353.873207,VS0,VE0\r\ncontent-length: 1103\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1103,"size_decoded":1506,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"b5c472ea5c08fb55f8be89eeb9a540e8","sha1":"f93f242fa79115c1380a02c6d9dc8e63e62550a4","sha256":"1706a3ce38720f841d95fc0b5033b10c496ac568ecb04a0339719cbfa9995553","sha512":"803b86fa8e48ab3d0c523fa0da80fee1c52c1db58bce8a5a8815db0f8c93b79c2889a83f632c05a71f7cac5902fa5adb5e07b3b4af86d7a9f99ab2e53f8f1d79","ssdeep":"","tlshash":"aa11635ef6806c044108cb9918e6503bda164400e8d4eea7bdcaec1a5e321f884096e7","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-10-13T04:37:16.939972Z","times_seen":478,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":9,"dns":0,"connect":12,"send":0,"wait":11,"receive":0,"ssl":262},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/loyalty/reactions/still/17.png?v=5","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.536Z","timestamp":1791863352536,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 12:18:32 GMT","end":"Thu, 19 Nov 2026 12:18:31 GMT"},"fingerprint":{"sha1":"73:3D:80:BA:FF:E1:7B:1D:0E:6E:9A:40:E5:15:C7:6D:FE:46:B9:44","sha256":"F6:FC:99:1F:A8:9D:10:F1:85:36:C6:51:C1:BD:A3:BE:67:18:DC:98:E2:29:22:39:6F:84:4F:11:66:3A:2B:B8"}}},"request":{"raw":"GET /public/images/loyalty/reactions/still/17.png?v=5 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:18 GMT\r\netag: \"649bb1f6-2b50\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\nvia: 1.1 varnish\r\nage: 5667\r\nx-served-by: cache-bma-essb1270033-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 38\r\nx-timer: S1791863353.872383,VS0,VE0\r\ncontent-length: 11088\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11088,"size_decoded":11490,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit/color RGBA, non-interlaced","md5":"bdaed13dbee68cb1c8232a8ade368174","sha1":"1a0105d01e3bd328b9db82fb9aab7cbb7e678f62","sha256":"d11e9d24e9c0c3400475015f9259beae630060090b6d7fe6268f8c046a08c332","sha512":"1eb18101420c67a8470c2013606a887a638b254422c31da2c7d8b84f376c69998f2d54a4baa2394cadc3f611ee1168045409cde6960a6907ec12207490def1d1","ssdeep":"192:i5/V2aCnh/xXnUa3236eUF1sScrBxi40dHl5qJMNmrregJC/RZhkqhe4rEfFWIOh:ia9NxXUTq11ABxIK1mgQ5nkqUsY2k1bK","tlshash":"ca329e9da8b7253ec6fe303fc420051da3b515636f0a598c85a37cbad295a316f3a01f","first_seen":"2023-05-01T10:24:44Z","last_seen":"2026-10-13T04:37:16.9275Z","times_seen":1094,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":8,"dns":0,"connect":11,"send":0,"wait":53,"receive":6,"ssl":267},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/js/shared_responsive_adapter.js?v=8","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.233Z","timestamp":1791863352233,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-gu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 11:35:29 GMT","end":"Sun, 03 Jan 2027 11:35:28 GMT"},"fingerprint":{"sha1":"AC:93:FE:9C:B5:FA:4B:AB:ED:B1:C1:FC:93:B3:32:B7:53:2D:A7:E3","sha256":"D1:6F:2F:6E:59:C8:E6:06:2C:61:70:94:40:17:01:A1:20:E9:E4:24:DF:09:16:49:A5:19:32:86:BF:3F:B8:D4"}}},"request":{"raw":"GET /p/rpt-bvj/ozjybtpc/js/shared_responsive_adapter.js?v=8 HTTP/1.1\r\nHost: s.team-gu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/p/rpt-bvj/ozjybtpc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z5Lezbz333IL4rPqPaWjK3%2BGUaqXWLh3YtTnJs3%2FgDlODmXmQI2yzEkITcopfekK5gzCbs6iUT9a%2Bsw6wHVkDkz9EsjYkFAzw9Deh9KyqD2wStgbIG4Fhp4uMl7Z4YHK\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncache-control: no-cache, no-store, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a49b5f7f6807712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3,"size_decoded":670,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"4f4adcbf8c6f66dcfc8a3282ac2bf10a","sha1":"c35a9fc52bb556c79f8fa540df587a2bf465b940","sha256":"6b3c238ebcf1f3c07cf0e556faa82c6b8fe96840ff4b6b7e9962a2d855843a0b","sha512":"0d15d65c1a988dfc8cc58f515a9bb56cbaf1ff5cb0a5554700bc9af20a26c0470a83c8eb46e16175154a6bcaad7e280bbfd837a768f9f094da770b7bd3849f88","ssdeep":"","tlshash":"c72000000000000000000000000000000000c0000000000000000000c0000000000000","first_seen":"2023-03-14T15:28:33Z","last_seen":"2026-10-13T04:37:16.901048Z","times_seen":3676,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/js/libraries~b28b7af69.js?v=8","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.236Z","timestamp":1791863352236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-gu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 11:35:29 GMT","end":"Sun, 03 Jan 2027 11:35:28 GMT"},"fingerprint":{"sha1":"AC:93:FE:9C:B5:FA:4B:AB:ED:B1:C1:FC:93:B3:32:B7:53:2D:A7:E3","sha256":"D1:6F:2F:6E:59:C8:E6:06:2C:61:70:94:40:17:01:A1:20:E9:E4:24:DF:09:16:49:A5:19:32:86:BF:3F:B8:D4"}}},"request":{"raw":"GET /p/rpt-bvj/ozjybtpc/js/libraries~b28b7af69.js?v=8 HTTP/1.1\r\nHost: s.team-gu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/p/rpt-bvj/ozjybtpc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=coGPDYUsiW5rrI0c%2Buyi8Q%2BhnokTCBB6YjXImG5ZR%2BxDLb5t2mw413BG7nwks8CZ3QXUvvdOu7D2Fn9LTAE1Vxm86Fteg2ZPQ53Fg60Zn2Rc3M7nOiqjMUA7vSkagrQF\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncache-control: no-cache, no-store, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a49b5f7f7809712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3,"size_decoded":670,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"4f4adcbf8c6f66dcfc8a3282ac2bf10a","sha1":"c35a9fc52bb556c79f8fa540df587a2bf465b940","sha256":"6b3c238ebcf1f3c07cf0e556faa82c6b8fe96840ff4b6b7e9962a2d855843a0b","sha512":"0d15d65c1a988dfc8cc58f515a9bb56cbaf1ff5cb0a5554700bc9af20a26c0470a83c8eb46e16175154a6bcaad7e280bbfd837a768f9f094da770b7bd3849f88","ssdeep":"","tlshash":"c72000000000000000000000000000000000c0000000000000000000c0000000000000","first_seen":"2023-03-14T15:28:33Z","last_seen":"2026-10-13T04:37:16.901048Z","times_seen":3676,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/fonts/MotivaSans-Medium.ttf","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.596Z","timestamp":1791863352596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-gu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 11:35:29 GMT","end":"Sun, 03 Jan 2027 11:35:28 GMT"},"fingerprint":{"sha1":"AC:93:FE:9C:B5:FA:4B:AB:ED:B1:C1:FC:93:B3:32:B7:53:2D:A7:E3","sha256":"D1:6F:2F:6E:59:C8:E6:06:2C:61:70:94:40:17:01:A1:20:E9:E4:24:DF:09:16:49:A5:19:32:86:BF:3F:B8:D4"}}},"request":{"raw":"GET /p/rpt-bvj/ozjybtpc/fonts/MotivaSans-Medium.ttf HTTP/1.1\r\nHost: s.team-gu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/p/rpt-bvj/ozjybtpc/css/motiva_sans.css?v=8\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 23 Sep 2026 07:34:53 GMT\r\npriority: u=3,i=?0\r\netag: \"6ab3811d-1e490\"\r\naccept-ranges: bytes\r\nage: 786\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uSrEFQ%2FsBobKL5UBryE8BYQKsai6D6M5cMVoLXdSBdfqL8efa1Yxf%2FmJ%2BeUbPj6Tvb5SwJclLb%2BJVSL39LbyddL%2B%2Bd4ALJkQA113xWBnOJe154DtVS1%2BDcR8gDCEDIL6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f81d83e712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 124048\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124048,"size_decoded":124768,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansMedium4.015;Plau;MotivaSans","md5":"2d64caa5ecbf5e42cbb766ca4d85e90e","sha1":"147420abceb4a7fd7e486dddcfe68cda7ebb3a18","sha256":"045b433f94502cfa873a39e72d616c73ec1b4c567b7ee0f847f442651683791f","sha512":"c96556ec57dac504919e806c7df536c4f86892b8525739289b2f2dbbf475de883a4824069dbdd4bb1770dd484f321563a00892e6c79d48818a4b95406bf1af96","ssdeep":"1536:v4Kkq/szjKJRIDCnR96guXgECINo28BZZDhpkemOXaxq4jKea8GyFLaE0Af0ffL9:vf/fxn7ElXxE0wS0fj9","tlshash":"86c35c06f706d709dd240e3df9a1a3a9b358f8a57b1fcb0fa6856d65fc8e0852a441cc","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-10-13T04:37:16.951508Z","times_seen":7256,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ggg.team-ke.com/d93bac209/39460/5eaab08.jpg","fqdn":"ggg.team-ke.com","domain":"team-ke.com","tld":"com"},"ip":{"addr":"172.67.191.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ggg.team-ke.com/496361c95","date":"2026-10-13T03:49:15.118Z","timestamp":1791863355118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-ke.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 15:30:48 GMT","end":"Wed, 06 Jan 2027 15:30:47 GMT"},"fingerprint":{"sha1":"95:B1:94:32:42:5B:C0:C3:E6:45:99:14:4B:8D:78:EF:5E:8A:B7:37","sha256":"4F:9D:2F:44:76:0D:E1:C8:C7:2A:E7:CE:A7:70:3D:07:A5:99:C6:28:61:FF:FE:C6:71:22:10:CB:51:83:25:CB"}}},"request":{"raw":"GET /d93bac209/39460/5eaab08.jpg HTTP/1.1\r\nHost: ggg.team-ke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ggg.team-ke.com/d93bac209/39460/55787ad.css?v=Z96TPTHh5g\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:15 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Og4cNaOqRqBNgLQnRGkMI1Hu4u8qKcinbFRUMvymqptPQAPkAr9U4TSfWwgLZBFcd50fCCvw3NmuvVtiZllG4yr7wM8r8NXDS3j1Xbs5Ms%2BpRW3%2B9LG26BPLoWr9IesZeLw%3D\"}]}\r\npriority: u=4,i\r\nlast-modified: Tue, 13 Oct 2026 03:49:15 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f9179940731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20999,"size_decoded":21619,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 700x650, components 3","md5":"6e3e5183b50c642b3bae63a8b8a03213","sha1":"4f24341f897ff9a17b68da434e02bf683086b7a1","sha256":"e4d1def39d414391d76b0950ba744a88eca89151062b1ea59e20d421fce2f895","sha512":"943d0dab2ce5b8c89c0db9e0461a37b3656f7d8479579afa498f83635c6ac351c63e6ecbc0aa0fa6fc352915f8a3d8ffcbd6551524759e910a324593aa62acea","ssdeep":"384:SCJTRuwzvTS8D4Elodr0TSM1uQ+9tDgRzYx7bcZrRAV:SCxPTP4ElodgSkuQ+9t2sx7Gri","tlshash":"309249b0fbc3e3602b5326ada43c3e33079a01d565d50d0749ab4c15a988f36d70b67e","first_seen":"2026-10-13T03:36:56.672094Z","last_seen":"2026-10-13T03:49:57.245481Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":172,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"ggg.team-ke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/images/logo_steam.svg?v=8","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.500Z","timestamp":1791863352500,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-gu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 11:35:29 GMT","end":"Sun, 03 Jan 2027 11:35:28 GMT"},"fingerprint":{"sha1":"AC:93:FE:9C:B5:FA:4B:AB:ED:B1:C1:FC:93:B3:32:B7:53:2D:A7:E3","sha256":"D1:6F:2F:6E:59:C8:E6:06:2C:61:70:94:40:17:01:A1:20:E9:E4:24:DF:09:16:49:A5:19:32:86:BF:3F:B8:D4"}}},"request":{"raw":"GET /p/rpt-bvj/ozjybtpc/images/logo_steam.svg?v=8 HTTP/1.1\r\nHost: s.team-gu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/p/rpt-bvj/ozjybtpc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 23 Sep 2026 07:29:17 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l6ryDhh7inuQiaiWO5g3znZWLno8IW5wwvnqdGd5ELL%2FUpwZ3AD4cboaDtjdxjeA98QJ1iNgYUwzVzj5JooB1TwowhGGisrIsjzDs1JI7tvufLnl5CtzDqUn685reota\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6ab37fcd-e3e\"\r\ncontent-encoding: gzip\r\nage: 786\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f81182e712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3646,"size_decoded":2426,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"31aabe1e01f27b3b9b47d7265807afc2","sha1":"a430f5a8a81145215c41c3ba80929627e570d81e","sha256":"3a4d08139646d567a612f75b8179641c570d490f8013478d131266ed21f3d453","sha512":"60dfb140295124b3f6b57592504ca6006c22988bba82bf63c5559fa7f8da2aab7e163265abb2a312034875f95fa850bbacb620ecca6c56ea8e79689963cd31c4","ssdeep":"","tlshash":"f971b4cc17338be06595c27e1e7476d223b365a9e8b001e8a3920c202c0bfe69a64d75","first_seen":"2023-10-31T01:09:47Z","last_seen":"2026-10-13T04:37:16.882343Z","times_seen":3050,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ggg.team-ke.com/d93bac209/39460/15c3044.js?v=Z96TPTHh5g","fqdn":"ggg.team-ke.com","domain":"team-ke.com","tld":"com"},"ip":{"addr":"172.67.191.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ggg.team-ke.com/496361c95","date":"2026-10-13T03:49:13.228Z","timestamp":1791863353228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-ke.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 15:30:48 GMT","end":"Wed, 06 Jan 2027 15:30:47 GMT"},"fingerprint":{"sha1":"95:B1:94:32:42:5B:C0:C3:E6:45:99:14:4B:8D:78:EF:5E:8A:B7:37","sha256":"4F:9D:2F:44:76:0D:E1:C8:C7:2A:E7:CE:A7:70:3D:07:A5:99:C6:28:61:FF:FE:C6:71:22:10:CB:51:83:25:CB"}}},"request":{"raw":"GET /d93bac209/39460/15c3044.js?v=Z96TPTHh5g HTTP/1.1\r\nHost: ggg.team-ke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ggg.team-ke.com/496361c95\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:13 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nage: 786\r\nlast-modified: Tue, 13 Oct 2026 03:36:07 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fMbOxbHq0agXrcKIbEwm0Ku7btKQg5Br4WbcuE%2FOrbfmtNSxkqqyGCgBvPG8JOtCc%2BrKiIeG8qV30NgXdBTmYb%2BQEnUDHbEmweEg4RUR2Dciy5QuC4GIrJck9Hhshy5G5D8%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a49b5f85af340731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95701,"size_decoded":35808,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32086)","md5":"eba51a61894a773df5cab2a18e499c0b","sha1":"e028428f4f367af2660a66e976f223695020e732","sha256":"225edf54855697e6207ba9bded4d041d824e44c7c842f2803ede51764a9e54ab","sha512":"a57c4b5a43b3b629737c98ca9fb0cd549bc35c300208c23690bf9f04312d2aaca179d6cf523f031f2d6dcd42b4e8156a149b0ae676cc09737a6615c8d7119cfc","ssdeep":"1536:DPEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzmQ:oNMyqhJvN32cBC7M6Whca98Hrp","tlshash":"bd93d8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","first_seen":"2023-03-07T12:27:03Z","last_seen":"2026-10-13T04:37:16.925772Z","times_seen":276,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"ggg.team-ke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/shared/images/award_icon.svg","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.526Z","timestamp":1791863352526,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/shared/images/award_icon.svg HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-94e\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\nvia: 1.1 varnish\r\nage: 26130\r\nx-served-by: cache-bma-essb1270073-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 454\r\nx-timer: S1791863353.874654,VS0,VE0\r\ncontent-length: 2382\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2382,"size_decoded":2788,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b6d84fce4193d4f91cb2373259b5333a","sha1":"ad1157e4f0e24c8ce671af84187a6c013f13d04c","sha256":"b972d744ba896f74221183731c0a24cc79acfa434ab60dc746221cb802617ea7","sha512":"a807d31ac243722e36af42860509f03ad208a7062ac5b84170207d9d812af1852800be4c174587e44eba0c02ac43722433a40a63939e315c1cbe32dde91401a2","ssdeep":"","tlshash":"df4125fb524261d6ec4fcbf8dd3b59a5719e34ba7ea4829541349a3076742e8480dd04","first_seen":"2023-10-31T01:09:47Z","last_seen":"2026-10-13T04:37:16.910681Z","times_seen":861,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":9,"dns":0,"connect":12,"send":0,"wait":11,"receive":0,"ssl":260},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH-XExsm1J37Y9kZw95Pm72bmUx7wkJev7jJe7Oa8bZtsMvOSAGavyet3tK8wTHCykRt34WSDyIqvIi7GagZ1D8F4F-5bs0a-wNziYujktgDd349E02yg2WCvb30Y/96fx96f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.134","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.548Z","timestamp":1791863352548,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 19:33:34 GMT","end":"Thu, 31 Dec 2026 19:33:33 GMT"},"fingerprint":{"sha1":"60:75:6C:3B:7D:C2:BD:27:D4:14:61:F7:5A:0E:49:55:D8:9A:80:C5","sha256":"35:24:FF:98:2A:26:11:7D:16:58:6C:EB:48:BF:FA:AA:A1:98:08:B6:11:67:91:3D:4C:C1:D1:74:09:7B:95:CE"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH-XExsm1J37Y9kZw95Pm72bmUx7wkJev7jJe7Oa8bZtsMvOSAGavyet3tK8wTHCykRt34WSDyIqvIi7GagZ1D8F4F-5bs0a-wNziYujktgDd349E02yg2WCvb30Y/96fx96f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 23 Jun 2021 22:39:52 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 14515\r\nCache-Control: public, max-age=530821\r\nExpires: Mon, 19 Oct 2026 07:16:13 GMT\r\nDate: Tue, 13 Oct 2026 03:49:12 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14515,"size_decoded":16344,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"355af14c7469c98fac6e525d2da801a6","sha1":"36d40b324b6a302427b48f2ec607037a510082fa","sha256":"01dcca8b87c44cbbb87b76f95759983e7d2110461775f8d9357cf4557f8b36e6","sha512":"8f17883d53f896cc7906c26abc574079c37a8bd534faeebbe10761eef6410ee934579ca088388a6f3891544e2d7a36e2280bf70a1ca397240646714cced8ec64","ssdeep":"192:B8f1yYhBSVjmFsM6yPtHsCXJSmiyOjXx4wSlla9fgQHYK3+8kKwsdarjUEsGB2Jj:yhOZmiOdQjh84fhHYKuR2dEuNJ4wObS1","tlshash":"4052d033d679d13b4aea631b2b6de811047da02b71cf77c2687b2e441bc1eb95b09498","first_seen":"2025-11-26T00:23:13.886654Z","last_seen":"2026-10-13T04:37:16.907274Z","times_seen":48,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":5,"dns":1,"connect":4,"send":0,"wait":3,"receive":0,"ssl":223},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.pinimg.com/736x/80/d9/b9/80d9b9b2c7609cebba68ca666803e2d8.jpg","fqdn":"i.pinimg.com","domain":"pinimg.com","tld":"com"},"ip":{"addr":"151.101.64.84","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.522Z","timestamp":1791863352522,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pinterest.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 13 Aug 2026 00:00:00 GMT","end":"Fri, 26 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"29:C4:71:65:04:3A:28:58:1C:6C:6C:58:16:55:B3:C6:17:5B:6C:CF","sha256":"4B:CD:17:54:85:57:4F:28:33:A0:D4:39:6B:C2:2B:EE:7A:C7:76:4E:65:B5:87:7F:B5:27:C3:3C:7B:BA:8F:0F"}}},"request":{"raw":"GET /736x/80/d9/b9/80d9b9b2c7609cebba68ca666803e2d8.jpg HTTP/1.1\r\nHost: i.pinimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\netag: \"f70807fd524646ecff2d1d524156f31e\"\r\nx-amz-server-side-encryption: AES256\r\ncontent-type: image/jpeg\r\ncache-control: max-age=31536000, immutable\r\naccept-ranges: bytes\r\nvary: Origin\r\nserver-timing: cdn;desc=\"fastly\", cdn-cache;desc=\"HIT, HIT\", cdn-edge-time;dur=1\r\nx-cdn: fastly\r\nalt-svc: h3=\":443\";ma=604800\r\ndate: Tue, 13 Oct 2026 03:49:13 GMT\r\ncontent-length: 71437\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":71437,"size_decoded":71845,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 736x736, components 3","md5":"f70807fd524646ecff2d1d524156f31e","sha1":"fe4bc19bafe1ed41f4530dd8c9c122e4eb087983","sha256":"be19189c4d4f5db6b38ad37864361012c3bc4d617d282894b5f4151b9fdd7f67","sha512":"dd8d0023ad99c04c5a85dc4c6ec1c5e01435e586a96b71eb2ebf30a5bcba5f756b00da12d3c2bf08fef29066dab09879b3b4d5f0e262e641fc2a94f09d8b3339","ssdeep":"1536:EtlDPTVvX4x3UHyu53nOJsyhTKhxpHG0RxT3Iqd7YWd:EtVmxSr5r6TKfpma4qFHd","tlshash":"7c63029cdb771316cbfc8a731ee175d04094e264aa5cfc07910a2e8bd8396dde602e70","first_seen":"2026-10-13T03:49:57.253787Z","last_seen":"2026-10-13T03:49:57.253787Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":2,"connect":8,"send":0,"wait":10,"receive":11,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ggg.team-ke.com/d93bac209/39460/494f87b.png","fqdn":"ggg.team-ke.com","domain":"team-ke.com","tld":"com"},"ip":{"addr":"172.67.191.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ggg.team-ke.com/496361c95","date":"2026-10-13T03:49:13.237Z","timestamp":1791863353237,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-ke.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 15:30:48 GMT","end":"Wed, 06 Jan 2027 15:30:47 GMT"},"fingerprint":{"sha1":"95:B1:94:32:42:5B:C0:C3:E6:45:99:14:4B:8D:78:EF:5E:8A:B7:37","sha256":"4F:9D:2F:44:76:0D:E1:C8:C7:2A:E7:CE:A7:70:3D:07:A5:99:C6:28:61:FF:FE:C6:71:22:10:CB:51:83:25:CB"}}},"request":{"raw":"GET /d93bac209/39460/494f87b.png HTTP/1.1\r\nHost: ggg.team-ke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ggg.team-ke.com/496361c95\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:13 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BFgUjXoHaLXcBJ81OczkxGkpaGFOrJrRMy%2FCwUouEKByLsGLDe8PKYYtGQumCTFfis5Ux7t9Ufn6uvbqj7RTRCIlEGXsG0P1rij%2FYbdyju952mBY6JMA44URhzs6BjL7Zro%3D\"}]}\r\npriority: u=5,i\r\nage: 785\r\nlast-modified: Tue, 13 Oct 2026 03:36:07 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f85bf380731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3871,"size_decoded":4501,"mime_type":"image/png","magic":"PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced","md5":"471ddb6abfb29a5165e7a6d93f0ffdba","sha1":"a812d6f45a3b1bcebbbfb70f41b4aeb403b98baa","sha256":"742a450b396a4c1560745ea48040cf975f20768a56346475ef1a27d3a591345d","sha512":"e3cc0fd77d7d4292e4ab9696515c01b279af4065c1f792c630d5b794394d95e31d42436dd2d317a66b361f2aa461ef5e95784668481653d6ad3c998dafc94d06","ssdeep":"","tlshash":"0e81f8b01ade7a9009754e0f44bc8fd27d4aac77843c219788ac9c58b5ce075d82f24f","first_seen":"2026-03-11T04:01:43.827243Z","last_seen":"2026-10-13T04:37:16.899757Z","times_seen":15,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"ggg.team-ke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/images/btn_header_installsteam_download.png","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.634Z","timestamp":1791863352634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-gu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 11:35:29 GMT","end":"Sun, 03 Jan 2027 11:35:28 GMT"},"fingerprint":{"sha1":"AC:93:FE:9C:B5:FA:4B:AB:ED:B1:C1:FC:93:B3:32:B7:53:2D:A7:E3","sha256":"D1:6F:2F:6E:59:C8:E6:06:2C:61:70:94:40:17:01:A1:20:E9:E4:24:DF:09:16:49:A5:19:32:86:BF:3F:B8:D4"}}},"request":{"raw":"GET /p/rpt-bvj/ozjybtpc/images/btn_header_installsteam_download.png HTTP/1.1\r\nHost: s.team-gu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/p/rpt-bvj/ozjybtpc/css/shared_global.css?v=8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 23 Sep 2026 07:35:11 GMT\r\npriority: u=4,i\r\netag: \"6ab3812f-123\"\r\naccept-ranges: bytes\r\nage: 786\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EQ1bH9T4EnRfVt9iejAlSxVEr%2FlhYPvKqCduhQubIXOWl0D1SB8a1BjTWhAL4XrsHy%2BL0p1G%2FCqeXoEWvcHlN0OViQ9SsGXpCzMBJquLyUWwnKdWsy%2Bxy0nVfev9hPju\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f81f841712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 291\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":291,"size_decoded":982,"mime_type":"image/png","magic":"PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced","md5":"a2796187c58c7e948159e37d6990ecc2","sha1":"4209cd85add507247f9ce5a87a8c9095b54ee417","sha256":"23341256db7f44b1f3811880fa2bae6b7748bbf6b62c544a162e38cf0d5c5082","sha512":"5ef103b8398507495c2708df8fcd82bdb763b1d580aaaa6cacfb805614764277c19e8ece5d890a8aafc004fc8c25e3ab2e67d6fbf373c432a9a0d7c36fa0890f","ssdeep":"","tlshash":"83d0ebf3a3e86d79fb52fe97d10180e0465fcaeb6004877889c3880447a81f880f2996","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-10-13T04:37:16.954771Z","times_seen":7715,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ggg.team-ke.com/d93bac209/39460/73da418.png","fqdn":"ggg.team-ke.com","domain":"team-ke.com","tld":"com"},"ip":{"addr":"172.67.191.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ggg.team-ke.com/496361c95","date":"2026-10-13T03:49:13.337Z","timestamp":1791863353337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-ke.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 15:30:48 GMT","end":"Wed, 06 Jan 2027 15:30:47 GMT"},"fingerprint":{"sha1":"95:B1:94:32:42:5B:C0:C3:E6:45:99:14:4B:8D:78:EF:5E:8A:B7:37","sha256":"4F:9D:2F:44:76:0D:E1:C8:C7:2A:E7:CE:A7:70:3D:07:A5:99:C6:28:61:FF:FE:C6:71:22:10:CB:51:83:25:CB"}}},"request":{"raw":"GET /d93bac209/39460/73da418.png HTTP/1.1\r\nHost: ggg.team-ke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ggg.team-ke.com/496361c95\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:13 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rKOaPRlcuqc5jLl6%2FpRnvV6MonEeuhLaftU3PhBRYR012Y48aYnqifa109xuBCvybNT0PqVRglWiSU002aRx0QWpEwl8eUfaspmMUadRtz9rf5Nnx69XCK%2FL%2Bs%2B5OeMR%2BFM%3D\"}]}\r\npriority: u=5,i\r\nage: 786\r\nlast-modified: Tue, 13 Oct 2026 03:36:07 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f865f4c0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":988,"size_decoded":1622,"mime_type":"image/png","magic":"PNG image data, 96 x 26, 8-bit/color RGBA, non-interlaced","md5":"cbe7699ca902af4422f4f9ceb8ca5024","sha1":"7ec7ea950fedd82db3f859d935c33b4281b69b74","sha256":"b3f66677d1d3b82b09bb4f78ca920b40a87be7b5f5dc5c615414efe96113dad7","sha512":"2c53d9a600eefbd9c0467aab6b5ee3aa005f4b3882ce1d8438afb6712824926a1c081e2e5a412c0608a538d5005cae8c0030d2ac11c86a9d540b9478c7841ae4","ssdeep":"","tlshash":"8f11a5d2a68cae3a7027800b038b07868d64d826680ae27f501a21e28c313c813e685a","first_seen":"2023-10-29T15:54:42Z","last_seen":"2026-10-13T04:37:16.921913Z","times_seen":7,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"ggg.team-ke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ggg.team-ke.com/d93bac209/39460/a19704a.ttf","fqdn":"ggg.team-ke.com","domain":"team-ke.com","tld":"com"},"ip":{"addr":"172.67.191.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ggg.team-ke.com/496361c95","date":"2026-10-13T03:49:15.149Z","timestamp":1791863355149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-ke.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 15:30:48 GMT","end":"Wed, 06 Jan 2027 15:30:47 GMT"},"fingerprint":{"sha1":"95:B1:94:32:42:5B:C0:C3:E6:45:99:14:4B:8D:78:EF:5E:8A:B7:37","sha256":"4F:9D:2F:44:76:0D:E1:C8:C7:2A:E7:CE:A7:70:3D:07:A5:99:C6:28:61:FF:FE:C6:71:22:10:CB:51:83:25:CB"}}},"request":{"raw":"GET /d93bac209/39460/a19704a.ttf HTTP/1.1\r\nHost: ggg.team-ke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ggg.team-ke.com/d93bac209/39460/55787ad.css?v=Z96TPTHh5g\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:15 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cFQnBCIkJR7KVbyw2qouJsFyUd0fCfRrHDHk47DfYuz9Cxei%2FU%2F8IMi4sTBDL5l%2FYMso3lWS55ai5Jme2uE%2FtlqWjkP8aRyz1XcF4lQTWsUZViV6IKXZ46encj2kouMz164%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 13 Oct 2026 03:49:15 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f91a9950731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122684,"size_decoded":123325,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 22 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansRegular4.015;Plau;MotivaSan","md5":"57613e143ff3dae10f282e84a066de28","sha1":"88756cc8c6db645b5f20aa17b14feefb4411c25f","sha256":"19b8db163bcc51732457efa40911b4a422f297ff3cd566467d87eab93cef0c14","sha512":"94f045e71b9276944609ca69fc4b8704e4447f9b0fc2b80789cc012235895c50ef9ecb781a3ed901a0c989bed26caa37d4d4a9baffcce2cb19606dbb16a17176","ssdeep":"3072:lpsQ7l3T64Z1lKcDqttEPBWVNwZ+e222pKKSxfj9:Yg3T64Z19DqtkWbu/222kZfh","tlshash":"82c34b06f316e70aec614e3c66769399b358f8a53f2fcb0b95857d60bcad0d51e8128c","first_seen":"2023-04-05T04:16:14Z","last_seen":"2026-10-13T05:13:14.427351Z","times_seen":7503,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"ggg.team-ke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/css/buttons.css?v=8","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.219Z","timestamp":1791863352219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-gu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 11:35:29 GMT","end":"Sun, 03 Jan 2027 11:35:28 GMT"},"fingerprint":{"sha1":"AC:93:FE:9C:B5:FA:4B:AB:ED:B1:C1:FC:93:B3:32:B7:53:2D:A7:E3","sha256":"D1:6F:2F:6E:59:C8:E6:06:2C:61:70:94:40:17:01:A1:20:E9:E4:24:DF:09:16:49:A5:19:32:86:BF:3F:B8:D4"}}},"request":{"raw":"GET /p/rpt-bvj/ozjybtpc/css/buttons.css?v=8 HTTP/1.1\r\nHost: s.team-gu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/p/rpt-bvj/ozjybtpc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Sep 2026 07:34:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iI%2FC3H5EG2FVaHivRCbBhQ%2FuQKvL67Gg3OC%2FeLDi3YpTG97ScmNy5PBWT2BlE0xu7FdRO8ittpG%2FKmEhGg7U8e7CmLflbnYty7NQAfwf5jb7dkh%2FGWgvhPsBD6mOg18k\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6ab3810a-92da\"\r\ncontent-encoding: gzip\r\nage: 786\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f7f5fff712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37594,"size_decoded":4632,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"d702c96f0f926fa3c9e1c1e670e07d9d","sha1":"f02ab380f12b41693f7176947c6181e90dc229bb","sha256":"8b8a6867a1cad59cf47c8a8ab28256f6867d9a59b8f0efc74e64ab827908281c","sha512":"005be4035c075a0ffc778e01d17bfd9fbf0d409aea277e976f9d212a3191baac8192c1d382ad244762198816a414998da6029d3a63f39c0520bfdfa7841e4c4f","ssdeep":"768:1G2yYDO6XUvWEQU9H8TOzuWOMqWZRhcJhJ/J8:2ulMvZR7","tlshash":"83f2f09d728e70793727e2e0a2335fa4ae6550ad84670fdfb2f5f1bc43a60dc1521816","first_seen":"2026-06-26T02:14:11.65254Z","last_seen":"2026-10-13T04:37:16.929501Z","times_seen":41,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ggg.team-ke.com/d93bac209/39460/bb0d8ef.ttf","fqdn":"ggg.team-ke.com","domain":"team-ke.com","tld":"com"},"ip":{"addr":"172.67.191.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ggg.team-ke.com/496361c95","date":"2026-10-13T03:49:15.153Z","timestamp":1791863355153,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-ke.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 15:30:48 GMT","end":"Wed, 06 Jan 2027 15:30:47 GMT"},"fingerprint":{"sha1":"95:B1:94:32:42:5B:C0:C3:E6:45:99:14:4B:8D:78:EF:5E:8A:B7:37","sha256":"4F:9D:2F:44:76:0D:E1:C8:C7:2A:E7:CE:A7:70:3D:07:A5:99:C6:28:61:FF:FE:C6:71:22:10:CB:51:83:25:CB"}}},"request":{"raw":"GET /d93bac209/39460/bb0d8ef.ttf HTTP/1.1\r\nHost: ggg.team-ke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ggg.team-ke.com/d93bac209/39460/55787ad.css?v=Z96TPTHh5g\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:15 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B6%2BdMJTj6F37R5QENR7YlRtVBv0YZRDOTn2gyYrXYzPjKE7mrm%2BRn73NkT8ZHwrHgsGx%2Bm2LSuBfHVYD7%2B9ryLzFm6IeiVOTzzyhAxDFhlFGfzfncAKKl4Cc4Xf3DzfkSXk%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 13 Oct 2026 03:49:15 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f91b9970731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124048,"size_decoded":124691,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansMedium4.015;Plau;MotivaSans","md5":"2d64caa5ecbf5e42cbb766ca4d85e90e","sha1":"147420abceb4a7fd7e486dddcfe68cda7ebb3a18","sha256":"045b433f94502cfa873a39e72d616c73ec1b4c567b7ee0f847f442651683791f","sha512":"c96556ec57dac504919e806c7df536c4f86892b8525739289b2f2dbbf475de883a4824069dbdd4bb1770dd484f321563a00892e6c79d48818a4b95406bf1af96","ssdeep":"1536:v4Kkq/szjKJRIDCnR96guXgECINo28BZZDhpkemOXaxq4jKea8GyFLaE0Af0ffL9:vf/fxn7ElXxE0wS0fj9","tlshash":"86c35c06f706d709dd240e3df9a1a3a9b358f8a57b1fcb0fa6856d65fc8e0852a441cc","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-10-13T04:37:16.951508Z","times_seen":7256,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"ggg.team-ke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-13T03:49:11.639Z","timestamp":1791863351639,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-gu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 11:35:29 GMT","end":"Sun, 03 Jan 2027 11:35:28 GMT"},"fingerprint":{"sha1":"AC:93:FE:9C:B5:FA:4B:AB:ED:B1:C1:FC:93:B3:32:B7:53:2D:A7:E3","sha256":"D1:6F:2F:6E:59:C8:E6:06:2C:61:70:94:40:17:01:A1:20:E9:E4:24:DF:09:16:49:A5:19:32:86:BF:3F:B8:D4"}}},"request":{"raw":"GET /p/rpt-bvj/ozjybtpc HTTP/1.1\r\nHost: s.team-gu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q2So5%2F%2Fy7c%2FQ1%2ByYPTVdks%2ByjvteczbWJr1FzDHZgU3i4fxb%2FslRTMOMjXpSgMwmW3%2FoeNXwSB0xzV2vYDhjNsSgtBFmgbNBIIIgVPTyWe4RbHosKLx%2Bb%2BxQGqE5MEM%2F\"}]}\r\npriority: u=0,i\r\nlocation: /p/rpt-bvj/ozjybtpc/\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f7bef96712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T06:30:54.669451Z","times_seen":19073715,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":5,"connect":16,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/js/main_1.js?v=8","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.237Z","timestamp":1791863352237,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-gu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 11:35:29 GMT","end":"Sun, 03 Jan 2027 11:35:28 GMT"},"fingerprint":{"sha1":"AC:93:FE:9C:B5:FA:4B:AB:ED:B1:C1:FC:93:B3:32:B7:53:2D:A7:E3","sha256":"D1:6F:2F:6E:59:C8:E6:06:2C:61:70:94:40:17:01:A1:20:E9:E4:24:DF:09:16:49:A5:19:32:86:BF:3F:B8:D4"}}},"request":{"raw":"GET /p/rpt-bvj/ozjybtpc/js/main_1.js?v=8 HTTP/1.1\r\nHost: s.team-gu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/p/rpt-bvj/ozjybtpc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E690yTwkic0Ye1aqouaF3w%2FoQ3%2BFGwDki%2Ff2Q%2BYu7m8dAUB1aQ441hsLUNtv4tKk8IncoDjgna8%2B0%2FZUS%2FGlE%2FeCW3Qs148OGeAfcQga0if%2Fb4U2gOw%2BgdKVBD%2BJe3uJ\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncache-control: no-cache, no-store, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a49b5f7f780a712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3,"size_decoded":686,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"4f4adcbf8c6f66dcfc8a3282ac2bf10a","sha1":"c35a9fc52bb556c79f8fa540df587a2bf465b940","sha256":"6b3c238ebcf1f3c07cf0e556faa82c6b8fe96840ff4b6b7e9962a2d855843a0b","sha512":"0d15d65c1a988dfc8cc58f515a9bb56cbaf1ff5cb0a5554700bc9af20a26c0470a83c8eb46e16175154a6bcaad7e280bbfd837a768f9f094da770b7bd3849f88","ssdeep":"","tlshash":"c72000000000000000000000000000000000c0000000000000000000c0000000000000","first_seen":"2023-03-14T15:28:33Z","last_seen":"2026-10-13T04:37:16.901048Z","times_seen":3676,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shared.fastly.steamstatic.com/store_item_assets/steam/apps/105600/header.jpg?t=1769844435","fqdn":"shared.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.554Z","timestamp":1791863352554,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shared.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:03:00 GMT","end":"Mon, 21 Dec 2026 11:02:59 GMT"},"fingerprint":{"sha1":"35:27:95:F1:7A:87:90:C8:D5:F1:A9:04:B3:07:6D:A6:FD:D3:2C:C7","sha256":"D8:4F:7F:70:8F:7A:7E:8B:84:AD:3C:28:69:F1:A7:43:EA:B9:82:9E:88:6C:DF:63:E3:60:FB:48:13:0F:C3:63"}}},"request":{"raw":"GET /store_item_assets/steam/apps/105600/header.jpg?t=1769844435 HTTP/1.1\r\nHost: shared.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 28 Sep 2022 20:44:16 GMT\r\netag: \"6334b220-f2e1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\nvia: 1.1 varnish\r\nage: 439925\r\nx-served-by: cache-bma-essb1270050-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 15136\r\nx-timer: S1791863353.833013,VS0,VE0\r\ncontent-length: 62177\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62177,"size_decoded":62666,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 460x215, components 3","md5":"d78880fd195bd5c296f7a409097c4cc1","sha1":"b1a22bdf0b1f4f7fa8796a04b50072c80fbd59d7","sha256":"866a45d030cf6af1fe06fd311a57cb472cb12411b2cdfe78391fd8b8ce4ab4bd","sha512":"1cce0315f4b472f5c7d4dfd93fadce8b4ee6c51304be463f1b63279386a97b8f0ba0eb20fb2cbd0e8d0e9c096ae281421b87703cf0aa25cac4e10fbe0a0b0818","ssdeep":"768:+DhkbiXq8q09twIqk1bHHDeLG21cXXgdtCCPfIEtJewi+Au5Y9EsFjRfvmXQIEaS:+1I+q70/nHjeLxCCHpAfSCjzIN0PeZMT","tlshash":"5e53024766b4cce0fec68b3144c6a8dd4cdfaca4c5ab945b75d8132680a28deae44d3d","first_seen":"2023-08-01T22:13:33Z","last_seen":"2026-10-13T04:37:16.886276Z","times_seen":57,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":4,"dns":1,"connect":11,"send":0,"wait":31,"receive":10,"ssl":236},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/js/main_1.js?v=8","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.812Z","timestamp":1791863352812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-gu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 11:35:29 GMT","end":"Sun, 03 Jan 2027 11:35:28 GMT"},"fingerprint":{"sha1":"AC:93:FE:9C:B5:FA:4B:AB:ED:B1:C1:FC:93:B3:32:B7:53:2D:A7:E3","sha256":"D1:6F:2F:6E:59:C8:E6:06:2C:61:70:94:40:17:01:A1:20:E9:E4:24:DF:09:16:49:A5:19:32:86:BF:3F:B8:D4"}}},"request":{"raw":"GET /p/rpt-bvj/ozjybtpc/js/main_1.js?v=8 HTTP/1.1\r\nHost: s.team-gu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/p/rpt-bvj/ozjybtpc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gdUbBQsp4pVDbSqJ0Fpfdjkwe4i%2FLJZzQ%2Byq15TP2wNFTLi9hH8YJbwiKuDKlMSpcE9ilUEATQQHfVWD1Uto8bxL0aDRnrZ9tGEAwRGmDmokD2bjoLeJV%2BUUlKtLH3mR\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncache-control: no-cache, no-store, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a49b5f831856712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3,"size_decoded":670,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"4f4adcbf8c6f66dcfc8a3282ac2bf10a","sha1":"c35a9fc52bb556c79f8fa540df587a2bf465b940","sha256":"6b3c238ebcf1f3c07cf0e556faa82c6b8fe96840ff4b6b7e9962a2d855843a0b","sha512":"0d15d65c1a988dfc8cc58f515a9bb56cbaf1ff5cb0a5554700bc9af20a26c0470a83c8eb46e16175154a6bcaad7e280bbfd837a768f9f094da770b7bd3849f88","ssdeep":"","tlshash":"c72000000000000000000000000000000000c0000000000000000000c0000000000000","first_seen":"2023-03-14T15:28:33Z","last_seen":"2026-10-13T04:37:16.901048Z","times_seen":3676,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ggg.team-ke.com/d93bac209/39460/6e6cfd2.png","fqdn":"ggg.team-ke.com","domain":"team-ke.com","tld":"com"},"ip":{"addr":"172.67.191.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ggg.team-ke.com/496361c95","date":"2026-10-13T03:49:13.235Z","timestamp":1791863353235,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-ke.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 15:30:48 GMT","end":"Wed, 06 Jan 2027 15:30:47 GMT"},"fingerprint":{"sha1":"95:B1:94:32:42:5B:C0:C3:E6:45:99:14:4B:8D:78:EF:5E:8A:B7:37","sha256":"4F:9D:2F:44:76:0D:E1:C8:C7:2A:E7:CE:A7:70:3D:07:A5:99:C6:28:61:FF:FE:C6:71:22:10:CB:51:83:25:CB"}}},"request":{"raw":"GET /d93bac209/39460/6e6cfd2.png HTTP/1.1\r\nHost: ggg.team-ke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ggg.team-ke.com/496361c95\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:13 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ki1gkaqV5SQI8RK1PBy%2FyRVmVbtXu0OPJTMRHwrHEXCmlQ6TdOTw%2BzsomI36klMYNNZOBe0EvYph2OWGtFjReSEPEH%2BqYUHkYK3hFoq5rQ417cAy6WjGd%2BIPiAm%2FAgNrtbI%3D\"}]}\r\npriority: u=5,i\r\nage: 786\r\nlast-modified: Tue, 13 Oct 2026 03:36:07 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f85bf370731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":974,"size_decoded":1608,"mime_type":"image/png","magic":"PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced","md5":"394222f97a9fcfd5082ed21be3b5d204","sha1":"a5ca4828fa1ea01e893791b7e9d78fd13dcd4052","sha256":"27cb8ce4a39fa80baca0c4e39d14c7d565f096a20095149204b14b9951a9072a","sha512":"204203ab7338ec5f3a5bce3e153bbbfe0b0a427a3a777ef0418ee14562aeb0b28ce0129a41615f430c4eca46f9a03aa73436132139007b4b666b5798a004e39a","ssdeep":"","tlshash":"661198bc4d55953cebd50807415f538665214a4539c15589f0d55c03121093e26b139e","first_seen":"2026-08-26T09:38:33.15055Z","last_seen":"2026-10-13T04:37:16.896585Z","times_seen":6,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"ggg.team-ke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/images/footerLogo_valve_new.png?v=8","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.493Z","timestamp":1791863352493,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-gu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 11:35:29 GMT","end":"Sun, 03 Jan 2027 11:35:28 GMT"},"fingerprint":{"sha1":"AC:93:FE:9C:B5:FA:4B:AB:ED:B1:C1:FC:93:B3:32:B7:53:2D:A7:E3","sha256":"D1:6F:2F:6E:59:C8:E6:06:2C:61:70:94:40:17:01:A1:20:E9:E4:24:DF:09:16:49:A5:19:32:86:BF:3F:B8:D4"}}},"request":{"raw":"GET /p/rpt-bvj/ozjybtpc/images/footerLogo_valve_new.png?v=8 HTTP/1.1\r\nHost: s.team-gu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/p/rpt-bvj/ozjybtpc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 23 Sep 2026 07:35:27 GMT\r\npriority: u=5,i\r\netag: \"6ab3813f-8ed\"\r\naccept-ranges: bytes\r\nage: 786\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jOzzzj3hZypzW1sUzrB7Qxg4Z132R0tLZ02l0oDo05GS78n938Be7HZr0tYWfX0dMZ642xEixsu428sfYNmLZclufgz34VlvKk%2F9vJqEIAjgI%2B0AnfGic%2BUcvy%2FCmcQZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f811828712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2285\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2285,"size_decoded":2977,"mime_type":"image/png","magic":"PNG image data, 184 x 52, 8-bit/color RGBA, non-interlaced","md5":"5cba6abf67ac92684a4782b891a69c9d","sha1":"d560912d1fecebbed7b18b1c472c70f70080bcee","sha256":"ff991cd769572478cdc67d22980851f2f4f028b009445f8e9251e84f0a2aa41c","sha512":"0393790799dd0b93b565c763fde339a6a66e462d72cb82ba8867c6c2fe19c10fd436d339a14287b7fd62c297dd2dd44cdcb8e6125e2eb2193c2c90281a360e2f","ssdeep":"","tlshash":"bf4139cec08ea41678fba99358546eec2a16d29bd8d158f00d98288d3561c7d57fc224","first_seen":"2025-10-15T17:17:10.867018Z","last_seen":"2026-10-13T04:37:16.947904Z","times_seen":1151,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ggg.team-ke.com/d93bac209/39460/fb815bd.woff2","fqdn":"ggg.team-ke.com","domain":"team-ke.com","tld":"com"},"ip":{"addr":"172.67.191.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ggg.team-ke.com/496361c95","date":"2026-10-13T03:49:15.154Z","timestamp":1791863355154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-ke.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 15:30:48 GMT","end":"Wed, 06 Jan 2027 15:30:47 GMT"},"fingerprint":{"sha1":"95:B1:94:32:42:5B:C0:C3:E6:45:99:14:4B:8D:78:EF:5E:8A:B7:37","sha256":"4F:9D:2F:44:76:0D:E1:C8:C7:2A:E7:CE:A7:70:3D:07:A5:99:C6:28:61:FF:FE:C6:71:22:10:CB:51:83:25:CB"}}},"request":{"raw":"GET /d93bac209/39460/fb815bd.woff2 HTTP/1.1\r\nHost: ggg.team-ke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ggg.team-ke.com/d93bac209/39460/55787ad.css?v=Z96TPTHh5g\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:15 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uhh8ewLzJ4YfqGGRbDd886NOi%2B27ZX0Fjrh8KDwA4eCggjWtfM0ssxzk7C71FjT%2BnASncXv%2F00wAij3CYa%2BSBO%2B2MhlBocwcqQA4HXSS9bnzh63TcqFCUSZP6XgX%2B4kj9mU%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 13 Oct 2026 03:49:15 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f91b9980731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15016,"size_decoded":15661,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 15016, version 1.0","md5":"ba310d7242d2b12ea5d769a79b55d975","sha1":"6808a778ef9d8aa896ed86856f0396fc8e9b9526","sha256":"4675a8ce063f9f5885a692f7a273acf7eeb800abca14aac75b6707b689532f04","sha512":"dc4d52564c4a7d54f1f021e2005b7520024b91359f47adbb029f3125539c42ff5d323e1264e5b500cb632b194baef620ae1cfdf0e57efded1175b201225be767","ssdeep":"384:ijn0/6PcBvW962uvJPaLc73VMYQyxRM8inXa6Bjgre:Kn0/A+W962uxSLW3VMCjfCXbWre","tlshash":"9562bf2e53f21195d3db177028ea7113916ade48a23fca4ca216f9df52c66c3188b51d","first_seen":"2025-09-27T06:36:03.69501Z","last_seen":"2026-10-13T03:49:57.265953Z","times_seen":43,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"ggg.team-ke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/images/skin_1/arrowDn9x5.gif","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.523Z","timestamp":1791863352523,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/images/skin_1/arrowDn9x5.gif HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/gif\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-44d\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\nvia: 1.1 varnish\r\nage: 7544\r\nx-served-by: cache-bma-essb1270073-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 84\r\nx-timer: S1791863353.624826,VS0,VE0\r\ncontent-length: 1101\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1101,"size_decoded":1501,"mime_type":"image/gif","magic":"GIF image data, version 89a, 9 x 5","md5":"ef8ee66b9461c0317eaab1827eac53bc","sha1":"24cf37bea83d4357c8481218f4c2c2acd74bc73c","sha256":"f2cc9ee07ca40866b840f1a4d780c4ab75d91bfdbe215c0f7251c0d76cfbad7c","sha512":"6386f06d466b9722ac3ba0e5224225032682c43de7d6fb096630d6ba54adba8fe7450d236ffd14b4fa2b481481ea98623c919b49e507c22912877e9476bfcded","ssdeep":"","tlshash":"6c1130cdbad2f841315cefc62cfb502b9a16484248f4e895f8da8c2e4d245b5951a6cb","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-10-13T04:37:16.941441Z","times_seen":1355,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH-TBwcOiPjSQ6lpx8YnL5UvpSAn5kZvh8yFe_c2jaap5LPXcCWicxet4j-57QSCnnRIqsjOGn53GLCrJKlp1FMchRO4Nt0S9kYXmPuzmtFbZgowTny34iy5I5i046u5XU_Yt_afQ2g_fcepqAzL9IIg/96fx96f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.134","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.549Z","timestamp":1791863352549,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 19:33:34 GMT","end":"Thu, 31 Dec 2026 19:33:33 GMT"},"fingerprint":{"sha1":"60:75:6C:3B:7D:C2:BD:27:D4:14:61:F7:5A:0E:49:55:D8:9A:80:C5","sha256":"35:24:FF:98:2A:26:11:7D:16:58:6C:EB:48:BF:FA:AA:A1:98:08:B6:11:67:91:3D:4C:C1:D1:74:09:7B:95:CE"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH-TBwcOiPjSQ6lpx8YnL5UvpSAn5kZvh8yFe_c2jaap5LPXcCWicxet4j-57QSCnnRIqsjOGn53GLCrJKlp1FMchRO4Nt0S9kYXmPuzmtFbZgowTny34iy5I5i046u5XU_Yt_afQ2g_fcepqAzL9IIg/96fx96f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nLast-Modified: Tue, 30 Aug 2016 20:35:26 GMT\r\nContent-Length: 8403\r\nCache-Control: public, max-age=544990\r\nExpires: Mon, 19 Oct 2026 11:12:22 GMT\r\nDate: Tue, 13 Oct 2026 03:49:12 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8403,"size_decoded":10231,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"63001f8bc635858250d9b28fbbeb7014","sha1":"5ebac1fdb001e12ed1fd2fd09a1f77d1df8db32c","sha256":"c9b43d10b412919227dcc90454b22ab808841aa436772cd5a9c68da29f53aec5","sha512":"1f6564900e88988b37eba8563edafa0fef5efd869fb6e8eeac03b16dc0768beb49edcfa33a44c368085b19c618068a69365a51929656f2ba79dfb447aaedeed5","ssdeep":"192:UZ9CuE3rTFwEEnhruucaMpN1hucGxhy0oPt:wCh6RuucPpN1hzIUF","tlshash":"1302afe07201e1e1db0a73e482882ea0769d98c7463b380d17f92c766f3d01cf21229b","first_seen":"2026-06-11T00:49:01.080737Z","last_seen":"2026-10-13T04:37:16.92816Z","times_seen":47,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":5,"dns":1,"connect":3,"send":0,"wait":5,"receive":0,"ssl":226},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ggg.team-ke.com/d93bac209/39460/55787ad.css?v=Z96TPTHh5g","fqdn":"ggg.team-ke.com","domain":"team-ke.com","tld":"com"},"ip":{"addr":"172.67.191.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ggg.team-ke.com/496361c95","date":"2026-10-13T03:49:13.225Z","timestamp":1791863353225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-ke.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 15:30:48 GMT","end":"Wed, 06 Jan 2027 15:30:47 GMT"},"fingerprint":{"sha1":"95:B1:94:32:42:5B:C0:C3:E6:45:99:14:4B:8D:78:EF:5E:8A:B7:37","sha256":"4F:9D:2F:44:76:0D:E1:C8:C7:2A:E7:CE:A7:70:3D:07:A5:99:C6:28:61:FF:FE:C6:71:22:10:CB:51:83:25:CB"}}},"request":{"raw":"GET /d93bac209/39460/55787ad.css?v=Z96TPTHh5g HTTP/1.1\r\nHost: ggg.team-ke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ggg.team-ke.com/496361c95\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:13 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nage: 786\r\nlast-modified: Tue, 13 Oct 2026 03:36:07 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZvhrpxBj8KmQ6tod5N8ve9VD4O0aGAv2Hm%2F2Q%2FR0vWcxbHelcs7a8wI%2BcdBNZXDgdwwwZdhOVim4byROM4HQxEIo3oaOQBfOK9dgNER3OS90pDjtzrgpyMkm8i2u8sP%2Bw4A%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a49b5f85af320731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42183,"size_decoded":14030,"mime_type":"text/css","magic":"ASCII text, with very long lines (42183), with no line terminators","md5":"d0d1c5838e786dc0bc14e1f1e857a303","sha1":"8db4ba2d0355a4f5184808d7d094bf9f51dc25e6","sha256":"b64c36eef0854c364220e76c5e9cbfa9f53cf76b53d79713a45cdb0d1d04624e","sha512":"7cec10c8c3daf501872ec9f09b434dfdefcc7d976c906ca0de96d2e0a8ba5319acb04d5da014a999ed26288e70d607a7a088f9ccb1917dcd4e73ae0364ef4340","ssdeep":"768:4rIYPYyYjY0cbacxKHL6iFQVs01M2pYzAjk5phih:4rICHMUacLiFortpYzAjk5p0","tlshash":"42132c316a913438b06bc8e7b8e03a9c717a4417d5231fbefa757568c6865db27b3308","first_seen":"2026-10-13T03:37:03.08012Z","last_seen":"2026-10-13T04:37:16.936451Z","times_seen":3,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"ggg.team-ke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-13T03:49:11.889Z","timestamp":1791863351889,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-gu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 11:35:29 GMT","end":"Sun, 03 Jan 2027 11:35:28 GMT"},"fingerprint":{"sha1":"AC:93:FE:9C:B5:FA:4B:AB:ED:B1:C1:FC:93:B3:32:B7:53:2D:A7:E3","sha256":"D1:6F:2F:6E:59:C8:E6:06:2C:61:70:94:40:17:01:A1:20:E9:E4:24:DF:09:16:49:A5:19:32:86:BF:3F:B8:D4"}}},"request":{"raw":"GET /p/rpt-bvj/ozjybtpc/ HTTP/1.1\r\nHost: s.team-gu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oafHYX7PFgwAHbmxRku7GRy0otPTgMVi41DJLLOY1VjF67Jt9zqs7vypkGwByDn79k85lWnfd1WGsiV%2FjsgU7RHfkHPkiUFu0Jlfh8vMKfPnhhSijiXcAFdWbQZoXmXJ\"}]}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\ncache-control: no-cache, no-store, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a49b5f7d4fc8712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87676,"size_decoded":21795,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (497), with CRLF, LF line terminators","md5":"0f2438a4fc9514707d10938fe91fb462","sha1":"1ec7ee496bb09b71713cfc93121ad14c5e5feded","sha256":"0010ad7f8e4d19e53237abcdeb3342d53e5e241edb5258787e63b47b49023f0d","sha512":"f7621be36d21c144ebc10575280121770b2db5cd6ab1cd809bea07ff9cd323d470fe4dbb668381a1f593b5656c76c83e0b99f1e584ac0e69c592715869f131ce","ssdeep":"1536:ir8YOjQm+PVA2aMUVK5ayeVM7EIlPcAPvIfa/sK:irE+Qa/sK","tlshash":"e383f865a8d040330377e2c1e6665f5efe925227c6054a21b7fc2be72ffad928a5340d","first_seen":"2026-10-13T03:37:03.111294Z","last_seen":"2026-10-13T04:37:16.91204Z","times_seen":3,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":129,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/css/modalContent.css?v=8","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.224Z","timestamp":1791863352224,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-gu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 11:35:29 GMT","end":"Sun, 03 Jan 2027 11:35:28 GMT"},"fingerprint":{"sha1":"AC:93:FE:9C:B5:FA:4B:AB:ED:B1:C1:FC:93:B3:32:B7:53:2D:A7:E3","sha256":"D1:6F:2F:6E:59:C8:E6:06:2C:61:70:94:40:17:01:A1:20:E9:E4:24:DF:09:16:49:A5:19:32:86:BF:3F:B8:D4"}}},"request":{"raw":"GET /p/rpt-bvj/ozjybtpc/css/modalContent.css?v=8 HTTP/1.1\r\nHost: s.team-gu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/p/rpt-bvj/ozjybtpc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Sep 2026 07:34:38 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iJbj7l%2Fdx6aj8Qy8wTej1d42Pvvv3YaibDn%2BiA%2FdHLXdlEj%2BAZnmI0L78bIzNbXz%2BckuLtRtX%2BccxW50yO3WobVdr1gLfGD%2BRCS2Kn6OharBu8JLokw68fRTUP10mhf2\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6ab3810e-9a1\"\r\ncontent-encoding: gzip\r\nage: 786\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f7f6802712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2465,"size_decoded":1560,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1df30e5a486708ab14bc8d0fb8df325d","sha1":"bcd22e35fdb83b5fef49408d6dd0f119c4454af5","sha256":"4363879b5802df5057005b652601c797ecc8412abc3510930e98263e7bc4696e","sha512":"4c04a86f78c2c0af98697bf902b041f15cd5bfa31b14a1afaa74e76899179320f6924351f26700cc23637011a71a93dbf18e7bd83b2e1ce8ecdf1ceb758a465d","ssdeep":"","tlshash":"715110a6556e304ef37bb9fdb3b57314af4400174f0b5ac9b4e8758a86c42f8102b4c9","first_seen":"2026-06-11T00:49:01.042813Z","last_seen":"2026-10-13T04:37:16.881196Z","times_seen":52,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/loyalty/reactions/still/10.png?v=5","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.533Z","timestamp":1791863352533,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 12:18:32 GMT","end":"Thu, 19 Nov 2026 12:18:31 GMT"},"fingerprint":{"sha1":"73:3D:80:BA:FF:E1:7B:1D:0E:6E:9A:40:E5:15:C7:6D:FE:46:B9:44","sha256":"F6:FC:99:1F:A8:9D:10:F1:85:36:C6:51:C1:BD:A3:BE:67:18:DC:98:E2:29:22:39:6F:84:4F:11:66:3A:2B:B8"}}},"request":{"raw":"GET /public/images/loyalty/reactions/still/10.png?v=5 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:18 GMT\r\netag: \"649bb1f6-41cc\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\nvia: 1.1 varnish\r\nage: 19035\r\nx-served-by: cache-bma-essb1270033-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 79\r\nx-timer: S1791863353.871915,VS0,VE0\r\ncontent-length: 16844\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":16844,"size_decoded":17247,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit/color RGBA, non-interlaced","md5":"594d5680989e3d63194ae3a7c5039643","sha1":"3596d780cc489ac467f112d13725a05babd05167","sha256":"56dbfb551f3b4712f5f2281d92ba29eb8e8b74fe2d4ae2127f6946f0330f8775","sha512":"7b294edf0685fe98aa48f34ce2345347ab84daceff35446f17f22e89bc5c01e2c41e253c1fd889e495a5e0ed52576862d42e401ee82a2d4f0deb2c2f62b030a3","ssdeep":"384:i2d9240+OWa3QEOuVArWTHARsElvEFuUgeDbXksjcYYY7xC1R/sbfr:bH240+OWrFqTQ1VeDlAY39CXQr","tlshash":"2172c04ba71ec49da85de2ef94924bb1090698ad0460f1012d7b7e0dbace1d53d73fb4","first_seen":"2023-05-10T18:55:19Z","last_seen":"2026-10-13T04:37:16.95401Z","times_seen":570,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":8,"dns":0,"connect":10,"send":0,"wait":37,"receive":16,"ssl":270},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/images/badges/13_gamecollector/10_80.png?v=4","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.538Z","timestamp":1791863352538,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/images/badges/13_gamecollector/10_80.png?v=4 HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-c7e\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\nvia: 1.1 varnish\r\nage: 1235\r\nx-served-by: cache-bma-essb1270073-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 4\r\nx-timer: S1791863353.624595,VS0,VE0\r\ncontent-length: 3198\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3198,"size_decoded":3597,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"5d84a030e9a003729b1fdf7302ed30ef","sha1":"b2ee6b1f4eb7cdd86b13033f655f8f08ddf12a6e","sha256":"109ff754cd8a3fc62e4bbf0d9fd246d4c73833e5afcccc8afed5b823dc8599d7","sha512":"686747137704cd358f63a6acf9187c2ec9395bc3f66b25800c76969f1e4071dcf8776fc16b09eb04fb45e21a633643fe33449c319b0994600cd276ca6e6af626","ssdeep":"","tlshash":"74616dae6e4669e891aa7ce530267cec1d47cc81f03d63fe96c746712f1f6141146be0","first_seen":"2024-08-20T09:57:11.992973Z","last_seen":"2026-10-13T04:37:16.915329Z","times_seen":67,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH_LGzN3uMWmS5FJK5oLg-FDlVAn4kZiv-TBU-M2veqdsLvGsGWKR0eF4_rZoTH7iwhtyt2zdzo34cCqWZgd0A8d0E7MMtxK8w4XkZOjq4FPW34lbjXKp-LVY1U8/96fx96f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.134","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.550Z","timestamp":1791863352550,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 19:33:34 GMT","end":"Thu, 31 Dec 2026 19:33:33 GMT"},"fingerprint":{"sha1":"60:75:6C:3B:7D:C2:BD:27:D4:14:61:F7:5A:0E:49:55:D8:9A:80:C5","sha256":"35:24:FF:98:2A:26:11:7D:16:58:6C:EB:48:BF:FA:AA:A1:98:08:B6:11:67:91:3D:4C:C1:D1:74:09:7B:95:CE"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH_LGzN3uMWmS5FJK5oLg-FDlVAn4kZiv-TBU-M2veqdsLvGsGWKR0eF4_rZoTH7iwhtyt2zdzo34cCqWZgd0A8d0E7MMtxK8w4XkZOjq4FPW34lbjXKp-LVY1U8/96fx96f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 18 Dec 2021 01:54:02 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 14170\r\nCache-Control: public, max-age=70303\r\nExpires: Tue, 13 Oct 2026 23:20:55 GMT\r\nDate: Tue, 13 Oct 2026 03:49:12 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14170,"size_decoded":15998,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"423bc2c5848f15d7fda2549c765f3233","sha1":"87c695c29730e4266b47b7ea9a6e72c017577f52","sha256":"bf2dd7e5d21f86658ec651ac845440e0f926d920ac77d89f51ddc5e0899bc24c","sha512":"778140727e895644c91e00c24c9f256750e577034bfb894a9183ca786d3decfa8b819e84f169c6bac8fb1488b076ceca010d43eaf8ac4f4d28f827dab2cc5501","ssdeep":"384:1F5oF1cRcV/gFtSrHML+DFuCnfiqoX4cRK8IcHC36Dcee:1Fig0/gFeHML+DoCnRoo+KtcCKcee","tlshash":"7352d0cf725802bb6dafbe3e7734148a95d977b66b184b4ec0b1a4ec400283cd858f15","first_seen":"2025-11-26T00:23:13.881859Z","last_seen":"2026-10-13T04:37:16.939156Z","times_seen":48,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":4,"dns":1,"connect":3,"send":0,"wait":7,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ggg.team-ke.com/d93bac209/39460/c2cd95e.ttf","fqdn":"ggg.team-ke.com","domain":"team-ke.com","tld":"com"},"ip":{"addr":"172.67.191.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ggg.team-ke.com/496361c95","date":"2026-10-13T03:49:15.158Z","timestamp":1791863355158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-ke.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 15:30:48 GMT","end":"Wed, 06 Jan 2027 15:30:47 GMT"},"fingerprint":{"sha1":"95:B1:94:32:42:5B:C0:C3:E6:45:99:14:4B:8D:78:EF:5E:8A:B7:37","sha256":"4F:9D:2F:44:76:0D:E1:C8:C7:2A:E7:CE:A7:70:3D:07:A5:99:C6:28:61:FF:FE:C6:71:22:10:CB:51:83:25:CB"}}},"request":{"raw":"GET /d93bac209/39460/c2cd95e.ttf HTTP/1.1\r\nHost: ggg.team-ke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ggg.team-ke.com/d93bac209/39460/55787ad.css?v=Z96TPTHh5g\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:15 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E137KzZWGE6pUo%2Fv4IKnMpQDdP2LnXUV8X8YMouhRF998lZNesd%2Fv9DVMZIcXYAFffc9mrZ6S2cFr89M6OH%2Beccy7mfTT1aWDaaJgaQ31Y66xEs%2FCApiXgwsK50RMwZrL4g%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 13 Oct 2026 03:49:15 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f91b9990731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118736,"size_decoded":119377,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansThin4.015;Plau;MotivaSans-T","md5":"ce6bda6643b662a41b9fb570bdf72f83","sha1":"87bcf1d2820b476aaeaea91dc7f6dbedd73c1cb8","sha256":"0adf4d5edbc82d28879fdfaaf7274ba05162ff8cbbda816d69ed52f1dae547f6","sha512":"8023da9f9619d34d4e5f7c819a96356485f73fddcb8adb452f3ceefa8c969c16ca78a8c8d02d8e7a213eb9c5bbe5c50745ba7602e0ee2fe36d2742fb3e979c86","ssdeep":"1536:GAAAAAAAgsAAAYgIAAAAsAuErzzzz6mfzzVCA9zzzzzzdp/koLAGXImE98YfgNi9:kErZDE9BfgNiX9k3SDHewStfNwS0fj9","tlshash":"b5c34b06f702eb4add691e7ca59163c5b728f4a13b1ec30f95c66d5afc8e1a60d022c9","first_seen":"2023-04-05T04:16:14Z","last_seen":"2026-10-13T04:37:16.945756Z","times_seen":5063,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":159,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"ggg.team-ke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/images/header_logo.png?v=8","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.499Z","timestamp":1791863352499,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-gu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 11:35:29 GMT","end":"Sun, 03 Jan 2027 11:35:28 GMT"},"fingerprint":{"sha1":"AC:93:FE:9C:B5:FA:4B:AB:ED:B1:C1:FC:93:B3:32:B7:53:2D:A7:E3","sha256":"D1:6F:2F:6E:59:C8:E6:06:2C:61:70:94:40:17:01:A1:20:E9:E4:24:DF:09:16:49:A5:19:32:86:BF:3F:B8:D4"}}},"request":{"raw":"GET /p/rpt-bvj/ozjybtpc/images/header_logo.png?v=8 HTTP/1.1\r\nHost: s.team-gu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/p/rpt-bvj/ozjybtpc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 23 Sep 2026 07:35:30 GMT\r\npriority: u=5,i\r\netag: \"6ab38142-2a6f\"\r\naccept-ranges: bytes\r\nage: 786\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WMhqqER8Wztry7n0emaq1bhAaZdStUqeJmkxaCW%2By8hu4Hbg9CaHiDs4oDksLN9nhlUwC4bhlAqYIHhoj9RGFq%2FWWS6MsHDmmZ%2Frsqqg%2BilZGJltEHhAyE%2BIl4CXbbjI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f81182c712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10863\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10863,"size_decoded":11559,"mime_type":"image/png","magic":"PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced","md5":"a4e79c73ee13cb25b60fc4b0ba1f690c","sha1":"b690c31b2eb1b0eb085e91aaae7e79f03debe7c1","sha256":"6cb869df089146c12efb5e9c968e911c314842624ba6f052a11346ac734cadc8","sha512":"aad423119f410a655f0aa475d2fe692087d7262c3986ce71347981c5b60f6a10031d7050bf9b9aee4e7d84d814f0b8883c964028fcbe14ed3464602f3ba6cec3","ssdeep":"192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM","tlshash":"4722c06cfcc0c875958352ba3e27fb7043f93e10c44b86b86960e5a5365c8f4959d137","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-10-13T04:37:16.940702Z","times_seen":7748,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shared.steamstatic.com/community_assets/images/items/245620/f19b3cb6727fa63a9501a59b4095d5c5c683f6c4.jpg","fqdn":"shared.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.963Z","timestamp":1791863352963,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shared.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 05:48:04 GMT","end":"Sat, 21 Nov 2026 05:48:03 GMT"},"fingerprint":{"sha1":"F8:5D:A1:E0:AF:95:87:82:00:86:EB:63:B6:05:73:0A:3E:BE:89:EA","sha256":"08:31:51:99:78:88:58:CF:2D:4D:2D:EE:FF:5F:E6:89:93:26:2F:C3:DB:83:02:06:EE:80:B1:E5:B5:30:57:C4"}}},"request":{"raw":"GET /community_assets/images/items/245620/f19b3cb6727fa63a9501a59b4095d5c5c683f6c4.jpg HTTP/1.1\r\nHost: shared.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 22 May 2014 11:07:24 GMT\r\netag: \"537dda6c-4fe12\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\nvia: 1.1 varnish\r\nage: 1046075\r\nx-served-by: cache-bma-essb1270077-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 1\r\nx-timer: S1791863353.992142,VS0,VE1\r\ncontent-length: 327186\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":327186,"size_decoded":327675,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3","md5":"32248e128f0c19e6fbad528529b9d99f","sha1":"f19b3cb6727fa63a9501a59b4095d5c5c683f6c4","sha256":"2c11565c5d7c77fd45e991a16427396b439e66b228fb38e1efe9ba140af258b1","sha512":"d43e01f6ad954757b04a53bd855d25e43c25bc16bb575bfdccca775a0c4643bf6f58e883a0829f0defd712f6aaf562f15feadf6f1893ef82d85f9abbf7657e14","ssdeep":"6144:nH9Uy+8dxbbsqFZ+kJXVEE+xvCTCA/YihIqkENkFtadWiIUPMTQ0wvS0nyiGBcuz:nH9UIdFbsqFLtVEE+wTDAinkE2HadLli","tlshash":"d764238a7729e727b728ed073bb9d9551d131c3c0b29d01979a7b70426cc0e8f90aa5e","first_seen":"2026-10-13T03:37:03.058781Z","last_seen":"2026-10-13T04:37:16.920065Z","times_seen":3,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":3,"connect":8,"send":0,"wait":12,"receive":33,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/fonts/MotivaSans-Thin.ttf","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.973Z","timestamp":1791863352973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-gu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 11:35:29 GMT","end":"Sun, 03 Jan 2027 11:35:28 GMT"},"fingerprint":{"sha1":"AC:93:FE:9C:B5:FA:4B:AB:ED:B1:C1:FC:93:B3:32:B7:53:2D:A7:E3","sha256":"D1:6F:2F:6E:59:C8:E6:06:2C:61:70:94:40:17:01:A1:20:E9:E4:24:DF:09:16:49:A5:19:32:86:BF:3F:B8:D4"}}},"request":{"raw":"GET /p/rpt-bvj/ozjybtpc/fonts/MotivaSans-Thin.ttf HTTP/1.1\r\nHost: s.team-gu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/p/rpt-bvj/ozjybtpc/css/motiva_sans.css?v=8\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 23 Sep 2026 07:34:56 GMT\r\npriority: u=3,i=?0\r\netag: \"6ab38120-1cfd0\"\r\naccept-ranges: bytes\r\nage: 786\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KW8I3TUQimkQnKK9%2BLIT8hyS9uql2JF0z767EQbtbTetLpYY%2BDhSbaiK8f1jTkM%2FrhDYdO6Uhfh60crDiMhUBl6vIWfYLAhqWqf7kr0EXssq3Q8ytR2xfdkJsbvh1Z7m\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f841862712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 118736\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118736,"size_decoded":119448,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansThin4.015;Plau;MotivaSans-T","md5":"ce6bda6643b662a41b9fb570bdf72f83","sha1":"87bcf1d2820b476aaeaea91dc7f6dbedd73c1cb8","sha256":"0adf4d5edbc82d28879fdfaaf7274ba05162ff8cbbda816d69ed52f1dae547f6","sha512":"8023da9f9619d34d4e5f7c819a96356485f73fddcb8adb452f3ceefa8c969c16ca78a8c8d02d8e7a213eb9c5bbe5c50745ba7602e0ee2fe36d2742fb3e979c86","ssdeep":"1536:GAAAAAAAgsAAAYgIAAAAsAuErzzzz6mfzzVCA9zzzzzzdp/koLAGXImE98YfgNi9:kErZDE9BfgNiX9k3SDHewStfNwS0fj9","tlshash":"b5c34b06f702eb4add691e7ca59163c5b728f4a13b1ec30f95c66d5afc8e1a60d022c9","first_seen":"2023-04-05T04:16:14Z","last_seen":"2026-10-13T04:37:16.945756Z","times_seen":5063,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":26,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGJG51EejH-HRwt6pMGmo50Nn-o767RflQhulzcW5-SNa7KP-bqJpcKjLWjGVwrh1teNsGyznlEt_sTvXmImsbzvJOW7rcy6H/96fx96f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.134","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.545Z","timestamp":1791863352545,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 19:33:34 GMT","end":"Thu, 31 Dec 2026 19:33:33 GMT"},"fingerprint":{"sha1":"60:75:6C:3B:7D:C2:BD:27:D4:14:61:F7:5A:0E:49:55:D8:9A:80:C5","sha256":"35:24:FF:98:2A:26:11:7D:16:58:6C:EB:48:BF:FA:AA:A1:98:08:B6:11:67:91:3D:4C:C1:D1:74:09:7B:95:CE"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGJG51EejH-HRwt6pMGmo50Nn-o767RflQhulzcW5-SNa7KP-bqJpcKjLWjGVwrh1teNsGyznlEt_sTvXmImsbzvJOW7rcy6H/96fx96f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nLast-Modified: Mon, 16 May 2016 22:33:41 GMT\r\nContent-Length: 12905\r\nCache-Control: public, max-age=480187\r\nExpires: Sun, 18 Oct 2026 17:12:19 GMT\r\nDate: Tue, 13 Oct 2026 03:49:12 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12905,"size_decoded":14734,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"311562407014b5d6d3e34f94a0f0085a","sha1":"f27840f547d32433b682788b4a63ab2677eba25e","sha256":"fe12009d04b6db9ab82e0117d5aeb6262d8edb57faa3c0acd841cf20bd182367","sha512":"d0ffe966aa4f36a3b39a61819d195ca5b25dc782372154265836207ef4c619f3553613e5db5525b69bfa3074ed9e80f36b56b2eaa9af1dbdf9150e377fcd9491","ssdeep":"192:yAbQU8bBld3GNuRobdoWubtXocq3PBVM2wfpAhkALb5LPh20:yAbQU+TGERIdonqcCZVMHBAyS1F","tlshash":"cb42bf9f8b9654c50cd7b3b20dea5102c6629919d352149293efcd63f09dc204dfb59d","first_seen":"2026-06-11T00:49:01.062932Z","last_seen":"2026-10-13T04:37:16.950097Z","times_seen":44,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":93,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ggg.team-ke.com/d93bac209/39460/df6d17e.js?v=Z96TPTHh5g","fqdn":"ggg.team-ke.com","domain":"team-ke.com","tld":"com"},"ip":{"addr":"172.67.191.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ggg.team-ke.com/496361c95","date":"2026-10-13T03:49:13.231Z","timestamp":1791863353231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-ke.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 15:30:48 GMT","end":"Wed, 06 Jan 2027 15:30:47 GMT"},"fingerprint":{"sha1":"95:B1:94:32:42:5B:C0:C3:E6:45:99:14:4B:8D:78:EF:5E:8A:B7:37","sha256":"4F:9D:2F:44:76:0D:E1:C8:C7:2A:E7:CE:A7:70:3D:07:A5:99:C6:28:61:FF:FE:C6:71:22:10:CB:51:83:25:CB"}}},"request":{"raw":"GET /d93bac209/39460/df6d17e.js?v=Z96TPTHh5g HTTP/1.1\r\nHost: ggg.team-ke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ggg.team-ke.com/496361c95\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:13 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nage: 785\r\nlast-modified: Tue, 13 Oct 2026 03:36:07 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VCX%2B9k48tAtxo0VdBQcRb%2FKkrqnvjINC7s%2BNKDaoX5mIntCcSI8SdryM4OQBXw6XnSXSi%2BcffVN88Mcbs4WLqfmtLsVkRIz%2F8w4mWcY0YBNUg7JV4l%2FZYc4tsRqsi29qoa8%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a49b5f85af360731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1392038,"size_decoded":482086,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65432), with no line terminators","md5":"1427835ea45e751c1091aafaf465e72b","sha1":"6d17e10cd4cd430305122cfea5251652b195a014","sha256":"6250a2c49bf20758b71ec79e6e6928e0351d32b6ae678de5c804e9cd1ca31e41","sha512":"d39869c8addb8c89cf10249184cd9626eb1ffa97f69397fe8824a86f5e669309caae44432ba4eee6d51bce41b23fde6d623b23dc1af1e00116c1632f9f6d3910","ssdeep":"12288:GTTzf5Ab8NU3qNJj8AH573Z6subjwJtIybiwt:yf5HfNhb573Z6sgsJtbb5","tlshash":"0d2540e0e78064a40e5f673eb3575cf9f116347893871acca471acecb2ea61a5714c2b","first_seen":"2026-10-13T03:49:57.284048Z","last_seen":"2026-10-13T04:37:16.946488Z","times_seen":2,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"ggg.team-ke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH_Xb1tioMGnY9l589oLL7lbgfh7witnz9StZ6s2qZ6NSI_GHQGOVmLpw5bk6SSu1xU4l4D7Sz479d3OWaQMmXsNyEOAD5BnqwNPnY778p1uJhk_AKwA/96fx96f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.134","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.541Z","timestamp":1791863352541,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 19:33:34 GMT","end":"Thu, 31 Dec 2026 19:33:33 GMT"},"fingerprint":{"sha1":"60:75:6C:3B:7D:C2:BD:27:D4:14:61:F7:5A:0E:49:55:D8:9A:80:C5","sha256":"35:24:FF:98:2A:26:11:7D:16:58:6C:EB:48:BF:FA:AA:A1:98:08:B6:11:67:91:3D:4C:C1:D1:74:09:7B:95:CE"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH_Xb1tioMGnY9l589oLL7lbgfh7witnz9StZ6s2qZ6NSI_GHQGOVmLpw5bk6SSu1xU4l4D7Sz479d3OWaQMmXsNyEOAD5BnqwNPnY778p1uJhk_AKwA/96fx96f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nLast-Modified: Fri, 03 Jun 2016 20:45:45 GMT\r\nContent-Length: 10481\r\nCache-Control: public, max-age=161515\r\nExpires: Thu, 15 Oct 2026 00:41:07 GMT\r\nDate: Tue, 13 Oct 2026 03:49:12 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10481,"size_decoded":12310,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"093735b908372cd6c9a4e36e32a4f987","sha1":"4fef439147daaa66929c5b3a712b9431eb5f67f3","sha256":"14c10e6ea31568fe3a9ffdb43ec435f7863cbb09e96d1c0330d9d46d217c9fb7","sha512":"5bcbf54aef4d6b2a3b5fe0dc55fe5f58cab621ab5f182726308744e036c868cccf1cdc5a2cc4138b87aaf0264ee44e4b8f4014667a5561c4ebba0d2842f82645","ssdeep":"192:VUkosRUiCMxZvA47SfBG8XDcuZQRW9Qm5aAKWFMSVVgkAAs:VVBpZ72XDcuyRW9ZKWBOd","tlshash":"0622d0cf60939767e197956390e410221617b01bbc36a5fb5c33812fb51cfee0a136e6","first_seen":"2026-06-11T00:49:01.059156Z","last_seen":"2026-10-13T04:37:16.949411Z","times_seen":47,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH-LGxsuvITSe6Ft65pP15mb0SRLkkpLl721P_fevZrBSNPnEMW6dzOFkpOBlcDq7mggrtziXy8H7cS6RPFNyDZNxReNetBWwm9PjNeLh4gGNjY5Dy32vhygY7i866-oBT-N7rRZH1XR4/96fx96f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.134","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.552Z","timestamp":1791863352552,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 19:33:34 GMT","end":"Thu, 31 Dec 2026 19:33:33 GMT"},"fingerprint":{"sha1":"60:75:6C:3B:7D:C2:BD:27:D4:14:61:F7:5A:0E:49:55:D8:9A:80:C5","sha256":"35:24:FF:98:2A:26:11:7D:16:58:6C:EB:48:BF:FA:AA:A1:98:08:B6:11:67:91:3D:4C:C1:D1:74:09:7B:95:CE"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH-LGxsuvITSe6Ft65pP15mb0SRLkkpLl721P_fevZrBSNPnEMW6dzOFkpOBlcDq7mggrtziXy8H7cS6RPFNyDZNxReNetBWwm9PjNeLh4gGNjY5Dy32vhygY7i866-oBT-N7rRZH1XR4/96fx96f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nLast-Modified: Sat, 05 Aug 2017 23:38:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 10767\r\nCache-Control: public, max-age=230327\r\nExpires: Thu, 15 Oct 2026 19:47:59 GMT\r\nDate: Tue, 13 Oct 2026 03:49:12 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10767,"size_decoded":12596,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"92095ccc38e9fb927ccc94c5cfef7153","sha1":"3bc54149b4eb2542ee8181c3a9f0708d017d8389","sha256":"4cb449fb4874a1d272dc9a3aa1ecced5cc0328913f26a7084591f1793e0f9132","sha512":"5db94f1e8d02b1755887e669dc01ca50080eaa6d2bfa9f1e3e50a4062507aa0a162807e8681c7c7a95382f18f0ffeacb6f418c2bc94c808b80bd48f2842610ec","ssdeep":"192:+g9Qbhu6W7KzRaloTSyTYQIx1Ezj5qNON+iLIXpgDUaWEWMdJ5JzAyViJumjutjq:8bhu6W7KIllyTYKY4NImxWLMj5RpViJR","tlshash":"0d22be7e58202e292eca2413df1fb5b4afe7ce1c823ca71c3d19618622407963747636","first_seen":"2026-06-11T00:49:01.113397Z","last_seen":"2026-10-13T04:37:16.884504Z","times_seen":46,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":94,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ggg.team-ke.com/d93bac209/39460/f77adf3.ttf","fqdn":"ggg.team-ke.com","domain":"team-ke.com","tld":"com"},"ip":{"addr":"172.67.191.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ggg.team-ke.com/496361c95","date":"2026-10-13T03:49:15.152Z","timestamp":1791863355152,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-ke.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 15:30:48 GMT","end":"Wed, 06 Jan 2027 15:30:47 GMT"},"fingerprint":{"sha1":"95:B1:94:32:42:5B:C0:C3:E6:45:99:14:4B:8D:78:EF:5E:8A:B7:37","sha256":"4F:9D:2F:44:76:0D:E1:C8:C7:2A:E7:CE:A7:70:3D:07:A5:99:C6:28:61:FF:FE:C6:71:22:10:CB:51:83:25:CB"}}},"request":{"raw":"GET /d93bac209/39460/f77adf3.ttf HTTP/1.1\r\nHost: ggg.team-ke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ggg.team-ke.com/d93bac209/39460/55787ad.css?v=Z96TPTHh5g\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:15 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=17vxglKkvvA%2BfMmrPBQVDyKZCaRzHUcj7cIjan%2F77Z3%2BC3CXTR6nY4noQpgzn4kLxtLCcvn%2FZ8geiEhc%2Frzb1xpOQWTYaDf%2BLMIlhP3KBjtqzB45WjrjGQrFXwm6FPMWWos%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a49b5f91a9960731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":632,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T06:30:54.669451Z","times_seen":19073715,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"ggg.team-ke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/images/favicon.ico?v=8","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:13.041Z","timestamp":1791863353041,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-gu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 11:35:29 GMT","end":"Sun, 03 Jan 2027 11:35:28 GMT"},"fingerprint":{"sha1":"AC:93:FE:9C:B5:FA:4B:AB:ED:B1:C1:FC:93:B3:32:B7:53:2D:A7:E3","sha256":"D1:6F:2F:6E:59:C8:E6:06:2C:61:70:94:40:17:01:A1:20:E9:E4:24:DF:09:16:49:A5:19:32:86:BF:3F:B8:D4"}}},"request":{"raw":"GET /p/rpt-bvj/ozjybtpc/images/favicon.ico?v=8 HTTP/1.1\r\nHost: s.team-gu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/p/rpt-bvj/ozjybtpc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:13 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RNnS8tiUEZyIjoVDTqweNTAQZn0HnHmiUyP4n2Dq%2BH9rgq2HIwaIwQrhOCjIjyaVg%2B%2BzXiLQ19omQfx6gB8xrc3kjvfr6TuGs0oAnk4duxWcRO9cKZAw92lyJvdvzSM0\"}]}\r\nlast-modified: Wed, 23 Sep 2026 07:35:25 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ab3813d-969a\"\r\nage: 785\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a49b5f847869712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38554,"size_decoded":29653,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"231913fdebabcbe65f4b0052372bde56","sha1":"553909d080e4f210b64dc73292f3a111d5a0781f","sha256":"9f890a9debcdfccc339149a7943be9aff9e4c9203c2fa37d5671a5b2c88503ad","sha512":"7b11b709968c5a52b9b60189fb534f5df56912417243820e9d1c00c97f4bd6d0835f2cdf574d0c36ecb32dbbf5fc397324df54f7fdf9e1b062b5dbda2c02e919","ssdeep":"768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh","tlshash":"70038de82e4917aee9e2cf324adb6716237b4f88c0bc169742b07f193175a51c6d78c1","first_seen":"2023-04-05T07:02:49Z","last_seen":"2026-10-13T04:37:16.955421Z","times_seen":7083,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/css/header.css?v=8","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.232Z","timestamp":1791863352232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-gu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 11:35:29 GMT","end":"Sun, 03 Jan 2027 11:35:28 GMT"},"fingerprint":{"sha1":"AC:93:FE:9C:B5:FA:4B:AB:ED:B1:C1:FC:93:B3:32:B7:53:2D:A7:E3","sha256":"D1:6F:2F:6E:59:C8:E6:06:2C:61:70:94:40:17:01:A1:20:E9:E4:24:DF:09:16:49:A5:19:32:86:BF:3F:B8:D4"}}},"request":{"raw":"GET /p/rpt-bvj/ozjybtpc/css/header.css?v=8 HTTP/1.1\r\nHost: s.team-gu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/p/rpt-bvj/ozjybtpc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Sep 2026 07:34:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T2fWLCqHFNpUAktsSRmM2ZQixUHFcQ5z3i%2FvAm%2FkZSG1OTR8AzCgFi6gjtmvLDnZ0yLOlvwB4I2UhVZvWugDpfg%2BWd90NjXqcHDjGRm%2BKekUWqxevNa8BoYv9WXYg4Ii\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6ab3810c-2fbf\"\r\ncontent-encoding: gzip\r\nage: 786\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f7f6806712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12223,"size_decoded":4361,"mime_type":"text/css","magic":"ASCII text, with very long lines (629), with CRLF line terminators","md5":"3bfa069dbdabe8457fb1b9ab6ab73bd9","sha1":"3e6d9cba4db955630bd23ef65a677f81153eaac1","sha256":"19def77fb68c6008294c48f576fc793d80f2ffda9ddb23bc18944be2e7d885ab","sha512":"58380e47b5b0653f97460b1b4ea4e5335406e1120a9ece2f43c8c9ece1db67771e648805750e500bf0d21e6eeb840ab78d1e4b269066a9ac79d970e66f2738ab","ssdeep":"192:CdBmFvo/MXMXIeIHNYgsayBgKGd/f2+Rcmp4sc8duvuoyx46l5JutE8h5spoK8e8:CDmFvVcXIeIHNYgsaSg1RfrpJc8dIG4n","tlshash":"ec428474ca92304eb21b65aafbb1536a5e0400a2de0f476df0aa7774e2944e875336c8","first_seen":"2026-06-26T02:14:11.669663Z","last_seen":"2026-10-13T04:37:16.931975Z","times_seen":41,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/css/motiva_sans.css?v=8","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.218Z","timestamp":1791863352218,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-gu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 11:35:29 GMT","end":"Sun, 03 Jan 2027 11:35:28 GMT"},"fingerprint":{"sha1":"AC:93:FE:9C:B5:FA:4B:AB:ED:B1:C1:FC:93:B3:32:B7:53:2D:A7:E3","sha256":"D1:6F:2F:6E:59:C8:E6:06:2C:61:70:94:40:17:01:A1:20:E9:E4:24:DF:09:16:49:A5:19:32:86:BF:3F:B8:D4"}}},"request":{"raw":"GET /p/rpt-bvj/ozjybtpc/css/motiva_sans.css?v=8 HTTP/1.1\r\nHost: s.team-gu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/p/rpt-bvj/ozjybtpc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Sep 2026 07:34:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LmMaUA8UmJHIGkb2YWbKqUz%2F35Dq1WHHIGYnyN7dgdFxDvEHD%2FgQcqc%2BSdJwKJd6mK0Gn2eCK0QhVCQW0XdXclpizlh0G7%2BAogsoXY%2Fj55WDCOQZ7TFbX1%2FsSH37uUHt\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6ab3810f-85c\"\r\ncontent-encoding: gzip\r\nage: 786\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f7f5ffe712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2140,"size_decoded":1300,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"085f956b8fff871eea292803338c5f44","sha1":"dfc4f5cb572e204daebef79876284048e666434b","sha256":"9d330a23d96091e6df549a92d26cbb46f5764cb12d9d7771c16eac08d3cea353","sha512":"94409cfefc7cea1284578d12f7970cb106004d6dbce492eaf429caa41fd739d495d5021d45f0911426d491ccd9b78b75ee0ddd388bd23f794978298f57b2d7cc","ssdeep":"","tlshash":"ab418044255db4378ba00c47f3fa2e058e5f3418621681aab4f51ba46fda879437079f","first_seen":"2026-06-26T02:14:11.715988Z","last_seen":"2026-10-13T04:37:16.943671Z","times_seen":41,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/images/profile/icon_block.png","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.530Z","timestamp":1791863352530,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/images/profile/icon_block.png HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-54c\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\nvia: 1.1 varnish\r\nage: 66578\r\nx-served-by: cache-bma-essb1270073-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 2615\r\nx-timer: S1791863353.624843,VS0,VE0\r\ncontent-length: 1356\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1356,"size_decoded":1759,"mime_type":"image/png","magic":"PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced","md5":"af6956710c76a4e84f255ca37a74d690","sha1":"3efc932ff4a921169c8f34537c16fa2f7f475869","sha256":"88847ba203d8c859877e3b6d95646dc46b35bacbc2935d71a5a87b52511afb8f","sha512":"831fccf7ceaf133dda8e1ef3a07d66efb899c4e37bbc2e57744a15fe81286fc465f2fb7bf9ee28227f6783acaa497604296e70a27e00f40fe833e8c53c27f6e7","ssdeep":"","tlshash":"6121d8e5e9506401c25ee5c604f3a023aa32c6c8c9f4e891eaefc4195cb43fa441edfb","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-10-13T04:37:16.926812Z","times_seen":479,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/loyalty/reactions/still/11.png?v=5","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.535Z","timestamp":1791863352535,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 12:18:32 GMT","end":"Thu, 19 Nov 2026 12:18:31 GMT"},"fingerprint":{"sha1":"73:3D:80:BA:FF:E1:7B:1D:0E:6E:9A:40:E5:15:C7:6D:FE:46:B9:44","sha256":"F6:FC:99:1F:A8:9D:10:F1:85:36:C6:51:C1:BD:A3:BE:67:18:DC:98:E2:29:22:39:6F:84:4F:11:66:3A:2B:B8"}}},"request":{"raw":"GET /public/images/loyalty/reactions/still/11.png?v=5 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:18 GMT\r\netag: \"649bb1f6-490f\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\nvia: 1.1 varnish\r\nage: 13567\r\nx-served-by: cache-bma-essb1270033-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 61\r\nx-timer: S1791863353.871037,VS0,VE0\r\ncontent-length: 18703\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18703,"size_decoded":19106,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit/color RGBA, non-interlaced","md5":"a7e1ba3f01b0047696e3ff18227ecd04","sha1":"73d20ce1e79861739516def4a6232ba3162b7402","sha256":"53c5971753a66562e7d2f9e186dd64b70d9ed4fe33562d6642e3751588dbe477","sha512":"c3d111aeb0d0fd7a77bde889b2d51579b255115a53674ccafdbd74dd86694c7095317d5f7559e314fb6b40f65b7ed41df924ea812645b17184e0fff273493025","ssdeep":"384:iEzA4RI/04grbi+MNaGfD+K7FaEKN7OWQl2HO2BRLMyZyKcoawa00n:+4XXi+MNPL17G0WlLMBSawa08","tlshash":"9682bfeafdc6fd21fcb8102a62159c08f0c5f10bf1c2a67e968610877f7f6466699924","first_seen":"2023-05-02T15:32:05Z","last_seen":"2026-10-13T04:37:16.924701Z","times_seen":836,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":8,"dns":0,"connect":10,"send":0,"wait":9,"receive":25,"ssl":268},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH-bcwsS1Onao5EVm9ZTn41eoTBz_l5Dv8SZk__O8aaBiOL-SHGSRz-9JoOAnSirkkx9-5D7Tw4v9cXiUbwAmDZR3TONbs0W4kdOzMezhtFTYjohCnzK-0H1hMCTDUg/96fx96f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.134","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.542Z","timestamp":1791863352542,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 19:33:34 GMT","end":"Thu, 31 Dec 2026 19:33:33 GMT"},"fingerprint":{"sha1":"60:75:6C:3B:7D:C2:BD:27:D4:14:61:F7:5A:0E:49:55:D8:9A:80:C5","sha256":"35:24:FF:98:2A:26:11:7D:16:58:6C:EB:48:BF:FA:AA:A1:98:08:B6:11:67:91:3D:4C:C1:D1:74:09:7B:95:CE"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH-bcwsS1Onao5EVm9ZTn41eoTBz_l5Dv8SZk__O8aaBiOL-SHGSRz-9JoOAnSirkkx9-5D7Tw4v9cXiUbwAmDZR3TONbs0W4kdOzMezhtFTYjohCnzK-0H1hMCTDUg/96fx96f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 01 Sep 2015 00:27:49 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 8231\r\nCache-Control: public, max-age=255196\r\nExpires: Fri, 16 Oct 2026 02:42:28 GMT\r\nDate: Tue, 13 Oct 2026 03:49:12 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8231,"size_decoded":10059,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"12be8ab82719b7cbf299be0a63483f7c","sha1":"10379b81e1626d42fc6ed98a255b1ce2518a15f1","sha256":"3a9993ebd9978a990240a5ae0bb50799c86762edb2481d63221bf9e498b9b800","sha512":"ce252010fb60767849b24c0a167e16241b6586d2068f8973ffb129603c5952e5170e5af95b0c5e577adb83a998a7003243da5ea787e56d1f6a02e4cc1057317c","ssdeep":"192:wleOjdjQlXIgFPl/f0OtMhBRQnmFEdvShJNq1Kr3VwlE:wJLgF5fwQnm2dvSAMp","tlshash":"2402afd1d68f78cfc6f17c0e63000499c938479fa19a63b0d528adb934c2b45f622e97","first_seen":"2026-06-11T00:49:01.087688Z","last_seen":"2026-10-13T04:37:16.932698Z","times_seen":44,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":87,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared.fastly.steamstatic.com/store_item_assets/steam/apps/1588550/header_schinese.jpg?t=1782391789","fqdn":"shared.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.557Z","timestamp":1791863352557,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shared.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:03:00 GMT","end":"Mon, 21 Dec 2026 11:02:59 GMT"},"fingerprint":{"sha1":"35:27:95:F1:7A:87:90:C8:D5:F1:A9:04:B3:07:6D:A6:FD:D3:2C:C7","sha256":"D8:4F:7F:70:8F:7A:7E:8B:84:AD:3C:28:69:F1:A7:43:EA:B9:82:9E:88:6C:DF:63:E3:60:FB:48:13:0F:C3:63"}}},"request":{"raw":"GET /store_item_assets/steam/apps/1588550/header_schinese.jpg?t=1782391789 HTTP/1.1\r\nHost: shared.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 05 Dec 2024 14:31:33 GMT\r\netag: \"6751b945-db98\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\nvia: 1.1 varnish\r\nage: 55979\r\nx-served-by: cache-bma-essb1270050-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 1\r\nx-timer: S1791863353.871590,VS0,VE1\r\ncontent-length: 56216\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56216,"size_decoded":56701,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 460x215, components 3","md5":"864290ded87100acb9e01b81afccf163","sha1":"8c5e3d1ae2b84304c07824537497511661d908f8","sha256":"15b39a45ecc8415edde3bdf5661303ad1a0f0cd447fdd425b67273959aed42ac","sha512":"0c30a63a87c9da28c107e4b5e7f30ab1869137e4a246d1702bf7a9bf69558ea2e252dd7a70a344ced7554d9840fdc1ddaeeffff5df5e0a69952af6f1eeba4894","ssdeep":"1536:qtciOfKNuSusQNTTVPBvqYPPqo2qS/wIwri1/TGLOHekPAICxd:iLOfKNuOQdVPhpP/SopihGLO+kPA7X","tlshash":"e7430293b156748d9442893b7c8abfa193fde4ab0ba7245186d013c5ee9a7c4a0207fd","first_seen":"2026-08-13T08:30:02.647682Z","last_seen":"2026-10-13T04:37:16.90918Z","times_seen":22,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":4,"dns":1,"connect":11,"send":0,"wait":16,"receive":3,"ssl":265},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/first-logo-1.png","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.560Z","timestamp":1791863352560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-gu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 11:35:29 GMT","end":"Sun, 03 Jan 2027 11:35:28 GMT"},"fingerprint":{"sha1":"AC:93:FE:9C:B5:FA:4B:AB:ED:B1:C1:FC:93:B3:32:B7:53:2D:A7:E3","sha256":"D1:6F:2F:6E:59:C8:E6:06:2C:61:70:94:40:17:01:A1:20:E9:E4:24:DF:09:16:49:A5:19:32:86:BF:3F:B8:D4"}}},"request":{"raw":"GET /p/rpt-bvj/ozjybtpc/first-logo-1.png HTTP/1.1\r\nHost: s.team-gu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/p/rpt-bvj/ozjybtpc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 23 Sep 2026 07:34:31 GMT\r\npriority: u=5,i\r\netag: \"6ab38107-fb90\"\r\naccept-ranges: bytes\r\nage: 786\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LSsUxUGnQX9vdlaexR2h23iUm7fq2ouI0fyqwOzfKKx2zlKA7l1P5Ev7Mv%2BMzwxlq0AoTpadewvMP3%2B7Z6qzu%2Fqkg57s2PxcLr5KHq8LBunjTC019l65lHU5wMUXnDLM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f817832712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 64400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64400,"size_decoded":65092,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"7ff90b07752572a132fe8b392b0e57cb","sha1":"49f980604007f61267720f25cc21cd41f1980bf4","sha256":"588870126f329a1e5f83b9b1cc14782f7ebf1f4dd85e412781be56d617a2e7c5","sha512":"95e90ba3c6babf66d523539d61e472903d15d4aae188fda05ae9a5568b9ad8059ab37ac9359e07b1f672f6b33e24d6d8992f4e60f3f30f830af11c1542320a6d","ssdeep":"1536:FoWh+B/udMQEU8AzVB2U8ckH2caZoYBCiqTpp:mWyuuQ782VBTOwuDVp","tlshash":"ee530249dcd19cc2e7e867b31605aa8ab7ea23f333c489016b715dd77b16790b34b904","first_seen":"2025-04-21T12:22:25.060132Z","last_seen":"2026-10-13T04:37:16.934998Z","times_seen":110,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/js/manifest.js?v=8","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.235Z","timestamp":1791863352235,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-gu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 11:35:29 GMT","end":"Sun, 03 Jan 2027 11:35:28 GMT"},"fingerprint":{"sha1":"AC:93:FE:9C:B5:FA:4B:AB:ED:B1:C1:FC:93:B3:32:B7:53:2D:A7:E3","sha256":"D1:6F:2F:6E:59:C8:E6:06:2C:61:70:94:40:17:01:A1:20:E9:E4:24:DF:09:16:49:A5:19:32:86:BF:3F:B8:D4"}}},"request":{"raw":"GET /p/rpt-bvj/ozjybtpc/js/manifest.js?v=8 HTTP/1.1\r\nHost: s.team-gu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/p/rpt-bvj/ozjybtpc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XMwqirqbDV%2F0SPcwx9A2daJusaIkYIabaBVI1F%2BSj%2FQCg5Irxm%2BHgO1XL314%2FZ8WVagxG4ZAmVpngoqXHVWTlkGwuvZpGOKQpmBR0mo%2FZX6WwWYnJnZljpprlbee10kl\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncache-control: no-cache, no-store, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a49b5f7f7808712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3,"size_decoded":676,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"4f4adcbf8c6f66dcfc8a3282ac2bf10a","sha1":"c35a9fc52bb556c79f8fa540df587a2bf465b940","sha256":"6b3c238ebcf1f3c07cf0e556faa82c6b8fe96840ff4b6b7e9962a2d855843a0b","sha512":"0d15d65c1a988dfc8cc58f515a9bb56cbaf1ff5cb0a5554700bc9af20a26c0470a83c8eb46e16175154a6bcaad7e280bbfd837a768f9f094da770b7bd3849f88","ssdeep":"","tlshash":"c72000000000000000000000000000000000c0000000000000000000c0000000000000","first_seen":"2023-03-14T15:28:33Z","last_seen":"2026-10-13T04:37:16.901048Z","times_seen":3676,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/css/shared_global.css?v=8","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.221Z","timestamp":1791863352221,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-gu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 11:35:29 GMT","end":"Sun, 03 Jan 2027 11:35:28 GMT"},"fingerprint":{"sha1":"AC:93:FE:9C:B5:FA:4B:AB:ED:B1:C1:FC:93:B3:32:B7:53:2D:A7:E3","sha256":"D1:6F:2F:6E:59:C8:E6:06:2C:61:70:94:40:17:01:A1:20:E9:E4:24:DF:09:16:49:A5:19:32:86:BF:3F:B8:D4"}}},"request":{"raw":"GET /p/rpt-bvj/ozjybtpc/css/shared_global.css?v=8 HTTP/1.1\r\nHost: s.team-gu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/p/rpt-bvj/ozjybtpc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Sep 2026 07:34:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TE7aUWdXzk6gTsmFRia3w%2B47f%2BddJDfwA%2F%2BOtWgKrS%2BBxYFEB9Xpasqwr4FJxhz4tUa6LcZsvDewvL25jNbad%2FTJPhmIegxI4w8prNhCkoEs5TVkI19mDPujg57pm%2Fqb\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6ab38111-14987\"\r\ncontent-encoding: gzip\r\nage: 786\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f7f5800712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84359,"size_decoded":19731,"mime_type":"text/css","magic":"ASCII text, with very long lines (1819), with CRLF line terminators","md5":"e94b42c40505a74da6dfb96d1a0a0deb","sha1":"117596e970491debe4203f0d133abf2ee42a6e26","sha256":"1dc0542f08da719710dbd0587331b129043c09a8e59cac4b319791cc4f861415","sha512":"406e12079f038163156aaecf9dc855e76e9e88a4c096cf2435841e80669763bd121a637e189a297f8c35ba4341e83d79201d07a7564821843e3cf1377d953409","ssdeep":"768:QvMiH60JA7oMzLWnhW6gNPasqxNRK8uWQMJ3JHKiiUaEpxfsN/WCcZZb98cxbYFI:OjKi+Ev5CovR+FGO9ErUnweoQn6MI","tlshash":"ca83d57ae587308b732b9964f3725b569e7800578b0e4bbcb1f4652ce2d40e836732c9","first_seen":"2026-06-26T02:14:11.643841Z","last_seen":"2026-10-13T04:37:16.952191Z","times_seen":41,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/css/stickers.css?v=8","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.229Z","timestamp":1791863352229,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-gu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 11:35:29 GMT","end":"Sun, 03 Jan 2027 11:35:28 GMT"},"fingerprint":{"sha1":"AC:93:FE:9C:B5:FA:4B:AB:ED:B1:C1:FC:93:B3:32:B7:53:2D:A7:E3","sha256":"D1:6F:2F:6E:59:C8:E6:06:2C:61:70:94:40:17:01:A1:20:E9:E4:24:DF:09:16:49:A5:19:32:86:BF:3F:B8:D4"}}},"request":{"raw":"GET /p/rpt-bvj/ozjybtpc/css/stickers.css?v=8 HTTP/1.1\r\nHost: s.team-gu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/p/rpt-bvj/ozjybtpc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Sep 2026 07:34:43 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eDf0zSHM9MYg751gwyJFfp0nkkgLFSiUtVTHHSAun2IheBDNDkHS8gqa9N84mrfR9UxwMo5W%2Ft%2FFMBrYrRobW6fznXUICeOl4FlFin%2BvsS5uGgoZHIUWZ2IW4jZjMnlD\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6ab38113-20e7\"\r\ncontent-encoding: gzip\r\nage: 786\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f7f6804712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8423,"size_decoded":2822,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8a62c866da0959885705546bd52f8e5a","sha1":"6f3e099083145f09c692511cd9841e05a7c562d1","sha256":"5b6eb5e229668ede597b45bd835911165850b00e29bba16a50367b1064f4a9e4","sha512":"de08e8474aebd548d827c05d1550ce317be7b3dd8c5a3182be671ece432fdca38f3c8aabbb6fe03e2c3021369a677ebb6c97c20206cfd4d8afdea27e9c0362c9","ssdeep":"96:I1NuOg5HJo0IHOVpLBZ1SLScuYFdHYJsAUPULtD/nL4YyypeoVR6fQjyhlEnWNkz:fppR7bUY6A7D/kY9gyyQWN2lXB","tlshash":"6a0240999b1b300fb21b76553bf11ba54da5c423ea0f0badb4a52254d3cd87827732ce","first_seen":"2026-06-26T02:14:11.712759Z","last_seen":"2026-10-13T04:37:16.913393Z","times_seen":41,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/images/skin_1/notification_icon_flag.png","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.531Z","timestamp":1791863352531,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/images/skin_1/notification_icon_flag.png HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-46c\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\nvia: 1.1 varnish\r\nage: 25182\r\nx-served-by: cache-bma-essb1270073-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 456\r\nx-timer: S1791863353.624620,VS0,VE0\r\ncontent-length: 1132\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1132,"size_decoded":1534,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"c16c711ef60ca0c08b2491375e085adf","sha1":"8c43a6de3a2b11502477e1671d9a145da9001743","sha256":"aee447b0f589300598aeca0216f3e29458f0869fca5bbfea34f02183aa460cca","sha512":"1870c7327e4783caacb2349e5526a83476cf3e99002c37032b32f7903b5f3536efa7c24532e057c367624562139e0ab9a7a47bc64ecbaf94327abf3391c7383b","ssdeep":"","tlshash":"c521964efa262880455ce54528eac057eb17050096f1e93a7ceccc278c706f1649d2c7","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-10-13T04:37:16.942173Z","times_seen":532,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH-TBwcOiPjSR6kR28bjn_ljhR1L3kYTj-B1I-_OobvUjc6KWCmPDmegl6bdoS3q2whkj4W7VnIuhdn-eb1N1XMdwF-UN5hLtk8qnab2BsSPrLQ/96fx96f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.134","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.546Z","timestamp":1791863352546,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 19:33:34 GMT","end":"Thu, 31 Dec 2026 19:33:33 GMT"},"fingerprint":{"sha1":"60:75:6C:3B:7D:C2:BD:27:D4:14:61:F7:5A:0E:49:55:D8:9A:80:C5","sha256":"35:24:FF:98:2A:26:11:7D:16:58:6C:EB:48:BF:FA:AA:A1:98:08:B6:11:67:91:3D:4C:C1:D1:74:09:7B:95:CE"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH-TBwcOiPjSR6kR28bjn_ljhR1L3kYTj-B1I-_OobvUjc6KWCmPDmegl6bdoS3q2whkj4W7VnIuhdn-eb1N1XMdwF-UN5hLtk8qnab2BsSPrLQ/96fx96f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nLast-Modified: Thu, 24 Mar 2016 21:03:36 GMT\r\nContent-Type: image/png\r\nContent-Length: 9543\r\nCache-Control: public, max-age=476837\r\nExpires: Sun, 18 Oct 2026 16:16:29 GMT\r\nDate: Tue, 13 Oct 2026 03:49:12 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9543,"size_decoded":11371,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"8e6be2b765d30ed3a67301f720d573da","sha1":"ec8403dd2ed5cb49ebed093b37b6758691f4af5a","sha256":"7d51b0a0d842f2e22eccbaacfad87dde1b28255bfc4e030237cc8b09c9ff67dd","sha512":"5d17f50e193a9831c8bbaaa9d66aa593dd612b387ddbf6a0bd25452c7eafb1b90392a48ef1c77761a13a746338708ea9fbd40420eadacd2ef340f0e939c2c165","ssdeep":"192:Togpw0/H0GR1/WqDD4PRos9xWvpUH6V99jXVk9+GFT5aq/bBBBBBBBBBI:5witRxWaD4N9xkHFkUGFT5aq/bBBBBBY","tlshash":"d012afb096681e82ba6590a9b84444bb4769c1e0fe7f5ed48e3d5e8834d94130687b42","first_seen":"2026-06-11T00:49:01.121761Z","last_seen":"2026-10-13T04:37:16.933435Z","times_seen":47,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":5,"dns":1,"connect":4,"send":0,"wait":9,"receive":0,"ssl":227},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared.fastly.steamstatic.com/store_item_assets/steam/apps/275850/ae0fad4a07367c6f3e66dc9c7a170b8e270a4ea1/header_schinese.jpg?t=1779908213","fqdn":"shared.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.556Z","timestamp":1791863352556,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shared.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:03:00 GMT","end":"Mon, 21 Dec 2026 11:02:59 GMT"},"fingerprint":{"sha1":"35:27:95:F1:7A:87:90:C8:D5:F1:A9:04:B3:07:6D:A6:FD:D3:2C:C7","sha256":"D8:4F:7F:70:8F:7A:7E:8B:84:AD:3C:28:69:F1:A7:43:EA:B9:82:9E:88:6C:DF:63:E3:60:FB:48:13:0F:C3:63"}}},"request":{"raw":"GET /store_item_assets/steam/apps/275850/ae0fad4a07367c6f3e66dc9c7a170b8e270a4ea1/header_schinese.jpg?t=1779908213 HTTP/1.1\r\nHost: shared.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncontent-md5: Vw8jygDYbf/axhnflPRIiA==\r\nlast-modified: Wed, 27 Aug 2025 12:31:06 GMT\r\netag: \"0x8DDE5659877338D\"\r\nx-ms-access-tier: Cold\r\nx-ms-access-tier-change-time: Tue, 24 Feb 2026 02:39:00 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 439806\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270050-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1791863353.869054,VS0,VE1\r\ncontent-length: 52588\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":52588,"size_decoded":53202,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 118x118, segment length 16, baseline, precision 8, 460x215, components 3","md5":"570f23ca00d86dffdac619df94f44888","sha1":"f4f57aeaaee7e99e512f10539056ebf62348d0eb","sha256":"bc8234a1cc6bb77b82255a13f9036c28e8c7aefa249f546c566d7b6408662c63","sha512":"9793d73cebaa04f5b52a0defecb08a0295dff216a3f9c9b1f56b0a58d8d0acd039e4e0d8355bcfd8556a84e07d0ae6ce32b0a63db3f70ab2ed5af69bdd5f2ae6","ssdeep":"1536:xYunI0u53k/WrKs7RSYAPNHy1lYbh+xyvMiPFjRa:xbk50/WRcpSMv7PF0","tlshash":"7833f1a6302075dee06c32eda8564c7f466609d1b1d362c3afe6694fd768e0402f3d9b","first_seen":"2026-08-13T08:30:02.654512Z","last_seen":"2026-10-13T04:37:16.878763Z","times_seen":22,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":4,"dns":1,"connect":11,"send":0,"wait":9,"receive":4,"ssl":260},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGJG51EejH_fRxMOyPXSb4VNny5P9uwmpGBv0n8a3rXZZ7KCvaqBueKTACzLBl750tOBoHH_gx0Ult23VyN2gJGXXMFFQpYs3Vg/96fx96f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.134","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.551Z","timestamp":1791863352551,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 19:33:34 GMT","end":"Thu, 31 Dec 2026 19:33:33 GMT"},"fingerprint":{"sha1":"60:75:6C:3B:7D:C2:BD:27:D4:14:61:F7:5A:0E:49:55:D8:9A:80:C5","sha256":"35:24:FF:98:2A:26:11:7D:16:58:6C:EB:48:BF:FA:AA:A1:98:08:B6:11:67:91:3D:4C:C1:D1:74:09:7B:95:CE"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGJG51EejH_fRxMOyPXSb4VNny5P9uwmpGBv0n8a3rXZZ7KCvaqBueKTACzLBl750tOBoHH_gx0Ult23VyN2gJGXXMFFQpYs3Vg/96fx96f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nLast-Modified: Mon, 25 May 2020 18:36:53 GMT\r\nContent-Length: 14828\r\nCache-Control: public, max-age=584796\r\nExpires: Mon, 19 Oct 2026 22:15:48 GMT\r\nDate: Tue, 13 Oct 2026 03:49:12 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14828,"size_decoded":16657,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"984cce5b69d3bef6df91a67c3cdd480f","sha1":"c6a4e80502c1ccc5ed5c5856a6c6876f15b40bad","sha256":"a7fc8aa731942de8f27c814c73f1df0cf5afaabbdc6e6454b68876283f8c6e2e","sha512":"b63e0cb65b71d09f8affb668f8dfb7e0d5827a2f8214bd45add9c7e778a76c98137362b4b4949b60cce247751dab2f14513c7c85ffc8467a44b4a8c5a8cc9b19","ssdeep":"384:inZ+2Hjkk6LFVxsSNvV1he83X5428Zvxmnzpj:s88jkk6RcSto83pcxs","tlshash":"3962e0c8bb6148e357242d1e1d6061ff73fb1e2e6246ce1fa1619a10fa0ad3765b144f","first_seen":"2025-10-05T05:51:20.348913Z","last_seen":"2026-10-13T04:37:16.934172Z","times_seen":52,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":4,"dns":1,"connect":4,"send":0,"wait":3,"receive":0,"ssl":225},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/fonts/MotivaSans-Light.ttf","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.599Z","timestamp":1791863352599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-gu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 11:35:29 GMT","end":"Sun, 03 Jan 2027 11:35:28 GMT"},"fingerprint":{"sha1":"AC:93:FE:9C:B5:FA:4B:AB:ED:B1:C1:FC:93:B3:32:B7:53:2D:A7:E3","sha256":"D1:6F:2F:6E:59:C8:E6:06:2C:61:70:94:40:17:01:A1:20:E9:E4:24:DF:09:16:49:A5:19:32:86:BF:3F:B8:D4"}}},"request":{"raw":"GET /p/rpt-bvj/ozjybtpc/fonts/MotivaSans-Light.ttf HTTP/1.1\r\nHost: s.team-gu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/p/rpt-bvj/ozjybtpc/css/motiva_sans.css?v=8\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 23 Sep 2026 07:34:50 GMT\r\npriority: u=3,i=?0\r\netag: \"6ab3811a-1df24\"\r\naccept-ranges: bytes\r\nage: 786\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fkegWOKF59msRtuyFR2ay3mG5d1%2FUNuKntp8oIHRXEXYYCCRBsdIWiQphLWK1jfk1Dy9WiM72OtQpQXxjVe2EaPFR6JCtLiAu7eeLoN%2FunfM78zN%2Bu2uD6vvI1SrcqBa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f81d83f712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 122660\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122660,"size_decoded":123372,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansLight4.015;Plau;MotivaSans-","md5":"d45f521dba72b19a4096691a165b1990","sha1":"2a08728fbb9229acccbf907efdf4091f9b9a232f","sha256":"6b7a3177485c193a2e80be6269b6b12880e695a8b4349f49fccf87f9205badcc","sha512":"9262847972a50f0cf8fc4225c6e9a72dbf2c55ccbcc2a098b7f1a5bd9ea87502f3c495a0431373a3c20961439d2dae4af1b1da5b9fade670d7fcaed486831d8c","ssdeep":"3072:XnN/O/ceJkGwg/MOAibD2hPfX4HYhDhudcvObkSafj9:9/O/ceJkGwg/MOAib6nX44NhIWOb8fh","tlshash":"70c32a46f712eb4adc554e3d6162a3d5b348f9f53b2f830ba2856e55fc8f0c90e46288","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-10-13T05:13:14.420372Z","times_seen":4206,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.team-gu.com/p/rpt-bvj/ozjybtpc/css/globalv2.css?v=8","fqdn":"s.team-gu.com","domain":"team-gu.com","tld":"com"},"ip":{"addr":"104.21.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.223Z","timestamp":1791863352223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-gu.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 11:35:29 GMT","end":"Sun, 03 Jan 2027 11:35:28 GMT"},"fingerprint":{"sha1":"AC:93:FE:9C:B5:FA:4B:AB:ED:B1:C1:FC:93:B3:32:B7:53:2D:A7:E3","sha256":"D1:6F:2F:6E:59:C8:E6:06:2C:61:70:94:40:17:01:A1:20:E9:E4:24:DF:09:16:49:A5:19:32:86:BF:3F:B8:D4"}}},"request":{"raw":"GET /p/rpt-bvj/ozjybtpc/css/globalv2.css?v=8 HTTP/1.1\r\nHost: s.team-gu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/p/rpt-bvj/ozjybtpc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Sep 2026 07:34:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b3Nmv9%2FhbyXKkh58TDGLRInBb04oWumwDVP5t5wArnEZdTsU8iEvB1RZIKKC6Qtdv7ReadDSwWnapzLDLFmahB%2FxyXv%2Fp5CjtBI6Awo0rsuHWYJOSklMVWYAloDPS1jz\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6ab3810b-9ade\"\r\ncontent-encoding: gzip\r\nage: 786\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f7f5801712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39646,"size_decoded":13478,"mime_type":"text/css","magic":"ASCII text, with very long lines (4009), with CRLF line terminators","md5":"873d87f45bc7f1361b6ede1fc5a66b67","sha1":"bbdeb71b79521302ccefcdbe6efa47f1abed7529","sha256":"52618cebd684ba82be7057d6e78cdca46f612de6c829db3fb307650fc65408ce","sha512":"441cde329a3ea5bedd5ecbd62292f00d2cc83467b232b095f241a259038cef1e1fb34b32e5a197c0c85ae986ff030f20aff3dd227911a49ca07f6d2bd0bb3aa6","ssdeep":"768:RmOZyrY6dKV7syaFVwoa5cBt45KqFUevSQNZKJb4Ud4xh5VgI0NC:6vkFM0o4Ud4xn","tlshash":"1d03c75cde96214e7327bd54fbb1ab115f2282725a0f46bef1e8611493c8a6c38327cd","first_seen":"2026-06-26T02:14:11.737396Z","last_seen":"2026-10-13T04:37:16.894269Z","times_seen":41,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"s.team-gu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shared.fastly.steamstatic.com/community_assets/images/items/357070/2e27be55ea4697a5c4bcd72b594b13db4e17b0e2.png","fqdn":"shared.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.537Z","timestamp":1791863352537,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shared.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:03:00 GMT","end":"Mon, 21 Dec 2026 11:02:59 GMT"},"fingerprint":{"sha1":"35:27:95:F1:7A:87:90:C8:D5:F1:A9:04:B3:07:6D:A6:FD:D3:2C:C7","sha256":"D8:4F:7F:70:8F:7A:7E:8B:84:AD:3C:28:69:F1:A7:43:EA:B9:82:9E:88:6C:DF:63:E3:60:FB:48:13:0F:C3:63"}}},"request":{"raw":"GET /community_assets/images/items/357070/2e27be55ea4697a5c4bcd72b594b13db4e17b0e2.png HTTP/1.1\r\nHost: shared.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 05 Aug 2015 23:23:06 GMT\r\netag: \"55c29ada-958\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\nvia: 1.1 varnish\r\nage: 623790\r\nx-served-by: cache-bma-essb1270050-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 95\r\nx-timer: S1791863353.623624,VS0,VE0\r\ncontent-length: 2392\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2392,"size_decoded":2876,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"e1974c9962a87bc417f6449285793652","sha1":"2e27be55ea4697a5c4bcd72b594b13db4e17b0e2","sha256":"c1fa8f365e3aff0d65770fa48d81206d6e72db66eac79424f7cbd7110d22de69","sha512":"8e98388389fdefa2295bd5dbd1bde954f71c47cb0c07bcbae3c9dd6a98e592ef3ee436e1c719747901acada0ebb03fcd2427da4e2315a06f4cc03b88e3024657","ssdeep":"","tlshash":"7c411a544521ff27a9ec348104d8ae2a9c3e33c6abd5c0f724a3987401161e54f0ca6b","first_seen":"2026-08-13T08:30:02.645043Z","last_seen":"2026-10-13T04:37:16.925285Z","times_seen":22,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":7,"dns":1,"connect":11,"send":0,"wait":11,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/images/badges/01_community/community03_80.png","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.540Z","timestamp":1791863352540,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/images/badges/01_community/community03_80.png HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-2dad\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\nvia: 1.1 varnish\r\nage: 3530\r\nx-served-by: cache-bma-essb1270073-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 12\r\nx-timer: S1791863353.625051,VS0,VE0\r\ncontent-length: 11693\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11693,"size_decoded":12095,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"0296c81baa7b0d04b74990f082fe9475","sha1":"912da7013e7c02e84f84a2b94f082eded8cac71c","sha256":"4371f0821d4fa5edd74f63951ed305acabc482ccb1382e1b06ef81eaf96dd803","sha512":"a20de1c614b9bb1b77b7b884ddd5ac5c6599aa9a1346cc991fcf9bf4c0b28c854e2411d26f172af8f6a267e00766f5908f75b4a115c9e9da57eeebff6ec4ff13","ssdeep":"192:n0c4cI3A2yf7Ab3ND+iqyGMT9qYjnNIogkt4b5nK/VfpVGYKjPu3X9IO1Z20:0cNI3MEbD1GliIoftiK/VfpV9KzaPM0","tlshash":"c932bf0c4f5113e6909d91ce08f29c32e52ba5c18691ea35e58fce873f507941e862ef","first_seen":"2023-05-10T19:23:13Z","last_seen":"2026-10-13T04:37:16.92335Z","times_seen":158,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGJG51EejH-Tb0MKgO3OY6VJw5rjg4w6pFEmjx5W4-SFevaX2PqI8danKWWHCkrwns-Q_SnDrxE9wtzjSmYyuImXXMFFN6VEcFA/96fx96f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.134","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.543Z","timestamp":1791863352543,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 19:33:34 GMT","end":"Thu, 31 Dec 2026 19:33:33 GMT"},"fingerprint":{"sha1":"60:75:6C:3B:7D:C2:BD:27:D4:14:61:F7:5A:0E:49:55:D8:9A:80:C5","sha256":"35:24:FF:98:2A:26:11:7D:16:58:6C:EB:48:BF:FA:AA:A1:98:08:B6:11:67:91:3D:4C:C1:D1:74:09:7B:95:CE"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGJG51EejH-Tb0MKgO3OY6VJw5rjg4w6pFEmjx5W4-SFevaX2PqI8danKWWHCkrwns-Q_SnDrxE9wtzjSmYyuImXXMFFN6VEcFA/96fx96f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nLast-Modified: Wed, 26 Jul 2017 01:22:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 12993\r\nCache-Control: public, max-age=69254\r\nExpires: Tue, 13 Oct 2026 23:03:26 GMT\r\nDate: Tue, 13 Oct 2026 03:49:12 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12993,"size_decoded":14821,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"8f5e041f28dbfbd40ef7ebebfb373b30","sha1":"e7ba89a3175ab2da817f29e7194e0e8ce26d0b65","sha256":"ecdf8a87cc4380008f59d4510cd02da9059c78cd9ca1545d73de5318fcf1df03","sha512":"bbf28ac338cb6e5561d011877f53477ac9e98804f9c06a1a16fc381b5297b06a3f1396d4164bc10d4bce10b2c6e1e8c422a0220a2970a6b80279ebb3fd990505","ssdeep":"384:fbC+aMQXC/zaYvmuPWL3HonBGWqrYptjUgX:fW+abSbVWM8s","tlshash":"2642c057372eeb63d7fd226b09e45d2792c8442cc025600478db1f36a93dac8e927ad2","first_seen":"2025-10-05T05:51:20.385323Z","last_seen":"2026-10-13T04:37:16.905507Z","times_seen":48,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.fastly.steamstatic.com/public/images/profile/achievementIcon.svg","fqdn":"community.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.555Z","timestamp":1791863352555,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"community.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 13:37:51 GMT","end":"Wed, 18 Nov 2026 13:37:50 GMT"},"fingerprint":{"sha1":"D7:4D:0A:FF:55:EE:21:F5:C4:23:72:77:0C:E1:5C:32:3B:0B:25:20","sha256":"88:44:48:D7:E4:35:77:D2:D1:45:9C:FB:75:2D:CE:26:7F:EE:02:AB:02:25:B2:1D:12:DE:63:6C:B9:25:3B:A2"}}},"request":{"raw":"GET /public/images/profile/achievementIcon.svg HTTP/1.1\r\nHost: community.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 22 Nov 2024 18:31:38 GMT\r\netag: \"6740ce0a-ef3\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\nvia: 1.1 varnish\r\nage: 66751\r\nx-served-by: cache-bma-essb1270073-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 547\r\nx-timer: S1791863353.869441,VS0,VE0\r\ncontent-length: 3827\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3827,"size_decoded":4233,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64c37d82a62497077624a0bccbaa18cc","sha1":"3fb8c4ab3ad795404704368d9786f0b193c4bf6e","sha256":"2b48eeb02622aec150ac0ffe32fb7cda94c49f68b16fb7d7cbb7073594678c18","sha512":"091968e83124626d7c1aee24ce924e223f20728d8f7e1213d0b0372d4b83aa2d0eb4493e566de1ad12bd81cd1e860550069ed0a8f71aa9c38c9fa493e20f1753","ssdeep":"","tlshash":"5c811fe5b69978eca85642a8fb985471277e7072b780460d8c2f2631904bdcdde7f780","first_seen":"2025-01-07T09:17:26.360609Z","last_seen":"2026-10-13T04:37:16.928783Z","times_seen":36,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":4,"dns":0,"connect":10,"send":0,"wait":9,"receive":0,"ssl":267},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ggg.team-ke.com/d93bac209/39460/0cde05e.png","fqdn":"ggg.team-ke.com","domain":"team-ke.com","tld":"com"},"ip":{"addr":"172.67.191.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ggg.team-ke.com/496361c95","date":"2026-10-13T03:49:13.336Z","timestamp":1791863353336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"team-ke.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 15:30:48 GMT","end":"Wed, 06 Jan 2027 15:30:47 GMT"},"fingerprint":{"sha1":"95:B1:94:32:42:5B:C0:C3:E6:45:99:14:4B:8D:78:EF:5E:8A:B7:37","sha256":"4F:9D:2F:44:76:0D:E1:C8:C7:2A:E7:CE:A7:70:3D:07:A5:99:C6:28:61:FF:FE:C6:71:22:10:CB:51:83:25:CB"}}},"request":{"raw":"GET /d93bac209/39460/0cde05e.png HTTP/1.1\r\nHost: ggg.team-ke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ggg.team-ke.com/496361c95\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 03:49:13 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4wlSuonyRBONTAR6qb8Mvrh%2F48EMMGztavnHZZFyW07YtJkqc%2FrINbKVWeUtpjGinau1M%2BUg9ljfnkq6Bit68kHqKx4Aj%2BhUqb5B1rB6xjJbPkzaUpifn7imyAhEWU1kPVk%3D\"}]}\r\npriority: u=5,i\r\nage: 786\r\nlast-modified: Tue, 13 Oct 2026 03:36:07 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49b5f865f4b0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34031,"size_decoded":34663,"mime_type":"image/png","magic":"PNG image data, 772 x 528, 8-bit/color RGBA, non-interlaced","md5":"2ce8edb1084ac3eb8c103eed6d14cc88","sha1":"8e3add036da4003da3d9f55b0570ab7b2be572eb","sha256":"c0370dc2c1a282d21cf6d22cabd01129f7a1a97caa083fcbc77ad3c30adddcd5","sha512":"d5b50f059415785b2e2cbb3d8d8eff3bc4e9bc004087c00c15c28f098876e106b74d7b842b6fded0ce09324d2ffd8dda97bbe82a8a854d5e1338557f8c8a4e05","ssdeep":"768:dcFOvN2NQsLXFbRXKZ8pYAff0p1v9Y1xwhDg8vCghcJ+ZEwV94I:CU12NFBbNKZ8pYAEp1i8VPXhcJCfj","tlshash":"9ae2df2b0d2e93439dcf432cca78362edb3b89e246c45f394c722da796c169355a581b","first_seen":"2024-08-19T19:46:40.679866Z","last_seen":"2026-10-13T04:37:16.937211Z","times_seen":7,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"ggg.team-ke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.fastly.steamstatic.com/steamcommunity/public/assets/profile/equipped_items_icon.svg","fqdn":"cdn.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.527Z","timestamp":1791863352527,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 11:02:57 GMT","end":"Mon, 21 Dec 2026 11:02:56 GMT"},"fingerprint":{"sha1":"45:D2:1E:2E:C1:1E:A8:9E:FE:EA:CA:B5:EE:DE:0B:E7:14:58:8E:7B","sha256":"C9:EB:B3:D5:A9:B2:F8:69:A9:40:A5:21:91:02:43:42:12:4B:54:2A:F1:29:2E:01:C7:AE:F1:AD:28:CB:AC:B3"}}},"request":{"raw":"GET /steamcommunity/public/assets/profile/equipped_items_icon.svg HTTP/1.1\r\nHost: cdn.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 22 Nov 2024 18:31:37 GMT\r\netag: \"6740ce09-305\"\r\naccept-ranges: bytes\r\ndate: Tue, 13 Oct 2026 03:49:12 GMT\r\nvia: 1.1 varnish\r\nage: 75248\r\nx-served-by: cache-bma-essb1270037-BMA\r\nx-cache: HIT\r\nx-cache-hits: 2674\r\nx-timer: S1791863353.874447,VS0,VE0\r\ncontent-length: 773\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":773,"size_decoded":1141,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"07e68f4a8fccf445de013ae272dbfd37","sha1":"9bd297e604b1b47cf5e2539b4e98daeb71926bfa","sha256":"37ae68e419904f5deac7f3b6ef9b0b800f12ac0f0ad26afbedaa583384a38c78","sha512":"f034317ac3e38a9583ed281b6dc014cc30ee76e20879264b08262903278fb99f9b44bcecd166a36f9c13d0e9bbc31d24ff2d64f2fa9994b1d430a30e311cf1a4","ssdeep":"","tlshash":"a80190bff01d5d2d50819358558dac029086f843b21764c1a7d3361cbd918b3c536f65","first_seen":"2024-11-28T05:35:24.168488Z","last_seen":"2026-10-13T04:37:16.952818Z","times_seen":221,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":9,"dns":0,"connect":11,"send":0,"wait":9,"receive":0,"ssl":267},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH_HN0cWiOmuD4EQ6857m5WbzSEyhoZ_t8C1J-_OiV6lkM-OaAmLfxvdkv959RnjjqhQqvjKXjo71HibOLUV5VsdxW-4Dthe9ltDgMry251DXj4xCyXj7jihP7CdstukGBPUgqfHfj16UZOYjoc5UpmVWL9s/96fx96f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.214.96.134","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.team-gu.com/p/rpt-bvj/ozjybtpc/","date":"2026-10-13T03:49:12.553Z","timestamp":1791863352553,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 19:33:34 GMT","end":"Thu, 31 Dec 2026 19:33:33 GMT"},"fingerprint":{"sha1":"60:75:6C:3B:7D:C2:BD:27:D4:14:61:F7:5A:0E:49:55:D8:9A:80:C5","sha256":"35:24:FF:98:2A:26:11:7D:16:58:6C:EB:48:BF:FA:AA:A1:98:08:B6:11:67:91:3D:4C:C1:D1:74:09:7B:95:CE"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttydbPaERSR0Wqmu7LAocGIyi3kajH_HN0cWiOmuD4EQ6857m5WbzSEyhoZ_t8C1J-_OiV6lkM-OaAmLfxvdkv959RnjjqhQqvjKXjo71HibOLUV5VsdxW-4Dthe9ltDgMry251DXj4xCyXj7jihP7CdstukGBPUgqfHfj16UZOYjoc5UpmVWL9s/96fx96f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://s.team-gu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nLast-Modified: Tue, 11 Oct 2022 01:17:25 GMT\r\nContent-Length: 6926\r\nCache-Control: public, max-age=430648\r\nExpires: Sun, 18 Oct 2026 03:26:40 GMT\r\nDate: Tue, 13 Oct 2026 03:49:12 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6926,"size_decoded":8754,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"a09570a2c0b474fcfe2c75774abe2018","sha1":"53b5a5638c87b66ae5c0cdd89b9de3419c1932cc","sha256":"ed5843b8fa1ab0542b17f2da647a5aaaf1c4262e9346fc9272573f863581882d","sha512":"ac10a8f55e5e49bda0934cbf8e1b94d2e24f9d5fc4e597692cb9e57415e5384c65d1d11c691787b70e765b20f64f6c992698828805aca4c0595a55c9f2e12496","ssdeep":"96:/QRgQOjU47uPRWf8OFz4IbEBiL4X5vzUkpY7pVpTmp+kR02lxNRYFIG8/hHOmxc:/QRkuJW/Ci0X57p6BZn6I2GEnxc","tlshash":"51e19e703c8a9484b48ddd340d89b169fabd2e4d180261c5cd3fb7ab821457caa5c7f9","first_seen":"2026-06-11T00:49:01.12037Z","last_seen":"2026-10-13T04:37:16.885308Z","times_seen":47,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}