{"report_id":"6085b870-29c5-42b7-9121-ee0f14d19c3e","version":0,"status":"done","tags":[],"date":"2026-07-19T00:07:34Z","url":{"schema":"http","addr":"raduga-gifting.click/id=825151","fqdn":"raduga-gifting.click","domain":"raduga-gifting.click","tld":"click"},"ip":{"addr":"192.162.199.140","port":0,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"raduga-gifting.click/id=825151","fqdn":"raduga-gifting.click","domain":"raduga-gifting.click","tld":"click"},"title":"Steam Gift Activation","dom":{"size":51032,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (49904)","md5":"1bb72b47fa9c5b4b07b4863a3c927e3b","sha1":"e707bea96e012fd5d98c7ce04badfe2269096a68","sha256":"986377f45197fdcf494212fc7ef3da3d68ffce2aa314529bd3bbda3d3dc9fac4","sha512":"67bd6376f7fb0a9ecef77b4f04f7d4cd01515dfd5751f4be0444da7a5b640fca96bc38e2a10667a8dcc8c0d6981640f79f654a7cbc1bb7affc0ae105f89f6f7d","ssdeep":"1536:/TVd8oa2WsR4v1L8St1RKDijMKUFy5mLI:rVrahsR4v1L8S7REzFfLI","tlshash":"173374a4fafaa72cc7e3e94c2d1918f6989e7410b7480d24ab0d553ef515349eaf2d0c","dom_hash":"domhash11a195caaf878fb740d7f7a098de5bea","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"raduga-gifting.click/id=825151","fqdn":"raduga-gifting.click","domain":"raduga-gifting.click","tld":"click"},"ip":{"addr":"192.162.199.140","port":0,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-23T00:07:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"raduga-gifting.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-07-12T22:42:14.264548Z","alert_count":0,"request_count":1,"received_data":89154,"sent_data":467,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.steampowered.com","ip":{"addr":"23.49.26.105","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2000-08-09","domain_rank":25571,"first_seen":"2015-12-16T22:18:52Z","last_seen":"2026-07-11T20:48:43.885281Z","alert_count":0,"request_count":1,"received_data":210,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.akamai.steamstatic.com","ip":{"addr":"95.101.10.18","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2013-11-07","domain_rank":129555,"first_seen":"2014-04-02T16:39:27Z","last_seen":"2026-07-12T17:55:09.356082Z","alert_count":0,"request_count":1,"received_data":503638,"sent_data":598,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-07-12T23:52:49.76326Z","alert_count":0,"request_count":1,"received_data":470429,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"raduga-gifting.click","ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-19T00:07:43.10954Z","last_seen":"2026-07-19T00:07:43.10954Z","alert_count":12,"request_count":12,"received_data":358379,"sent_data":12630,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Prototype:1.7","description":"Prototype is a JavaScript Framework that aims to ease development of web applications.","website":"https://www.prototypejs.org","common_platform_enumeration":"cpe:2.3:a:prototypejs:prototype:*:*:*:*:*:*:*:*","icon":"Prototype.png","categories":["JavaScript frameworks"]},{"name":"script.aculo.us","description":"","website":"https://script.aculo.us","common_platform_enumeration":"","icon":"script.aculo.us.png","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery UI:1.11.3","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}]},{"fqdn":"store.fastly.steamstatic.com","ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-11-07","domain_rank":81796,"first_seen":"2024-10-31T18:26:40Z","last_seen":"2026-07-16T10:42:39.988333Z","alert_count":0,"request_count":46,"received_data":5120244,"sent_data":24858,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-07-12T22:56:27.755137Z","alert_count":0,"request_count":1,"received_data":891921,"sent_data":474,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i.imgur.com","ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2009-01-09","domain_rank":3309,"first_seen":"2012-05-21T08:09:36Z","last_seen":"2026-07-17T09:50:22.82475Z","alert_count":0,"request_count":1,"received_data":3401332,"sent_data":501,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"steamcommunity.com","ip":{"addr":"23.49.26.105","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2006-05-28","domain_rank":533,"first_seen":"2014-03-11T13:45:34Z","last_seen":"2026-07-11T22:02:39.14365Z","alert_count":0,"request_count":1,"received_data":38823,"sent_data":505,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.cloudflare.steamstatic.com","ip":{"addr":"95.101.11.122","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2013-11-07","domain_rank":239946,"first_seen":"2020-06-12T06:10:44Z","last_seen":"2026-07-09T18:35:52.733507Z","alert_count":0,"request_count":1,"received_data":2846,"sent_data":536,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"recaptcha.net","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-01-06","domain_rank":1074,"first_seen":"2012-07-15T20:16:42Z","last_seen":"2026-07-16T19:55:06.322897Z","alert_count":0,"request_count":1,"received_data":1765,"sent_data":448,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"raduga-gifting.click/73187f547e07060f02130271590757015054","fqdn":"raduga-gifting.click","domain":"raduga-gifting.click","tld":"click"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"86fac5d307fd236ccb8b6ab822b5ffd0","sha1":"2a7daa54a4fedc6e8c1f9a680ce87db3302aa026","sha256":"1881d7096ced4261ddaa8a0fba43ee5ca16c6ab0a469628d2350e37deb15ebc7","sha512":"feb0bdee3a8cc480bcd6fe47df6c83704172e3cc72f5beb12e7161d9ce066fd1cf506684e69da6f0e765d0ccc53ec34b1096244521075b3549cd3218d9b33dab","ssdeep":"","tlshash":"2980044401575514c73d1114434311003d400054100370505dd441511441c074454c51","size":32,"data":"","first_seen":"2024-08-04T20:33:49Z","last_seen":"2026-07-19T20:18:49.867693Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raduga-gifting.click/73187f547e07060f02130271590757015054","fqdn":"raduga-gifting.click","domain":"raduga-gifting.click","tld":"click"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ed6fe4b6a4d8cfd17871d91d3a837f6","sha1":"a6d5553eb937cb129e4042a52d316e683d15a2b7","sha256":"544baa1691b99c9af31a94a33325971f6f91973af6aa95aff558b1757cf20cb1","sha512":"6b92365800cd36c2c7c18477cf933bacba1628fe3a178b1c9cd029ae53f7c3f61fcbfac58258c81ef035d9b17df6d0e0c21dfef70c49294321a0a5c31cb5efc8","ssdeep":"","tlshash":"2470000c388080288230280ea0380328a882038f0020e280000e080000082882aa2038","size":25,"data":"","first_seen":"2023-03-07T12:12:29Z","last_seen":"2026-07-19T20:18:49.868259Z","times_seen":968,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raduga-gifting.click/73187f547e07060f02130271590757015054","fqdn":"raduga-gifting.click","domain":"raduga-gifting.click","tld":"click"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"6a73704f13d2cd5b578beb4e528d54cc","sha1":"04c066f03fc9f07167a9a02984bd6bb7d0b62373","sha256":"308ebb4f8ca092fe52edd465741ba152bf288cd43076ffab2e9ba80d9eeb4fb8","sha512":"ce8a6a692e75f88c1532850f14ace1a9f1011cd21959f20c9131b1e6047b269e550d7285832bc9fa549de2eccc55aa6e303c28071e600e47eccb993eb100c2e1","ssdeep":"","tlshash":"3fa022cc3020c0a00bc833cae0a2303ff80b0c0f08bce80b828b038080003b0038803a","size":71,"data":"","first_seen":"2024-11-12T14:20:45.817699Z","last_seen":"2026-07-19T16:07:05.948799Z","times_seen":403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raduga-gifting.click/73187f547e07060f02130271590757015054","fqdn":"raduga-gifting.click","domain":"raduga-gifting.click","tld":"click"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"df9a0f48d140690db45c1d803027a293","sha1":"ecf50b5fb6e3aa23ce7790429a901e712e1b6928","sha256":"f63e069baed1639cd67a69957b36664d528c8276ea5f46e6257c553c20b82804","sha512":"8a2e9f464ad1c0df7fd990298f94fbb3f786bb8d4305301a92554cf1d544c16b79c1c1634bc6ce620f9e1b8db0c44bd962a50ed9192d8a512d0653ae9faacde5","ssdeep":"","tlshash":"3ee07d464c32283e5173a0e47a85959d973c053fe820dee62ac465fcedfbe072622f04","size":394,"data":"","first_seen":"2026-06-12T02:11:36.084085Z","last_seen":"2026-07-19T16:07:05.949991Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raduga-gifting.click/73187f547e07060f02130271590757015054","fqdn":"raduga-gifting.click","domain":"raduga-gifting.click","tld":"click"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c89816a348314a8a93cc18a8b0dfaf9","sha1":"4acdd407b4f4e6600c1624fc4fca301a6c5f1cbd","sha256":"51f981c78325a2b48cb67ddea878f5bf9ca9e9a275dc63f054b7000cfd054ac3","sha512":"374288293e4007e03ca6a7adfc91adcdbb0622a57538d8c2001b748b214fc90fc35db7ba1b990787213a17534e6f6b6e46175d7b63b5114c8237312474ac81b7","ssdeep":"","tlshash":"aef0f449bc7a147d526760e47641518d633c193fd450cee566c4ebf869fbe421b11f08","size":536,"data":"","first_seen":"2026-06-12T02:11:36.085075Z","last_seen":"2026-07-19T16:07:05.950778Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raduga-gifting.click/73187f547e07060f02130271590757015054","fqdn":"raduga-gifting.click","domain":"raduga-gifting.click","tld":"click"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"ee860019e5544663214cbb860eb2065c","sha1":"6f740ddb3b717916967f048ae799c5c335ca92b8","sha256":"911ac965583800feb64c91461c0924f5536d60f3bbb75ec53fe3d1c005397dd3","sha512":"a01a9b5a48ccc3477a7cab65b70af9197c709284ea28e503412a0f89bc1ebed1a8025dcb096c94b4e91245cc147c4a6c3c3e0c2ef93e57e5ffb2b98dd1a1897b","ssdeep":"","tlshash":"f4d012004c31e43d2d66b0ef2153d55d062d08aa7420c4973ac86c59ed6be070f14c3c","size":201,"data":"","first_seen":"2026-06-12T02:11:36.086433Z","last_seen":"2026-07-19T16:07:05.951703Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raduga-gifting.click/73187f547e07060f02130271590757015054","fqdn":"raduga-gifting.click","domain":"raduga-gifting.click","tld":"click"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9711157db5cfebbeeb26b61ade98d74e","sha1":"3264a9a151ab9e4ce81cd34de77db5e07d4a784e","sha256":"1f873b54874e63644abaa41d96da618689de18971f2312aaf7ffa749921a734d","sha512":"f287f37fb75163e298809c61034ed9c87299ad497728aca0dfb6d6da0f19f0731cff1ae6c1f787db5a4e0ae53f29716757f55c2777c95183ad04dbb3b0813c95","ssdeep":"","tlshash":"ecd09e009c31907d2e9970aba052968d223d1c79d59098d67588e9a568fbe820b94e39","size":238,"data":"","first_seen":"2026-06-12T02:11:36.087491Z","last_seen":"2026-07-19T16:07:05.952329Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raduga-gifting.click/73187f547e07060f02130271590757015054","fqdn":"raduga-gifting.click","domain":"raduga-gifting.click","tld":"click"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"30ab3323cc6dd2758a6dfad1dc7a00ef","sha1":"0c291dcb0bf7012a0d4da4d469e2f44e2a1a6755","sha256":"037c5578f9bbc834dd1b36e8655cbe5f79045bde85de62575cac38b5ac125b72","sha512":"10654ea6e05fcfa76d17b2ba0a1a6567d1d50cfade908ca667a6884c19e9c38e9f81833fb4286147fdae8016940bb7d69436bed818c71ef01a470dd77693de1f","ssdeep":"","tlshash":"aab0120ef432ff9087d214e0c0b5c31df1241baad822fca0e604ccd18f2200911d454f","size":107,"data":"","first_seen":"2023-12-21T17:06:34Z","last_seen":"2026-07-19T16:07:05.953044Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raduga-gifting.click/73187f547e07060f02130271590757015054","fqdn":"raduga-gifting.click","domain":"raduga-gifting.click","tld":"click"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"a3598679ec3dd02591bcf135ff1955e6","sha1":"22707a986225438c18c7ac7c0e6d0c824835781e","sha256":"b8cd59e572b818ffb70ade693cb896e067815d4c118106eba92fda11d1f2f387","sha512":"c385138cce62cfdebe85e3c74e0603db9cdbfba61ce5875a7f080d0fa7b9912e491d10bdf6c6dd9ee75f8d486259a8423f564f4fafaa38db2fc575719fe12b37","ssdeep":"","tlshash":"8ad0a727713775b475736424333eb710592220532086a935b51d46ac4f0cf4a4f7a088","size":246,"data":"","first_seen":"2026-06-12T02:11:36.089146Z","last_seen":"2026-07-19T16:07:05.953911Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raduga-gifting.click/73187f547e07060f02130271590757015054","fqdn":"raduga-gifting.click","domain":"raduga-gifting.click","tld":"click"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"beb93c76e6d4beed5d2b1c9b23d9d96a","sha1":"c55424ad67f8aad2a55302279a81780fa78d59b9","sha256":"5f7b170bbbc1ff26ab9640edb1f3a978109c1eb5d4b6a20dbd60e49b6d53e69e","sha512":"2b2436b124bf71ec3016cd10f5b5c2cc20afae7657de1d9174c5ac7a3962f49290867a32073458738d1fb1496c6d865184f96035483df35021765d2889152ed0","ssdeep":"","tlshash":"03e0cdbbfb771038e961c4afd11dd55815354117c45eb530782c92542f86658d742fd0","size":316,"data":"","first_seen":"2026-06-12T02:11:36.090033Z","last_seen":"2026-07-19T16:07:05.954627Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raduga-gifting.click/73187f547e07060f02130271590757015054","fqdn":"raduga-gifting.click","domain":"raduga-gifting.click","tld":"click"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"50c30828a43e38d787bc92286800bb18","sha1":"d029432506452994ea4d321015dbfe3dcba179fa","sha256":"1a4ee0d2cb25e23e0a386452c53f77b0c0dd6ce4cd7a99f3c91884cabdd53647","sha512":"61da83ee2635b6dff26e31aefd3a225b02bc8c78cfd3bb450f4cad4affc7fbdcbeee649160798aba437fb6f19573f1503f9657da51b6834da12db8f0f147858c","ssdeep":"","tlshash":"6670002088c8083000ac00022202a2002808008028002000ab080c2a280080f08e0080","size":20,"data":"","first_seen":"2025-04-05T11:35:20.177742Z","last_seen":"2026-07-19T16:07:05.955956Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raduga-gifting.click/73187f547e07060f02130271590757015054","fqdn":"raduga-gifting.click","domain":"raduga-gifting.click","tld":"click"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"b0130159a81f4f19ff52f8717645e1e6","sha1":"83d4163dca225a53d5c946cd4d4b6ba903afe4ba","sha256":"31d0d8ed450c177c961cad6c6a0d5ca8744f2f4790a9f8bfab0b42de475d59d6","sha512":"917624e44529b09d94b84b5523eb8424f0d352bd5dbc321f9bb95abe928942658358118a96cd351865237a21ab698e1b60471eea21c06b802df2eac6d838910f","ssdeep":"","tlshash":"ecf09aa818f356620e1ba272145fa0c4f111c833f2598da0f61ca666dfb10bdc3dcf99","size":471,"data":"","first_seen":"2026-06-12T02:11:36.091949Z","last_seen":"2026-07-19T16:07:05.956923Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raduga-gifting.click/73187f547e07060f02130271590757015054","fqdn":"raduga-gifting.click","domain":"raduga-gifting.click","tld":"click"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"5734c9adf9d3bc61d15cce0d555b6c56","sha1":"5417db11cd9c7282b8a12f69fd730713964c1d83","sha256":"c6f678e5922ed3f59a98b7b09fd4715e6cf0c3a7248a2a6ef4dc4613ac0686ec","sha512":"579071fd145732c4331ab2f9cb1a6292a3242149be7a1777c82fd11a5897d6ea10438f825897cf85aaced946fb7b2c9cdc5a9eb8c7b572c4282bc616fd6416e7","ssdeep":"","tlshash":"ed01264e30a354105ba7a57d65cb5634f120a103a00acd0d3ddd92419fe3a7ab190b8c","size":826,"data":"","first_seen":"2026-06-12T02:11:36.093742Z","last_seen":"2026-07-19T16:07:05.958275Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-07-20T00:27:37.95085Z","times_seen":137187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.11.3/jquery-ui.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c811575fd210af968e09caa681917b9b","sha1":"0bf0ff43044448711b33453388c3a24d99e6cc9c","sha256":"d2f0522008bff05c6434e48ac8f11f7464331436a4d5d96a14a058a81a75c82e","sha512":"d2234d9e8dcc96bca55fafb83bb327f87c29ae8433fc296c48be3ef8c9a21a0a4305e14823e75416951eecd6221f56fbbb8c89d44b244a27be7b6bea310f2fd1","ssdeep":"6144:zK8SyEGdEXdujYWUl/plq/pGlgFld1HmcI48VirY7IXtu2Y5W5ZbHtQTiTXu5bgs:fljHmcI4q5W5FHttCnuJq7CjhBK1","tlshash":"b0a4a689f39c266a857a325d5c2e41ce723c8076d60158bfbc5c59dc29e883c42bbf79","size":469790,"data":"","first_seen":"2023-03-07T01:03:14Z","last_seen":"2026-07-19T19:11:16.482091Z","times_seen":3353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/shared_english-json.js?contenthash=aa3b7ab9b8b21c0b94ab","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8531a61523d38261458e1e1d9a7e641a","sha1":"b29024bb12a9324cd2c22930e5dbee86e46c08c2","sha256":"9e7b0e342e2c35dea4a37d7034f775768aa7a2b671a3c06f8bde93aaf8918bc6","sha512":"f30effd9555dc437729390f036ef3b1564316a3d3e9fa3e310fdafcbc257603ca203b15ab3c4a552894a71d419405780639e9ef84513cdfd05ff14df92ca8bb7","ssdeep":"3072:Vz0JiCCnkeC7QErjIYpfNnPdzr6oQxEXtwajgjqUAI0N4/g:R0NmkeaQwIUfNnPp6oQxO5","tlshash":"4154390f9a5d6d36078703e7fa0b6c975bb041df13061c219eda4d4f11da78aa33ba68","size":279245,"data":"","first_seen":"2026-07-11T22:02:53.144671Z","last_seen":"2026-07-19T16:07:05.921206Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/main_english-json.js?contenthash=1dad68489e111e020eae","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"35426b8489b6cee154c7b1de49d6c2c1","sha1":"23a006e63e004342b9a0793fa669312b9a660c00","sha256":"92dcf52baecdb7ae75165a1e98be1083d17f93ba79604af18fb1f6866e61a9ae","sha512":"5da66a4d3cab3ac8b14043a3232020531f243e7cb373e04269d2ff0fe28a3c32a7ae00bced41616dcd3a4a7f5032451dba3aa77fb170354a66da40f6dfc4697a","ssdeep":"1536:07aiXSllRVji5XfFLNh4iAEd2Pj7CHrp5ALMRmdQwU:s+lR5i5X9LNh4iAEdGj7CHULMRmdQwU","tlshash":"02931a0feb19097b978702b77e1e66e771e5c0e733e11c60bec8842f12466c5622fa59","size":89293,"data":"","first_seen":"2026-07-11T22:02:53.000846Z","last_seen":"2026-07-19T16:07:05.823107Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/tooltip.js?v=QYkT4eS5mbTN\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bdab54443893030688921dc83a7d4fc","sha1":"148804134bf1c2387059ca59568628b3a67a97f5","sha256":"668e5ee5d12ff2f0206df57a22d3e180bcbbcd6c97992dfd8130812455b1c5db","sha512":"b291372cb16425cc5e3d42ee8189a287b8c3b1de341dbbbd72d17075f026f208c7c2f5890425de51294b0b352737a1f9468e7d90768f1bb69addd07bdd754703","ssdeep":"192:h3ug34ZknOPADCO0izmla3uCXDJiC7ZEb9k9Hdqyo0yPn4PRP/4PaP34Pjc+8uba:h3ug4R4svlBEJpocOuJ2Cu+bR","tlshash":"ba8254a1f73d20ae407aa3be885d238cb33d40765161f8b57d7886743a4e49b4396fe4","size":18052,"data":"","first_seen":"2026-06-17T17:21:21.164668Z","last_seen":"2026-07-19T20:18:49.851454Z","times_seen":177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/sales_english-json.js?contenthash=c88888ee093b54b9d580","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"29394036adec26338a0b3f8e865ada7e","sha1":"dc6b75150815a3e413aa6e76df4d56314c1e8100","sha256":"97bcb017795b002d8331c2b407a394c6c76db713d9b7e7701fc8dceac46a90a2","sha512":"994bbc83abdcd00f2fabe2a3b7586effa2c956ebf732d40d17c97351dc892c11596b0420e9b6f91aa46c0a9fc6e478baa426820dc64d203cb49dd7142588414e","ssdeep":"3072:Rs4PKfx/onsTjdlClNDArfKrxbJOggpsHAHC:FmgnylCMm5vQRC","tlshash":"d734241f56c00337073b0696797db0c7b1788ca763c4a476aec7a13a136b919f1a66bc","size":234712,"data":"","first_seen":"2026-06-19T07:11:07.77641Z","last_seen":"2026-07-19T16:07:05.8282Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/marketing_english-json.js?contenthash=901b94dd9f69e97457a6","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ddb9e141288844a7eca125c96fb8a47","sha1":"efa05a3f59a969a45facaaeb28083612821bac5b","sha256":"6d554818738e76dd3ed654a10be056e9d17da74879f187545c93b941177ab401","sha512":"9ab64edf239912faf29294e513271c1151f3c58c741de79caaeb70b808fc3b35bd07244775648e7b6f1e1ea1a110b40a932f1c5fa3b2f4b08a0ee2cb91d12270","ssdeep":"768:jUHNm+blpRN7VMxsgE3kid5/VQ4I2qWh5ZTUgZisZ:jUtm2N7VR3Bd5/VQaR5ZTTZ","tlshash":"dcd2d5b9f1376a2603cedaf82dbefb4511bb80680708795d54685d2fb1f23d449368e8","size":29772,"data":"","first_seen":"2026-07-11T22:02:53.165908Z","last_seen":"2026-07-19T16:07:05.762534Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/52993.js?contenthash=34ac00c1bdba2b42329a","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b68fe1d3e580b6e26f19d7a358a0890","sha1":"52e20d57a3d0abb8b1c8f4ba2bb02becf242ce6a","sha256":"944658bf50713056faf9d1ac68edd9d2514dc4439d81b63eec8f39ecce339729","sha512":"d874f29bd9aac7df1c1de81c7caf6859d3c4be679a42ce9e7b42f898928e1a69c38b90774b2b22a9e5b99ae331b37f6fb6cf9d857adbecec9107507506916b5c","ssdeep":"96:+Tue07F0sjdubrViVR3KAFRvlC2mkIQGTQI0Px2ig8oGMbBuVEvPSKWP+:+E7++zlC23dQX8+","tlshash":"b002224a185c393d479b338bef4b485ae5f49186700c1f8268e9963d1e7a790939b70f","size":8632,"data":"","first_seen":"2026-07-11T22:02:52.9613Z","last_seen":"2026-07-19T16:07:05.832525Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/jquery-1.8.3.min.js?v=NXam5zydzNu8\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3576a6e73c9dccdbbc4a2cf8ff544ad7","sha1":"06e872300088b9ba8a08427d28ed0efcdf9c6ff5","sha256":"61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf","sha512":"27d41f6cfb8596a183d8261509aeb39fcffb3c48199c6a4ce6ab45381660c2e8e30e71b9c39163c78e98ceabc887f391b2d723ee5b92b6fbc81e48ac422e522b","ssdeep":"1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:O+vIklosn/BLXjxzMhsSQ","tlshash":"b393f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","size":93636,"data":"","first_seen":"2023-03-07T01:02:53Z","last_seen":"2026-07-19T21:34:38.242036Z","times_seen":36775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/main.js?v=wiAgKBaqWusf\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bcb235945abc8ba1f65c7b12da1c99d9","sha1":"2e33c2a60b6b5a26675316b5db5d4a85e6a33ae1","sha256":"468b1fa63044e312d6b54c837db24a864ca964a13271f0d0a2b6dd239c923f81","sha512":"197509bb09525117f37992beadd4f889f8249d1c20590be05507c0864844e223b53acb54aa310d30d04df8ff583dac1b049793984854bc7bbc590c82b740190b","ssdeep":"1536:UqB6CKVhEGSF77Rdr+DUfMpauSa4ZRxwKOLWxLm46mMPeW3bLVf7ydSxk+YBwWP1:bBuLY1S/S","tlshash":"f98307d4f7ad01399479203cad1f94897a7e4871b900a8627d4e8a9874d092f43bff7e","size":87882,"data":"","first_seen":"2026-07-15T05:06:44.636128Z","last_seen":"2026-07-19T16:07:05.919662Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recaptcha.net/recaptcha/enterprise.js?render=explicit","fqdn":"recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b95e0cb4e79015e08b831b17bc8a7f09","sha1":"be2e5b0564be8e72ebaaa3cc50eac6514c881dc4","sha256":"9c737053acd7c489192cd4687825e10aebaf20b186a4999ea5171aede55eeaa3","sha512":"24757d6d521a12a02f1626d71617e718a2800ed680eb1f45c26bf5b852c511f9100104f5768e0127eb5fd5e8b1530ba164d759581c5615966bfa8ae038a8f8c1","ssdeep":"","tlshash":"3c111fb21a09a07a0f7219a5e2fac671e402301cb16c49dc9406ea842eafccfce02995","size":1067,"data":"","first_seen":"2026-07-19T00:07:50.134803Z","last_seen":"2026-07-19T16:07:05.91445Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raduga-gifting.click/73187f547e07060f0852544d.js","fqdn":"raduga-gifting.click","domain":"raduga-gifting.click","tld":"click"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4622ec5de1ef3b80c85992ddbde91ad","sha1":"422efaf2e1fcae57eb85f71116f97cbf34c17c81","sha256":"d62d1adb24ba7068df937a2ce52524a9ca6e684b1ad5d2708f9647f5f2121371","sha512":"c5dabdd1169e9eaf1b3dabda948440efd9ebc80c9b3e819ff272142d84132481f6d5800de0ac73070fc52bd02cf9237923e1123dc20a99b1702e09268204d43c","ssdeep":"3072:nm/hqd0cgNBfXFrHWQ/f4cK3OrAaX3Ed0PAhqCZmU:nmJqd0JFrHWQ/f4cK3OrAaX3G0P0D","tlshash":"f644b6443bc0ac5c135b5b3a731bb1d5f46a09af2d88094be115fc907aaa617fef9831","size":259944,"data":"","first_seen":"2026-06-19T23:58:38.384372Z","last_seen":"2026-07-19T20:18:49.863635Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/shoppingcart_english-json.js?contenthash=8c5f5d96adf409e02a5c","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3719fcc81b855c0d44d9e053246f8d1","sha1":"a72ea4f3a6da05c723d7a642ff766cffee257b12","sha256":"33a83cfa076c90e9962e4ce4899ac1062d083fa19fc6e30836c3bd9257099146","sha512":"10c78493cd760314006ea86af7a3ce04c46e9dd05e97b04f363607d985ad7f26f4faa06b21f98a6b5efe3de7fa365a515cbdea7746ea73d541b3c44b8799dfd3","ssdeep":"384:+f+Q1GLTu4XBaL79GTdyIqgYjgpJVB5ZYTzvbjDp4Jw9B:yWjBaL79GTdyIqgYjgpJVB5ZYTzvbjDz","tlshash":"a7928449cd6553735de64ba0bee6a64f83b4e2d60274f9904fc8096d324f5c284bfd88","size":20431,"data":"","first_seen":"2026-07-11T22:02:53.150033Z","last_seen":"2026-07-19T16:07:05.911285Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/manifest.js?v=VWHoUUnZEI3s\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0f3b695b51dece8a1e5ae34367b0d84","sha1":"689164ec452c99c9a18cddaed2c13b1595832372","sha256":"5d4146a1a70fc2b4d2b34187904499a37567ff22d95b052a3ccb26e6e749805e","sha512":"86f8b2aeea34a38b26bb176877ac0805538c0e59467530ee9e23e9a5788af9d29ba6bceaa1af9ffd20ea761430d73a36e029d3b98c1a26ef1bd857d20ad5d846","ssdeep":"768:DnDHM/C6+5GT3wtRG/v2OQUg+bHRAw1XALn:DDjjIkqlg+VjBAL","tlshash":"b9d23b7dbf38aada792c19d76c928ba460883c1eb81554c391ddf3250116e60bb13dbf","size":29266,"data":"","first_seen":"2026-07-17T03:38:19.919067Z","last_seen":"2026-07-19T16:07:05.889466Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raduga-gifting.click/id=825151","fqdn":"raduga-gifting.click","domain":"raduga-gifting.click","tld":"click"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"2eb2d6dc1861e7a758008b698b4d0761","sha1":"7ec14108d62a2fcca00ad9249ca0d201238ba91c","sha256":"b0eb40326dfc891cd51858150b91fa146e11b2d3fd37186cba405543e2d7093a","sha512":"e54b5053a171a2691c54f0771fdec46dd3802bd707ca28c15a6a01f03626c3c848146b4455c9e1f2353fb445a22f7e9cc2866518b14655590edf0ce366fd2fff","ssdeep":"768:L0OMlqdoa2WsR4OA1EiI9St1CaKF10djMKwp4+ysfRewL1ugAmH:od8oa2WsR4v1L8St1RKDijMKUFy5mLH","tlshash":"792364a4fafaa73cc7e3e94c2d1918f6985e7820b7480d249b09553ef515349eaf2d0c","size":49690,"data":"","first_seen":"2026-06-19T23:58:38.388893Z","last_seen":"2026-07-19T20:18:49.867116Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/dselect.js?v=sfK6UJLNp872\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4e2d6ce8e8a5a42ab3113bc45d73589","sha1":"65c9ed96d8108cfd380b412d2087246068ee102d","sha256":"c504ff5dac7b978a78f66e71f16351cbf5422a56de225a7bc23cdb753a464600","sha512":"88b6dd454372a48dc0488de55c1586684d7b2f4ab44c3e2b83c21f83780e9ee95529dfa7f76f283db11718d27a846892ec81fef949cd47b121f9e6175c3541b0","ssdeep":"192:MRfE8jdnRqi49tazp+SJ2GvZg2gEC6b48kgsaWoEgi+tQbKVNM9CYF4jXFXMAhkQ:MhOdLSwcbkgkz3GVNM9CW+XFXMA+Q","tlshash":"5642a664a32c17e900bf00bfcc995dd8a66de5b6dc0358a3b95d81ac31d09aa13fdd1b","size":12716,"data":"","first_seen":"2026-06-18T05:57:26.25161Z","last_seen":"2026-07-19T16:07:05.756866Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/main.js?v=bhe8idkqvbAk\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b880153f03d1ecf60f62d17fa40b7cb5","sha1":"e3e51a4f622041300bb72a96beb66a4013f222e4","sha256":"818a1834531f9a2cd2c06d7456558bcaa5ac72f73f893479a203428edfb4f4c5","sha512":"9f524c8ab7f1148ad3bec8b042aaf63aac9b894943c779495ccf314eacb5d535f8f9c372d067441ca23cf08c0bbfee16755482de570f2e10ad20b477403f7724","ssdeep":"24576:WGFJrUFa4dKdtu15oGbRD/WbTqndqxnupy46:fJ4Fa40dtufbROTqndGupy46","tlshash":"e9952dc03adafad2f79842d253361297f3285cb9f92d84d0e3e4e86434885cda765f94","size":1945459,"data":"","first_seen":"2026-07-15T05:06:44.720598Z","last_seen":"2026-07-19T16:07:05.95913Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/modal.js?v=7G8uHr4fXaTj\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec6f2e1ebe1f5da4e35ce187b96f63b4","sha1":"9a3ba01d1a0b3a6972bea477b6c4ba647b1daa88","sha256":"30e30ee53b2d8690f2386fda09ab68f33236d28251752360188e536c866ed3a6","sha512":"a2f7f2c063f87aa2b4817136eecbf57cbdd8bd5f455c6bf741cbe95f8b7a7b8748eefa147231e50c4a8f3d5c01edd5d9929438beab6c5c6fd77f0edd569696ac","ssdeep":"","tlshash":"da51011adf6c063ae57d425fbc29eb99367d4432b10e1df0c86d2b5814e0e9b1687d28","size":2802,"data":"","first_seen":"2024-12-10T13:14:44.772055Z","last_seen":"2026-07-19T16:07:05.931679Z","times_seen":170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js?v=vNpZeOuePA4R\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"22ef90626ba47f9786e5a248463337e0","sha1":"a4e8881a2c1024b78c5e3e4dfdedc3799ae31826","sha256":"f6c535c39c1b8a879b18d0220d3b53594d775e23a9cdaf24200a17159e20b7b3","sha512":"312e225600741ca7e7e06bcb7eedecbddf7ba1378f013de59ac5ebf8cc4eb9f3486ad52a09285d7d4a66a39e15dd3602768a74e72ca08adc30139e085eb27748","ssdeep":"6144:FFNa32VjkUHzaMMFeVaQDGq+a2BdM82srXuvn0ty0ME71aTk0xO:E1MMFeVaQDGq6M82sr+yy0MaaBO","tlshash":"16d43bc87161f42957a351b5146f100bb73a291a984c86e4f268dcda38f9d8ea13ff3d","size":648055,"data":"","first_seen":"2026-06-18T05:57:26.283799Z","last_seen":"2026-07-19T16:07:05.761589Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/40115.js?contenthash=c0f3a357c8a8a517965c","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4a9e737461ecd587d5d4a45bf7b656f","sha1":"e369f0c859d450eb7b3e676d18881f7db42bb627","sha256":"a2259ed0f92574262de3bea5606ffbbd6001ce9eea7576e3c1e47cb86ad4a63a","sha512":"44484d596431068fbacd2f206faf8faea0fe2c4da7cf080a32821ad20cc2abda20bd242673a1ede92354b1b12302acd8a36baea838c60d47cb84ee3f5a226575","ssdeep":"","tlshash":"16218e4bed4d38bb7ba7060c24471e054ca46c6012303a7eb16bda2fa19d40df7379c4","size":1414,"data":"","first_seen":"2026-06-19T07:11:07.805151Z","last_seen":"2026-07-19T16:07:05.751906Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a07ac1bf3466fe5eff6b753f96f39a11","sha1":"d06f6ebd81a8c180a7a6343821a3cf8279f5b86d","sha256":"c9fc8d435c9c3e131d7aedb36923a5ef798c85412192ed2afd9c52dcfb826ff7","sha512":"4648746112b8cdbab787c43e88827d96e02034c52b5436167a24d647ce349a0501df4ca67f82779c89fe0f5659bcc9b444655f83da816469c23e781fa3facc9a","ssdeep":"12288:CN7INAse6Zz779FTMfCtfTSZDYDzVRlh09yENpDvE:a0le6p5tfTSZ0D1h09yENpDvE","tlshash":"50153ade714639b24322b6f52077241ea77e9619c40c5c5d70aa98f03ef580da0f6ebb","size":891014,"data":"","first_seen":"2026-07-14T22:23:00.839245Z","last_seen":"2026-07-20T00:28:19.500978Z","times_seen":2525,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=lz_99vci25ux\u0026l=english\u0026_cdn=fastly\u0026load=effects,controls,slider","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"973ffdf6f722db9bb1e350b4c673f365","sha1":"a6c7d4331056cd37569fac3ee5f4b4e0e09b38cb","sha256":"658b209483f3b09ceabfab105ce9f15078138d646ca0e9abee2033606c852b19","sha512":"28ec015dd5dd389a56008983d64c69fbedf4c091e4478c8cf25c34db310516bc8cd1e0804fb554e26dfffe9b724b24b91df8ee1a5ed68153bc6bead655de0311","ssdeep":"1536:Ek3m7kQD+mlspqh2NrFIei4f9wiIVWaLcrZmKw1wF/IS58H1nRtW460kfR+U:zr4gO4f9wiJucrZE1xUJ5P","tlshash":"8183850d37ab262580dbb06a5f5f454db238411b1806dc58b8ad83d48fa9f3861f7fb9","size":87011,"data":"","first_seen":"2024-12-13T15:16:33.754695Z","last_seen":"2026-07-19T20:18:49.841985Z","times_seen":1657,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=tvQi85mXnRZH\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ac359371b7d915427947578e2c035d9","sha1":"a411c5828dd82793a4e3850c81caca9dac48de9b","sha256":"1b69d64ff8c133c518d00329a6bb5c82c995b7e116a0ff8bcc553af963c85017","sha512":"b312e8bd48c7e9b8dc3b797fad1d46f564ffac38bdb215174178da30c8b389ce6f2fd96a5bce9b07e7ce04bfcbb7a538c6a677b8592f58cb13947ee6c217121f","ssdeep":"384:0GUcz6olWstganMMY5er3RZM7ZEQx/kjHBc2gdXf7h6oq:0G7z7WstgwYkdAEosjHCNZ7A","tlshash":"18a2b6a9fb5e02768179325c2e5f348e237d84f4710a9c827d74265c3a8a55e03f6f4e","size":23269,"data":"","first_seen":"2026-04-29T01:20:02.086668Z","last_seen":"2026-07-19T16:33:09.12586Z","times_seen":543,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/auth_refresh.js?v=w6QbwI-5-j2S\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3a41bc08fb9fa3d925bfbde6930f313","sha1":"06bf235bae87234c3091962f40415b43492652e2","sha256":"8d764adbee3ffe7e61342a5b3be4c853c26c0a2c1e3eed1e63bb68cfee7944b0","sha512":"0ed874c12447dd3d84c745235d05c2b83ef47125f928aa87cf507a9189be1ff13a7f249ec207b09c5c64498991be4269039c18ff81bc26be92b78a5f4b6b1b55","ssdeep":"","tlshash":"6b31b9e09e8c0435137f009bbf2fbacd306e54725ed894a5bf05893a6c5830f97a5985","size":1527,"data":"","first_seen":"2024-11-16T08:41:12.910961Z","last_seen":"2026-07-19T16:33:09.146166Z","times_seen":2200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/prototype-1.7.js?v=npJElBnrEO6W\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e92449419eb10ee96c56d803d2baa43","sha1":"5a2be7055866b8f35bd852d466ff590251a56d89","sha256":"a655fc19da796630bcf37112ccf749898e98c99e1b25bccef0bf3573665195e5","sha512":"19d0c715d50abf41cccf0a96bf9c4673c5059d8a0a9edddc00c243ae44e403e1b3641c8e7c3e57b58746423b0679af216398648a6a1a4f50f394a9c15104fb32","ssdeep":"1536:Pe/hr8bCUSFPlpV7N+XS+st304cM9FmKZFDlYUo7pKMaV/6FzKKVA8MjjOH2X1Ix:PIr8bCBPlp0u9F6UodjaVbX1oYVpwxA8","tlshash":"99f3309c7de66035822bf13e5a9f418cf27980171408ed55b89c85a46fb0d3896fafec","size":163315,"data":"","first_seen":"2023-10-31T01:09:46Z","last_seen":"2026-07-19T20:18:49.854096Z","times_seen":2544,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/redeemwalletcode.js?v=cU8ZLoLtUa1P\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"714f192e82ed51ad4fe46f3f662873e9","sha1":"3fdc7571fc39939623aa8738d4f7893fe9cfbb68","sha256":"f262fff9b99c9e509ab6274988b09868da1d0e929c148227c7cba5ac0099b753","sha512":"ff68535bc298506b0c80ceba7cd091b33d471c7fa1cc10c0f52d2050edeada803779a6aefe6116f74852f8ff375b99c64eeba6633e794ff5045a73c82c21cb52","ssdeep":"384:OemLFWeQVifvuGwNhA5BXbZ2z1XSxgbmRxefs5rAXdoMaTMpwsSWWrBa3cGqpb:OJBXUz1skfNq99rkEb","tlshash":"d65284e6ff1e23056631022e19ce0899f6bd587595088db1fc6c877573a0c9c682eead","size":13849,"data":"","first_seen":"2024-12-10T13:14:44.764704Z","last_seen":"2026-07-19T16:07:05.820773Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/shared_global.js?v=gOyfgA0bHRkL\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5696d89e9886505c65a8f929f386c1cd","sha1":"625a2e4f5b37a19671a42cee28bc0bff04d4cb48","sha256":"fd522359a002e4dce26432ef3bdfe57a8ff87fa0578c1be7f937e9905c29c7e2","sha512":"942a85e826b356c29ec6902013af386ee436865802812118ff2306f86be879054d91883150994867f6e76e4a3100855fca7c9217a95e71cc00273a28271ef4a4","ssdeep":"1536:056XRdDp2hNJRNhUmciMQzoscmDecTVziqD3YHI1Sp6D3QgQHrMTAQamQXkwRiOU:C/5UmciZos1DeclP7YHVgObXKN1","tlshash":"62e319c5eb7c212a897a302ddd4f50493a7e5832b00468297c5e94dc6ae0d7e43bbe7d","size":152793,"data":"","first_seen":"2026-07-11T20:48:47.725944Z","last_seen":"2026-07-19T16:33:09.143381Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/dynamicstore.js?v=iQ2CGpHeNwDH\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6084993dc78c525e9ca3a86d4379fced","sha1":"b6e4e4ac546999e8f91682a538a20db9dd4ccb89","sha256":"c01ade25af5a656f9d91a51c1b0ef9689e919e7b4b2d53750aade7e29c67d661","sha512":"f474dc357d376e3e365cfb2ec5d0a4749221e1897d47396d7ee367764d4dcf898d4f2918e4a827dad1f95176ebdcaf80a4f8e55f082c96985a0ac209ae4abd8e","ssdeep":"1536:fZ/cXReyjTDWWNv6xG3QA4/4xM8c3plM6ELocuneK3pO6kCZRWXN8pxHf+YuMxZY:OOFA4bteK3pOQgTqIp","tlshash":"85931ab8a72e532e67b221fcad69a1c9f37c48f535468890bce4221874e4c4f53b5e1d","size":90917,"data":"","first_seen":"2026-07-11T22:02:53.160913Z","last_seen":"2026-07-19T16:07:05.920538Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"Failed to report error: ReportError() was called without an error to report.","filename":"https://store.fastly.steamstatic.com/public/javascript/applications/store/main.js?v=bhe8idkqvbAk\u0026l=english\u0026_cdn=fastly","line_number":14,"column_number":290719},{"level":"warn","text":"jQuery.Deferred exception: $(...).v_tooltip is not a function@https://raduga-gifting.click/73187f547e07060f02130271590757015054:282:45\ne@https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js:2:29453\nDeferred/then/l/\u003c/t\u003c@https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js:2:29755\nsetTimeout handler*Deferred/then/l/\u003c@https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js:2:29964\nc@https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js:2:27742\nfireWith@https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js:2:28487\nfire@https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js:2:28523\nc@https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js:2:27742\nfireWith@https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js:2:28487\nready@https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js:2:31460\nB@https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js:2:31239\nEventListener.handleEvent*@https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js:2:31608\n@https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js:2:220\n@https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js:2:225\nmap[type:undefined]","filename":"https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js","line_number":2,"column_number":31008},{"level":"warn","text":"Error reporter does not know how to parse generated stack:","filename":"https://store.fastly.steamstatic.com/public/javascript/applications/store/main.js?v=bhe8idkqvbAk\u0026l=english\u0026_cdn=fastly","line_number":14,"column_number":292474},{"level":"warn","text":"","filename":"https://store.fastly.steamstatic.com/public/javascript/applications/store/main.js?v=bhe8idkqvbAk\u0026l=english\u0026_cdn=fastly","line_number":14,"column_number":292549}]},"http":[{"url":{"schema":"https","addr":"raduga-gifting.click/a578f6fcea17657d6481f19e42037c78282141786b3b/b2c283038dfc916c3ca844bd3c9898ba1f7f46cf1372.css","fqdn":"raduga-gifting.click","domain":"raduga-gifting.click","tld":"click"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.023Z","timestamp":1784419621023,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raduga-gifting.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 09:21:13 GMT","end":"Thu, 15 Oct 2026 09:21:12 GMT"},"fingerprint":{"sha1":"F6:94:40:F0:2D:00:AA:41:24:B0:4A:0F:EE:17:4B:BA:3E:C7:83:8B","sha256":"42:BA:2C:EC:97:DD:39:D0:8B:1B:88:02:BA:70:E7:D8:7C:57:55:25:3D:FD:48:91:67:CB:70:63:71:D2:57:B5"}}},"request":{"raw":"GET /a578f6fcea17657d6481f19e42037c78282141786b3b/b2c283038dfc916c3ca844bd3c9898ba1f7f46cf1372.css HTTP/1.1\r\nHost: raduga-gifting.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.uQ8qbZfgMSEODJPtNED6qSkc-QAdShas.ldUQMEWzV3nG0tBR.RBoiGMxlF81yAZieLYGZHUD-IwrEOr6yaOzzidvoZkh8EnVvyw_Yx8u8-3XcffCeiLLTYSO5itWKJR4ZgE6mQP-WFH4KqC1wWxaZLLk4FVzSDZbodI9OC-cRCrJx5TEi2KOJWFRlL4Reec2cWPk7yl7YygzdfbiZ0deYxkvrlyUVdiGXCZw3_mgL1wwcW0CILtJAuiAy744g6QHtzDDbMQj2-U9YvdAMgXvG22MWrkMGVaLWFpgcGBak7FfrXJvqtvMjFgmsxj8iQInwSVV4TPQ9i6Px0BiXpRI.Dg3rG8mjDVeo146EcH2ClA; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MjQ5NCwic2VjcmV0IjoiN2ExNTM2ZWZmNjE1YTViMGVlOTcwMDU1ZGVkOGY1N2QiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.uXaZmlGet-3yTHFyW7-x_LuXSwchYm2E4Sumr49FGCA\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: openresty\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 65\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"41-0AeMVzV1pApYTMktTMxeiuYqqUg\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-20T00:20:44.31092Z","times_seen":17379474,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"raduga-gifting.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raduga-gifting.click/a578f6fcea17657d6481f19e42037c78282141786b3b/0f9f9b7353dd14632e413ca29802c60d2da486d00d90.css","fqdn":"raduga-gifting.click","domain":"raduga-gifting.click","tld":"click"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.025Z","timestamp":1784419621025,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raduga-gifting.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 09:21:13 GMT","end":"Thu, 15 Oct 2026 09:21:12 GMT"},"fingerprint":{"sha1":"F6:94:40:F0:2D:00:AA:41:24:B0:4A:0F:EE:17:4B:BA:3E:C7:83:8B","sha256":"42:BA:2C:EC:97:DD:39:D0:8B:1B:88:02:BA:70:E7:D8:7C:57:55:25:3D:FD:48:91:67:CB:70:63:71:D2:57:B5"}}},"request":{"raw":"GET /a578f6fcea17657d6481f19e42037c78282141786b3b/0f9f9b7353dd14632e413ca29802c60d2da486d00d90.css HTTP/1.1\r\nHost: raduga-gifting.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.uQ8qbZfgMSEODJPtNED6qSkc-QAdShas.ldUQMEWzV3nG0tBR.RBoiGMxlF81yAZieLYGZHUD-IwrEOr6yaOzzidvoZkh8EnVvyw_Yx8u8-3XcffCeiLLTYSO5itWKJR4ZgE6mQP-WFH4KqC1wWxaZLLk4FVzSDZbodI9OC-cRCrJx5TEi2KOJWFRlL4Reec2cWPk7yl7YygzdfbiZ0deYxkvrlyUVdiGXCZw3_mgL1wwcW0CILtJAuiAy744g6QHtzDDbMQj2-U9YvdAMgXvG22MWrkMGVaLWFpgcGBak7FfrXJvqtvMjFgmsxj8iQInwSVV4TPQ9i6Px0BiXpRI.Dg3rG8mjDVeo146EcH2ClA; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MjQ5NCwic2VjcmV0IjoiN2ExNTM2ZWZmNjE1YTViMGVlOTcwMDU1ZGVkOGY1N2QiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.uXaZmlGet-3yTHFyW7-x_LuXSwchYm2E4Sumr49FGCA\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: openresty\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 65\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"41-0AeMVzV1pApYTMktTMxeiuYqqUg\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-20T00:20:44.31092Z","times_seen":17379474,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"raduga-gifting.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/modal.js?v=7G8uHr4fXaTj\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.093Z","timestamp":1784419621093,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/javascript/modal.js?v=7G8uHr4fXaTj\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=15552000\r\nexpires: Wed, 19 Nov 2025 02:03:01 GMT\r\netag: \"7G8uHr4fXaTj\"\r\nx-integrity: \"sha384-nU+6qTzBsL1A6gC/vB0aigkn8+0M8RpWzQA7/5Kql0frM17AHth6nQYPG+x+gJp0\"\r\nlast-modified: Sun, 09 Sep 2001 01:46:40 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\nage: 1558805\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1784419621.092520,VS0,VE2\r\ncontent-length: 1043\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2802,"size_decoded":1670,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text","md5":"ec6f2e1ebe1f5da4e35ce187b96f63b4","sha1":"9a3ba01d1a0b3a6972bea477b6c4ba647b1daa88","sha256":"30e30ee53b2d8690f2386fda09ab68f33236d28251752360188e536c866ed3a6","sha512":"a2f7f2c063f87aa2b4817136eecbf57cbdd8bd5f455c6bf741cbe95f8b7a7b8748eefa147231e50c4a8f3d5c01edd5d9929438beab6c5c6fd77f0edd569696ac","ssdeep":"","tlshash":"da51011adf6c063ae57d425fbc29eb99367d4432b10e1df0c86d2b5814e0e9b1687d28","first_seen":"2024-12-10T13:14:44.772055Z","last_seen":"2026-07-19T16:07:05.931679Z","times_seen":170,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/manifest.js?v=VWHoUUnZEI3s\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.107Z","timestamp":1784419621107,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/javascript/applications/store/manifest.js?v=VWHoUUnZEI3s\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"0PO2lbUd7Oih\"\r\nx-integrity: \"sha384-9bERAZ6q1NlOxhqOpE7dvvuDCcj51fN9ABteyQSzMpoNgBxQjsD9kCdumOzFHjCy\"\r\nlast-modified: Wed, 06 May 1970 08:58:51 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1784419621.106990,VS0,VE290\r\ncontent-length: 14880\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29266,"size_decoded":15514,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (29103)","md5":"d0f3b695b51dece8a1e5ae34367b0d84","sha1":"689164ec452c99c9a18cddaed2c13b1595832372","sha256":"5d4146a1a70fc2b4d2b34187904499a37567ff22d95b052a3ccb26e6e749805e","sha512":"86f8b2aeea34a38b26bb176877ac0805538c0e59467530ee9e23e9a5788af9d29ba6bceaa1af9ffd20ea761430d73a36e029d3b98c1a26ef1bd857d20ad5d846","ssdeep":"768:DnDHM/C6+5GT3wtRG/v2OQUg+bHRAw1XALn:DDjjIkqlg+VjBAL","tlshash":"b9d23b7dbf38aada792c19d76c928ba460883c1eb81554c391ddf3250116e60bb13dbf","first_seen":"2026-07-17T03:38:19.919067Z","last_seen":"2026-07-19T16:07:05.889466Z","times_seen":10,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/main.js?v=bhe8idkqvbAk\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.115Z","timestamp":1784419621115,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/javascript/applications/store/main.js?v=bhe8idkqvbAk\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"uIAVPwPR7PYP\"\r\nx-integrity: \"sha384-PGwNB52DZLNG00UUk8JPcUd5Arxe5raIP3Zudx7Gjnbpa0DDV22ezN/1i7DvSoag\"\r\nlast-modified: Wed, 06 May 1970 08:58:51 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 1\r\ndate: Sun, 19 Jul 2026 00:07:02 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1784419621.115957,VS0,VE1516\r\ncontent-length: 473772\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1945459,"size_decoded":474408,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65373)","md5":"8ef1deb3b8ed27eda9b4758e8b0f4f47","sha1":"bd1d1c011579fdf35c420a6900f6539758f0738d","sha256":"1677adc7a3547c4cf3348c024f008408149dc03d9969f279ba6f86fdaf612108","sha512":"c4ad4aedcde70a543d54133865662ec09622d2388d6a9fb486d335a451221439555f417f41f6a2cf235e7d15f05be245294359f5afc73442daa410c5f616e5c8","ssdeep":"6144:daPG31J/Kvjrgxf55UFa4dXadt6QLiGMave8mTASE7lo/H15X6h:WG31JrUFa4dKdt6QiGkAtlo/H15w","tlshash":"0c2564843ddaea83bba841c313352397f3248cb9fa2d94d0d3e4e4253499ace9765f54","first_seen":"2026-07-15T05:06:44.625536Z","last_seen":"2026-07-19T16:07:05.900612Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1525,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recaptcha.net/recaptcha/enterprise.js?render=explicit","fqdn":"recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.117Z","timestamp":1784419621117,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:38:18 GMT","end":"Mon, 21 Sep 2026 08:38:17 GMT"},"fingerprint":{"sha1":"57:D5:D2:D8:EB:24:F0:12:21:67:33:AB:DC:70:44:E5:DC:F4:CE:01","sha256":"A5:D8:25:94:B9:E9:32:32:C7:3A:CD:05:EC:03:17:49:DB:B9:EA:D3:10:78:8D:30:EC:6D:3F:A2:51:B5:DE:59"}}},"request":{"raw":"GET /recaptcha/enterprise.js?render=explicit HTTP/1.1\r\nHost: recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sun, 19 Jul 2026 00:07:01 GMT\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1067,"size_decoded":1335,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1067), with no line terminators","md5":"b95e0cb4e79015e08b831b17bc8a7f09","sha1":"be2e5b0564be8e72ebaaa3cc50eac6514c881dc4","sha256":"9c737053acd7c489192cd4687825e10aebaf20b186a4999ea5171aede55eeaa3","sha512":"24757d6d521a12a02f1626d71617e718a2800ed680eb1f45c26bf5b852c511f9100104f5768e0127eb5fd5e8b1530ba164d759581c5615966bfa8ae038a8f8c1","ssdeep":"","tlshash":"3c111fb21a09a07a0f7219a5e2fac671e402301cb16c49dc9406ea842eafccfce02995","first_seen":"2026-07-19T00:07:50.134803Z","last_seen":"2026-07-19T16:07:05.91445Z","times_seen":3,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":4,"connect":15,"send":0,"wait":34,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/footerLogo_valve_new.png","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.269Z","timestamp":1784419621269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/images/footerLogo_valve_new.png HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:18 GMT\r\netag: \"649bb1f6-a18\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nage: 47577\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 218\r\nx-timer: S1784419621.268347,VS0,VE0\r\ncontent-length: 2584\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2584,"size_decoded":2986,"mime_type":"image/png","magic":"PNG image data, 176 x 50, 8-bit/color RGBA, non-interlaced","md5":"86a9ccc0b872f22006a48bc6c2500f4e","sha1":"0edccf2cbc869816135c6ff4c3eee0c49d0f41c1","sha256":"d8bbe461137d50211568449468a1981ef189248200eadd48c3141a9df0b8f7fc","sha512":"43ebd681fe137718e45153b9ce062ce9426ac57d6ce907bd3b1c7709bf6f6d2ab4b49e22f2dc4f203dedf860a895a4b58f4a01095e97722ce5f27935038f0b56","ssdeep":"","tlshash":"64513a2ae811ec4252ccecc2a4fbe9123a12c90057c4dbb5fddbd84b3f602d1452d8da","first_seen":"2023-04-05T21:31:08Z","last_seen":"2026-07-19T16:07:05.916774Z","times_seen":2745,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/shared_english-json.js?contenthash=aa3b7ab9b8b21c0b94ab","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:02.967Z","timestamp":1784419622967,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/javascript/applications/store/shared_english-json.js?contenthash=aa3b7ab9b8b21c0b94ab HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\nlast-modified: Thu, 09 Jul 2026 22:53:02 GMT\r\netag: \"ZW7iehyUiBCz\"\r\ncache-control: public,max-age=259200,must-revalidate\r\nexpires: Sun, 12 Jul 2026 22:56:29 GMT\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\ndate: Sun, 19 Jul 2026 00:07:02 GMT\r\nvia: 1.1 varnish\r\nage: 4231\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 1588\r\nx-timer: S1784419623.967540,VS0,VE0\r\ncontent-length: 279245\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":279245,"size_decoded":279775,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65248)","md5":"8531a61523d38261458e1e1d9a7e641a","sha1":"b29024bb12a9324cd2c22930e5dbee86e46c08c2","sha256":"9e7b0e342e2c35dea4a37d7034f775768aa7a2b671a3c06f8bde93aaf8918bc6","sha512":"f30effd9555dc437729390f036ef3b1564316a3d3e9fa3e310fdafcbc257603ca203b15ab3c4a552894a71d419405780639e9ef84513cdfd05ff14df92ca8bb7","ssdeep":"3072:Vz0JiCCnkeC7QErjIYpfNnPdzr6oQxEXtwajgjqUAI0N4/g:R0NmkeaQwIUfNnPp6oQxO5","tlshash":"4154390f9a5d6d36078703e7fa0b6c975bb041df13061c219eda4d4f11da78aa33ba68","first_seen":"2026-07-11T22:02:53.144671Z","last_seen":"2026-07-19T16:07:05.921206Z","times_seen":28,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/auth_refresh.js?v=w6QbwI-5-j2S\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.052Z","timestamp":1784419621052,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/shared/javascript/auth_refresh.js?v=w6QbwI-5-j2S\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=15552000\r\nexpires: Sun, 27 Dec 2026 19:13:37 GMT\r\netag: \"w6QbwI-5-j2S\"\r\nx-integrity: \"sha384-+yOq2N+bhO4ulh9z3oEznLvTUVM7Tf0YBJxKQmF+kQ05ZkraLoLO6oYmY8ebPw1B\"\r\nlast-modified: Sun, 09 Sep 2001 01:46:40 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nage: 1562416\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 41514\r\nx-timer: S1784419621.071356,VS0,VE0\r\ncontent-length: 677\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1527,"size_decoded":1306,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"c3a41bc08fb9fa3d925bfbde6930f313","sha1":"06bf235bae87234c3091962f40415b43492652e2","sha256":"8d764adbee3ffe7e61342a5b3be4c853c26c0a2c1e3eed1e63bb68cfee7944b0","sha512":"0ed874c12447dd3d84c745235d05c2b83ef47125f928aa87cf507a9189be1ff13a7f249ec207b09c5c64498991be4269039c18ff81bc26be92b78a5f4b6b1b55","ssdeep":"","tlshash":"6b31b9e09e8c0435137f009bbf2fbacd306e54725ed894a5bf05893a6c5830f97a5985","first_seen":"2024-11-16T08:41:12.910961Z","last_seen":"2026-07-19T16:33:09.146166Z","times_seen":2200,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/dynamicstore.js?v=iQ2CGpHeNwDH\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.054Z","timestamp":1784419621054,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/javascript/dynamicstore.js?v=iQ2CGpHeNwDH\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"YISZPceMUl6c\"\r\nx-integrity: \"sha384-GEBK8B2fu4XEIXWtqdQv5HKXX0Qa8LgtflxdiEoIxwm60WOSBFCZjeYggYhjHrnh\"\r\nlast-modified: Wed, 06 May 1970 08:58:51 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1784419621.071484,VS0,VE820\r\ncontent-length: 23497\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":90917,"size_decoded":24131,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"6084993dc78c525e9ca3a86d4379fced","sha1":"b6e4e4ac546999e8f91682a538a20db9dd4ccb89","sha256":"c01ade25af5a656f9d91a51c1b0ef9689e919e7b4b2d53750aade7e29c67d661","sha512":"f474dc357d376e3e365cfb2ec5d0a4749221e1897d47396d7ee367764d4dcf898d4f2918e4a827dad1f95176ebdcaf80a4f8e55f082c96985a0ac209ae4abd8e","ssdeep":"1536:fZ/cXReyjTDWWNv6xG3QA4/4xM8c3plM6ELocuneK3pO6kCZRWXN8pxHf+YuMxZY:OOFA4bteK3pOQgTqIp","tlshash":"85931ab8a72e532e67b221fcad69a1c9f37c48f535468890bce4221874e4c4f53b5e1d","first_seen":"2026-07-11T22:02:53.160913Z","last_seen":"2026-07-19T16:07:05.920538Z","times_seen":25,"resource_available":true,"data":null}},"time_used":829,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":829,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/redeemwalletcode.js?v=cU8ZLoLtUa1P\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.089Z","timestamp":1784419621089,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/javascript/redeemwalletcode.js?v=cU8ZLoLtUa1P\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=15552000\r\nexpires: Wed, 19 Nov 2025 02:03:01 GMT\r\netag: \"cU8ZLoLtUa1P\"\r\nx-integrity: \"sha384-g/FHfL3JZ8071g2yqmm2oLSSd74gy3/fatNRIfqwMJ7L7/rwYApQLgETXI6Bwlu9\"\r\nlast-modified: Sun, 09 Sep 2001 01:46:40 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nage: 2258873\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 366\r\nx-timer: S1784419621.088694,VS0,VE0\r\ncontent-length: 3504\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13849,"size_decoded":4133,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text","md5":"714f192e82ed51ad4fe46f3f662873e9","sha1":"3fdc7571fc39939623aa8738d4f7893fe9cfbb68","sha256":"f262fff9b99c9e509ab6274988b09868da1d0e929c148227c7cba5ac0099b753","sha512":"ff68535bc298506b0c80ceba7cd091b33d471c7fa1cc10c0f52d2050edeada803779a6aefe6116f74852f8ff375b99c64eeba6633e794ff5045a73c82c21cb52","ssdeep":"384:OemLFWeQVifvuGwNhA5BXbZ2z1XSxgbmRxefs5rAXdoMaTMpwsSWWrBa3cGqpb:OJBXUz1skfNq99rkEb","tlshash":"d65284e6ff1e23056631022e19ce0899f6bd587595088db1fc6c877573a0c9c682eead","first_seen":"2024-12-10T13:14:44.764704Z","last_seen":"2026-07-19T16:07:05.820773Z","times_seen":158,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.099Z","timestamp":1784419621099,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27748\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Za5thvU6FvYFfX1VyzSbq9xmDQjRbOI0ro8jB3%2BvJ3hnp6ha9REqN1sON3fmwI90jMtU8V8IUY3ji0x0xW0BQEtaB0lE1ACCA67vw1E9B3%2BXNJ%2B6SMz3R%2FsxKBQzd5u0W0tZCa%2BK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a1d57bc7fdf8783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88145,"size_decoded":28757,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-07-20T00:27:37.95085Z","times_seen":137187,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":3,"connect":18,"send":0,"wait":28,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.239Z","timestamp":1784419621239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:12 GMT\r\netag: \"649bb1f0-ec1\"\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nage: 66296\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 3226\r\nx-timer: S1784419621.238598,VS0,VE0\r\ncontent-length: 3777\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3777,"size_decoded":4193,"mime_type":"image/png","magic":"PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced","md5":"eabc76eb57feae44add7faead028521e","sha1":"4e3e53938fad15661d2d046a868338841a95db19","sha256":"fc9e6260a2706ae146282d77e67bc1b74688435f8912ab4c1932641eec28bffa","sha512":"5c6da6eeefddf321c2bc7e39a134e0a3140a9f93ad1560b2e102ef60ec218c29aae14ed344c79e25cc5493cd15551040d8c909de28dcab02034d787563104e07","ssdeep":"","tlshash":"eb717ce7323e5456e1f056c6015b52f69eb1a1080d2b4e09f224b77831ac63be38333d","first_seen":"2023-04-05T21:31:08Z","last_seen":"2026-07-19T20:18:49.851997Z","times_seen":7465,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.242Z","timestamp":1784419621242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 09 Jul 2026 22:53:02 GMT\r\netag: \"6a50264e-e3f\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nage: 7127\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 280\r\nx-timer: S1784419621.241593,VS0,VE0\r\ncontent-length: 3647\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3647,"size_decoded":4052,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aec9fa54ca7e28babd4c40859083ad34","sha1":"8a620d234a6cb2e9b3ba7e58b6349331e1cf9f5a","sha256":"19d0f67899a61b13d43ad1c810ba2d8d619b48ec00caba3b888fe6a285ce6cde","sha512":"4d72f59de3392b514750a83b0b04e3da2916eb6e5a3911b75ec6178f23aebfca3272379b02dc051201715d8bc23383d608c7e5c6ce758669c69ba657e17ac76c","ssdeep":"","tlshash":"e471b4cc17338be02996c27d1a7476d223b365adf8b001e8a3920c202c0afe69e64d75","first_seen":"2026-07-11T20:48:47.788479Z","last_seen":"2026-07-19T20:18:49.849169Z","times_seen":46,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/account/wallet_icon.png","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.264Z","timestamp":1784419621264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/images/account/wallet_icon.png HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:18 GMT\r\netag: \"649bb1f6-d54\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 51358\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1784419621.263514,VS0,VE1\r\ncontent-length: 3412\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3412,"size_decoded":3812,"mime_type":"image/png","magic":"PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced","md5":"59722f8b05d32484fbd8853cbf7859f2","sha1":"8c9a1b988324bb779bf273dcfb62e993103757ca","sha256":"fcbb90319848b9823c6829ed4abba0720f06674ae7e7ff762abe3b905dd3e24e","sha512":"a995853c47f43e3fc1291d6e2e1846b34a629d07d6189f33f79df84a9e381db87536a7b7ad183f123b30af9fc19bddb5367b987741d0ca3f1df86b849ff1a7ac","ssdeep":"","tlshash":"b1619ebfec20d0de99ee769209ec8202e7b4322c8646372880c1e5ed9022d075b59432","first_seen":"2023-05-21T20:35:46Z","last_seen":"2026-07-19T16:07:05.860584Z","times_seen":413,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/52993.js?contenthash=34ac00c1bdba2b42329a","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:02.982Z","timestamp":1784419622982,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/javascript/applications/store/52993.js?contenthash=34ac00c1bdba2b42329a HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\nlast-modified: Thu, 09 Jul 2026 22:53:02 GMT\r\netag: \"sfuqc6VZL257\"\r\ncache-control: public,max-age=259200,must-revalidate\r\nexpires: Sun, 12 Jul 2026 22:56:29 GMT\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\ndate: Sun, 19 Jul 2026 00:07:02 GMT\r\nvia: 1.1 varnish\r\nage: 4231\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 1555\r\nx-timer: S1784419623.982472,VS0,VE0\r\ncontent-length: 8632\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8632,"size_decoded":9160,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8469)","md5":"3b68fe1d3e580b6e26f19d7a358a0890","sha1":"52e20d57a3d0abb8b1c8f4ba2bb02becf242ce6a","sha256":"944658bf50713056faf9d1ac68edd9d2514dc4439d81b63eec8f39ecce339729","sha512":"d874f29bd9aac7df1c1de81c7caf6859d3c4be679a42ce9e7b42f898928e1a69c38b90774b2b22a9e5b99ae331b37f6fb6cf9d857adbecec9107507506916b5c","ssdeep":"96:+Tue07F0sjdubrViVR3KAFRvlC2mkIQGTQI0Px2ig8oGMbBuVEvPSKWP+:+E7++zlC23dQX8+","tlshash":"b002224a185c393d479b338bef4b485ae5f49186700c1f8268e9963d1e7a790939b70f","first_seen":"2026-07-11T22:02:52.9613Z","last_seen":"2026-07-19T16:07:05.832525Z","times_seen":28,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:03.008Z","timestamp":1784419623008,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://raduga-gifting.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 382189\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Jul 2026 19:02:33 GMT\r\nexpires: Wed, 14 Jul 2027 19:02:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Jul 2026 12:02:38 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 363870\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":891014,"size_decoded":383096,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"a07ac1bf3466fe5eff6b753f96f39a11","sha1":"d06f6ebd81a8c180a7a6343821a3cf8279f5b86d","sha256":"c9fc8d435c9c3e131d7aedb36923a5ef798c85412192ed2afd9c52dcfb826ff7","sha512":"4648746112b8cdbab787c43e88827d96e02034c52b5436167a24d647ce349a0501df4ca67f82779c89fe0f5659bcc9b444655f83da816469c23e781fa3facc9a","ssdeep":"12288:CN7INAse6Zz779FTMfCtfTSZDYDzVRlh09yENpDvE:a0le6p5tfTSZ0D1h09yENpDvE","tlshash":"50153ade714639b24322b6f52077241ea77e9619c40c5c5d70aa98f03ef580da0f6ebb","first_seen":"2026-07-14T22:23:00.839245Z","last_seen":"2026-07-20T00:28:19.500978Z","times_seen":2525,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":15,"receive":62,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/css/v6/store.css?v=p1S4tSu2k8Oq\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.039Z","timestamp":1784419621039,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/css/v6/store.css?v=p1S4tSu2k8Oq\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/css;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"jzxKLyRtIqK5\"\r\nx-integrity: \"sha384-/yceE8uocopA6raTRdeDmdnn320tXSoxcHTznYA8YkM0RmoXL6GR/OJq5ei5vyrt\"\r\nlast-modified: Wed, 06 May 1970 08:58:51 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1784419621.072554,VS0,VE320\r\ncontent-length: 30731\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":130917,"size_decoded":31358,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (391)","md5":"8f3c4a2f246d22a2b96ea678d1e3130f","sha1":"957d26cdad36a7d02e137a6074661b02e4f678ae","sha256":"0f31bada3f67c511330053eb4f5c8f017ac84ad1e817658cefad39428d799cd0","sha512":"777ee2dd9cf0585da478f96f912101b2f727f86c57f1392ecff1917e2c257f3471ce976b1245fba639a5290fd6d9e9ad5114324a433a0d56c6771c64c2313f61","ssdeep":"3072:l+A2u5+OzBzROQAD+Tlu2vVWF19titxtizqWyEbilRCZC6SeSH3ki/0GzbhkjS1P:l+A2uAOzBzROQAD+xu2vVWH9tit3izqL","tlshash":"9ed3b6225b516445ba1ba0d8bf98eb55572f4087eb0e4eaab4f5746cd3c81c81233f8e","first_seen":"2026-07-11T22:02:53.053734Z","last_seen":"2026-07-19T16:07:05.918283Z","times_seen":28,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":11,"send":0,"wait":329,"receive":1,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/images/responsive/header_logo.png","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.241Z","timestamp":1784419621241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/shared/images/responsive/header_logo.png HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:12 GMT\r\netag: \"649bb1f0-2a6f\"\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nage: 47796\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 2505\r\nx-timer: S1784419621.240277,VS0,VE0\r\ncontent-length: 10863\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10863,"size_decoded":11281,"mime_type":"image/png","magic":"PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced","md5":"a4e79c73ee13cb25b60fc4b0ba1f690c","sha1":"b690c31b2eb1b0eb085e91aaae7e79f03debe7c1","sha256":"6cb869df089146c12efb5e9c968e911c314842624ba6f052a11346ac734cadc8","sha512":"aad423119f410a655f0aa475d2fe692087d7262c3986ce71347981c5b60f6a10031d7050bf9b9aee4e7d84d814f0b8883c964028fcbe14ed3464602f3ba6cec3","ssdeep":"192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM","tlshash":"4722c06cfcc0c875958352ba3e27fb7043f93e10c44b86b86960e5a5365c8f4959d137","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-07-19T20:18:49.860484Z","times_seen":7436,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js?v=vNpZeOuePA4R\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.113Z","timestamp":1784419621113,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/javascript/applications/store/libraries~b28b7af69.js?v=vNpZeOuePA4R\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"Iu-QYmukf5eG\"\r\nx-integrity: \"sha384-oUxv2B2wfnxWzArtWmnDSI7lBRvth3mOt9y5es0q2On0l9ebK6zPbobpVmj5F9Yw\"\r\nlast-modified: Wed, 06 May 1970 08:58:51 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 19 Jul 2026 00:07:02 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1784419621.113008,VS0,VE1028\r\ncontent-length: 190768\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":648055,"size_decoded":191404,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65373)","md5":"22ef90626ba47f9786e5a248463337e0","sha1":"a4e8881a2c1024b78c5e3e4dfdedc3799ae31826","sha256":"f6c535c39c1b8a879b18d0220d3b53594d775e23a9cdaf24200a17159e20b7b3","sha512":"312e225600741ca7e7e06bcb7eedecbddf7ba1378f013de59ac5ebf8cc4eb9f3486ad52a09285d7d4a66a39e15dd3602768a74e72ca08adc30139e085eb27748","ssdeep":"6144:FFNa32VjkUHzaMMFeVaQDGq+a2BdM82srXuvn0ty0ME71aTk0xO:E1MMFeVaQDGq6M82sr+yy0MaaBO","tlshash":"16d43bc87161f42957a351b5146f100bb73a291a984c86e4f268dcda38f9d8ea13ff3d","first_seen":"2026-06-18T05:57:26.283799Z","last_seen":"2026-07-19T16:07:05.761589Z","times_seen":61,"resource_available":true,"data":null}},"time_used":1040,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1037,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/ico/ico_facebook.png","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.270Z","timestamp":1784419621270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/images/ico/ico_facebook.png HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 06 Dec 2023 00:00:29 GMT\r\netag: \"656fb99d-489\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 60448\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1784419621.269602,VS0,VE1\r\ncontent-length: 1161\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1161,"size_decoded":1561,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"e406e5a22e4f3cfa580d3bb57420150e","sha1":"5b381e535bb0ce6003a461f3124fa1238dfbcedb","sha256":"760589f903c5e9bd169b38f941f9a3dc88a23897e9cc5b622d3d91f5c204b9e4","sha512":"e33cb7bd10104a1e8c2d3f2b3885d65ef3769f7250445c8341d6d2ad2367749ccdc48daabe4ea39cb80ee0362af9d01e48370db858ba01f956a1a6b8c04217c1","ssdeep":"","tlshash":"8f216355fab02a91b45cc9c22ce9c4178c470081f5e4f4babdcac4466c770fa42aa9cb","first_seen":"2023-12-07T16:24:37Z","last_seen":"2026-07-19T16:07:05.861871Z","times_seen":2418,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/sales_english-json.js?contenthash=c88888ee093b54b9d580","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:02.972Z","timestamp":1784419622972,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/javascript/applications/store/sales_english-json.js?contenthash=c88888ee093b54b9d580 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\nlast-modified: Tue, 16 Jun 2026 22:29:08 GMT\r\netag: \"e4Ig6AodxGy4\"\r\ncache-control: public,max-age=259200,must-revalidate\r\nexpires: Fri, 03 Jul 2026 22:08:35 GMT\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\ndate: Sun, 19 Jul 2026 00:07:02 GMT\r\nvia: 1.1 varnish\r\nage: 7106\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 2659\r\nx-timer: S1784419623.972001,VS0,VE0\r\ncontent-length: 234720\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":234720,"size_decoded":235251,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64906)","md5":"29394036adec26338a0b3f8e865ada7e","sha1":"dc6b75150815a3e413aa6e76df4d56314c1e8100","sha256":"97bcb017795b002d8331c2b407a394c6c76db713d9b7e7701fc8dceac46a90a2","sha512":"994bbc83abdcd00f2fabe2a3b7586effa2c956ebf732d40d17c97351dc892c11596b0420e9b6f91aa46c0a9fc6e478baa426820dc64d203cb49dd7142588414e","ssdeep":"3072:Rs4PKfx/onsTjdlClNDArfKrxbJOggpsHAHC:FmgnylCMm5vQRC","tlshash":"d734241f56c00337073b0696797db0c7b1788ca763c4a476aec7a13a136b919f1a66bc","first_seen":"2026-06-19T07:11:07.77641Z","last_seen":"2026-07-19T16:07:05.8282Z","times_seen":56,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raduga-gifting.click/a578f6fcea17657d6481f19e42037c78282141786b3b/be82aabda5372818359c1bb10d2527df599f9f2332ce.css","fqdn":"raduga-gifting.click","domain":"raduga-gifting.click","tld":"click"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.020Z","timestamp":1784419621020,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raduga-gifting.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 09:21:13 GMT","end":"Thu, 15 Oct 2026 09:21:12 GMT"},"fingerprint":{"sha1":"F6:94:40:F0:2D:00:AA:41:24:B0:4A:0F:EE:17:4B:BA:3E:C7:83:8B","sha256":"42:BA:2C:EC:97:DD:39:D0:8B:1B:88:02:BA:70:E7:D8:7C:57:55:25:3D:FD:48:91:67:CB:70:63:71:D2:57:B5"}}},"request":{"raw":"GET /a578f6fcea17657d6481f19e42037c78282141786b3b/be82aabda5372818359c1bb10d2527df599f9f2332ce.css HTTP/1.1\r\nHost: raduga-gifting.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.uQ8qbZfgMSEODJPtNED6qSkc-QAdShas.ldUQMEWzV3nG0tBR.RBoiGMxlF81yAZieLYGZHUD-IwrEOr6yaOzzidvoZkh8EnVvyw_Yx8u8-3XcffCeiLLTYSO5itWKJR4ZgE6mQP-WFH4KqC1wWxaZLLk4FVzSDZbodI9OC-cRCrJx5TEi2KOJWFRlL4Reec2cWPk7yl7YygzdfbiZ0deYxkvrlyUVdiGXCZw3_mgL1wwcW0CILtJAuiAy744g6QHtzDDbMQj2-U9YvdAMgXvG22MWrkMGVaLWFpgcGBak7FfrXJvqtvMjFgmsxj8iQInwSVV4TPQ9i6Px0BiXpRI.Dg3rG8mjDVeo146EcH2ClA; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MjQ5NCwic2VjcmV0IjoiN2ExNTM2ZWZmNjE1YTViMGVlOTcwMDU1ZGVkOGY1N2QiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.uXaZmlGet-3yTHFyW7-x_LuXSwchYm2E4Sumr49FGCA\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: openresty\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 65\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"41-0AeMVzV1pApYTMktTMxeiuYqqUg\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-20T00:20:44.31092Z","times_seen":17379474,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"raduga-gifting.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raduga-gifting.click/a578f6fcea17657d6481f19e42037c78282141786b3b/b7319bb4efc51dfc6ac33a2923701914088cfe717565.css","fqdn":"raduga-gifting.click","domain":"raduga-gifting.click","tld":"click"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.021Z","timestamp":1784419621021,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raduga-gifting.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 09:21:13 GMT","end":"Thu, 15 Oct 2026 09:21:12 GMT"},"fingerprint":{"sha1":"F6:94:40:F0:2D:00:AA:41:24:B0:4A:0F:EE:17:4B:BA:3E:C7:83:8B","sha256":"42:BA:2C:EC:97:DD:39:D0:8B:1B:88:02:BA:70:E7:D8:7C:57:55:25:3D:FD:48:91:67:CB:70:63:71:D2:57:B5"}}},"request":{"raw":"GET /a578f6fcea17657d6481f19e42037c78282141786b3b/b7319bb4efc51dfc6ac33a2923701914088cfe717565.css HTTP/1.1\r\nHost: raduga-gifting.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.uQ8qbZfgMSEODJPtNED6qSkc-QAdShas.ldUQMEWzV3nG0tBR.RBoiGMxlF81yAZieLYGZHUD-IwrEOr6yaOzzidvoZkh8EnVvyw_Yx8u8-3XcffCeiLLTYSO5itWKJR4ZgE6mQP-WFH4KqC1wWxaZLLk4FVzSDZbodI9OC-cRCrJx5TEi2KOJWFRlL4Reec2cWPk7yl7YygzdfbiZ0deYxkvrlyUVdiGXCZw3_mgL1wwcW0CILtJAuiAy744g6QHtzDDbMQj2-U9YvdAMgXvG22MWrkMGVaLWFpgcGBak7FfrXJvqtvMjFgmsxj8iQInwSVV4TPQ9i6Px0BiXpRI.Dg3rG8mjDVeo146EcH2ClA; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MjQ5NCwic2VjcmV0IjoiN2ExNTM2ZWZmNjE1YTViMGVlOTcwMDU1ZGVkOGY1N2QiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.uXaZmlGet-3yTHFyW7-x_LuXSwchYm2E4Sumr49FGCA\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: openresty\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 65\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"41-0AeMVzV1pApYTMktTMxeiuYqqUg\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-20T00:20:44.31092Z","times_seen":17379474,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"raduga-gifting.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/ico/ico_twitter.png","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.272Z","timestamp":1784419621272,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/images/ico/ico_twitter.png HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 06 Dec 2023 00:00:29 GMT\r\netag: \"656fb99d-596\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 76195\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1784419621.271277,VS0,VE1\r\ncontent-length: 1430\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1430,"size_decoded":1830,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"afc159fe5f0f26fa7282505da9887cc3","sha1":"c1cd55380c2af435876989f94e8b0715042c2ade","sha256":"4be942a34871dd6f8f14b43d27c31b049be7f6544c05685d4f35abdd329de176","sha512":"8f7dcb7e99ceed8f86575a05ff7d329ee2fc67cd18c6d53b2833a6aa1eede2586d57688f27901d941d2b6351412957468cce5ca69101d86911390bf04fd82763","ssdeep":"","tlshash":"24217419f8b59b11838ade4029d7d03b9d279880cadcd9b629ced4875c742fe987c8c7","first_seen":"2023-12-07T16:24:36Z","last_seen":"2026-07-19T16:07:05.904289Z","times_seen":2415,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/marketing_english-json.js?contenthash=901b94dd9f69e97457a6","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:02.977Z","timestamp":1784419622977,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/javascript/applications/store/marketing_english-json.js?contenthash=901b94dd9f69e97457a6 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\nlast-modified: Thu, 09 Jul 2026 22:53:02 GMT\r\netag: \"KggU6tT6XflJ\"\r\ncache-control: public,max-age=259200,must-revalidate\r\nexpires: Sun, 12 Jul 2026 22:56:29 GMT\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\ndate: Sun, 19 Jul 2026 00:07:02 GMT\r\nvia: 1.1 varnish\r\nage: 4232\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 1567\r\nx-timer: S1784419623.976599,VS0,VE0\r\ncontent-length: 29772\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29772,"size_decoded":30301,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29608)","md5":"0ddb9e141288844a7eca125c96fb8a47","sha1":"efa05a3f59a969a45facaaeb28083612821bac5b","sha256":"6d554818738e76dd3ed654a10be056e9d17da74879f187545c93b941177ab401","sha512":"9ab64edf239912faf29294e513271c1151f3c58c741de79caaeb70b808fc3b35bd07244775648e7b6f1e1ea1a110b40a932f1c5fa3b2f4b08a0ee2cb91d12270","ssdeep":"768:jUHNm+blpRN7VMxsgE3kid5/VQ4I2qWh5ZTUgZisZ:jUtm2N7VR3Bd5/VQaR5ZTTZ","tlshash":"dcd2d5b9f1376a2603cedaf82dbefb4511bb80680708795d54685d2fb1f23d449368e8","first_seen":"2026-07-11T22:02:53.165908Z","last_seen":"2026-07-19T16:07:05.762534Z","times_seen":28,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/facOzSk.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:03.010Z","timestamp":1784419623010,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /facOzSk.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nlast-modified: Mon, 03 Mar 2025 07:37:26 GMT\r\netag: \"4eb55dea22c7dc9f5311b0c45c147c1e\"\r\nx-amz-storage-class: STANDARD_IA\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: sDhv102mTfUNrTJXMHVm_jYrCYEG3KJUmJr67UuDg1sytK7a3tlSVg==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1270588\r\ndate: Sun, 19 Jul 2026 00:07:03 GMT\r\nx-served-by: cache-iad-khef600093-IAD, cache-bma-essb1270075-BMA\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 252, 0\r\nx-timer: S1784419623.042254,VS0,VE2\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 3400538\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3400538,"size_decoded":3401332,"mime_type":"image/png","magic":"PNG image data, 1792 x 1024, 8-bit/color RGB, non-interlaced","md5":"c80f191c16fb94755121ae1c8ecf0015","sha1":"641b3c5f37a4f47ad716a88281df6c1e5280a19c","sha256":"1b7cd1d0e92cc5fca6c904e3d947420ceb79f6491b023732b7489d7f33b07d87","sha512":"53b3933a62a0844449d0a79a1f9fe8d2f8d74f55236dde41e6270e4791eea90201f460ec06ee19fffd1a2869624ce622496b340487e74b0eff8b9eac74aa8625","ssdeep":"24576:l3EeyqmhqgQMyE50K5aufM5wTQI+K0CLfV2dX6CrzHtL:ur9AgnLMKT5aafc5rzH5","tlshash":"372533986249222288fabbc735f65f68d42c3d7257430d1f400e18a6bb375bd297e1b7","first_seen":"2025-08-02T11:18:27.21739Z","last_seen":"2026-07-19T16:07:05.91369Z","times_seen":39,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":11,"receive":87,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=tvQi85mXnRZH\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.095Z","timestamp":1784419621095,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/shared/javascript/shared_responsive_adapter.js?v=tvQi85mXnRZH\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"asNZNxt9kVQn\"\r\nx-integrity: \"sha384-92jMqfkIXY9vLVoQMv//qvlA2dGzheFK6i1z6qoZ8IlSvVhh8+dMsuPCeSisnCa9\"\r\nlast-modified: Wed, 06 May 1970 08:58:51 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1784419621.094399,VS0,VE151\r\ncontent-length: 6813\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":23269,"size_decoded":7446,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"6ac359371b7d915427947578e2c035d9","sha1":"a411c5828dd82793a4e3850c81caca9dac48de9b","sha256":"1b69d64ff8c133c518d00329a6bb5c82c995b7e116a0ff8bcc553af963c85017","sha512":"b312e8bd48c7e9b8dc3b797fad1d46f564ffac38bdb215174178da30c8b389ce6f2fd96a5bce9b07e7ce04bfcbb7a538c6a677b8592f58cb13947ee6c217121f","ssdeep":"384:0GUcz6olWstganMMY5er3RZM7ZEQx/kjHBc2gdXf7h6oq:0G7z7WstgwYkdAEosjHCNZ7A","tlshash":"18a2b6a9fb5e02768179325c2e5f348e237d84f4710a9c827d74265c3a8a55e03f6f4e","first_seen":"2026-04-29T01:20:02.086668Z","last_seen":"2026-07-19T16:33:09.12586Z","times_seen":543,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steamcommunity.com/favicon.ico","fqdn":"steamcommunity.com","domain":"steamcommunity.com","tld":"com"},"ip":{"addr":"23.49.26.105","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raduga-gifting.click/id=825151","date":"2026-07-19T00:07:00.981Z","timestamp":1784419620981,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.steampowered.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 05 Sep 2025 00:00:00 GMT","end":"Fri, 04 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:66:D7:D2:99:D6:A1:56:A5:A6:D9:94:5C:88:56:DD:5C:41:8E:49","sha256":"C5:81:A7:0E:F1:39:43:B6:7A:5C:E3:67:B5:C9:6C:8C:D4:AD:B1:96:E3:F0:6B:88:9F:83:D4:2D:94:97:36:7C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: steamcommunity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/x-icon\r\nCache-Control: public,max-age=86400\r\nExpires: Wed, 15 Jul 2026 19:10:43 GMT\r\nLast-Modified: Fri, 22 Nov 2024 18:31:38 GMT\r\nContent-Length: 38554\r\nDate: Sun, 19 Jul 2026 00:07:00 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38554,"size_decoded":38823,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"231913fdebabcbe65f4b0052372bde56","sha1":"553909d080e4f210b64dc73292f3a111d5a0781f","sha256":"9f890a9debcdfccc339149a7943be9aff9e4c9203c2fa37d5671a5b2c88503ad","sha512":"7b11b709968c5a52b9b60189fb534f5df56912417243820e9d1c00c97f4bd6d0835f2cdf574d0c36ecb32dbbf5fc397324df54f7fdf9e1b062b5dbda2c02e919","ssdeep":"768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh","tlshash":"70038de82e4917aee9e2cf324adb6716237b4f88c0bc169742b07f193175a51c6d78c1","first_seen":"2023-04-05T07:02:49Z","last_seen":"2026-07-19T16:33:09.100814Z","times_seen":6699,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":9,"receive":1,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/css/v6/cart.css?v=SFGHVOgNiRXD\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.043Z","timestamp":1784419621043,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/css/v6/cart.css?v=SFGHVOgNiRXD\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/css;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"DZg0PI1oFDlr\"\r\nx-integrity: \"sha384-+OlhH0MeYV6fX/iJ2Y6/Unh3wkiuoqQrnhncCBxX6GPrvhphhhSXN4jF80JOHXgh\"\r\nlast-modified: Wed, 06 May 1970 08:58:51 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1784419621.076475,VS0,VE329\r\ncontent-length: 14161\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":55878,"size_decoded":14788,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (361)","md5":"0d98343c8d6814396b8dddc351db5b79","sha1":"430b3eb4b449ec1a211c3471871d050b7908a9b9","sha256":"4e5341c5e642a62bb96b3f4a053692d35c55f995efbd07239191ec59de0b097e","sha512":"0415a15e66cfb9e6a277892baa9a5b97d8bb62d00ed45eb588ba1582af6ac35524a1d2eb1e0fa5589dc1650491509f2a3da5535d3b45b049bb4eed7341d7af0d","ssdeep":"1536:NQjX1bK5kMXsVhk5J7kG79Aj7qBf2FHTuVJlKCeMu:NQjX1aX6k5J7kG79A3qBeFHTuVJlReMu","tlshash":"0f4384176a512815b21f9899ff46fbd7572b8183af0f4ea6f8d0783cc3841e11267a8d","first_seen":"2026-07-19T00:07:50.162376Z","last_seen":"2026-07-19T16:07:05.897561Z","times_seen":3,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":341,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/dselect.js?v=sfK6UJLNp872\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.091Z","timestamp":1784419621091,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/shared/javascript/dselect.js?v=sfK6UJLNp872\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"xOLWzo6KWkKr\"\r\nx-integrity: \"sha384-hFQXgTlIh89kqdY+35oCjoW0WlCw7CAEnuEiCVNkubpWwJyGoEswwtzMO9PiIRc4\"\r\nlast-modified: Wed, 06 May 1970 08:58:51 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1784419621.090231,VS0,VE158\r\ncontent-length: 4040\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12716,"size_decoded":4673,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"c4e2d6ce8e8a5a42ab3113bc45d73589","sha1":"65c9ed96d8108cfd380b412d2087246068ee102d","sha256":"c504ff5dac7b978a78f66e71f16351cbf5422a56de225a7bc23cdb753a464600","sha512":"88b6dd454372a48dc0488de55c1586684d7b2f4ab44c3e2b83c21f83780e9ee95529dfa7f76f283db11718d27a846892ec81fef949cd47b121f9e6175c3541b0","ssdeep":"192:MRfE8jdnRqi49tazp+SJ2GvZg2gEC6b48kgsaWoEgi+tQbKVNM9CYF4jXFXMAhkQ:MhOdLSwcbkgkz3GVNM9CW+XFXMA+Q","tlshash":"5642a664a32c17e900bf00bfcc995dd8a66de5b6dc0358a3b95d81ac31d09aa13fdd1b","first_seen":"2026-06-18T05:57:26.25161Z","last_seen":"2026-07-19T16:07:05.756866Z","times_seen":51,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cloudflare.steamstatic.com/store//about/logo_steam.svg","fqdn":"cdn.cloudflare.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"95.101.11.122","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.259Z","timestamp":1784419621259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflare.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 12:23:39 GMT","end":"Mon, 05 Oct 2026 12:23:38 GMT"},"fingerprint":{"sha1":"0D:02:A7:E3:B4:38:2B:DD:DE:46:1F:F0:B6:42:DE:3C:4D:9D:C0:BC","sha256":"E3:45:F1:32:F6:F7:BC:A5:6F:A8:65:F2:0E:6A:3A:09:17:8E:E5:5C:5F:19:F3:FC:93:81:34:E3:D0:24:B3:FB"}}},"request":{"raw":"GET /store//about/logo_steam.svg HTTP/1.1\r\nHost: cdn.cloudflare.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/svg+xml\r\ncontent-length: 2522\r\nlast-modified: Thu, 14 Nov 2024 00:19:00 GMT\r\netag: \"673541f4-9da\"\r\naccept-ranges: bytes\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-grn: 0.760b655f.1784419621.eeabfcc\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2522,"size_decoded":2846,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ba1eadfd02abb260074971789870ce10","sha1":"e329edad609b0c2b7a567ff1964f59833d401c66","sha256":"9720a2b19519e0d51f44f91d7dd0cd57ccee7347efe38f5815acc6d984f79a8b","sha512":"063843a5043e832af172fc6609a288adb98bbb1da1fe82f8bb370c314b04748f5d50e2ed75400e8a653ef40761e64687a8eb99e8f4f613f879a109dcfffa7d22","ssdeep":"","tlshash":"de51f1150309ebfea9c90658962925c171d8dcefb074b0d0b7ff2817e15ccd0a68c6ea","first_seen":"2025-01-01T12:10:22.113504Z","last_seen":"2026-07-19T20:18:49.865389Z","times_seen":796,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":386,"dns":0,"connect":1,"send":0,"wait":3,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/40115.js?contenthash=c0f3a357c8a8a517965c","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:02.987Z","timestamp":1784419622987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/javascript/applications/store/40115.js?contenthash=c0f3a357c8a8a517965c HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\nlast-modified: Tue, 16 Jun 2026 22:29:08 GMT\r\netag: \"ZyeDrs5zYAm8\"\r\ncache-control: public,max-age=259200,must-revalidate\r\nexpires: Fri, 03 Jul 2026 20:56:23 GMT\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\ndate: Sun, 19 Jul 2026 00:07:02 GMT\r\nvia: 1.1 varnish\r\nage: 49552\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 27484\r\nx-timer: S1784419623.986961,VS0,VE0\r\ncontent-length: 1414\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1414,"size_decoded":1944,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1251)","md5":"c4a9e737461ecd587d5d4a45bf7b656f","sha1":"e369f0c859d450eb7b3e676d18881f7db42bb627","sha256":"a2259ed0f92574262de3bea5606ffbbd6001ce9eea7576e3c1e47cb86ad4a63a","sha512":"44484d596431068fbacd2f206faf8faea0fe2c4da7cf080a32821ad20cc2abda20bd242673a1ede92354b1b12302acd8a36baea838c60d47cb84ee3f5a226575","ssdeep":"","tlshash":"16218e4bed4d38bb7ba7060c24471e054ca46c6012303a7eb16bda2fa19d40df7379c4","first_seen":"2026-06-19T07:11:07.805151Z","last_seen":"2026-07-19T16:07:05.751906Z","times_seen":56,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raduga-gifting.click/73187f547e0706160751546308460b44","fqdn":"raduga-gifting.click","domain":"raduga-gifting.click","tld":"click"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:07.047Z","timestamp":1784419627047,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raduga-gifting.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 09:21:13 GMT","end":"Thu, 15 Oct 2026 09:21:12 GMT"},"fingerprint":{"sha1":"F6:94:40:F0:2D:00:AA:41:24:B0:4A:0F:EE:17:4B:BA:3E:C7:83:8B","sha256":"42:BA:2C:EC:97:DD:39:D0:8B:1B:88:02:BA:70:E7:D8:7C:57:55:25:3D:FD:48:91:67:CB:70:63:71:D2:57:B5"}}},"request":{"raw":"POST /73187f547e0706160751546308460b44 HTTP/1.1\r\nHost: raduga-gifting.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://raduga-gifting.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.uQ8qbZfgMSEODJPtNED6qSkc-QAdShas.ldUQMEWzV3nG0tBR.RBoiGMxlF81yAZieLYGZHUD-IwrEOr6yaOzzidvoZkh8EnVvyw_Yx8u8-3XcffCeiLLTYSO5itWKJR4ZgE6mQP-WFH4KqC1wWxaZLLk4FVzSDZbodI9OC-cRCrJx5TEi2KOJWFRlL4Reec2cWPk7yl7YygzdfbiZ0deYxkvrlyUVdiGXCZw3_mgL1wwcW0CILtJAuiAy744g6QHtzDDbMQj2-U9YvdAMgXvG22MWrkMGVaLWFpgcGBak7FfrXJvqtvMjFgmsxj8iQInwSVV4TPQ9i6Px0BiXpRI.Dg3rG8mjDVeo146EcH2ClA; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MjQ5NCwic2VjcmV0IjoiN2ExNTM2ZWZmNjE1YTViMGVlOTcwMDU1ZGVkOGY1N2QiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.uXaZmlGet-3yTHFyW7-x_LuXSwchYm2E4Sumr49FGCA; timezoneOffset=0,0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 201 \r\nserver: openresty\r\ndate: Sun, 19 Jul 2026 00:07:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"10-oV4hJxRVSENxc/wX8+mA4/Pe4tA\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":643,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-07-20T00:20:44.41338Z","times_seen":176486,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"raduga-gifting.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.steampowered.com/IClientMetricsService/ReportClientError/v1","fqdn":"api.steampowered.com","domain":"steampowered.com","tld":"com"},"ip":{"addr":"23.49.26.105","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:13.181Z","timestamp":1784419633181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.steampowered.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 05 Sep 2025 00:00:00 GMT","end":"Fri, 04 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:66:D7:D2:99:D6:A1:56:A5:A6:D9:94:5C:88:56:DD:5C:41:8E:49","sha256":"C5:81:A7:0E:F1:39:43:B6:7A:5C:E3:67:B5:C9:6C:8C:D4:AD:B1:96:E3:F0:6B:88:9F:83:D4:2D:94:97:36:7C"}}},"request":{"raw":"POST /IClientMetricsService/ReportClientError/v1 HTTP/1.1\r\nHost: api.steampowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: multipart/form-data; boundary=----geckoformboundary981b38531d4f365ef037db9e310daef3\r\nContent-Length: 2115\r\nOrigin: https://raduga-gifting.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-length: 0\r\nexpires: Sun, 19 Jul 2026 00:07:13 GMT\r\ncache-control: max-age=0, no-cache, no-store\r\npragma: no-cache\r\ndate: Sun, 19 Jul 2026 00:07:13 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":2937,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-20T00:20:44.31092Z","times_seen":17379474,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":0,"dns":2,"connect":1,"send":0,"wait":192,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raduga-gifting.click/73187f547e07060f02130271590757015054","fqdn":"raduga-gifting.click","domain":"raduga-gifting.click","tld":"click"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://raduga-gifting.click/id=825151","date":"2026-07-19T00:07:00.683Z","timestamp":1784419620683,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raduga-gifting.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 09:21:13 GMT","end":"Thu, 15 Oct 2026 09:21:12 GMT"},"fingerprint":{"sha1":"F6:94:40:F0:2D:00:AA:41:24:B0:4A:0F:EE:17:4B:BA:3E:C7:83:8B","sha256":"42:BA:2C:EC:97:DD:39:D0:8B:1B:88:02:BA:70:E7:D8:7C:57:55:25:3D:FD:48:91:67:CB:70:63:71:D2:57:B5"}}},"request":{"raw":"POST /73187f547e07060f02130271590757015054 HTTP/1.1\r\nHost: raduga-gifting.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 61\r\nOrigin: null\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.uQ8qbZfgMSEODJPtNED6qSkc-QAdShas.ldUQMEWzV3nG0tBR.RBoiGMxlF81yAZieLYGZHUD-IwrEOr6yaOzzidvoZkh8EnVvyw_Yx8u8-3XcffCeiLLTYSO5itWKJR4ZgE6mQP-WFH4KqC1wWxaZLLk4FVzSDZbodI9OC-cRCrJx5TEi2KOJWFRlL4Reec2cWPk7yl7YygzdfbiZ0deYxkvrlyUVdiGXCZw3_mgL1wwcW0CILtJAuiAy744g6QHtzDDbMQj2-U9YvdAMgXvG22MWrkMGVaLWFpgcGBak7FfrXJvqtvMjFgmsxj8iQInwSVV4TPQ9i6Px0BiXpRI.Dg3rG8mjDVeo146EcH2ClA; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MjQ5NCwic2VjcmV0IjoiN2ExNTM2ZWZmNjE1YTViMGVlOTcwMDU1ZGVkOGY1N2QiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.uXaZmlGet-3yTHFyW7-x_LuXSwchYm2E4Sumr49FGCA\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":61,"data":"pathname=%2Fid%3D825151\u0026search=\u0026hostname=raduga-gifting.click"}},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sun, 19 Jul 2026 00:07:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=60, s-maxage=0\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"976c-N2c8Qugca8JL80Vqec7pLZKEELg\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Prototype:1.7","description":"Prototype is a JavaScript Framework that aims to ease development of web applications.","website":"https://www.prototypejs.org","common_platform_enumeration":"cpe:2.3:a:prototypejs:prototype:*:*:*:*:*:*:*:*","icon":"Prototype.png","categories":["JavaScript frameworks"]},{"name":"script.aculo.us","description":"","website":"https://script.aculo.us","common_platform_enumeration":"","icon":"script.aculo.us.png","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"jQuery UI:1.11.3","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}],"data":{"size":38764,"size_decoded":10526,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3584)","md5":"98554e0ee00dc373aa6bbc92a2a289f9","sha1":"37673c42e81c6bc24bf3456a79cee92d928410b8","sha256":"2385b6abf5003f80fdc8e527c85a9e22a09fc89e61fdc23bf413a66d86e14e05","sha512":"65658982a8f3a043ef8d33b8fba57b57fb5b4e5176010a6fe2c03187f1eca7b8eb85e4a071aa0c484ff7f7f5cf454f3dcc04ac170c9ea0c250642677b6724c53","ssdeep":"768:cU6cJDg4PR4Otk+vD65IXEBueQLBVRnsRP8SZ343B8ElfxabUjVksHjZPIoKYCxI:cU6cJDg4PR4Otk+vD65IXEBueQLBVm83","tlshash":"b0036421a8f3c03b459ab2d5b167ab3e9653cb4bd5448f9077ec02a4efd6bd14a2311c","first_seen":"2026-07-19T00:07:50.167311Z","last_seen":"2026-07-19T00:07:50.167311Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"raduga-gifting.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raduga-gifting.click/a578f6fcea17657d6481f19e42037c78282141786b3b/b0fda31a9fa31e8ef186f59edb35f051bdbf6742ba1a.css","fqdn":"raduga-gifting.click","domain":"raduga-gifting.click","tld":"click"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.016Z","timestamp":1784419621016,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raduga-gifting.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 09:21:13 GMT","end":"Thu, 15 Oct 2026 09:21:12 GMT"},"fingerprint":{"sha1":"F6:94:40:F0:2D:00:AA:41:24:B0:4A:0F:EE:17:4B:BA:3E:C7:83:8B","sha256":"42:BA:2C:EC:97:DD:39:D0:8B:1B:88:02:BA:70:E7:D8:7C:57:55:25:3D:FD:48:91:67:CB:70:63:71:D2:57:B5"}}},"request":{"raw":"GET /a578f6fcea17657d6481f19e42037c78282141786b3b/b0fda31a9fa31e8ef186f59edb35f051bdbf6742ba1a.css HTTP/1.1\r\nHost: raduga-gifting.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.uQ8qbZfgMSEODJPtNED6qSkc-QAdShas.ldUQMEWzV3nG0tBR.RBoiGMxlF81yAZieLYGZHUD-IwrEOr6yaOzzidvoZkh8EnVvyw_Yx8u8-3XcffCeiLLTYSO5itWKJR4ZgE6mQP-WFH4KqC1wWxaZLLk4FVzSDZbodI9OC-cRCrJx5TEi2KOJWFRlL4Reec2cWPk7yl7YygzdfbiZ0deYxkvrlyUVdiGXCZw3_mgL1wwcW0CILtJAuiAy744g6QHtzDDbMQj2-U9YvdAMgXvG22MWrkMGVaLWFpgcGBak7FfrXJvqtvMjFgmsxj8iQInwSVV4TPQ9i6Px0BiXpRI.Dg3rG8mjDVeo146EcH2ClA; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MjQ5NCwic2VjcmV0IjoiN2ExNTM2ZWZmNjE1YTViMGVlOTcwMDU1ZGVkOGY1N2QiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.uXaZmlGet-3yTHFyW7-x_LuXSwchYm2E4Sumr49FGCA\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: openresty\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 65\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"41-0AeMVzV1pApYTMktTMxeiuYqqUg\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-20T00:20:44.31092Z","times_seen":17379474,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"raduga-gifting.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/jquery-1.8.3.min.js?v=NXam5zydzNu8\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.046Z","timestamp":1784419621046,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/shared/javascript/jquery-1.8.3.min.js?v=NXam5zydzNu8\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=15552000\r\nexpires: Sun, 27 Dec 2026 22:03:11 GMT\r\netag: \"NXam5zydzNu8\"\r\nx-integrity: \"sha384-lifoBlbdwizTl3Yoe612uhI3AcOam/QtWkozF7SuiACaf5UJl5reOYu4MigVxrCH\"\r\nlast-modified: Sun, 09 Sep 2001 01:46:40 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nage: 1562357\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 44615\r\nx-timer: S1784419621.069957,VS0,VE0\r\ncontent-length: 33378\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93636,"size_decoded":34009,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65483)","md5":"3576a6e73c9dccdbbc4a2cf8ff544ad7","sha1":"06e872300088b9ba8a08427d28ed0efcdf9c6ff5","sha256":"61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf","sha512":"27d41f6cfb8596a183d8261509aeb39fcffb3c48199c6a4ce6ab45381660c2e8e30e71b9c39163c78e98ceabc887f391b2d723ee5b92b6fbc81e48ac422e522b","ssdeep":"1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:O+vIklosn/BLXjxzMhsSQ","tlshash":"b393f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","first_seen":"2023-03-07T01:02:53Z","last_seen":"2026-07-19T21:34:38.242036Z","times_seen":36775,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.akamai.steamstatic.com/steam/clusters/about_i18n_assets/about_i18n_assets_0/wallet_card_img_english.png?t=1636143670","fqdn":"cdn.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"95.101.10.18","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.261Z","timestamp":1784419621261,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 20:27:20 GMT","end":"Thu, 13 Aug 2026 20:27:19 GMT"},"fingerprint":{"sha1":"F1:7C:6A:88:D3:78:B4:6D:CB:B0:F3:B6:9A:A5:26:C6:F5:E5:42:28","sha256":"5C:ED:DE:FC:0F:E2:21:91:B8:42:2F:52:41:E8:B1:84:A5:D9:48:A9:65:59:CB:2A:87:BE:76:63:0C:86:F1:7D"}}},"request":{"raw":"GET /steam/clusters/about_i18n_assets/about_i18n_assets_0/wallet_card_img_english.png?t=1636143670 HTTP/1.1\r\nHost: cdn.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nContent-Length: 503402\r\nLast-Modified: Wed, 24 Sep 2014 18:08:02 GMT\r\nETag: \"54230882-7ae6a\"\r\nAccept-Ranges: bytes\r\nDate: Sun, 19 Jul 2026 00:07:01 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":503402,"size_decoded":503638,"mime_type":"image/png","magic":"PNG image data, 406 x 719, 8-bit/color RGBA, non-interlaced","md5":"eaa918479400786006bc5a37e77075a2","sha1":"cb892a61d8643b235ac589d9e0fd7a4a97ce56a9","sha256":"69a47ea33e7fa0226b9f23b5837a9075f36a0ffc2e7adc2f5b30f564e1dad09c","sha512":"52bcd20485323c7451fcfbacf51a3e5366031198177ce53815ee031a451219755421da894edeb8e26a83ec84d7e52217b26158ddf5b0449bffe8f286b2238942","ssdeep":"12288:vyy70uBu8olN1OkoyLscRq3XNDLNLJ10A:vydHOkhhqXdN7","tlshash":"21b423629ee66b409c0f36b357b263eb701a684a1f7fe0494975c0d948fa708dc3e45d","first_seen":"2023-05-02T15:44:11Z","last_seen":"2026-07-19T16:07:05.854771Z","times_seen":1873,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":386,"dns":0,"connect":1,"send":0,"wait":4,"receive":8,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raduga-gifting.click/73187f547e07060f0852544d.js","fqdn":"raduga-gifting.click","domain":"raduga-gifting.click","tld":"click"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.013Z","timestamp":1784419621013,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raduga-gifting.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 09:21:13 GMT","end":"Thu, 15 Oct 2026 09:21:12 GMT"},"fingerprint":{"sha1":"F6:94:40:F0:2D:00:AA:41:24:B0:4A:0F:EE:17:4B:BA:3E:C7:83:8B","sha256":"42:BA:2C:EC:97:DD:39:D0:8B:1B:88:02:BA:70:E7:D8:7C:57:55:25:3D:FD:48:91:67:CB:70:63:71:D2:57:B5"}}},"request":{"raw":"GET /73187f547e07060f0852544d.js HTTP/1.1\r\nHost: raduga-gifting.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.uQ8qbZfgMSEODJPtNED6qSkc-QAdShas.ldUQMEWzV3nG0tBR.RBoiGMxlF81yAZieLYGZHUD-IwrEOr6yaOzzidvoZkh8EnVvyw_Yx8u8-3XcffCeiLLTYSO5itWKJR4ZgE6mQP-WFH4KqC1wWxaZLLk4FVzSDZbodI9OC-cRCrJx5TEi2KOJWFRlL4Reec2cWPk7yl7YygzdfbiZ0deYxkvrlyUVdiGXCZw3_mgL1wwcW0CILtJAuiAy744g6QHtzDDbMQj2-U9YvdAMgXvG22MWrkMGVaLWFpgcGBak7FfrXJvqtvMjFgmsxj8iQInwSVV4TPQ9i6Px0BiXpRI.Dg3rG8mjDVeo146EcH2ClA; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MjQ5NCwic2VjcmV0IjoiN2ExNTM2ZWZmNjE1YTViMGVlOTcwMDU1ZGVkOGY1N2QiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.uXaZmlGet-3yTHFyW7-x_LuXSwchYm2E4Sumr49FGCA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\ncontent-disposition: inline\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nlast-modified: Fri, 19 Jun 2026 22:37:43 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":259944,"size_decoded":85569,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e4622ec5de1ef3b80c85992ddbde91ad","sha1":"422efaf2e1fcae57eb85f71116f97cbf34c17c81","sha256":"d62d1adb24ba7068df937a2ce52524a9ca6e684b1ad5d2708f9647f5f2121371","sha512":"c5dabdd1169e9eaf1b3dabda948440efd9ebc80c9b3e819ff272142d84132481f6d5800de0ac73070fc52bd02cf9237923e1123dc20a99b1702e09268204d43c","ssdeep":"3072:nm/hqd0cgNBfXFrHWQ/f4cK3OrAaX3Ed0PAhqCZmU:nmJqd0JFrHWQ/f4cK3OrAaX3G0P0D","tlshash":"f644b6443bc0ac5c135b5b3a731bb1d5f46a09af2d88094be115fc907aaa617fef9831","first_seen":"2026-06-19T23:58:38.384372Z","last_seen":"2026-07-19T20:18:49.863635Z","times_seen":46,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"raduga-gifting.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/css/buttons.css?v=ecbk11GZ8OUy\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.037Z","timestamp":1784419621037,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/shared/css/buttons.css?v=ecbk11GZ8OUy\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/css;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"BZhNEtESfYSJ\"\r\nx-integrity: \"sha384-WR1NDuupLEK4yL9wDNN/G36HecidHf6UL4TJijRijlYDtO0KH2PQNjaGLh8BcmMk\"\r\nlast-modified: Wed, 06 May 1970 08:58:51 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1784419621.287255,VS0,VE147\r\ncontent-length: 4430\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36501,"size_decoded":5056,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"05984d12d1127d8489ba16224cf757b8","sha1":"5c5c95ffa7bd25710ad402567598333446483208","sha256":"6531f23b878cb46ef9d086cad8aa7a72814f207b65bf1f3bffb7f9be39056bce","sha512":"e65ecffc952eb1cd6f3cc8a6b7e5a339260427fe63b7ca8c6deaf11b0778f4632780930c2e31fee329d00da1e2b598de5f5cf7a4adc1f7d23306c1e93758ce50","ssdeep":"384:l5/z6bJaBhSdbiabUo7aZaKj6vvZfGW+I/n:rj6vvZfGW+I/n","tlshash":"e1f2ce99b38c70753237e1e065175fe86a7a109e88670f9efab5b2bc13da0ec1535813","first_seen":"2025-05-20T11:35:20.984378Z","last_seen":"2026-07-19T16:07:05.887185Z","times_seen":687,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":1,"connect":10,"send":0,"wait":156,"receive":1,"ssl":238},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/tooltip.js?v=QYkT4eS5mbTN\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.048Z","timestamp":1784419621048,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/shared/javascript/tooltip.js?v=QYkT4eS5mbTN\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"a9q1REOJMDBo\"\r\nx-integrity: \"sha384-FG9m3Ud0MdPbs4x8SSKgsu8R1kOy//qRO0EfxiVEGYagiRDQAeBTZnzVaNSA+VfY\"\r\nlast-modified: Wed, 06 May 1970 08:58:51 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1784419621.070101,VS0,VE160\r\ncontent-length: 5033\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18052,"size_decoded":5666,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"6bdab54443893030688921dc83a7d4fc","sha1":"148804134bf1c2387059ca59568628b3a67a97f5","sha256":"668e5ee5d12ff2f0206df57a22d3e180bcbbcd6c97992dfd8130812455b1c5db","sha512":"b291372cb16425cc5e3d42ee8189a287b8c3b1de341dbbbd72d17075f026f208c7c2f5890425de51294b0b352737a1f9468e7d90768f1bb69addd07bdd754703","ssdeep":"192:h3ug34ZknOPADCO0izmla3uCXDJiC7ZEb9k9Hdqyo0yPn4PRP/4PaP34Pjc+8uba:h3ug4R4svlBEJpocOuJ2Cu+bR","tlshash":"ba8254a1f73d20ae407aa3be885d238cb33d40765161f8b57d7886743a4e49b4396fe4","first_seen":"2026-06-17T17:21:21.164668Z","last_seen":"2026-07-19T20:18:49.851454Z","times_seen":177,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/images/popups/btn_arrow_down_padded.png","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.987Z","timestamp":1784419621987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/shared/images/popups/btn_arrow_down_padded.png HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://store.fastly.steamstatic.com/public/shared/css/shared_global.css?v=LkH7FFmHUNxE\u0026l=english\u0026_cdn=fastly\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:12 GMT\r\netag: \"649bb1f0-a1\"\r\nstrict-transport-security: max-age=10368000\r\naccept-ranges: bytes\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nage: 70519\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 3871\r\nx-timer: S1784419622.986459,VS0,VE0\r\ncontent-length: 161\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":161,"size_decoded":575,"mime_type":"image/png","magic":"PNG image data, 19 x 12, 8-bit/color RGBA, non-interlaced","md5":"f2dae37acac6b9d5a91caf1885c2f7d0","sha1":"5f80fdde9f702a1d7589bc5faf88c14066e26c32","sha256":"93b1fbe4f6245b62bfd4c8c3347abe0fe67ed711315e59bfadaebc9873d8d9b5","sha512":"8d7ff7133ab97d81985c50fa8fd93916b42b1ce812af21bc732dcae45d59b9154fcc965857235d925c471db191dfb79c0753c70c7a4d5b0285b908e396216805","ssdeep":"","tlshash":"95c08cc1bb64ed58dad20363a596802084a30a844a53836ca9a6c875023aa01c8d1f46","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-07-19T20:18:49.855612Z","times_seen":3627,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/account/redeem_wallet_complete_popup.png","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.266Z","timestamp":1784419621266,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/images/account/redeem_wallet_complete_popup.png HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:18 GMT\r\netag: \"649bb1f6-57f1\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 51358\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1784419621.265670,VS0,VE1\r\ncontent-length: 22513\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22513,"size_decoded":22915,"mime_type":"image/png","magic":"PNG image data, 439 x 170, 8-bit/color RGBA, non-interlaced","md5":"4dddfe80ce9184f5fcb77a8735791e69","sha1":"475c4b22242ad7dcabf0e7f43e09b066d75b13af","sha256":"87682460ef234c5cdd98375eea1f03cc165947b3aea57deec37d552b32ba29ec","sha512":"ae6c464bda07b5fbb341a8adbf4353adba197186becdca15ae4821592b0f35176b4869b38c43084bee17547374a1834929ff760d8173721228df7027da39a464","ssdeep":"384:mXE05G0jCZQZ1CDMpbltRByo7gVKjb2gWH4vvrSvrrBcyWh0VrS9Hzo05HOxLECN:c35G7ZGCDIzBH3b2gWNTvlX4uDpD","tlshash":"6aa2d130d92cf1fc88cab803cc49b9e7667959bdddea3514625516df281cd0e33b6426","first_seen":"2023-05-21T20:35:46Z","last_seen":"2026-07-19T16:07:05.910514Z","times_seen":413,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/main_english-json.js?contenthash=1dad68489e111e020eae","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:02.974Z","timestamp":1784419622974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/javascript/applications/store/main_english-json.js?contenthash=1dad68489e111e020eae HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\nlast-modified: Thu, 09 Jul 2026 22:53:02 GMT\r\netag: \"D51jQZIEb9V2\"\r\ncache-control: public,max-age=259200,must-revalidate\r\nexpires: Sun, 12 Jul 2026 22:56:29 GMT\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\ndate: Sun, 19 Jul 2026 00:07:02 GMT\r\nvia: 1.1 varnish\r\nage: 4232\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 1573\r\nx-timer: S1784419623.976369,VS0,VE0\r\ncontent-length: 89293\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89293,"size_decoded":89822,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65369)","md5":"35426b8489b6cee154c7b1de49d6c2c1","sha1":"23a006e63e004342b9a0793fa669312b9a660c00","sha256":"92dcf52baecdb7ae75165a1e98be1083d17f93ba79604af18fb1f6866e61a9ae","sha512":"5da66a4d3cab3ac8b14043a3232020531f243e7cb373e04269d2ff0fe28a3c32a7ae00bced41616dcd3a4a7f5032451dba3aa77fb170354a66da40f6dfc4697a","ssdeep":"1536:07aiXSllRVji5XfFLNh4iAEd2Pj7CHrp5ALMRmdQwU:s+lR5i5X9LNh4iAEdGj7CHULMRmdQwU","tlshash":"02931a0feb19097b978702b77e1e66e771e5c0e733e11c60bec8842f12466c5622fa59","first_seen":"2026-07-11T22:02:53.000846Z","last_seen":"2026-07-19T16:07:05.823107Z","times_seen":28,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raduga-gifting.click/73187f547e0706010342625c1550215f0b035050","fqdn":"raduga-gifting.click","domain":"raduga-gifting.click","tld":"click"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:03.040Z","timestamp":1784419623040,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raduga-gifting.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 09:21:13 GMT","end":"Thu, 15 Oct 2026 09:21:12 GMT"},"fingerprint":{"sha1":"F6:94:40:F0:2D:00:AA:41:24:B0:4A:0F:EE:17:4B:BA:3E:C7:83:8B","sha256":"42:BA:2C:EC:97:DD:39:D0:8B:1B:88:02:BA:70:E7:D8:7C:57:55:25:3D:FD:48:91:67:CB:70:63:71:D2:57:B5"}}},"request":{"raw":"GET /73187f547e0706010342625c1550215f0b035050 HTTP/1.1\r\nHost: raduga-gifting.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.uQ8qbZfgMSEODJPtNED6qSkc-QAdShas.ldUQMEWzV3nG0tBR.RBoiGMxlF81yAZieLYGZHUD-IwrEOr6yaOzzidvoZkh8EnVvyw_Yx8u8-3XcffCeiLLTYSO5itWKJR4ZgE6mQP-WFH4KqC1wWxaZLLk4FVzSDZbodI9OC-cRCrJx5TEi2KOJWFRlL4Reec2cWPk7yl7YygzdfbiZ0deYxkvrlyUVdiGXCZw3_mgL1wwcW0CILtJAuiAy744g6QHtzDDbMQj2-U9YvdAMgXvG22MWrkMGVaLWFpgcGBak7FfrXJvqtvMjFgmsxj8iQInwSVV4TPQ9i6Px0BiXpRI.Dg3rG8mjDVeo146EcH2ClA; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MjQ5NCwic2VjcmV0IjoiN2ExNTM2ZWZmNjE1YTViMGVlOTcwMDU1ZGVkOGY1N2QiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.uXaZmlGet-3yTHFyW7-x_LuXSwchYm2E4Sumr49FGCA; timezoneOffset=0,0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sun, 19 Jul 2026 00:07:03 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 288\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"120-ywVr9yfYHHHgEWudEjpc7K3+DI4\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":288,"size_decoded":917,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c074867a42434fea6b912c4866ea5f79","sha1":"cb056bf727d81c71e0116b9d123a5cecadfe0c8e","sha256":"b444b47de8c5501be1db5d078f6c2f450c8b3b386783ba640535f62b6921732e","sha512":"de8c223ea738fecc10f179d8a3f197be812ec0c9c3a5a0e384938dbf9c97633c93d86d1fe346ebb329cde317f9f5d62511024f2ad74aaaa821d11736192c1cef","ssdeep":"","tlshash":"9cd02b13046c906adf105204405b7f0be6bd2a2344c4b81e7abd87329dfc6db2449daf","first_seen":"2026-07-19T00:07:50.175355Z","last_seen":"2026-07-19T00:07:50.175355Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"raduga-gifting.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/javascript/shared_global.js?v=gOyfgA0bHRkL\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.049Z","timestamp":1784419621049,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/shared/javascript/shared_global.js?v=gOyfgA0bHRkL\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"VpbYnpiGUFxl\"\r\nx-integrity: \"sha384-3+/s1oON0tv+8LpnqHLxuA7MYOBDYnzbqymu4eyMptiGK6aV5OXpHaL807YglZNL\"\r\nlast-modified: Wed, 06 May 1970 08:58:51 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1784419621.070404,VS0,VE455\r\ncontent-length: 43067\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":152793,"size_decoded":43701,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (2464)","md5":"5696d89e9886505c65a8f929f386c1cd","sha1":"625a2e4f5b37a19671a42cee28bc0bff04d4cb48","sha256":"fd522359a002e4dce26432ef3bdfe57a8ff87fa0578c1be7f937e9905c29c7e2","sha512":"942a85e826b356c29ec6902013af386ee436865802812118ff2306f86be879054d91883150994867f6e76e4a3100855fca7c9217a95e71cc00273a28271ef4a4","ssdeep":"1536:056XRdDp2hNJRNhUmciMQzoscmDecTVziqD3YHI1Sp6D3QgQHrMTAQamQXkwRiOU:C/5UmciZos1DeclP7YHVgObXKN1","tlshash":"62e319c5eb7c212a897a302ddd4f50493a7e5832b00468297c5e94dc6ae0d7e43bbe7d","first_seen":"2026-07-11T20:48:47.725944Z","last_seen":"2026-07-19T16:33:09.143381Z","times_seen":41,"resource_available":true,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":465,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/prototype-1.7.js?v=npJElBnrEO6W\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.083Z","timestamp":1784419621083,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/javascript/prototype-1.7.js?v=npJElBnrEO6W\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=15552000\r\nexpires: Sun, 27 Dec 2026 19:34:09 GMT\r\netag: \"npJElBnrEO6W\"\r\nx-integrity: \"sha384-YAoVVYkeHRpvvpvjRNZKi3AQxIO+hBZtpxGVOlZ4znfcRalb6uUpKX7XvCg9FgiS\"\r\nlast-modified: Sun, 09 Sep 2001 01:46:40 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nage: 1571571\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 16696\r\nx-timer: S1784419621.083868,VS0,VE0\r\ncontent-length: 37134\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":163315,"size_decoded":37765,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"9e92449419eb10ee96c56d803d2baa43","sha1":"5a2be7055866b8f35bd852d466ff590251a56d89","sha256":"a655fc19da796630bcf37112ccf749898e98c99e1b25bccef0bf3573665195e5","sha512":"19d0c715d50abf41cccf0a96bf9c4673c5059d8a0a9edddc00c243ae44e403e1b3641c8e7c3e57b58746423b0679af216398648a6a1a4f50f394a9c15104fb32","ssdeep":"1536:Pe/hr8bCUSFPlpV7N+XS+st304cM9FmKZFDlYUo7pKMaV/6FzKKVA8MjjOH2X1Ix:PIr8bCBPlp0u9F6UodjaVbX1oYVpwxA8","tlshash":"99f3309c7de66035822bf13e5a9f418cf27980171408ed55b89c85a46fb0d3896fafec","first_seen":"2023-10-31T01:09:46Z","last_seen":"2026-07-19T20:18:49.854096Z","times_seen":2544,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.11.3/jquery-ui.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.100Z","timestamp":1784419621100,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /ui/1.11.3/jquery-ui.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-72b1e\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nage: 2626691\r\nx-served-by: cache-lga21958-LGA, cache-bma-essb1270061-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 438, 7248\r\nx-timer: S1784419621.134652,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 113814\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":469790,"size_decoded":114453,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (547)","md5":"c811575fd210af968e09caa681917b9b","sha1":"0bf0ff43044448711b33453388c3a24d99e6cc9c","sha256":"d2f0522008bff05c6434e48ac8f11f7464331436a4d5d96a14a058a81a75c82e","sha512":"d2234d9e8dcc96bca55fafb83bb327f87c29ae8433fc296c48be3ef8c9a21a0a4305e14823e75416951eecd6221f56fbbb8c89d44b244a27be7b6bea310f2fd1","ssdeep":"6144:zK8SyEGdEXdujYWUl/plq/pGlgFld1HmcI48VirY7IXtu2Y5W5ZbHtQTiTXu5bgs:fljHmcI4q5W5FHttCnuJq7CjhBK1","tlshash":"b0a4a689f39c266a857a325d5c2e41ce723c8076d60158bfbc5c59dc29e883c42bbf79","first_seen":"2023-03-07T01:03:14Z","last_seen":"2026-07-19T19:11:16.482091Z","times_seen":3353,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":5,"connect":9,"send":0,"wait":9,"receive":17,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/css/applications/store/main.css?v=aJPspEhMdgzn\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.105Z","timestamp":1784419621105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/css/applications/store/main.css?v=aJPspEhMdgzn\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/css;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"qz7fbpFzqX0o\"\r\nx-integrity: \"sha384-4dtl3R0Js1vGK/Myd0anK76Xr7e3NE2pmztR5AYLOc+or3vUoQV08nssEIv8svYJ\"\r\nlast-modified: Wed, 06 May 1970 08:58:51 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 19 Jul 2026 00:07:02 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1784419621.105289,VS0,VE899\r\ncontent-length: 68267\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":271509,"size_decoded":68894,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20875)","md5":"ab3edf6e9173a97d2878dd6ca52dda63","sha1":"738fad6ae7f4608bac8089f9b548a849a36c90ab","sha256":"faa84fcb98e0d75f4b0fa2faa9792dd8690be7fd9b0f8baafe97c77d1d42c8a1","sha512":"a10efca5624515fc241986e5b82314ceb451490cee038cb46086a0ae29473dee15cbf4f06fab71ba0e27d4978d84bad6dda9977e912630e364e3af34361926db","ssdeep":"6144:so9LBO0qYEhj3YZ6WkiRaY+a7dmVuLMmZeOfzhH4+66U6p1dWyvx:x9tuj3Xs","tlshash":"7f442b30fa1070bb6953917e13e0ea5cb528e006ed3227be7f55305195ca2ff1ae791a","first_seen":"2026-07-11T22:02:53.022002Z","last_seen":"2026-07-19T16:07:05.908243Z","times_seen":29,"resource_available":false,"data":null}},"time_used":912,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":911,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.985Z","timestamp":1784419621985,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://store.fastly.steamstatic.com/public/shared/css/shared_global.css?v=LkH7FFmHUNxE\u0026l=english\u0026_cdn=fastly\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:11 GMT\r\netag: \"649bb1ef-123\"\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nage: 70424\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 2595\r\nx-timer: S1784419622.984629,VS0,VE0\r\ncontent-length: 291\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":291,"size_decoded":706,"mime_type":"image/png","magic":"PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced","md5":"a2796187c58c7e948159e37d6990ecc2","sha1":"4209cd85add507247f9ce5a87a8c9095b54ee417","sha256":"23341256db7f44b1f3811880fa2bae6b7748bbf6b62c544a162e38cf0d5c5082","sha512":"5ef103b8398507495c2708df8fcd82bdb763b1d580aaaa6cacfb805614764277c19e8ece5d890a8aafc004fc8c25e3ab2e67d6fbf373c432a9a0d7c36fa0890f","ssdeep":"","tlshash":"83d0ebf3a3e86d79fb52fe97d10180e0465fcaeb6004877889c3880447a81f880f2996","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-07-19T20:18:49.866525Z","times_seen":7399,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raduga-gifting.click/id=825151","fqdn":"raduga-gifting.click","domain":"raduga-gifting.click","tld":"click"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-19T00:06:59.935Z","timestamp":1784419619935,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raduga-gifting.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 09:21:13 GMT","end":"Thu, 15 Oct 2026 09:21:12 GMT"},"fingerprint":{"sha1":"F6:94:40:F0:2D:00:AA:41:24:B0:4A:0F:EE:17:4B:BA:3E:C7:83:8B","sha256":"42:BA:2C:EC:97:DD:39:D0:8B:1B:88:02:BA:70:E7:D8:7C:57:55:25:3D:FD:48:91:67:CB:70:63:71:D2:57:B5"}}},"request":{"raw":"GET /id=825151 HTTP/1.1\r\nHost: raduga-gifting.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sun, 19 Jul 2026 00:07:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=60, s-maxage=60, stale-while-revalidate=30\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"c6b4-H9L8uyz7fdCRg4FFPgxLCGxxcKM\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nset-cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.uQ8qbZfgMSEODJPtNED6qSkc-QAdShas.ldUQMEWzV3nG0tBR.RBoiGMxlF81yAZieLYGZHUD-IwrEOr6yaOzzidvoZkh8EnVvyw_Yx8u8-3XcffCeiLLTYSO5itWKJR4ZgE6mQP-WFH4KqC1wWxaZLLk4FVzSDZbodI9OC-cRCrJx5TEi2KOJWFRlL4Reec2cWPk7yl7YygzdfbiZ0deYxkvrlyUVdiGXCZw3_mgL1wwcW0CILtJAuiAy744g6QHtzDDbMQj2-U9YvdAMgXvG22MWrkMGVaLWFpgcGBak7FfrXJvqtvMjFgmsxj8iQInwSVV4TPQ9i6Px0BiXpRI.Dg3rG8mjDVeo146EcH2ClA; Max-Age=21600; Path=/; Expires=Sun, 19 Jul 2026 06:07:00 GMT; SameSite=Lax\ntoken=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MjQ5NCwic2VjcmV0IjoiN2ExNTM2ZWZmNjE1YTViMGVlOTcwMDU1ZGVkOGY1N2QiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.uXaZmlGet-3yTHFyW7-x_LuXSwchYm2E4Sumr49FGCA; Max-Age=21600; Path=/; Expires=Sun, 19 Jul 2026 06:07:00 GMT; SameSite=Lax\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50868,"size_decoded":18080,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (49707)","md5":"c75ff18cadb1ecb5ec304f844cff97e9","sha1":"1fd2fcbb2cfb7dd0918381453e0c4b086c7170a3","sha256":"b58f864a5dd55ff8d4b76b01abe81d8f794044d6c7af6b47f2fd122d3d6e5d06","sha512":"cc72c3a4ba6e8596e4dddd6c4c164b7176b4ecb078525f5f7eaf4543ebf8f81193935b9df8cee4b55d7459b5ff788065f1d8e0910c42daa73e3c96f80173dfb3","ssdeep":"1536:AvVd8oa2WsR4v1L8St1RKDijMKUFy5mL+:EVrahsR4v1L8S7REzFfL+","tlshash":"263384a4fafaa73cc7e3e94c2d1918e6989e7410b7480d24ab0d553ef515349eaf2d0c","first_seen":"2026-07-19T00:07:50.181788Z","last_seen":"2026-07-19T16:07:05.922569Z","times_seen":3,"resource_available":true,"data":null}},"time_used":475,"timings":{"blocked":-1,"dns":281,"connect":29,"send":0,"wait":100,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"raduga-gifting.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/v6/logo_steam_footer.png","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.268Z","timestamp":1784419621268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/images/v6/logo_steam_footer.png HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:22 GMT\r\netag: \"649bb1fa-b1b\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 33633\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1784419621.266958,VS0,VE1\r\ncontent-length: 2843\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2843,"size_decoded":3243,"mime_type":"image/png","magic":"PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced","md5":"41e851f8e42b6bf3414278871e93e8a2","sha1":"a3811c7e1157f77950ec1f0558293bc90e432e82","sha256":"399f74c4e69eac8b59b149293f9a573955fef0a62b242cfa70346070013e0966","sha512":"f3c3549f1390b52791196e6f19584cbd4c4db2b51fef78c9c607c944079fed69b75e8f88594c3d647f2ddc29f282bf41be455be328ab27c091b4a37c41b00965","ssdeep":"","tlshash":"8051d94ef9325d6074ccf94128ee23571a735b40ea928561ecdace9b06352f9880e5c3","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-07-19T16:07:05.943599Z","times_seen":2719,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/applications/store/shoppingcart_english-json.js?contenthash=8c5f5d96adf409e02a5c","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:02.978Z","timestamp":1784419622978,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/javascript/applications/store/shoppingcart_english-json.js?contenthash=8c5f5d96adf409e02a5c HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\nlast-modified: Thu, 09 Jul 2026 22:53:02 GMT\r\netag: \"gR7k9Gm10IRZ\"\r\ncache-control: public,max-age=259200,must-revalidate\r\nexpires: Sun, 12 Jul 2026 22:56:29 GMT\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\ndate: Sun, 19 Jul 2026 00:07:02 GMT\r\nvia: 1.1 varnish\r\nage: 4226\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 1565\r\nx-timer: S1784419623.978972,VS0,VE0\r\ncontent-length: 20431\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20431,"size_decoded":20960,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20264)","md5":"f3719fcc81b855c0d44d9e053246f8d1","sha1":"a72ea4f3a6da05c723d7a642ff766cffee257b12","sha256":"33a83cfa076c90e9962e4ce4899ac1062d083fa19fc6e30836c3bd9257099146","sha512":"10c78493cd760314006ea86af7a3ce04c46e9dd05e97b04f363607d985ad7f26f4faa06b21f98a6b5efe3de7fa365a515cbdea7746ea73d541b3c44b8799dfd3","ssdeep":"384:+f+Q1GLTu4XBaL79GTdyIqgYjgpJVB5ZYTzvbjDp4Jw9B:yWjBaL79GTdyIqgYjgpJVB5ZYTzvbjDz","tlshash":"a7928449cd6553735de64ba0bee6a64f83b4e2d60274f9904fc8096d324f5c284bfd88","first_seen":"2026-07-11T22:02:53.150033Z","last_seen":"2026-07-19T16:07:05.911285Z","times_seen":28,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raduga-gifting.click/a578f6fcea17657d6481f19e42037c78282141786b3b/233e73f5e02a89abdd095648ab78522319d728708176.css","fqdn":"raduga-gifting.click","domain":"raduga-gifting.click","tld":"click"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.017Z","timestamp":1784419621017,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raduga-gifting.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 09:21:13 GMT","end":"Thu, 15 Oct 2026 09:21:12 GMT"},"fingerprint":{"sha1":"F6:94:40:F0:2D:00:AA:41:24:B0:4A:0F:EE:17:4B:BA:3E:C7:83:8B","sha256":"42:BA:2C:EC:97:DD:39:D0:8B:1B:88:02:BA:70:E7:D8:7C:57:55:25:3D:FD:48:91:67:CB:70:63:71:D2:57:B5"}}},"request":{"raw":"GET /a578f6fcea17657d6481f19e42037c78282141786b3b/233e73f5e02a89abdd095648ab78522319d728708176.css HTTP/1.1\r\nHost: raduga-gifting.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.uQ8qbZfgMSEODJPtNED6qSkc-QAdShas.ldUQMEWzV3nG0tBR.RBoiGMxlF81yAZieLYGZHUD-IwrEOr6yaOzzidvoZkh8EnVvyw_Yx8u8-3XcffCeiLLTYSO5itWKJR4ZgE6mQP-WFH4KqC1wWxaZLLk4FVzSDZbodI9OC-cRCrJx5TEi2KOJWFRlL4Reec2cWPk7yl7YygzdfbiZ0deYxkvrlyUVdiGXCZw3_mgL1wwcW0CILtJAuiAy744g6QHtzDDbMQj2-U9YvdAMgXvG22MWrkMGVaLWFpgcGBak7FfrXJvqtvMjFgmsxj8iQInwSVV4TPQ9i6Px0BiXpRI.Dg3rG8mjDVeo146EcH2ClA; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MjQ5NCwic2VjcmV0IjoiN2ExNTM2ZWZmNjE1YTViMGVlOTcwMDU1ZGVkOGY1N2QiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.uXaZmlGet-3yTHFyW7-x_LuXSwchYm2E4Sumr49FGCA\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: openresty\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 65\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"41-0AeMVzV1pApYTMktTMxeiuYqqUg\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-20T00:20:44.31092Z","times_seen":17379474,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"raduga-gifting.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/css/motiva_sans.css?v=YzJgj1FjzW34\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.033Z","timestamp":1784419621033,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/shared/css/motiva_sans.css?v=YzJgj1FjzW34\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/css;charset=UTF-8\r\ncache-control: public,max-age=15552000\r\nexpires: Sun, 27 Dec 2026 19:13:32 GMT\r\netag: \"YzJgj1FjzW34\"\r\nx-integrity: \"sha384-8Mx0sTcnCZvBno56DpQQEfbTlesmKxxJozFgeV4x3Z5jsf3hwLgm/ZZL7AmLPQZL\"\r\nlast-modified: Sun, 09 Sep 2001 01:46:40 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nage: 1562495\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 43305\r\nx-timer: S1784419621.067383,VS0,VE0\r\ncontent-length: 625\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2568,"size_decoded":1247,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"6332608f5163cd6df8796cfa8a99fe80","sha1":"cc0739fefcf56fc1c4f60c531e470134251747eb","sha256":"d4c043cef21ba8cb6b3bdf0e4f48522987b298607a576046195696430e403e4a","sha512":"3d394f47d64585ebef5eac576788e55b9f274b991394ceffa26776ef790435a94809c2a54ab21e1a3fdef001d21e9c922909ea673547824cef6a44ef0bc6d66d","ssdeep":"","tlshash":"6851de84655cd13f5fe80c83f3cb6d269e0f342a30aac975c5a31a94afa143a0375b5a","first_seen":"2024-11-16T08:41:12.896558Z","last_seen":"2026-07-19T16:07:05.745975Z","times_seen":787,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":10,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/main.js?v=wiAgKBaqWusf\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.053Z","timestamp":1784419621053,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/javascript/main.js?v=wiAgKBaqWusf\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"vLI1lFq8i6H2\"\r\nx-integrity: \"sha384-64+6B00b3uWj5pd3xA5Kq+a1pXdlcHXaR0iiSoL2jAFCRavGVNlgvmwB2MmPkdLb\"\r\nlast-modified: Wed, 06 May 1970 08:58:51 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1784419621.071337,VS0,VE318\r\ncontent-length: 22983\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":87882,"size_decoded":23617,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (367)","md5":"bcb235945abc8ba1f65c7b12da1c99d9","sha1":"2e33c2a60b6b5a26675316b5db5d4a85e6a33ae1","sha256":"468b1fa63044e312d6b54c837db24a864ca964a13271f0d0a2b6dd239c923f81","sha512":"197509bb09525117f37992beadd4f889f8249d1c20590be05507c0864844e223b53acb54aa310d30d04df8ff583dac1b049793984854bc7bbc590c82b740190b","ssdeep":"1536:UqB6CKVhEGSF77Rdr+DUfMpauSa4ZRxwKOLWxLm46mMPeW3bLVf7ydSxk+YBwWP1:bBuLY1S/S","tlshash":"f98307d4f7ad01399479203cad1f94897a7e4871b900a8627d4e8a9874d092f43bff7e","first_seen":"2026-07-15T05:06:44.636128Z","last_seen":"2026-07-19T16:07:05.919662Z","times_seen":13,"resource_available":true,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.996Z","timestamp":1784419621996,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/shared/fonts/MotivaSans-Regular.ttf?v=4.015 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://raduga-gifting.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://store.fastly.steamstatic.com/public/shared/css/motiva_sans.css?v=YzJgj1FjzW34\u0026l=english\u0026_cdn=fastly\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/octet-stream\r\nlast-modified: Wed, 28 Jun 2023 04:07:10 GMT\r\netag: \"649bb1ee-1df3c\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nage: 30466\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 4491\r\nx-timer: S1784419622.995852,VS0,VE0\r\ncontent-length: 122684\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":122684,"size_decoded":123106,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 22 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansRegular4.015;Plau;MotivaSan","md5":"57613e143ff3dae10f282e84a066de28","sha1":"88756cc8c6db645b5f20aa17b14feefb4411c25f","sha256":"19b8db163bcc51732457efa40911b4a422f297ff3cd566467d87eab93cef0c14","sha512":"94f045e71b9276944609ca69fc4b8704e4447f9b0fc2b80789cc012235895c50ef9ecb781a3ed901a0c989bed26caa37d4d4a9baffcce2cb19606dbb16a17176","ssdeep":"3072:lpsQ7l3T64Z1lKcDqttEPBWVNwZ+e222pKKSxfj9:Yg3T64Z19DqtkWbu/222kZfh","tlshash":"82c34b06f316e70aec614e3c66769399b358f8a53f2fcb0b95857d60bcad0d51e8128c","first_seen":"2023-04-05T04:16:14Z","last_seen":"2026-07-19T20:18:49.85905Z","times_seen":7203,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/css/v6/account.css?v=I-p68OdyrcJu\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.041Z","timestamp":1784419621041,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/css/v6/account.css?v=I-p68OdyrcJu\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/css;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"MtBu5PiWWlat\"\r\nx-integrity: \"sha384-S1ro8lLFPKC9uMc2nW3ztLOcnw5oQbbV7EMsJyrQwHnaQnTOGjiUJzDd/ZymeWig\"\r\nlast-modified: Wed, 06 May 1970 08:58:51 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1784419621.072779,VS0,VE147\r\ncontent-length: 6740\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27721,"size_decoded":7366,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"32d06ee4f8965a56ad050d6c62761a2e","sha1":"97a68782fab4b7efebc7ec81319e31f06be7819c","sha256":"226af323f1a62782a7a5a7911925fa38c9d9409aecd979fcbe48c05f4854cdf2","sha512":"2f8d6cc124f72ec6980710f3da059a25807e04e92c411c9243b9359e26328eb055492fbb15d5fe34cac07ac56bf80c45864968c373c7eaad54ee6591454feb2a","ssdeep":"768:Y7g7u7T7RLxWBRffz27MWrE9MyTZMeTlyBn+wjKbCjHpygw7A:Y7g7u7T7RLxWBRK7MWrsMyT/ToZ9jYg9","tlshash":"43c261129b502d4ab60fa5adffd1d7b9571f00829e0e8f7eb5a4356d83482d40873ace","first_seen":"2026-07-19T00:07:50.189821Z","last_seen":"2026-07-19T16:07:05.896264Z","times_seen":3,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":156,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/css/shared_responsive.css?v=r6syZUh8_Rpk\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.044Z","timestamp":1784419621044,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/shared/css/shared_responsive.css?v=r6syZUh8_Rpk\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/css;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"FJJn0nIxXaGQ\"\r\nx-integrity: \"sha384-vR2KNswGJr3JCAwJOZecUuUphCsuE+M4mYrb3DdzrTPo03NznGHRJhIwSWaGycni\"\r\nlast-modified: Wed, 06 May 1970 08:58:51 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1784419621.069722,VS0,VE581\r\ncontent-length: 7021\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20767,"size_decoded":7647,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1673)","md5":"149267d272315da1904d3225b7a0a005","sha1":"0a1d65c33d40677e18b0340f1435ed9b8fe54e56","sha256":"c454de62bf8d74cc64cae71eb1a35a06f2701cec0f7327f4773a9be0826d8040","sha512":"a94c7cc540345e6e404540e7dae6c3cf18a0d14f2200243bd470bc85681a4946ef15444e307e6838bffbcd6452cfcb4ec95202b9b4dc5f14226770106c069f06","ssdeep":"384:hl5qYb2mQXrN1gCYezhmVJzeQj/H0+pKgojylO60:j5qFmQX5uCczeQjv0+tOb","tlshash":"3e9285176e206102b30e7359fe569f25272f81597f0d8e6ab7b9316862c539d00a3bcf","first_seen":"2026-06-03T09:45:36.940884Z","last_seen":"2026-07-19T16:07:05.84247Z","times_seen":75,"resource_available":false,"data":null}},"time_used":589,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":589,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.225Z","timestamp":1784419621225,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jun 2023 04:07:12 GMT\r\netag: \"649bb1f0-736\"\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 63615\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1784419621.224709,VS0,VE1\r\ncontent-length: 1846\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1846,"size_decoded":2259,"mime_type":"image/png","magic":"PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced","md5":"574c350c7b23ae794d5276f8580e0838","sha1":"235c7b35c3468f8915eca01f7abdb43d34079609","sha256":"8b97ba0dac22fe6704c1f6d95fe79613f33017804f256abb9006df0442491787","sha512":"f1f2d7b6fa49e9241f2b88560127eb2871f66123c2f9de45b257750cf13e6ebb32a9d85d87aada6a99838a2f3c5412540065cbab398760a50f15aae3a759f9f7","ssdeep":"","tlshash":"7631d905eba0794086999ae271fb943bd9564095c7e07585b0cfdd294e704ac086d8cb","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-07-19T20:18:49.859554Z","times_seen":6469,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/images/x9x9.gif","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.262Z","timestamp":1784419621262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/images/x9x9.gif HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/gif\r\nlast-modified: Tue, 24 Feb 2026 23:58:16 GMT\r\netag: \"699e3b18-3a\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 31609\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1784419621.262439,VS0,VE1\r\ncontent-length: 58\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58,"size_decoded":455,"mime_type":"image/gif","magic":"GIF image data, version 89a, 9 x 9","md5":"c85b970b4c832e361445c1b446cc2343","sha1":"57e60c2f1f1f919a871b7c171c6d59d42e3adbe5","sha256":"5ce28d7cf05f0e6eeaa3788a393d9980e9b51130963c6b9672d3447b6b11de6d","sha512":"060b2ba825cd60ea3fad5fcace496a77b528210aeab0092a24b4c438eb2acac4166e0c3b704cd3a4d8fa8fb034b0c7a4b5f45e242a7bdad26580f3236382620e","ssdeep":"","tlshash":"b9a00244859d9430d154a4330d1517555b6cb101865c2f32716911249d4b4a015a7264","first_seen":"2023-05-02T13:29:25Z","last_seen":"2026-07-19T16:07:05.915548Z","times_seen":1867,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raduga-gifting.click/908b7c69f4470f63ef9589286ab7d0f9bb279b6a6736/09b5f68739c78fb538adc4ae6719f62c2cfa1cf624d1.js","fqdn":"raduga-gifting.click","domain":"raduga-gifting.click","tld":"click"},"ip":{"addr":"192.162.199.140","port":443,"asn":216271,"as":"Netlabs LLC","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.969Z","timestamp":1784419621969,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raduga-gifting.click","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 09:21:13 GMT","end":"Thu, 15 Oct 2026 09:21:12 GMT"},"fingerprint":{"sha1":"F6:94:40:F0:2D:00:AA:41:24:B0:4A:0F:EE:17:4B:BA:3E:C7:83:8B","sha256":"42:BA:2C:EC:97:DD:39:D0:8B:1B:88:02:BA:70:E7:D8:7C:57:55:25:3D:FD:48:91:67:CB:70:63:71:D2:57:B5"}}},"request":{"raw":"GET /908b7c69f4470f63ef9589286ab7d0f9bb279b6a6736/09b5f68739c78fb538adc4ae6719f62c2cfa1cf624d1.js HTTP/1.1\r\nHost: raduga-gifting.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.uQ8qbZfgMSEODJPtNED6qSkc-QAdShas.ldUQMEWzV3nG0tBR.RBoiGMxlF81yAZieLYGZHUD-IwrEOr6yaOzzidvoZkh8EnVvyw_Yx8u8-3XcffCeiLLTYSO5itWKJR4ZgE6mQP-WFH4KqC1wWxaZLLk4FVzSDZbodI9OC-cRCrJx5TEi2KOJWFRlL4Reec2cWPk7yl7YygzdfbiZ0deYxkvrlyUVdiGXCZw3_mgL1wwcW0CILtJAuiAy744g6QHtzDDbMQj2-U9YvdAMgXvG22MWrkMGVaLWFpgcGBak7FfrXJvqtvMjFgmsxj8iQInwSVV4TPQ9i6Px0BiXpRI.Dg3rG8mjDVeo146EcH2ClA; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6MjQ5NCwic2VjcmV0IjoiN2ExNTM2ZWZmNjE1YTViMGVlOTcwMDU1ZGVkOGY1N2QiLCJzZXJ2aWNlIjoiU3RlYW0ifQ.uXaZmlGet-3yTHFyW7-x_LuXSwchYm2E4Sumr49FGCA; timezoneOffset=0,0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: openresty\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 65\r\ncontent-security-policy: frame-ancestors *\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\netag: W/\"41-0AeMVzV1pApYTMktTMxeiuYqqUg\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: ALLOWALL\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-20T00:20:44.31092Z","times_seen":17379474,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"raduga-gifting.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.998Z","timestamp":1784419621998,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/shared/fonts/MotivaSans-Medium.ttf?v=4.015 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://raduga-gifting.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://store.fastly.steamstatic.com/public/shared/css/motiva_sans.css?v=YzJgj1FjzW34\u0026l=english\u0026_cdn=fastly\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/octet-stream\r\nlast-modified: Wed, 28 Jun 2023 04:07:10 GMT\r\netag: \"649bb1ee-1e490\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nage: 50316\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 7415\r\nx-timer: S1784419622.997186,VS0,VE0\r\ncontent-length: 124048\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":124048,"size_decoded":124470,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansMedium4.015;Plau;MotivaSans","md5":"2d64caa5ecbf5e42cbb766ca4d85e90e","sha1":"147420abceb4a7fd7e486dddcfe68cda7ebb3a18","sha256":"045b433f94502cfa873a39e72d616c73ec1b4c567b7ee0f847f442651683791f","sha512":"c96556ec57dac504919e806c7df536c4f86892b8525739289b2f2dbbf475de883a4824069dbdd4bb1770dd484f321563a00892e6c79d48818a4b95406bf1af96","ssdeep":"1536:v4Kkq/szjKJRIDCnR96guXgECINo28BZZDhpkemOXaxq4jKea8GyFLaE0Af0ffL9:vf/fxn7ElXxE0wS0fj9","tlshash":"86c35c06f706d709dd240e3df9a1a3a9b358f8a57b1fcb0fa6856d65fc8e0852a441cc","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-07-19T20:18:49.844225Z","times_seen":6968,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/fonts/MotivaSans-Bold.ttf?v=4.015","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:03.013Z","timestamp":1784419623013,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/shared/fonts/MotivaSans-Bold.ttf?v=4.015 HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://raduga-gifting.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://store.fastly.steamstatic.com/public/shared/css/motiva_sans.css?v=YzJgj1FjzW34\u0026l=english\u0026_cdn=fastly\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/octet-stream\r\nlast-modified: Wed, 28 Jun 2023 04:07:10 GMT\r\netag: \"649bb1ee-1e3ec\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Sun, 19 Jul 2026 00:07:03 GMT\r\nvia: 1.1 varnish\r\nage: 7062\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 514\r\nx-timer: S1784419623.012779,VS0,VE0\r\ncontent-length: 123884\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":123884,"size_decoded":124304,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 22 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansBold4.015;Plau;MotivaSans-B","md5":"6168553bef8c73ba623d6fe16b25e3e9","sha1":"4a31273b6f37f1f39b855edd0b764ec1b7b051e0","sha256":"d5692b785e18340807d75f1a969595bc8b1c408fb6fd63947775705e6d6baa66","sha512":"0246cee85a88068ca348694d38e63d46c753b03afadf8be76eca18d21e3de77b495215ed2384d62658a391104f9e00df8605edb77339366df332c75691928efb","ssdeep":"1536:M+s43BGZsrolB21EJ4q+GIbdSW7VvCtQXjPM3mz1yxvjWRVIoFMe1V13836GKCnY:T1GZXlB2SUbxVv/zM3mZyxLUZGrSDfj9","tlshash":"a7c35b46b302e745fe754e3d62a69396b318f4a93b1fc30ba5857e75fc8a0a60d841cc","first_seen":"2023-04-05T18:36:18Z","last_seen":"2026-07-19T20:18:49.848629Z","times_seen":3976,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/shared/css/shared_global.css?v=LkH7FFmHUNxE\u0026l=english\u0026_cdn=fastly","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.035Z","timestamp":1784419621035,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/shared/css/shared_global.css?v=LkH7FFmHUNxE\u0026l=english\u0026_cdn=fastly HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/css;charset=UTF-8\r\ncache-control: public,max-age=0,must-revalidate\r\nexpires: Sun, 09 Sep 2001 01:46:40 GMT\r\netag: \"oHkckB7wf2H7\"\r\nx-integrity: \"sha384-XzU3ekcywWT1U2bV/ks6LCn2VU4Cx+cd1v2WE4KGVCOHPJLhthclyZXjmW1s4F1E\"\r\nlast-modified: Wed, 06 May 1970 08:58:51 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0\r\nx-timer: S1784419621.287012,VS0,VE295\r\ncontent-length: 21709\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":90380,"size_decoded":22336,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1819)","md5":"a0791c901ef07f61fb9d8283f752f251","sha1":"5525eb56cfe9b0f803152a6fabb8f2e34574fadc","sha256":"bedbe51471d58294aa62eb55a39f923681f0aed459ca169a80c23b39d0c893ca","sha512":"eeac6c127047e36eca6827e90947f3438efe3cc9b55af348c02f42cdff96c9f8d8e71c8183ea19380ffd8a70f93e88308d9bc8dcac6b31bbdb0129613d9d7d77","ssdeep":"1536:+tRsHeX5Czk1Pl2CqB2jVbMGeuyGLTYlyXS/05h0/+xebmRUgiVgrkC8+0i7b7Lk:GpLKWD4l0xQH98uTcK2JLwHAfnyCC","tlshash":"f393e537a590b08b772f9495fa07ae6bb33f008b9b0d8f79f1a5396cd2841d41273649","first_seen":"2026-07-11T22:02:52.953454Z","last_seen":"2026-07-19T16:07:05.90567Z","times_seen":28,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":2,"connect":8,"send":0,"wait":303,"receive":0,"ssl":239},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.fastly.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=lz_99vci25ux\u0026l=english\u0026_cdn=fastly\u0026load=effects,controls,slider","fqdn":"store.fastly.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raduga-gifting.click/73187f547e07060f02130271590757015054","date":"2026-07-19T00:07:01.086Z","timestamp":1784419621086,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"store.fastly.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 13:13:40 GMT","end":"Sun, 20 Sep 2026 13:13:39 GMT"},"fingerprint":{"sha1":"07:A9:7A:6C:5D:CB:F5:E1:07:25:F3:87:55:C9:20:AC:25:0D:00:CE","sha256":"1A:FD:85:B3:E6:0A:2E:C9:66:8F:F0:12:29:B6:B7:93:AC:49:01:77:8C:90:C2:C0:A7:A6:77:00:39:9B:8D:AE"}}},"request":{"raw":"GET /public/javascript/scriptaculous/_combined.js?v=lz_99vci25ux\u0026l=english\u0026_cdn=fastly\u0026load=effects,controls,slider HTTP/1.1\r\nHost: store.fastly.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/javascript;charset=UTF-8\r\ncache-control: public,max-age=15552000\r\nexpires: Sun, 27 Dec 2026 19:34:07 GMT\r\netag: \"lz_99vci25ux\"\r\nx-integrity: \"sha384-ypv8apRisCy5MbfVW/xJQC0n6ooV6krjmoShQQ8SJNZ3Q5Z+m92YpP2BXkzevTqz\"\r\nlast-modified: Sun, 09 Sep 2001 01:46:40 GMT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\ndate: Sun, 19 Jul 2026 00:07:01 GMT\r\nvia: 1.1 varnish\r\nage: 1571572\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 16493\r\nx-timer: S1784419621.086302,VS0,VE0\r\ncontent-length: 21131\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87011,"size_decoded":21762,"mime_type":"text/javascript; charset=UTF-8","magic":"HTML document, ASCII text","md5":"973ffdf6f722db9bb1e350b4c673f365","sha1":"a6c7d4331056cd37569fac3ee5f4b4e0e09b38cb","sha256":"658b209483f3b09ceabfab105ce9f15078138d646ca0e9abee2033606c852b19","sha512":"28ec015dd5dd389a56008983d64c69fbedf4c091e4478c8cf25c34db310516bc8cd1e0804fb554e26dfffe9b724b24b91df8ee1a5ed68153bc6bead655de0311","ssdeep":"1536:Ek3m7kQD+mlspqh2NrFIei4f9wiIVWaLcrZmKw1wF/IS58H1nRtW460kfR+U:zr4gO4f9wiJucrZE1xUJ5P","tlshash":"8183850d37ab262580dbb06a5f5f454db238411b1806dc58b8ad83d48fa9f3861f7fb9","first_seen":"2024-12-13T15:16:33.754695Z","last_seen":"2026-07-19T20:18:49.841985Z","times_seen":1657,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}